click.thedailymoneytips.com/
143 B URL click.thedailymoneytips.com/
IP
File type HTML document text
- HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 11 Dec 2023 04:23:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LEjqMycsRh%2FuUxQAyO%2F7Lqvf8orDlkVuIgBgUHREHxiwaAj%2BjSyawmH3IghSx7FK3AzCzsyl7HRF9ktGN20HfKyRZcV3LToAGlJAGh567t7q6p%2BYxVQJjTUySoAX1Y1%2Fg0FL6F3OBhn%2BxRzkYd8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 833af345ad47069b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
click.thedailymoneytips.com/exeffect11/fc8a28c18b960361117889e0200f04c3/48/TA_2H23DGI/1991891028/139350/41e2392140c1a28943e073a80d570d4d/63293
302 Found 470 kB URL User Request GET HTTP/2 click.thedailymoneytips.com/exeffect11/fc8a28c18b960361117889e0200f04c3/48/TA_2H23DGI/1991891028/139350/41e2392140c1a28943e073a80d570d4d/63293
IP
Certificate IssuerLet's Encrypt
Subjectthedailymoneytips.com
Fingerprint79:EC:85:19:05:49:AD:6B:8A:A1:90:4E:B9:8D:91:79:4B:F6:6C:79
ValidityWed, 25 Oct 2023 16:41:13 GMT - Tue, 23 Jan 2024 16:41:12 GMT
File type PNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced
- data
Size 470 kB (469463 bytes)
Hash 83c3a444cf82d5b7271f5d8d2c77aaad
732f2ec7255ef38ce8c23e4737de815d2f153aee
73035e8c2ba7bc19f518e6b1bc729d538a7a9b7ed2f8ca0b31eb21ef61911631
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /exeffect11/fc8a28c18b960361117889e0200f04c3/48/TA_2H23DGI/1991891028/139350/41e2392140c1a28943e073a80d570d4d/63293 HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 11 Dec 2023 04:23:03 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=fc8a28c18b960361117889e0200f04c3&product=2938&ar=48&cid=1991891028&lid=139350&slhash=41e2392140c1a28943e073a80d570d4d&mtaid=63293&cid2=[s8]
cache-control: max-age=600
expires: Mon, 11 Dec 2023 04:33:03 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2I4Ad3SzpSgMGZBUT40lJOQcWNqnGFpvHOIyyogvY%2F9ESat8qDcfj8nUBoxWzkyoD8BA6EC92JPAHM62a1UXlfa5ypXM1e2z9dMNT3ibGvGADac2jh1Mse5HH0a0c8%2BWdmGrWW2a4oucLLh0bpQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af333ac4b56af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
exoduseffect.com/assets/images/lander/VSL/ctaDesktop.jpg?v=10002
200 OK 48 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/VSL/ctaDesktop.jpg?v=10002
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=823, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1172], progressive, precision 8, 687x258, components 3
- data
Hash 95e6c5b8766dce85cbed3b3241b227f4
565f48fca9ad91295d778012dbc8eaa1a3724a39
baac471c1c739eb5df38c043ab97d3ecf23aab472f70511af0d433da2253456b
GET /assets/images/lander/VSL/ctaDesktop.jpg?v=10002 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/jpeg
content-length: 47819
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "bacb-60169ecd5098e"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ko47iVBc0I4Lb0d7dyYEtKhx6BDsCpQ2FHWga5CmPL2WwOAx2j8SpciCXfV8cePO%2FT1kFQbaN5%2FFdfEb6hAqHKPuxRQ4ZTTiiFgZ3vUyguS62wpQPYuMTzGHChG70MK6typZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348c8575697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/VSL/ctaMobile.jpg?v=10002
200 OK 28 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/VSL/ctaMobile.jpg?v=10002
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=504, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 295x138, components 3
- data
Hash 6139727cd5b533656b43dcf9804074b3
dc80f15ed8dd23e0541b3bd7257581a44ff9dfe3
14ca7f5dab60d993d6e496de40a3584f23ffa09ae0f78dc75c7c1f233bd703dd
GET /assets/images/lander/VSL/ctaMobile.jpg?v=10002 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/jpeg
content-length: 28021
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "6d75-60169ecd5098e"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2By5IVy8IKnrJ7MsRKmV4Q84kcHo31VLR6kV3cREQejeVo0j3T9JKMNo4%2F2I46NDGPNQlTeFZjeN1PQrQsRLpw6vfusTZVbsBoGoOXQYNlNIR1SC4cmUPDu389mNZAmX3Vet1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348c8585697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/VSL/price67.jpg
200 OK 21 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/VSL/price67.jpg
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=823, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1172], progressive, precision 8, 213x103, components 3
- data
Hash 78ba11893d233b16b210c8c5e1db4889
0baa28ad0dcaf4d2f0aebd52090dd5afe2ad52cc
abd87251504843aba43e41c58605e54abc8489c79caad3c1e9eaa02d155cd90e
GET /assets/images/lander/VSL/price67.jpg HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/jpeg
content-length: 21206
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "52d6-60169ecd5192e"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qwJ3lYp5O0TRzrR8XNoyHJEUJ953tud%2FDcIGByLdTuhxDeCq6ARafoCNSamkdFHHUt346yhSpJGoo4VwB4PT4%2FEJ%2B16p%2FDuOUSOS%2B7ukNssjfFm17g2VVWK4rSz15DXCZCYf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348d8595697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/VSL/trustDesktop.jpg
200 OK 16 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/VSL/trustDesktop.jpg
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=823, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1172], progressive, precision 8, 340x36, components 3
- data
Hash fbe88f2ed32710b772e44767dd334d15
b2bdaf58ade4ad208140ddb2aa6225744eaa6490
bfd1dfa6765654e85cec85dc6cdb53ad64cc3a3a64d0e010b35838f2c762a6f3
GET /assets/images/lander/VSL/trustDesktop.jpg HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/jpeg
content-length: 15622
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "3d06-60169ecd5962d"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nC3aeXAmHGejLnx2dsG8iIjUMDBI3ZlfKZgfzYYGWQxmc1eV8OZ2UwpSRwXnaScy42lzAtOPh1nwsDCJVxia%2FeHTTiLWY%2Bte4iOH9NpG3YJcdg%2FOAE78J7pOpNpv1YpXhwt9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348d85a5697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/bulletBible.png
