| r11.o.lencr.org/ | 23.36.76.225 | | 504 B |
IP 23.36.76.225:0
ASN#20940 Akamai International B.V.
Hash686480d25645ac2aca7a99974693a82f 55ca9d53bd758d2afc75e8a9b59c656ff26a3f70 8902058e383c2f43751417e1af1d582f7a16ce0b6fc180ab20cbc76c4b00f914
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8902058E383C2F43751417E1AF1D582F7A16CE0B6FC180AB20CBC76C4B00F914"
Last-Modified: Wed, 14 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6666
Expires: Fri, 16 Aug 2024 21:21:31 GMT
Date: Fri, 16 Aug 2024 19:30:25 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP 23.33.119.10:0
ASN#20940 Akamai International B.V.
Hash9fca859eba50e585d7c1550a61d33bc3 a33940f9c83807660f212e5ff511fe28e0413c0d 08afcf8f1ad63cfd72b781cf4c69900e3fd266ee46389de3918570cf5d682f30
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "08AFCF8F1AD63CFD72B781CF4C69900E3FD266EE46389DE3918570CF5D682F30"
Last-Modified: Fri, 16 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10594
Expires: Fri, 16 Aug 2024 22:26:59 GMT
Date: Fri, 16 Aug 2024 19:30:25 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP 23.33.119.10:0
ASN#20940 Akamai International B.V.
Hash4d209e16679910b467c26590a0073236 ddd59fa6902b498e9c0cfb22e342757f954789d0 9ef3dab56215a67804db0e12d33772a1902f5914b788530717712902a294bcb5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9EF3DAB56215A67804DB0E12D33772A1902F5914B788530717712902A294BCB5"
Last-Modified: Wed, 14 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13221
Expires: Fri, 16 Aug 2024 23:10:47 GMT
Date: Fri, 16 Aug 2024 19:30:26 GMT
Connection: keep-alive
|
|
| s.pemsrv.com/splash.php?cat=&idzone=2306079&type=8&p=https://thebarchive.com/b/thread/904074694/&sub=&block=1&el=&tags=&cookieconsent=true&scr_info=aW5saW5lfHBvcE1hZ2ljfDE=&tested=2 | 95.211.229.246 | 302 Found | 0 B |
URL User Request GET HTTP/1.1s.pemsrv.com/splash.php?cat=&idzone=2306079&type=8&p=https://thebarchive.com/b/thread/904074694/&sub=&block=1&el=&tags=&cookieconsent=true&scr_info=aW5saW5lfHBvcE1hZ2ljfDE=&tested=2 IP 95.211.229.246:443
ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectpemsrv.com FingerprintE0:4E:2D:C6:04:B3:F6:F6:B8:FF:9A:F3:7B:C4:9C:68:52:FA:D4:3E ValidityMon, 01 Jul 2024 10:29:00 GMT - Sun, 29 Sep 2024 10:28:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /splash.php?cat=&idzone=2306079&type=8&p=https://thebarchive.com/b/thread/904074694/&sub=&block=1&el=&tags=&cookieconsent=true&scr_info=aW5saW5lfHBvcE1hZ2ljfDE=&tested=2 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 16 Aug 2024 19:30:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2266bfa8d255de74.928537702365518052%22%3B%7D; expires=Sun, 16 Aug 2026 19:30:26 GMT; path=; domain=.pemsrv.com; Secure; SameSite=none
impressions=xesasblxavxzxmosmcbbbmzxccevxesasblbovxzxmosmcbbbmzxccevlcoamxxbvxzxmosmrexrlzxccevxesasblmcvxzxmosmrexrlzxccevxescclsaovozxmosmrexrlzxccevxesasblmovxzxmosmamraxzxccevlammcmcovxzxmosmamraxzxccevlasrcaccvxzxmosmamraxzxccevlaabrbeovxzxmosmamraxzxccevlxssoecbvxzxmosmamraxzxccevlxssoeccvxzxmosmmrsrezxccevmbbcemoavxezxmosmmrcllzxccevlcoamxoevxzxmosmmaamezxccevcloaxxabvxzxmosmmaamxzxccevcloaxxmovxzxmosmmaamxzxccevlcoamxxovxzxmosmmaamczxccevbxbbamsbvozxmosmmmxsxzxccevlxssoesavxzxmosmmboxazxccevbmoaxeccvxzxmosmmboxazxccevcloaxxoevxzxmosmmboxazxccevlsabrerovmzxmosmmboxazxccevlsoexsocvxzxmosmmboxazxccevxescclsacvxzxmosmmboxazxccevxesasblmavxzxmosmmlrmazxccevlxssoercvxzxmosmbexbczxccevxesasblrbvxzxmosmbemlmzxccevlsoeeescvxzxmosmbxclmzxccevmclsaoxbvmzxmosmboseazxccevxesaolcrbvszxmosmborcrzxccevxesaolcrcvszxmosmbsolszxccevxesaolcravrzxmosmbsolszxccevxesasblbevxzxmosmbssrazxccevxesasblmbvxzxmosmbssrazxccevxesasblbcvxzxmosmbssrazxccevcloaxxaavxzxmosmbcebczxccevmeembesovczxmosmbcebczxccevlxssoeaevozxmosmbcebczxccevlxssoeabvszxmosmbcebczxccevxesosseeovozxmosmbcebczxccevlxssoerevozxmosmbcebczxccevlxssoeravxzxmosmbcebrzxccevxesasblrovxzxmosmblsrlzxccevxesasblaovxzxmosmblsrlzxccevlsabrercvbzxmosmblsrlzxccevxesasblcovxzxmosmblsrlzxccevlxssoeaovozxmosmblrcszxccevcloaxxacvxzxmosmblrcszxccevlcomeemavxzxmosmblrcszxccevlxssoerbvxzxmosmblrcszxccevlcomeembvxzxmosmblrcszxccevxesasbllcvxzxmosmlxolrzxccevxesasblacvszxmosmlxolrzxccevxesasbllevxzxmosmlxolrzxccevxesasblecvxzxmosmlxolrzxccevxescclceovczxmosmlxmerzxccevmrxccosavozxmosmlmbaozxccevxesasblabvxzxmosbesmbezxccevxesasblrcvozxmosbesmbezxccevxesasbllovszxmosbesbaczxccevxesrbxxsbvxzxmosbeslcszxccevcloaecoevxzxmosbeslcszxccevlcomeebevxzxmosbeslcszxccevxesasblmevszxmosbecerazxccevxesasblravxzxmosbecerazxccevxesearxocvxzxmosbecccrzxccevxeseambmbvczxmosbecccrzxccevxesearbaovozxmosbecccrzxccevxeorbxlravxzxmosbecccrzxccevlboleosavxzxmosbecreozxccevlaarbaeovxzxmosbecrmlzxccevlocxoxlavxzxmosbemsaezxccevxeseambmevxzxmosbemsaezxccevxeobsrcxevxzxmosbemsaezxccevxeorbxlccvxzxmosbemsaxzxccevbbbocllovozxmosbxxobbzxccevbclceaoevxzxmosbxxobbzxccevbbbocllevozxmosbxxobbzxccevxeoacebbbvxzxmosbxxobbzxccevbrarbbaovxezxmosbxxobbzxccevcxmecmcavxzxmosbxxolszxccevxesocseaavxzxmosbxascczxccevxesrarmravxzxmosboxeslzxccevcloaecoavxzxmosboxeslzxccevxesxocoravxzxmosboxemczxccevxesrarmrevxzxmosboxebczxccevxeoaceblovxzxmosboxebazxccevlaboaaebvxzxmosboxelazxccevxbblrmlavozxmosbomsbxzxccevcxexraervozxmosbomsbxzxccevlsoexelcvxzxmosbobmcazxccevbxlsblbevxzxmosbsorxozcbevlacbsrcbvxzxmosbsorxozxccevxesrarmcovxzxmosbsorxozxccevlarsxxxavxzxmosbsorxozxccevlasrcacevxzxmosbsorxozxccevxesxsxmacvbzxmosbssxmrzxccevbrarbbaevszxmosbsccclzxccevxesrarmcavxzxmosbsccclzxccevcloaxxocvxzxmosbsccclzxccevxesrclocevxzxmosbsccrezxccevxesxlbcmavxzxmosbsccrezxccevxeoaceblevxzxmosbscmmxzxccevxescclceevxzxmosbscmmozxccevmeelaclovxzxmosbscmmozaevmeelaclavxzxmosbscmmozaevxesrlcxxovxzxmosbsaaoazxcce; expires=Sat, 17 Aug 2024 19:30:26 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-link%22%3A%22v4%7C%7CNOR%7C2306079%7C103594112%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3163480%7C3151627%7C0%7C1%7C0%7C0%7C0%7C1%7C1%7C0%7C0%7C1%7C%7Cbd01a3181b2fdce644c2bc0642590c58%7C0%7Cthebarchive.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1723836626%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7C936729f53a1e9cdc21878cd5acc8b771%7Cok%22%7D; expires=Sun, 15 Sep 2024 19:30:26 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Location: https://lustgoddessgame.buzz/c4thl3k.php?key=LGpop&tag=opddNHdLHTPHNVS4ASOnolrlsudNLRVdTNNO6VzqpbXUzOodNU6V0rpXT1UU0uomroptldRNVNXPY6V0zpXSuldM6Z0rpXTOdptLNnRNbNpPxtrvXTTrPprLXTPVdLrVa6Vxut9Mya9do3j1D.5zpXSuldK6V0rpXSuldNZPRbRXXPW5zpXSuldK6V0rpXSuldK6Z0ttE9WetM03FE.tNN1s2d2t1M82stVu0zg.wA--&cost=0.0005&source=thebarchive.com&varid=103594112&campid=6801554&siteid=545797&zoneid=2306079&catid=508&country=NOR&format=
X-Robots-Tag: noindex, follow
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP 23.33.119.10:0
ASN#20940 Akamai International B.V.
Hash75f615f839dbf8cd2f4a3d58e44455f2 362b7a7d5cbe41d8a42cecec4ee755af0e07ddaf 2c4833330979b96ed12b3480367f00be397e9f9ccb35a088e7c79e92eb26cae4
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2C4833330979B96ED12B3480367F00BE397E9F9CCB35A088E7C79E92EB26CAE4"
Last-Modified: Fri, 16 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10139
Expires: Fri, 16 Aug 2024 22:19:25 GMT
Date: Fri, 16 Aug 2024 19:30:26 GMT
Connection: keep-alive
|
|
| lustgoddessgame.buzz/c4thl3k.php?key=LGpop&tag=opddNHdLHTPHNVS4ASOnolrlsudNLRVdTNNO6VzqpbXUzOodNU6V0rpXT1UU0uomroptldRNVNXPY6V0zpXSuldM6Z0rpXTOdptLNnRNbNpPxtrvXTTrPprLXTPVdLrVa6Vxut9Mya9do3j1D.5zpXSuldK6V0rpXSuldNZPRbRXXPW5zpXSuldK6V0rpXSuldK6Z0ttE9WetM03FE.tNN1s2d2t1M82stVu0zg.wA--&cost=0.0005&source=thebarchive.com&varid=103594112&campid=6801554&siteid=545797&zoneid=2306079&catid=508&country=NOR&format= | 94.130.72.48 | 302 Found | 0 B |
URL User Request GET HTTP/1.1lustgoddessgame.buzz/c4thl3k.php?key=LGpop&tag=opddNHdLHTPHNVS4ASOnolrlsudNLRVdTNNO6VzqpbXUzOodNU6V0rpXT1UU0uomroptldRNVNXPY6V0zpXSuldM6Z0rpXTOdptLNnRNbNpPxtrvXTTrPprLXTPVdLrVa6Vxut9Mya9do3j1D.5zpXSuldK6V0rpXSuldNZPRbRXXPW5zpXSuldK6V0rpXSuldK6Z0ttE9WetM03FE.tNN1s2d2t1M82stVu0zg.wA--&cost=0.0005&source=thebarchive.com&varid=103594112&campid=6801554&siteid=545797&zoneid=2306079&catid=508&country=NOR&format= IP 94.130.72.48:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectlustgoddessgame.buzz Fingerprint5C:D4:63:EC:FC:42:B9:B4:21:25:7E:DD:82:1A:96:13:9A:BF:D7:81 ValidityThu, 18 Jul 2024 11:00:26 GMT - Wed, 16 Oct 2024 11:00:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c4thl3k.php?key=LGpop&tag=opddNHdLHTPHNVS4ASOnolrlsudNLRVdTNNO6VzqpbXUzOodNU6V0rpXT1UU0uomroptldRNVNXPY6V0zpXSuldM6Z0rpXTOdptLNnRNbNpPxtrvXTTrPprLXTPVdLrVa6Vxut9Mya9do3j1D.5zpXSuldK6V0rpXSuldNZPRbRXXPW5zpXSuldK6V0rpXSuldK6Z0ttE9WetM03FE.tNN1s2d2t1M82stVu0zg.wA--&cost=0.0005&source=thebarchive.com&varid=103594112&campid=6801554&siteid=545797&zoneid=2306079&catid=508&country=NOR&format= HTTP/1.1
Host: lustgoddessgame.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.26.1
Date: Fri, 16 Aug 2024 19:30:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=j6m7a3fe; expires=Sat, 17 Aug 2024 19:30:26 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=j6m7a3fe-j6m7a3fe-2toc-0-7vyd-2t5m0-2tqe6o-da1b06; expires=Sat, 17 Aug 2024 19:30:26 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://click.hooligs.app/?pid=1237&offer_id=49&land=884&ref_id=35270j6m7a3fe71c&sub1=da338481ddfdbfa6cc2f9c87a95338c5&sub2=c7f59577c54a8b0bacc9655bd7e99057&sub3=1090
Strict-Transport-Security: max-age=31536000
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn1.png | 172.67.163.114 | 200 OK | 6.9 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn1.png IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hasha67051906425835b13dc4292c6fe2ef7 c96b01fb21c60a17fad9e89f235fdb8809ffc43d f000409df7dd5222fc51cc35113519a133596c011f61bc5a7f65f9dcd2843a37
GET /lg/lg_0324/land_lg_140324_en/image/btn1.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/png
content-length: 6866
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-1ad2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1573
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HDzW%2FsCvQZy16UM%2F8Vg79%2Bhm9QX31g%2F6UEkVh5SO6WqtQZbR1GQZTo99HujZLlQIDTR6kCFxxMPMzKeF36QVScfA3gOdGdWaqiLwqUWfopaaLAesLaleSfxX9l1zVtkVTHk30Iz7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6c88ac8b500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| click.hooligs.app/?pid=1237&offer_id=49&land=884&ref_id=35270j6m7a3fe71c&sub1=da338481ddfdbfa6cc2f9c87a95338c5&sub2=c7f59577c54a8b0bacc9655bd7e99057&sub3=1090 | 104.21.77.74 | 302 Found | 9.8 kB |
URL User Request GET HTTP/2click.hooligs.app/?pid=1237&offer_id=49&land=884&ref_id=35270j6m7a3fe71c&sub1=da338481ddfdbfa6cc2f9c87a95338c5&sub2=c7f59577c54a8b0bacc9655bd7e99057&sub3=1090 IP 104.21.77.74:443
CertificateIssuerGoogle Trust Services Subjecthooligs.app FingerprintF3:3D:54:22:B5:E5:EC:D2:DC:3C:31:DD:18:AF:76:78:13:8D:1D:5D ValidityFri, 05 Jul 2024 06:02:20 GMT - Thu, 03 Oct 2024 06:02:19 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hash8c7c430e736c07b069cf61a2870c7254 a1b6cf722997131aa569f2214df2ce8a9e6e5630 42269355807fe5c4d7dabbccff1cc602725b5ffccae86759412219b83198a180