200 OK 63 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/bulletBible.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 133 x 133, 8-bit/color RGBA, non-interlaced
- data
Hash 61e772a7126e02e61ea9a08a78a0211c
d54ded7528635ce1a1be5cfcbfe3a8ea4072de6d
e38372d8696f210809f6821f0b00c84e57beff6b12b40bdba9954c257bb3b0a9
GET /assets/images/lander/bulletBible.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 63024
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "f630-60169ecd5962d"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SDil01dTdagwb6OflJDU4acrRtMi%2BONVw6mHvvdvzlVPXU6X5bfnXkI6k01XIJDCXe5h2k0QpT9q3UwTGnpeDCEBZhLUxCtSf1SiUAVAa0oObS5g5PFJGYTgeqmBBZ%2BUNmvO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348d85c5697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/bulletHealing.png
200 OK 51 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/bulletHealing.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 133 x 133, 8-bit/color RGBA, non-interlaced
- data
Hash 951016bc87aa1e5b830565dc7352b91c
6f7b2378b7c12b42a7a6220ce05c8926598c827a
2ab0932269d9897fd43c2bcda82dc75121d96bea933bd64726bc772e054ca7ab
GET /assets/images/lander/bulletHealing.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 50928
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "c6f0-60169ecd5962d"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nL3iPolVI33rqZccUTDn0fz3IWxyxHUNUpSDSNJIEiLUUuW6WNQkpHPyHRE0pGY1tmhiQ3k1%2FD4RrsWncoOz3t8H0HBFkfnPgskF7ltECizTVN7faGcH%2FLQCtqpRCiK3HzfY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348d85d5697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/bulletChristian.png
200 OK 57 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/bulletChristian.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 133 x 133, 8-bit/color RGBA, non-interlaced
- data
Hash 56c1ffc1faed7c177c0dfbc7c5ffec1f
6f1e41c8dc562f1d7a37d9147595b410ddd2eacd
4534203d73df094bf991ad0f42631889f0a020e90a00b311e76406822f5512ff
GET /assets/images/lander/bulletChristian.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 56600
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "dd18-60169ecd5962d"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rRZbcKj3xdl4SwCkhFPFVL6mWong%2FCN%2B%2BvBWsZzNKbszLjiohZHXNDmN8yFCAfcH0y0PNv30fJ1Zyg8oJFj8UpIAuTPIXmuSZXjMbbjfMGfNE9%2BQKRqdtpjajUgDByXrre9v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348d85e5697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/bulletGovernment.png
200 OK 45 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/bulletGovernment.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 133 x 133, 8-bit/color RGBA, non-interlaced
- data
Hash 751ec84ad86deff72450cd98d38d5c58
da57f4bcbd042717fc1ba915478bf29b2e6cd117
89023b58f2a45258a944bc9f9cd9ffcbb5baa350203010d6c2056c2530958e9c
GET /assets/images/lander/bulletGovernment.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 44633
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "ae59-60169ecd5962d"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qRiLY3G4S2Uv09VJkWZ9GIILUw0YuCI%2FoXMEV2hySSKQrgnU5bUcmggUBWuVWeW37Y360JuTlGAW6RyJgt2Zes6xJxXbK7BYLM97gKR9eqOP1t6OFJmEGmE7Cb9fi6nCl7PH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348e8645697-OSL
alt-svc: h3=":443"; ma=86400
vjs.zencdn.net/7.20.2/video-js.css
200 OK 11 kB URL GET HTTP/2 vjs.zencdn.net/7.20.2/video-js.css
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
FingerprintF0:70:0B:AF:84:8A:AB:25:98:72:B0:E7:EE:F8:2C:2C:6B:58:8E:4E
ValiditySat, 03 Jun 2023 21:48:23 GMT - Thu, 04 Jul 2024 21:48:22 GMT
File type Unicode text, UTF-8 text, with very long lines (5844)
Hash 92c4f5bba6e24134f07a508819300d2e
841175d1130307583f18e7bba0cdf133782ba72b
a600e503fc0dcb171bd2ce6b639bbb5cf35b91ccc3c045324a7a4e2603683a0f
GET /7.20.2/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 28 Jul 2022 18:58:38 GMT
etag: "92c4f5bba6e24134f07a508819300d2e"
content-type: text/css
content-encoding: gzip
date: Mon, 11 Dec 2023 04:23:06 GMT
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 1
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10964
X-Firefox-Spdy: h2
vjs.zencdn.net/7.20.2/video.min.js
200 OK 163 kB URL GET HTTP/2 vjs.zencdn.net/7.20.2/video.min.js
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
FingerprintF0:70:0B:AF:84:8A:AB:25:98:72:B0:E7:EE:F8:2C:2C:6B:58:8E:4E
ValiditySat, 03 Jun 2023 21:48:23 GMT - Thu, 04 Jul 2024 21:48:22 GMT
File type Unicode text, UTF-8 text, with very long lines (48447)
Size 163 kB (162713 bytes)
Hash c038d4c38eb6160ddb328b8944a5422b
662a5e463996f6a36fa88b0fec8412107c5a4996
55a979130309c3f0d4398298f648e90a8ded2df500fdf3c758e9051ecf6229cb
GET /7.20.2/video.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 28 Jul 2022 18:58:38 GMT
etag: "c038d4c38eb6160ddb328b8944a5422b"
content-type: application/javascript
content-encoding: gzip
date: Mon, 11 Dec 2023 04:23:06 GMT
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 1
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 162713
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js
200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (65447)
Hash 00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:44:56 GMT
expires: Fri, 06 Dec 2024 15:44:56 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Thu, 08 Sep 2022 18:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 304690
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
exoduseffect.com/assets/images/lander/timelineSegmentRight.png
200 OK 24 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/timelineSegmentRight.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 371 x 203, 8-bit/color RGBA, non-interlaced
- data
Hash 1a2d9f53ef9780a7b5edc83dcd3811de
280c7d80532dfcf8dc2c224772d86c1ee70b27c5
f9cf00da3ed66835c3383eefe3ece96b304fe05d61d742104bbfafcde4ca282b
GET /assets/images/lander/timelineSegmentRight.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/assets/style/VSL/VSL.css?v=10004
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 24405
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "5f55-60169ecd5f3ed"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Laa3%2FUvk4GvS4Z0UckxsA%2FJ%2B2sjkoaVpVpAoxE6dfOSnAjuCTFJoffJSYYaGS%2B%2FfmHuGe1cg%2BRxl%2BGi3pMqkSHNqqWCbWqwPqKCagV1cLxzzYYRV6B7Xie4JbRUszd%2Bb2LV1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af34c494e5697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/lander/timelineSegmentLeft.png
200 OK 24 kB URL GET HTTP/3 exoduseffect.com/assets/images/lander/timelineSegmentLeft.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 371 x 203, 8-bit/color RGBA, non-interlaced
- data
Hash bfa6066b9fb274fc35b8059a997f8c9b
10f763886e6ed46f689143a4094c44acf3b8a92a
c7c2fbcdf7ea62bdeae2d3b3a1e7fe72278e4d3438ff9ec98713a08d6b0d4c5a
GET /assets/images/lander/timelineSegmentLeft.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/assets/style/VSL/VSL.css?v=10004
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 24337
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "5f11-60169ecd5f3ed"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F0HpwIctlwo8I3KrU53hZUFFBF1HQJCEnJ8c7pwWYZnbD7AyRmhE7dAf36ND1PI4q5rVYbr%2BPi3TfYbVwH8OTvoCdwXO4vUYwoF7wKAbC323VP1ty3OIfVcb0awvSFjfTvwg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af34c494f5697-OSL
alt-svc: h3=":443"; ma=86400
pixel.driveniq.com/dot/2a95e046-f6f7-47df-b559-a862ca951d08?cbust=7989994337783959&url_path=https%3A%2F%2Fexoduseffect.com%2F%3FaffId%3D486%26c1%3D3415259331988547126%26c2%3D%26c3%3D%26id%3D132463446%26affid%3D486%26cid%3D1779%26s1%3D3415259331988547126%26s2%3D%26s3%3D%26s4%3D%26s5%3D
200 OK 15 B URL GET HTTP/2 pixel.driveniq.com/dot/2a95e046-f6f7-47df-b559-a862ca951d08?cbust=7989994337783959&url_path=https%3A%2F%2Fexoduseffect.com%2F%3FaffId%3D486%26c1%3D3415259331988547126%26c2%3D%26c3%3D%26id%3D132463446%26affid%3D486%26cid%3D1779%26s1%3D3415259331988547126%26s2%3D%26s3%3D%26s4%3D%26s5%3D
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectpixel.driveniq.com
Fingerprint3F:5F:A5:CE:36:BD:FC:8C:3A:4A:AB:21:76:D5:D6:CF:D9:26:B0:FB
ValidityThu, 20 Jul 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type JSON data
- , ASCII text, with no line terminators
Hash 0c776997933eb60833b37beaf43814c8
bff63526eb02853c6b414ccfb4d00ac9ca283930
3d23d39a30bb7323f8ccfd64c52cf286138fba4f83e78f7edcf66703b7c23aaa
GET /dot/2a95e046-f6f7-47df-b559-a862ca951d08?cbust=7989994337783959&url_path=https%3A%2F%2Fexoduseffect.com%2F%3FaffId%3D486%26c1%3D3415259331988547126%26c2%3D%26c3%3D%26id%3D132463446%26affid%3D486%26cid%3D1779%26s1%3D3415259331988547126%26s2%3D%26s3%3D%26s4%3D%26s5%3D HTTP/1.1
Host: pixel.driveniq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 15
date: Mon, 11 Dec 2023 04:23:07 GMT
x-amzn-requestid: eacd6511-30ab-4593-9f65-b5fd6a67d8aa
access-control-allow-origin: *
x-amz-apigw-id: Pws6xFlpoAMEJ9Q=
x-amzn-trace-id: Root=1-65768eab-257c7a324e007f7631958b65
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront), 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1, OSL50-C1
x-amz-cf-id: 2MQKXD-_hr2dZU5X-HkiWM9NLsiGl7btHC_Sr0P5YzdhOxGNp9qrVg==
X-Firefox-Spdy: h2
exoduseffect.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 655 B URL GET HTTP/3 exoduseffect.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type HTML document, ASCII text, with very long lines (1238)
Hash 9e8f56e8e1806253ba01a95cfc3d392c
a8af90d7482e1e99d03de6bf88fed2315c5dd728
2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 15:04:24 GMT
etag: W/"6569f5f8-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lG0%2BOQMQtCM7LbBntGUAPaoF5m%2BMm0d%2BdACmV7QahcWKraiNydscoXlB2XhzAkYXHRfaDqT%2F5GulN%2BuuxWB4dMoAlWocZkgWok2VM6ixrlvo%2BvLZReoT8284%2Bov%2FE6kzDSub"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348e8655697-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 13 Dec 2023 04:23:06 GMT
cache-control: max-age=172800, public
content-encoding: gzip
cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9HLS.m3u8
200 OK 786 B URL GET HTTP/2 cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9HLS.m3u8
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Hash a82f3b1ab424e02afa16dd1c6b21505e
6b02a998d9fb6b20ddcd37f9747299c69e886fce
fa960e4ab54ad62b7a19b67a7ef0149c3cc6da957e048922702c64d10e271a16
GET /videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9HLS.m3u8 HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-mpegURL
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
last-modified: Wed, 29 Nov 2023 16:39:15 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 11 Dec 2023 00:34:54 GMT
etag: W/"a82f3b1ab424e02afa16dd1c6b21505e"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qUvRQhsbPxZCB2ulf_1KP2bjDR1T6m89SOXfB58kyO2KMVBHlGJVrA==
age: 13694
X-Firefox-Spdy: h2
cdn.rhvsl.com/thumbnails/HiddenInTheBookOfExodus_16x9.jpg
200 OK 809 kB URL GET HTTP/3 cdn.rhvsl.com/thumbnails/HiddenInTheBookOfExodus_16x9.jpg
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2021:07:31 10:41:46], baseline, precision 8, 1600x900, components 3
- data
Size 809 kB (808941 bytes)
Hash 7c5f84d029cdf4ac9a8a8401bf3278f4
5916eb1efbaa2573dc419b8642fdd7d57f86e868
44c234ab1ce11ec976837b360aa64d76f081f31d25192acfd1c88eb735e7def3
GET /thumbnails/HiddenInTheBookOfExodus_16x9.jpg HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/jpeg
content-length: 808941
age: 19228
last-modified: Wed, 29 Nov 2023 03:18:43 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 11 Dec 2023 00:34:52 GMT
etag: "7c5f84d029cdf4ac9a8a8401bf3278f4"
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: bFVRPa36osuapMCfCuFacUdux3aYgwhXVqpGMdlDlWaNk5B638ytHg==