GET /?pid=1237&offer_id=49&land=884&ref_id=35270j6m7a3fe71c&sub1=da338481ddfdbfa6cc2f9c87a95338c5&sub2=c7f59577c54a8b0bacc9655bd7e99057&sub3=1090 HTTP/1.1
Host: click.hooligs.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 16 Aug 2024 19:30:26 GMT
content-type: text/html; charset=utf-8
location: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
x-clickid: 4def0000849c88e3
x-frame-options: DENY
vary: Accept-Language, Origin
content-language: en
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
set-cookie: haff_cid:1237:49=4def0000849c88e3; expires=Sat, 17 Aug 2024 19:30:26 GMT; Max-Age=86400; Path=/
strict-transport-security: max-age=43200
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xYIBoHxPNUKTp18NNpNgIez5L7DC7kvmBdotFqzQ6tR327Q7tUFj7J48US7200rUjm9Fpar7voXVFOVXSepxGhnAJTh5EVtmHF4B4isYXUsHJJQXSQKvO5kVqYA0I%2B59jR6YzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b43d6c5284956a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP 23.36.76.249:0
ASN#20940 Akamai International B.V.
Hashb35077e566f0beaf66bbb9e543fd135f cde33f3c0ace713eff137e33034dd76e3573089c 378bb9ab930627a8a1b5a889d211da9150d940d5b3f50ae296a56279f0424d2b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "378BB9AB930627A8A1B5A889D211DA9150D940D5B3F50AE296A56279F0424D2B"
Last-Modified: Fri, 16 Aug 2024 07:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13015
Expires: Fri, 16 Aug 2024 23:07:22 GMT
Date: Fri, 16 Aug 2024 19:30:27 GMT
Connection: keep-alive
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_close.jpg | 172.67.163.114 | 200 OK | 40 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_close.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash3d830c378aa76c9caa82a73805459893 4a48546372f2ef6311cbed974d536273bcfdd711 8d88b039c0e88133bd2f53dc2fef48ea2d8bdae4eb6e3162fec9db714f97adea
GET /lg/lg_0324/land_lg_140324_en/image/g1_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 40179
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-9cf3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 857
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssG%2FVYwghnKkGN2lhgFeglYQ4gkwH5AxNIUEVSKtn48agqn%2FNazMMH1G4BKCGCjXJUEkbR%2BqIpUtxNIrzLLLiacC12oCQppXfjdklde%2FOURBgMCK%2BIvJrF2efEuwCdh4gmN5NK7N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6caceabb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ln.gamesrevenue.com/px1.js | 5.161.79.44 | 200 OK | 88 kB |
URL GET HTTP/2ln.gamesrevenue.com/px1.js IP 5.161.79.44:443
ASN#213230 Hetzner Online GmbH
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerLet's Encrypt Subject*.gamesrevenue.com FingerprintDF:02:38:51:6A:B2:64:74:20:58:40:1D:A7:0F:81:A9:0F:5B:60:1E ValidityWed, 10 Jul 2024 09:43:36 GMT - Tue, 08 Oct 2024 09:43:35 GMT
File typegzip compressed data, max speed, from Unix Hasha88c9946a6ffcabc015f8fa19b4ab13a 90f46164eed8ce33690f657a210c885cde93ecfe 8e6bb5c718a8583d6fdfb6e049a35189568e27600c07b288c4d3c6221e9c1c85
GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: application/javascript
last-modified: Fri, 22 Dec 2023 10:12:56 GMT
etag: W/"65856128-3b88"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_open.jpg | 172.67.163.114 | 200 OK | 80 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_open.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash12e061b10b2c654a24ea704af3aaec43 9c506625e1fa700f0e6522cced2a53b0cde2bd54 d321fc26bb399bd642b1a3ae059a03308d286526e6b87a9cb37ba63833673372
GET /lg/lg_0324/land_lg_140324_en/image/g2_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 79598
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-136ee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 857
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CP49CxWLxY7qr9OON539AGf9H3zZTRaGeahgzQI1TqvA4rCOOHn9Cw6uR707h8oasdju8tTMrvdlaAX0DkpGrKXdo1%2FkxZBUzx4%2BFHtCOprhHtqyU0PK4NN4RjIFP02JeLHoHAKi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6cacec1b500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_close.jpg | 172.67.163.114 | 200 OK | 42 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_close.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash955f59a0876a28b432c71c0d274727c7 789778a09f2fa8f8bd24be2bb781914f5070dd3d 40e8cd16f27d5d6a0cfd007881651ef8acd93ba95423c05741bc410454eabf40