a.usbrowserspeed.com/cs?pid=99c4c1506b068a4e84609ebcf4144ab7eb82a80c29fc87966cbc8aa3332d60b0&puid=2a95e046-f6f7-47df-b559-a862ca951d08
204 No Content 0 B URL GET HTTP/2 a.usbrowserspeed.com/cs?pid=99c4c1506b068a4e84609ebcf4144ab7eb82a80c29fc87966cbc8aa3332d60b0&puid=2a95e046-f6f7-47df-b559-a862ca951d08
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjecta.usbrowserspeed.com
Fingerprint5F:66:4D:36:CC:BA:48:74:4F:77:47:4A:8F:C0:30:23:02:FD:9D:0A
ValidityThu, 01 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cs?pid=99c4c1506b068a4e84609ebcf4144ab7eb82a80c29fc87966cbc8aa3332d60b0&puid=2a95e046-f6f7-47df-b559-a862ca951d08 HTTP/1.1
Host: a.usbrowserspeed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: awselb/2.0
date: Mon, 11 Dec 2023 04:23:07 GMT
set-cookie: tuid=a6634ac2-dcaa-4d5e-aa7e-d370efd1a5d3; Path=/; Domain=a.usbrowserspeed.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
200 OK 37 kB URL User Request GET HTTP/2 exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
IP
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type C++ source text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (1012), with CRLF, LF line terminators
Hash ad5b2976bf277c0cab66fc9ce889c86c
cb8b5398f14467d6ead383ee5cfd16d18a21ccf5
82dc97def17a0803ff09aa4f27b7f3c9d691d953d4d82078474ce291e8d8b5dd
GET /?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5= HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; expires=Thu, 21-Dec-2023 04:23:05 GMT; Max-Age=864000; path=/; domain=.exoduseffect.com; secure; HttpOnly; SameSite=lax; HTTPOnly; Secure
Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D; expires=Thu, 21-Dec-2023 04:23:05 GMT; Max-Age=864000; HTTPOnly; Secure
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qYOr%2BR%2Binmak5dHk4sz1kyRrpluxShZzhLpX16qKx5Wr3NNdo%2BqnVGPJNh13G%2Fc%2BMfmggFKHHOmG3KRYqPYtGsCmrl1iGOhhbQfmCjtSI7Erjqv6ojIFdNCa2bNHlEhf5gSe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af34419e256c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10.ts
206 Partial Content 0 B URL GET HTTP/3 cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10.ts
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10.ts HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: range
Referer: https://exoduseffect.com/
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 0
alt-svc: h3=":443"; ma=86400
date: Mon, 11 Dec 2023 04:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
access-control-allow-headers: range
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VeJo242PA4jqS4AnoWaXGYXsuq6KmEAtgsl51OsGkfAlcw0mfMAR8g==
cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls_audio_160k.ts
200 OK 229 kB URL OPTIONS HTTP/3 cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls_audio_160k.ts
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Size 229 kB (228984 bytes)
Hash 0b344e4e0306fd85126806e0cec61d4f
23fb30384ad38cefb898c49a327bac6b1a64563d
b244a26859fdae402a347540217ac9b839528bfd823b8497f07e09f19f9fb714
GET /videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls_audio_160k.ts HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-228983
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
content-type: audio/MP2T
content-length: 228984
content-range: bytes 0-228983/77986536
date: Sun, 10 Dec 2023 23:52:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
last-modified: Wed, 29 Nov 2023 16:34:21 GMT
etag: "d72046900a14f8058f1817e38d035dfc-15"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
age: 16251
x-amz-cf-id: eWSglVIy6F06jos79Fzy3BezERiOynmzI32Z23TSRMh6us4hWBsROg==
cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10.ts
206 Partial Content 1.5 MB URL GET HTTP/3 cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10.ts
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Size 1.5 MB (1501932 bytes)
Hash de0341891275584e8d2b7bce2924cb16
f755e22dd7faf561524cf629e10be58ead21d68d
58c374376be372304237ad2d85b079555ac8707a93480054167a407dc477a293
GET /videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10.ts HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-1501931
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
content-type: video/MP2T
content-length: 1501932
content-range: bytes 0-1501931/422127304
date: Sun, 10 Dec 2023 23:52:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
last-modified: Wed, 29 Nov 2023 16:38:46 GMT
etag: "473ed62476e3d0407aa54fc941dc4542-81"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
age: 16251
x-amz-cf-id: wOvQDYH36IHxAq28_Nw50f2dFfIkcl8NRIujekWRne6-UgctWg9Log==
ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
200 OK 5.4 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (2134)
Hash 7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 10 Dec 2023 12:53:45 GMT
expires: Mon, 09 Dec 2024 12:53:45 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 55762
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
200 OK 5.4 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (2134)
Hash 7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 10 Dec 2023 12:53:45 GMT
expires: Mon, 09 Dec 2024 12:53:45 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 55762
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
exoduseffect.com/favicon-16x16.png
200 OK 1.3 kB URL GET HTTP/3 exoduseffect.com/favicon-16x16.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
- data
Hash 365ca45c3dc37fdd2350ce7802b97fef
745bf38d865fbc1e5d18dbd51bc8583ab356d719
655c48f57e075b201035a73ad2560ebf3af68adbe33e9bbb93699229f93ce842
GET /favicon-16x16.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:07 GMT
content-type: image/png
content-length: 1332
last-modified: Wed, 26 Jul 2023 20:45:17 GMT