GET /lg/lg_0324/land_lg_140324_en/image/g2_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 41478
last-modified: Tue, 12 Mar 2024 16:35:34 GMT
etag: "65f08456-a206"
cache-control: max-age=14400
cf-cache-status: HIT
age: 857
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94w3A7tGTSwRUCJlMYFwsplJb0ksoDyrJ17gQbxvkbJOUvuNXbMkT1qqaz5KygcS9I8%2BZ0LQLxdkHcUa%2BBgGeg7wMGF5BjqIYm3OrGFoqsJY%2FYtTTItgj9GOC%2FB9svpOptnJQTLR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6cadec8b500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_open.jpg | 172.67.163.114 | 200 OK | 63 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_open.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashd837068776c28a251131d2c0138c5db4 bc8d3e395fa77a6b801f13d1c22ff159776cc430 a8364b19810c700ee3899c55089ca678291758ee0d62dbad821e2a6d73b08c93
GET /lg/lg_0324/land_lg_140324_en/image/g3_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 63206
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-f6e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 856
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gL%2BLA6AGgZ%2Bour376kD7ZnGT7o%2FVVlb96hv9KvXxmr8V6QmZr3Aqh7pE%2BTuZ%2FUbsM%2FSI6uM8gQFxAv8Vx10KGtGMyPcT3NG86SmR2y4EmYTjwn5Gnsw1rjiBVcR0ib9bTRkBCbfw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6cadeccb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_close.jpg | 172.67.163.114 | 200 OK | 41 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_close.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashaa7031c41077d720cfc935e8de98de95 47aaf9ec464983016d35bb8150928c7f96cdff8c 6a49dc8fe71fafd7db501c43d96537be26a508a2c8a932ff8f03746bc9a55a83
GET /lg/lg_0324/land_lg_140324_en/image/g3_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 40609
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-9ea1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 856
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cxn74U%2BH6UUXW0IChiQWVsyzQi6hM4gbE8%2BWC0U%2FmmBZGzR%2BidG21318UmT7A9a6h5ID8arWuV79WB6OROpvTle0vEkgH5iL1sU6%2F0Mb2f4kcvkjFD1PZOOeiu8satzUtsSJPghX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6caeeddb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_open.jpg | 172.67.163.114 | 200 OK | 73 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_open.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashc37fec311feadcbd0c77987b383b0596 9a8f5df2805241f6bc484151dc31f3b72bb9a196 a61a23797d6b68ed79222d950596e90da320e59f8ee23e7eb776c94ee0d6734c
GET /lg/lg_0324/land_lg_140324_en/image/g4_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 72874
last-modified: Tue, 12 Mar 2024 16:35:36 GMT
etag: "65f08458-11caa"
cache-control: max-age=14400
cf-cache-status: HIT
age: 856
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QDuJa1LHJnkbH3c6J%2FPsE1KD%2Bcp3h4vOix%2FSCAF7N14u0G1zraxG6Psv0QuAPflxIdtE7V0h6jRxkqYsiuUd6eiZaXNJyxt%2FNZ87FhfDvlOnG0VHShHZDmF8edHmD0WbtW2Sct6i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6caeedeb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_close.jpg | 172.67.163.114 | 200 OK | 41 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_close.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash4735a029efd2d2e8b15fab5879842219 82ac18ec8aae9a2cc311cdb3b92862e56d161f99 11c0bdd5fc2ba1dfea6ccaedded312f27fd5d5ddf21f24ee607ad05c2c0f197b
GET /lg/lg_0324/land_lg_140324_en/image/g4_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 40656
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-9ed0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 856
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aMol2DSLzhZ0SJLl8l7K3XwIdwR00DFWkobHquuh1s5tLnaNO%2F3uud15IwWQGElfuX%2Bu%2FM%2FE2YDrbxFxN2xZkNzoYPC7QBCeRlGiTnZut69F%2FqdtXXfjMY8MDdJKU1VLMluX76%2F9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6caeedfb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP 23.36.76.249:0
ASN#20940 Akamai International B.V.