etag: "534-60169ecdaa70b"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t%2BxePBPLy61ktnH0jtWbFbaMRK5GxSvIR6YrPffe6UspZS246lmJUV54Qin8rqWK7YKNJWb9OIZRN929sfA13UkdezkN7HtwIbnAjLDuVdDQLl%2F5sjsQq9dkedpkckGUJ47I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af3526af55697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/android-icon-192x192.png
200 OK 39 kB URL GET HTTP/3 exoduseffect.com/android-icon-192x192.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
- data
Hash afe6fa2158f9812fa803c334cfbf53a6
db5b683f189881db80066c3113cf486b1b97fb3c
346d3648d19fff9e39e7686e03560ae718af1594eb220b7f277904712660429c
GET /android-icon-192x192.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:07 GMT
content-type: image/png
content-length: 38780
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "977c-60169ecd3c16e"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lg3ksOwyQhMYQaLPwWTUeYERSUxTbq0qwyhtxa%2FavmCNYpXAVryDNpQPo%2FRi9006xMLP3zjR5c5af3GQt%2BUTmYgkQ8%2FUKlYMXaK%2Bm6WAGKJVyLyfyct3EwoQZryDUJWOGxRn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af3526af45697-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto:400,600,900%7CMerriweather:400,600,900%7COpen+Sans:400,600,900
200 OK 17 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:400,600,900%7CMerriweather:400,600,900%7COpen+Sans:400,600,900
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type gzip compressed data, max compression
- data
Hash b0b39c6cd6b33d543e1d491aed937faf
b581e7c70f899874bdd9f9f4a0691c6e1a04bda7
3ac612570fc813d7edd095cd9439042ad46eac29e9ea40cc6736c0ff9d8d9eb0
GET /css?family=Roboto:400,600,900%7CMerriweather:400,600,900%7COpen+Sans:400,600,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 11 Dec 2023 04:23:07 GMT
date: Mon, 11 Dec 2023 04:23:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:00:58 GMT
expires: Fri, 06 Dec 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 343330
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 20028, version 1.0
- data
Hash 2bfde17b9a1384ce64af78db1b87a82f
8effd23e482511e249c3f8e91cdc503729b93598
5c2d662e92bcbf1a5970b97040f901031295e79a96314db8302f549003022087
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 23:21:57 GMT
expires: Fri, 06 Dec 2024 23:21:57 GMT
cache-control: public, max-age=31536000
age: 277271
last-modified: Tue, 26 Apr 2022 16:41:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:00:58 GMT
expires: Fri, 06 Dec 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 343330
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls_audio_160k_v4.m3u8
200 OK 19 kB URL GET HTTP/2 cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls_audio_160k_v4.m3u8
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Hash b8cf7ab422950f138f9230a3ce99aba9
a64b8864639946fa4b6e21d2b1a1aa79b7531a57
ad4eaecaf0f46fdb2f7992fa683f1e72016b0e4409ceca58b5c2943b47a838c7
GET /videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls_audio_160k_v4.m3u8 HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
last-modified: Wed, 29 Nov 2023 16:34:21 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 11 Dec 2023 00:34:54 GMT
etag: W/"b8cf7ab422950f138f9230a3ce99aba9"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Xa81JoYVpQpT_CMKDXTNV4Y9ERACEpqlu59RDbywRMEHAXcQdgHNWQ==
age: 13693
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2
200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 19816, version 1.0
- data
Hash 290160ea1f23d0178902ab8a62635b0a
5614266d1f6bf5f0d7601fff4a2bc0924830d983
f6b9eebb05461840790fc804b4590323ef12a57fe5af7fcdeed2d798e572844b
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:06:45 GMT
expires: Fri, 06 Dec 2024 05:06:45 GMT
cache-control: public, max-age=31536000
age: 342983
last-modified: Tue, 26 Apr 2022 16:08:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
exoduseffect.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 exoduseffect.com/cdn-cgi/rum?
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 354
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Mon, 11 Dec 2023 04:23:08 GMT
access-control-allow-origin: https://exoduseffect.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 833af353fb6d5697-OSL
x-frame-options: DENY
x-content-type-options: nosniff
exoduseffect.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 exoduseffect.com/cdn-cgi/rum?
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 443
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Mon, 11 Dec 2023 04:23:29 GMT
access-control-allow-origin: https://exoduseffect.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 833af3d69a7a5697-OSL
x-frame-options: DENY
x-content-type-options: nosniff
exoduseffect.com/ajax/click/import
200 OK 77 B URL POST HTTP/3 exoduseffect.com/ajax/click/import
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash bdc564ecfb401c1a435eb6a90184fe8f
9e5076c4e79ab7c1932936d86257770af5fafeb6
0320d60e230ebb47758e7d7d3b88f04625785f1304b40ad63b1adc2bc69b5c2f
POST /ajax/click/import HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 114
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:08 GMT
content-type: application/json
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: exoduseffect.com
set-cookie: Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D; expires=Thu, 21-Dec-2023 04:23:07 GMT; Max-Age=864000; HTTPOnly; Secure
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TOHJEPNukH0jEB5C185ZN8RU%2FnvfmaFXQ9y0sea1BO7nrG0H7pTp7e86%2FT1mIrT6taRqI31PqQLYTYKb%2BZ3kvtVgLBAbOVqU2YhUdyZ8%2FtfJlaOMnPsncf9cbhYTzEmHpab7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af3526af75697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 04:57:34 GMT
expires: Fri, 06 Dec 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 343534
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 20 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (19986), with no line terminators
Hash dd1d068fdb5fe90b6c05a5b3940e088c