Hash618079eb8b23c887540715f22e37d29d aa706430c2f90df9012b24897aa5afc7b3343f0f dfa1f1c0624702d933e177b87883301ad6e4f2f18689258b191c2b7cb0530622
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DFA1F1C0624702D933E177B87883301AD6E4F2F18689258B191C2B7CB0530622"
Last-Modified: Fri, 16 Aug 2024 06:31:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11595
Expires: Fri, 16 Aug 2024 22:43:42 GMT
Date: Fri, 16 Aug 2024 19:30:27 GMT
Connection: keep-alive
|
|
| my.rtmark.net/img.gif?f=sync&lr=1&partner=4525db4116ed1c87c5ad9a1c2cb785cedc7f7ec9dfd0157a058f115a95fabcf3 | 139.45.195.8 | 200 OK | 43 B |
URL GET HTTP/2my.rtmark.net/img.gif?f=sync&lr=1&partner=4525db4116ed1c87c5ad9a1c2cb785cedc7f7ec9dfd0157a058f115a95fabcf3 IP 139.45.195.8:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&lr=1&partner=4525db4116ed1c87c5ad9a1c2cb785cedc7f7ec9dfd0157a058f115a95fabcf3 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0880baf457684638f2cc610989f0a8b7; expires=Sat, 16 Aug 2025 19:30:27 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP 143.204.53.97:0
Hash78779700491f06b9bd16853002a6d348 ca0d2f857602a5dedef2b775e0614dab6db5ca25 8d543f541355a80381314d76b890c6a3f43ded3b3bdf7472207d6a9ecc5b48be
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 16 Aug 2024 19:30:27 GMT
Last-Modified: Fri, 16 Aug 2024 17:53:42 GMT
Server: ECAcc (ska/F6A0)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wvRLJeRYYPBVJTdUvRRpbo5SLo04fGeEI-mLXG1rBfbtdVm8M4G_4g==
Age: 5805
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/fav.png | 172.67.163.114 | 200 OK | 1.4 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/fav.png IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash10c5dd857fd3653492ef5eeaa86cd48b 193484a907a40d7b145af2136ef83bef593d2f21 a689201508b9dc7b2cc3049c7d89947f96a19790411506ecd6eb1875374fe329
GET /lg/lg_0324/land_lg_140324_en/image/fav.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/png
content-length: 1425
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-591"
cache-control: max-age=14400
cf-cache-status: HIT
age: 87
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BbuHkaiQebX1ASN31KJ%2BdinMlC4wbJt0BZXs4xMq2pvspYpNpXPxJh7ABSd%2BV8XFRdoR6qAxZPuYMSqxr4rc3l%2BjrbdcAJZ0%2FZMtVXfePT%2FUrGygMF0ogWtdrp8Wm6cwwLaM7dUJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6cc796bb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/px.gif?akey=28407dccfb372e83ee9d49a69f097187 | 35.157.218.37 | 307 Temporary Redirect | 0 B |
URL GET HTTP/2proftrafficcounter.com/px.gif?akey=28407dccfb372e83ee9d49a69f097187 IP 35.157.218.37:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px.gif?akey=28407dccfb372e83ee9d49a69f097187 HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Fri, 16 Aug 2024 19:30:28 GMT
content-type: image/gif
content-length: 0
location: https://experttrafficmonitor.com/dbs?uuid=6eb7dde5-28cb-42e7-9d41-666d170a6781&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsiMTkyMSI6MTcyMzgzNjYyN30sImFjY2wiOnsiMjAsMCI6MTcyMzgzNjYyN319.4BfZ8qmbhF9UZ8p31p4oE_RuMjJY4aNzjtcf9iBv3l4
server: nginx/1.21.6
set-cookie: uid_id2=6eb7dde5-28cb-42e7-9d41-666d170a6781:2:1; expires=Mon, 14 Aug 2034 19:30:27 GMT; secure; SameSite=None
ak=1921,1723836627; expires=Thu, 14 Nov 2024 19:30:27 GMT; secure; SameSite=None
acl=20,0,1723836627; expires=Thu, 14 Nov 2024 19:30:27 GMT; secure; SameSite=None
expires: Fri, 16 Aug 2024 19:30:28 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2
|
|
| experttrafficmonitor.com/dbs?uuid=6eb7dde5-28cb-42e7-9d41-666d170a6781&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsiMTkyMSI6MTcyMzgzNjYyN30sImFjY2wiOnsiMjAsMCI6MTcyMzgzNjYyN319.4BfZ8qmbhF9UZ8p31p4oE_RuMjJY4aNzjtcf9iBv3l4 | 35.157.218.37 | 200 OK | 7 B |
URL GET HTTP/2experttrafficmonitor.com/dbs?uuid=6eb7dde5-28cb-42e7-9d41-666d170a6781&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsiMTkyMSI6MTcyMzgzNjYyN30sImFjY2wiOnsiMjAsMCI6MTcyMzgzNjYyN319.4BfZ8qmbhF9UZ8p31p4oE_RuMjJY4aNzjtcf9iBv3l4 IP 35.157.218.37:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /dbs?uuid=6eb7dde5-28cb-42e7-9d41-666d170a6781&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsiMTkyMSI6MTcyMzgzNjYyN30sImFjY2wiOnsiMjAsMCI6MTcyMzgzNjYyN319.4BfZ8qmbhF9UZ8p31p4oE_RuMjJY4aNzjtcf9iBv3l4 HTTP/1.1
Host: experttrafficmonitor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theeverydaygame.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 19:30:28 GMT
content-type: image/gif
content-length: 7
server: nginx/1.21.6
set-cookie: uid_id2=6eb7dde5-28cb-42e7-9d41-666d170a6781:2:1; expires=Mon, 14 Aug 2034 19:30:28 GMT; secure; SameSite=None
ak=1921,1723836627; expires=Thu, 14 Nov 2024 19:30:28 GMT; secure; SameSite=None
acl=20,0,1723836627; expires=Thu, 14 Nov 2024 19:30:28 GMT; secure; SameSite=None
expires: Fri, 16 Aug 2024 19:30:28 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP 23.36.76.249:0
ASN#20940 Akamai International B.V.