0d96f9df8772633a9df4c81cf323a4ef8998ba59
6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af3496dc8b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
exoduseffect.com/assets/images/unmute.svg
200 OK 2.5 kB URL GET HTTP/3 exoduseffect.com/assets/images/unmute.svg
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document, ASCII text, with very long lines (2518), with no line terminators
Hash 610f7f9fc96f4718f3593f7abd4b9fe3
fd68e1289fa7c36e3ae0effe65547d571dc63a60
546c9b1322fd3181c3c19554c80fea5e23fae94e566239889b67c1f5f60401a8
GET /assets/images/unmute.svg HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:07 GMT
content-type: image/svg+xml
last-modified: Tue, 13 Jun 2023 17:17:19 GMT
etag: W/"9a8-5fe0601eb8edd-gzip"
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UKs%2F3mNJds3g37R8ymPcMr66TDaYmREtCl5vaTBGi325g0wbrPy4aR1EoTgMV41ienXbuQpBk76YvUKjoElm2mswSB9vmcyxhSd09ZI7OLw%2BgqkJ9zGq91hhLabC0w6PcLs9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af34e59dc5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/style/VSL/VSL.css?v=10004
200 OK 12 kB URL GET HTTP/3 exoduseffect.com/assets/style/VSL/VSL.css?v=10004
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (12456), with no line terminators
Hash 87460bc7b4731efb49baa7a94fe32a73
ed68b37729887c9c6912c311af77a840992a9e4b
f7b2d563342014e2fdc7348cc4e00f1a543d37bbdbc1e5c46c7c5b6f1352a688
GET /assets/style/VSL/VSL.css?v=10004 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15446
access-control-allow-origin: *
etag: W/"3c56-60c07abcc94ff-gzip"
last-modified: Fri, 08 Dec 2023 23:09:06 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gkF6rrXClNdoBHGgJO3d1HfzT2tPhfyf%2Bji6PfoNYHuaRZySwGoaVwQLlGRbdrxnkKtPeJef7BXfNHq4AHIbuCsFeAuWIoURRLW9itu0%2Bvujz83PTvKfeU7ev%2BeXVxCJSkd%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af348c8525697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/scripts/slideInOnScroll.js?v=10001
200 OK 729 B URL GET HTTP/3 exoduseffect.com/assets/scripts/slideInOnScroll.js?v=10001
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (731), with no line terminators
Hash e635728b1ac175f2bf90a1d29ce2acd0
65dc1f131f48be5cfb7d83c62df8b5f3e564703e
48cb7a129127bb7936323037f2b3eeb54e46016d4a2dd6778d1a961c62b963ab
GET /assets/scripts/slideInOnScroll.js?v=10001 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1480
etag: W/"5c8-60169ecda87cb-gzip"
last-modified: Wed, 26 Jul 2023 20:45:17 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3b1TbEc%2F9u7orKSQf%2BeNMkHQlbA9G9Gcg4sIYti9kr%2BiLN8wcws%2Fnoe9S34lsGxezLINNa851IIWfebfeV9KV54zk9H2dsrA2UTiL0i3TrSBGzAAW26u%2BGVFakCSiiSjdzOb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af34928775697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0
- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 04:57:15 GMT
expires: Fri, 06 Dec 2024 04:57:15 GMT
cache-control: public, max-age=31536000
age: 343553
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
verifiedwebpage.com/go?ehash=fc8a28c18b960361117889e0200f04c3&product=2938&ar=48&cid=1991891028&lid=139350&slhash=41e2392140c1a28943e073a80d570d4d&mtaid=63293&cid2=[s8]
302 Found 131 kB URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=fc8a28c18b960361117889e0200f04c3&product=2938&ar=48&cid=1991891028&lid=139350&slhash=41e2392140c1a28943e073a80d570d4d&mtaid=63293&cid2=[s8]
IP
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
Size 131 kB (130628 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=fc8a28c18b960361117889e0200f04c3&product=2938&ar=48&cid=1991891028&lid=139350&slhash=41e2392140c1a28943e073a80d570d4d&mtaid=63293&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 11 Dec 2023 04:23:04 GMT
content-type: text/html; charset=UTF-8
location: https://youaskyoucare.co/?a=486&c=14&s1=3415259331988547126
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=2bad7fce1673579dee6442f22bd2603b; path=/
pixel_session_hash_2938=3415259331988547126; expires=Wed, 10-Jan-2024 04:23:03 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_2938=7f9a5e0d30b00739b033de7ae6a30e151fa67ea38ac1c9fe09618e20b113efa7; expires=Wed, 13-Dec-2023 04:23:03 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OuVsvSHkalMHS1JbaP0QZ1cRfq2zmqTiT4q71qAAODpqF96WkEx9VoEC%2FbivHEBJneNDCSMiAjVTz4y%2Fwr85OcAiNMKnbpmhaS3P5UFAQzD61Pkn4J9EDvD%2F7YcUoGSoODw1b2lk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af3391bb0b51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
youaskyoucare.co/?a=486&c=14&s1=3415259331988547126
302 Found 131 kB URL User Request GET HTTP/2 youaskyoucare.co/?a=486&c=14&s1=3415259331988547126
IP
Certificate IssuerGoogle Trust Services LLC
Subjectyouaskyoucare.co
Fingerprint0F:58:68:17:DB:34:3F:BD:2B:E2:95:F8:A9:23:AC:CB:B0:D6:D6:EA
ValidityFri, 27 Oct 2023 09:25:04 GMT - Thu, 25 Jan 2024 09:25:03 GMT
Size 131 kB (130628 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?a=486&c=14&s1=3415259331988547126 HTTP/1.1
Host: youaskyoucare.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 11 Dec 2023 04:23:05 GMT
content-type: text/html; charset=utf-8
location: https://r.secretofexodus.com/?a=486&c=14&s1=3415259331988547126&ckmguid=26b65feb-50b8-4490-850d-8c609f0124ee
cache-control: private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ij7eTqKfj%2FBEXCJH9pgfFdZsdpn7HrvJb3nabGi0CCpWLCPXiQIdp%2BnXkbp2GFZVltYY7Yk0SK4g0XSVplDgx687skM%2Bmm3JOuF38chPQGAYJQdPfytURCJ38OdSDpYkVgg2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af33e8da85697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pixel.driveniq.com/vpixel.js
200 OK 4.8 kB URL GET HTTP/2 pixel.driveniq.com/vpixel.js
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectpixel.driveniq.com
Fingerprint3F:5F:A5:CE:36:BD:FC:8C:3A:4A:AB:21:76:D5:D6:CF:D9:26:B0:FB
ValidityThu, 20 Jul 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (4823), with no line terminators
Hash b4287c72b01b18ad7f8380403572e80b
3d12c118241e122f3698a4e2c737cb940165857b
425eb33e461147600de6eb8bd58ecb5f3a19d470a7a6fae7afe63cfc7d9392b4
GET /vpixel.js HTTP/1.1
Host: pixel.driveniq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 10 Dec 2023 04:38:33 GMT
last-modified: Tue, 28 Nov 2023 21:27:48 GMT
etag: W/"4427b3ec16a4947fe32d7f25e0f7cae0"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iHJV4usnL-Htm97YEJWgAhNRiNiNiAWAD2ifMFJH1XlS00z-plnF4w==
age: 85474
X-Firefox-Spdy: h2
exoduseffect.com/assets/style/squeeze.css?v=10009
200 OK 3.9 kB URL GET HTTP/3 exoduseffect.com/assets/style/squeeze.css?v=10009
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (3885), with no line terminators
Hash 2dc9b989001a9e7befe401dc8dd0f3a3
5c663731b261e01c3bdef446f2d1df41d7ff63d4
894414923299d190ceae912201e37304313c196d0609527ee1bbe71ac82a64f5
GET /assets/style/squeeze.css?v=10009 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4745
access-control-allow-origin: *
etag: W/"1289-60169ecdaa70b-gzip"
last-modified: Wed, 26 Jul 2023 20:45:17 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ndLiZnGcktXO3hg0Fo4jgwwrJzfGwHO44LvB%2BOl1hSUv6uvYcg9t0m%2Bzd8xrk%2BJBetUqBmjYsP5VLJB88L0jhSUEaXWNBANWZgXrwhWk%2BcjtZaemW%2BLFI6rxwEd%2BwGk1EQR4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af348e8665697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/images/hero/heroDesktopA1t.png
200 OK 470 kB URL GET HTTP/3 exoduseffect.com/assets/images/hero/heroDesktopA1t.png
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type PNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced
- data
Size 470 kB (469463 bytes)
Hash 83c3a444cf82d5b7271f5d8d2c77aaad
732f2ec7255ef38ce8c23e4737de815d2f153aee
73035e8c2ba7bc19f518e6b1bc729d538a7a9b7ed2f8ca0b31eb21ef61911631
GET /assets/images/hero/heroDesktopA1t.png HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/png
content-length: 469463
last-modified: Wed, 26 Jul 2023 20:45:16 GMT
etag: "729d7-60169ecd4daae"
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y3qORoOuUckDcBmhZ8Q%2BWZVYdSWoaaubbyn3qqINHfKRn6C3SikRyj0xDpCwNYX%2B0v%2FAus43GpcH1EaJlKys7yhZU%2Fh2w7M2fGaodwrMsmS4AbmsmoWw4e21pPAJEakvhyDl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833af348c8565697-OSL
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/scripts/squeeze.js?v=10009
200 OK 2.2 kB URL GET HTTP/3 exoduseffect.com/assets/scripts/squeeze.js?v=10009
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (2216), with no line terminators
Hash ef049a6a71e3184e38979db0a74e2f7b
54f8c3c686940f6afa8471eebb5ff98a6eda00ec
f0d0268c7137b384af116708c448b874220b45737fec30e15ca6fd9296c476a6
GET /assets/scripts/squeeze.js?v=10009 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3263
etag: W/"cbf-60169ecda87cb-gzip"
last-modified: Wed, 26 Jul 2023 20:45:17 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uN4X9bMHZpbu2RbKkPZIAm0ypDegeDGcW6Ad4qYEuGpffAw42KTKsTDtLpzM0%2F343zjgZXgdCNm8fQz0RUqozcn0M0c%2BeOmUrWDESLn2GtUjOdrP145FST6xpDUrDj8udsFC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af34928785697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/scripts/global.js?v=10001
200 OK 11 kB URL GET HTTP/3 exoduseffect.com/assets/scripts/global.js?v=10001
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (3583)
Hash 839421274de76ae44c7494d1092005ec
8e8e90fb0278d75e119f0b49c9270d4eb9fd6793
309dcd1052d723b91589e2cbdec7df195c9a42f0191851be6b248de6cd98afcc
GET /assets/scripts/global.js?v=10001 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=16281
etag: W/"3f99-60c07abcc75bf-gzip"
last-modified: Fri, 08 Dec 2023 23:09:06 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ohoY3Xm8mQenP2JAojjmKOGlIvCkCfe4LvuD9zVvk5zVFNnQ2R%2BIIb1exPOXuhHp459zz2prnDytpOLMZbRgMkXBeVRIoLAISdCiu0sW8sPw2Fr7eh2IbeYiBaYZR9ruQ%2BtK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af348c8515697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
exoduseffect.com/assets/style/global.css?v=20002
200 OK 15 kB URL GET HTTP/3 exoduseffect.com/assets/style/global.css?v=20002
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (15351), with no line terminators
Hash 8f7a956f317125e412bf70ffebe0d6d7
d814c27be5cc249db0ba3c3319c3144517c0ece7
11304753a6e8a7ebf0895d573068099ea673f96f839519f184fc1e2a8f191039
GET /assets/style/global.css?v=20002 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19660
access-control-allow-origin: *
etag: W/"4ccc-601dfb5927e38-gzip"
last-modified: Tue, 01 Aug 2023 17:16:35 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CnO4JB4WF4uH73q%2F0yjq90fDr6vZuWBBv5P3O%2BjS2FTHud51PYH55KZWk996PF9KoWkKPN26rk9suRZBlKCBWbb7SKc3UsOT4RklT0vU0Nz0y8qf2veb6qFE1EvKW4M8OJzd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af348b84f5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.pushwoosh.com/webpush/v3/pushwoosh-web-notifications.js
200 OK 184 kB URL GET HTTP/2 cdn.pushwoosh.com/webpush/v3/pushwoosh-web-notifications.js
IP
ASN #24940 Hetzner Online GmbH
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerSectigo Limited
Subject*.pushwoosh.com
FingerprintDB:2A:4B:E9:C9:81:11:5E:DE:B8:7B:01:AA:89:F9:D6:0E:C2:06:FF
ValidityTue, 07 Mar 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
Size 184 kB (183472 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /webpush/v3/pushwoosh-web-notifications.js HTTP/1.1
Host: cdn.pushwoosh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 05 Dec 2023 07:10:05 GMT
x-rgw-object-type: Normal
etag: W/"556b70431c4c9b4a5addcfaca19ec37b"
x-amz-storage-class: STANDARD
expires: Tue, 12 Dec 2023 04:23:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, OPTIONS, DELETE, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Access-Control-Allow-Headers, is_auto_request, Content-Length, Accept-Encoding, X-Registry-Auth
access-control-allow-credentials: true