Hash3c14cfb85dc9ceb923d7d3c3648719d2 10ea83f83398870f50ca771216ad77bd95aa66cc bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B"
Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12747
Expires: Fri, 16 Aug 2024 23:02:55 GMT
Date: Fri, 16 Aug 2024 19:30:28 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP 23.36.76.249:0
ASN#20940 Akamai International B.V.
Hash3c14cfb85dc9ceb923d7d3c3648719d2 10ea83f83398870f50ca771216ad77bd95aa66cc bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B"
Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12747
Expires: Fri, 16 Aug 2024 23:02:55 GMT
Date: Fri, 16 Aug 2024 19:30:28 GMT
Connection: keep-alive
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css | 172.67.163.114 | 200 OK | 3.3 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeASCII text, with very long lines (3548), with no line terminators Hashaac1493fdaa516c07b05dc277adf9047 40c8ee3e4d54dfff6dcaea969bcad3d20ec9b796 8f9a48a298195eefb30fffd1c8d458eac7ecc2503a77ba8a5bc47bad68b61c37
GET /lg/lg_0324/land_lg_140324_en/css/main.css HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: text/css
last-modified: Tue, 12 Mar 2024 16:35:32 GMT
etag: W/"65f08454-ce3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J24uZUm4mrCRvlZMsfPjMIMJDyuhwUixFYwbXMHc%2Fj%2FENeGCfEjJT85HSukW0EySiv2vJeqCyFiWpVh7IntlZ9glOwIdtLaZrwPrs%2B%2BXI4x7XYTDQVoQIF7qG6CRvrK6fjaTDyH4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6c88aa6b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/awpx_click.js?v=005 | 172.67.163.114 | 200 OK | 1.5 kB |
URL GET HTTP/3theeverydaygame.com/awpx_click.js?v=005 IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeASCII text, with very long lines (1544), with no line terminators Hash684379265eb9f58cc45bc0d82f0db964 dcceb2eb66dd485a8df52da17210e1ea660354ee 45f7be3af362b2f0b894e51e8394ecc08066d8b9004fb095ba7665edbd8ce078
GET /awpx_click.js?v=005 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 09:49:36 GMT
etag: W/"6409abb0-5d2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3309
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5gCuTHr47qJr7NiQeueYYqhyjRQxxknBI3xXpfvFoxetBoTdorxgNOQ8Tv5E3s3W3KqHsodkhmbEeauc4xvcw%2BpH0eH2yKmGJRxdn6KFXQCTrtcmUovzulZ%2BCm8RP8pC%2FSjGEL94"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6c88abfb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn2.png | 172.67.163.114 | 200 OK | 9.8 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn2.png IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hash8c7c430e736c07b069cf61a2870c7254 a1b6cf722997131aa569f2214df2ce8a9e6e5630 42269355807fe5c4d7dabbccff1cc602725b5ffccae86759412219b83198a180
GET /lg/lg_0324/land_lg_140324_en/image/btn2.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/png
content-length: 9771
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-262b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1573
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cCDIamni4YTY6xkydR4giS9PMcyeIfNk%2BTzwJneTWCr%2F68czvVZDTzOOqDAo65Yk8NxIBP2hLLcZgA1LfNtEq5xgdoNtJGh7Ur5Mzg440TSfY3rYdioaNWIA5frEz%2FJ4RRIf8Hzq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6c88acdb500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/libs/jquery.min.js | 172.67.163.114 | 200 OK | 87 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/libs/jquery.min.js IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /lg/lg_0324/land_lg_140324_en/libs/jquery.min.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:38 GMT
etag: W/"65f0845a-1538f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J0lwY3i0AMcME41J%2B70IE8VUBGorTAxS4RL0xT94Df6UYt0AUT7e7afDa82eeTRZ%2FaPZkkcdANquVOUOyCX2MquIOWizqkk9Dr1qPyF4FB5EibNM3eVM%2F3LAYbVqK2wGiYriBfdm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6c88ab1b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/scripts/main.js | 172.67.163.114 | 200 OK | 521 B |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/scripts/main.js IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (567), with no line terminators Hash42a310913ab3c9f8c9241c154fd7af4a 8acd5b33349b86bb7ea9da2f609ca7230ad5761d ac4d23ed1f3208f4515cb3561fc74ece439d34496675ae90917061a858c7b79a
GET /lg/lg_0324/land_lg_140324_en/scripts/main.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:38 GMT
etag: W/"65f0845a-209"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=REcPryDdiFO71TINpzREBgMlM%2B7ESZkSiIg5K8tUCwfS1heyC2fD9foriN7moXx2XPfm%2F%2BD0LVdRREF2mJg5bHlWXEQViEZ5BdeeOrFFJYSQA7NAgw4hvFVIdFMIlhL1XVix6zJ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6c89ad2b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_open.jpg | 172.67.163.114 | 200 OK | 84 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_open.jpg IP 172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hasha3efbcb7561dddaeb36ba22fb8fae56f a9363a7f6b6e9a5a6dcbb37a0abfa7bb3ab3ea1d d95424c3f3857c13ff9f6a957f805b188a568ce769b51ee9fe68c8fd3537b319
GET /lg/lg_0324/land_lg_140324_en/image/g1_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: image/jpeg
content-length: 84260
last-modified: Tue, 12 Mar 2024 16:35:34 GMT
etag: "65f08456-14924"
cache-control: max-age=14400
cf-cache-status: HIT
age: 857
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8r1NKLFROM%2F2qEthEdyyNrkN%2BXooWIEkdAzHAeE0FGZeSQRdoQPtdQS5IUXT%2BUo6d3lHpybKpQZ%2FPio2y5alsuwrzDHZhRMQKvyEAdWp%2FX5eQ56mCo8zcc6ZK7NhgDPxQFZu04rV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6cace9db500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twistconcept.com/index.min.js?pk=28407dccfb372e83ee9d49a69f097187 | 172.67.215.17 | 200 OK | 653 B |
URL GET HTTP/2twistconcept.com/index.min.js?pk=28407dccfb372e83ee9d49a69f097187 IP 172.67.215.17:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs CertificateIssuerGoogle Trust Services Subjecttwistconcept.com FingerprintF3:17:8A:A1:CC:76:1F:1A:EE:B4:14:51:1B:FD:F0:E3:C6:F5:F6:D8 ValidityFri, 19 Jul 2024 07:04:23 GMT - Thu, 17 Oct 2024 07:04:22 GMT
File typeJavaScript source, ASCII text, with very long lines (656), with no line terminators Hashe1b26acebd3ad2c11bf53fe6e99737ec 8676d5c0973a09d71c95b427cd453d5514e77eac 56b092f22e468081835fe837e953180a39406307c0a889e135da563bc8d60e41
GET /index.min.js?pk=28407dccfb372e83ee9d49a69f097187 HTTP/1.1
Host: twistconcept.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 19:30:27 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 13:06:26 GMT
etag: W/"655f4e52-28d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Q4RVdTLSVmAzGF4SMAK7Et665k9SiyAD9hh5WSw0PJDb0UEPA9G51PjrXjFttuMH7w3I%2FrOHeH5YUfIOL%2FUOYKgrUw6MpNVeFSpz8BJjB6fHbaByyN1p6bjsvHftjCKO6nk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b43d6cad8c15695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs | 172.67.163.114 | 200 OK | 2.2 kB |
URL User Request GET HTTP/2theeverydaygame.com/lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs IP 172.67.163.114:443
CertificateIssuerGoogle Trust Services Subjecttheeverydaygame.com Fingerprint9B:C0:4D:A2:C5:A3:30:91:89:34:87:E6:D4:E1:88:5B:D6:33:91:39 ValidityThu, 27 Jun 2024 16:38:53 GMT - Wed, 25 Sep 2024 16:38:52 GMT
File typeHTML document, ASCII text, with very long lines (2351), with no line terminators Hashafd221149d65b6b110329e24e51c4fef 5c512fa2a88678f78d80590d9e64f7495137a5a9 280f15c38b8fe79b5bb8fb3b09ae71ddf5f32476a9ef019706ea4855b14bfea8
GET /lg/lg_0324/land_lg_140324_en/?haff_pid=1237&haff_oid=49&haff_cid=4def0000849c88e3&haff_sub1=da338481ddfdbfa6cc2f9c87a95338c5&haff_sub2=c7f59577c54a8b0bacc9655bd7e99057&haff_sub3=1090&haff_tag=rs HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 19:30:26 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LWZM3uXLqc2eUwr9cpqmKDOwSXBCbw%2F0rV8gNRXEuFHtAwm5iNczGWgEkFkbtUL4itfhjDhhvV%2Bo5Q3nPxob%2BOsM91ir1YqWVac04S0HiqmkCVSc2btFFpLknUiUuxVNDYHlbCz7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b43d6c5db357129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|