cache-control: max-age=86400, public
x-cache-status: HIT
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
exoduseffect.com/assets/images/ajaxYellow.svg
200 OK 3.3 kB URL GET HTTP/3 exoduseffect.com/assets/images/ajaxYellow.svg
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (3735), with no line terminators
Hash c79601ea12dd4649f0a40cebaded4000
ba17a24272d5664da78077c911f1482f8632f6f5
d26f181c47d19cf2acdcf98938e87329dfba2ef4b1e2034a1a712a5b0b004d14
GET /assets/images/ajaxYellow.svg HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: image/svg+xml
last-modified: Tue, 13 Jun 2023 17:17:19 GMT
etag: W/"d07-5fe0601eb7f3d-gzip"
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=15OPRwmmtkUZNz7pKhkpLOaoYhm663akp8jp0P9f5GTHEUk8iS9qXtJA9qocu%2B3ORQfpxPMzv%2B8efSf8sp7R%2FNBnmeJbrQ2kK1CC0DV5lMIPJvQ3hy0p2iPCD3hk20eU5gut"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af348d85b5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10_v4.m3u8
200 OK 30 kB URL GET HTTP/2 cdn.rhvsl.com/videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10_v4.m3u8
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerAmazon
Subjectcdn.rhvsl.com
Fingerprint35:F7:81:9C:5D:1F:25:4A:8A:FA:45:87:DC:0E:BC:EE:EC:17:22:6C
ValidityTue, 20 Jun 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Hash f6768ed1c14fc2ed916411cbddbf4665
5d0b5fdb56237bb517808d1fe44b53c8f56b39aa
1944abadec8b8b118757b0c184282ba2b909aff9a3b5fdadb6f2bb7fdb234b55
GET /videos/EE_20211031_MethuselehsSecret_16x9/EE_20211031_MethuselehSecret_16x9hls10_v4.m3u8 HTTP/1.1
Host: cdn.rhvsl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exoduseffect.com
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-mpegURL
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
last-modified: Wed, 29 Nov 2023 16:38:46 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 11 Dec 2023 00:34:54 GMT
etag: W/"f6768ed1c14fc2ed916411cbddbf4665"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7-36N1GOm1JkX0t1r9X0lGMYN4JHGrYQvjYj4LjmwKnErhBL-jGa1w==
age: 13694
X-Firefox-Spdy: h2
r.secretofexodus.com/?a=486&c=14&s1=3415259331988547126&ckmguid=26b65feb-50b8-4490-850d-8c609f0124ee
302 Found 131 kB URL User Request GET HTTP/2 r.secretofexodus.com/?a=486&c=14&s1=3415259331988547126&ckmguid=26b65feb-50b8-4490-850d-8c609f0124ee
IP
Certificate IssuerGoogle Trust Services LLC
Subjectsecretofexodus.com
Fingerprint51:71:CC:EC:D2:D5:F9:BF:38:37:F2:57:92:D3:72:0C:3D:FA:C8:7D
ValidityMon, 30 Oct 2023 06:46:06 GMT - Sun, 28 Jan 2024 06:46:05 GMT
Size 131 kB (130628 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?a=486&c=14&s1=3415259331988547126&ckmguid=26b65feb-50b8-4490-850d-8c609f0124ee HTTP/1.1
Host: r.secretofexodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 11 Dec 2023 04:23:05 GMT
content-type: text/html; charset=utf-8
location: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
cache-control: private
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: sq=Kd15tOClyx/87Y9l4JIf0wyHpCeCPwJabVP6cLUS7/neX+ajYcpefA==; domain=.r.secretofexodus.com; path=/; HttpOnly
tib=jGhrXpgoHLyfosN94Y6LBwyHpCeCPwJabVP6cLUS7/neX+ajYcpefA==; domain=.r.secretofexodus.com; expires=Thu, 11-Dec-2025 04:23:05 GMT; path=/; HttpOnly
c11=Kd15tOClyx+36bvzHwNpyTnOuG6lNVHh1eI680ZH/7v37QnssQ1vtQ==; domain=.r.secretofexodus.com; expires=Wed, 10-Jan-2024 04:23:05 GMT; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vNGhJr2neYc82ChAKqtMUuMG9vJKiqbr39vbY1GrrMHvRoQf1PNuxhThoWwu5RV9eyxMzZHvE3TiHtgz%2Fj2knKyZHsDjcejG11zj3NR2PPK2Rq007fLpXeM%2FhDElUkbWSceEcPdiXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af34109e4b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
exoduseffect.com/assets/style/slideInOnScroll.css?v=10001
200 OK 2.4 kB URL GET HTTP/3 exoduseffect.com/assets/style/slideInOnScroll.css?v=10001
IP
Requested by https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Certificate IssuerGoogle Trust Services LLC
Subjectexoduseffect.com
FingerprintAB:D1:83:9C:B6:74:2A:78:A6:99:3C:DF:B7:62:15:01:10:80:2B:EF
ValidityThu, 23 Nov 2023 10:08:04 GMT - Wed, 21 Feb 2024 10:08:03 GMT
File type ASCII text, with very long lines (2369), with no line terminators
Hash 538057e380b25194826f6499aab0f2c5
f96d80ba52e0a1ad4852f6493d35e832d9f91cb4
d852a478da86a57ea6001d3c6189a400023c810dcb89fc57e64c8283dff7ee9f
GET /assets/style/slideInOnScroll.css?v=10001 HTTP/1.1
Host: exoduseffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exoduseffect.com/?affId=486&c1=3415259331988547126&c2=&c3=&id=132463446&affid=486&cid=1779&s1=3415259331988547126&s2=&s3=&s4=&s5=
Cookie: PHPSESSID=2o2g64c8tlk1s65mp1d07b4b1l; Affiliate=a%3A6%3A%7Bs%3A4%3A%22type%22%3Bs%3A4%3A%22cake%22%3Bs%3A4%3A%22AFID%22%3Bs%3A3%3A%22486%22%3Bs%3A6%3A%22subIDs%22%3Ba%3A5%3A%7Bs%3A2%3A%22s1%22%3Bs%3A19%3A%223415259331988547126%22%3Bs%3A2%3A%22s2%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s3%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s4%22%3Bs%3A0%3A%22%22%3Bs%3A2%3A%22s5%22%3Bs%3A0%3A%22%22%3B%7Ds%3A4%3A%22UTMs%22%3Ba%3A0%3A%7B%7Ds%3A9%3A%22requestID%22%3Bs%3A9%3A%22132463446%22%3Bs%3A6%3A%22campID%22%3Bs%3A4%3A%221779%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 04:23:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2925
access-control-allow-origin: *
etag: W/"b6d-60169ecdaa70b-gzip"
last-modified: Wed, 26 Jul 2023 20:45:17 GMT
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nosnippet
cache-control: max-age=14400
cf-cache-status: HIT
age: 6444
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LoJGoECYLmJRmv7pfj76yRqpLfUqdEI1ApIXanKLkR5T1WYu8O3IHl%2FauMfEkVKcgH%2BPOZpD9DaS5tEv410hEDeK0S9n8u%2FYynlFodnhmOFU1Jb5Hcpq065ft8TwFaPsdLww"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833af348c8545697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1
104.21.65.22
151.101.194.217
195.201.193.122