| heedetiquettedope.com/wsf1nit26j?adb=y&dev=r&ibsb=98&key=7ff94e9461629d2f54ff14725863196e&kw=[%22popular%22,%227%22,%22days%22,%22-%22,%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/popular/&res=7.31&scrHeight=1080&scrWidth=1920&ship=&tz=8&v=20.8.v.1 | 192.243.59.20 | | 1.6 kB |
URL heedetiquettedope.com/wsf1nit26j?adb=y&dev=r&ibsb=98&key=7ff94e9461629d2f54ff14725863196e&kw=[%22popular%22,%227%22,%22days%22,%22-%22,%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/popular/&res=7.31&scrHeight=1080&scrWidth=1920&ship=&tz=8&v=20.8.v.1 IP192.243.59.20:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (755) Hash696c506dad6a354b4716a888b1ef46d2 6a79abc50cfe713cc9f67c507e87e4119cf63f4b 12709e083c858109a9bd31a5b0381284c6a9572c2f91fc3a4411b204a9da64d3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wsf1nit26j?adb=y&dev=r&ibsb=98&key=7ff94e9461629d2f54ff14725863196e&kw=[%22popular%22,%227%22,%22days%22,%22-%22,%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/popular/&res=7.31&scrHeight=1080&scrWidth=1920&ship=&tz=8&v=20.8.v.1 HTTP/1.1
Host: heedetiquettedope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 22:55:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=14217017; expires=Sat, 11 May 2024 22:55:09 GMT
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNDIxNzAxNywiayI6IjdmZjk0ZTk0NjE2MjlkMmY1NGZmMTQ3MjU4NjMxOTZlIiwic2lkIjoiIiwiaXNpZCI6MSwiYXNpZCI6MSwiemlkIjo3MDM4OSwicGlkIjo2MDIxOCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjoyOCwicHQiOjQsInBrIjoid3NmMW5pdDI2aiIsImNwa3MiOnsiMjkiOiI4NmJlNzdkNjI2Y2I2NGM4ZTgwNmE5YjQ3ZjhlMGQ5ZSIsIjM0IjoiNjU4NTg1YjY0MGJlOWU2ZmU2MmE1MjVkN2Y1OWE0MDcifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOnRydWV9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vb25lamF2LmNvbS9wb3B1bGFyLyIsImFyIjpbXX19.NXFUZu1i-8MB1mS_nnCekGb5P6ZzanObJCbI3m1Pt78; expires=Fri, 10 May 2024 22:56:09 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 058b0b1bd0348aad89b14b903593f0e7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| heedetiquettedope.com/api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false | 192.243.59.13 | 302 Found | 0 B |
URL User Request GET HTTP/1.1heedetiquettedope.com/api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectheedetiquettedope.com FingerprintFD:28:F8:EC:3C:D1:10:60:E5:F2:27:F7:3F:9A:2D:F9:EC:23:52:D8 ValidityMon, 06 May 2024 08:02:44 GMT - Sun, 04 Aug 2024 08:02:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L3dzZjFuaXQyNmo_YWRiPXkmZGV2PXImaWJzYj05OCZrZXk9N2ZmOTRlOTQ2MTYyOWQyZjU0ZmYxNDcyNTg2MzE5NmUma3c9JTVCJTIycG9wdWxhciUyMiUyQyUyMjclMjIlMkMlMjJkYXlzJTIyJTJDJTIyLSUyMiUyQyUyMm9uZWphdiUyMiUyQyUyMmNvbSUyMiUyQyUyMi0lMjIlMkMlMjJmcmVlJTIyJTJDJTIyamF2JTIyJTJDJTIydG9ycmVudHMlMjIlNUQmcHN0PTE3MTUzODE3NjkmcmVmZXI9aHR0cHMlM0ElMkYlMkZvbmVqYXYuY29tJTJGcG9wdWxhciUyRiZyZXM9Ny4zMSZybXRjPXQmc2NySGVpZ2h0PTEwODAmc2NyV2lkdGg9MTkyMCZzaGlwPSZzaHU9Y2YxZTIwMDIyOGQ0MmMzNTFkMGE4ZmJhZTUzNWNmNmE5MGU4OTViMGI1NjU3MTA5YmY1MGZkMzhmYmNhZWQzZjE4NzM3ODk4NzUzZDg4ZTkwMjEyNzk1MmVhN2QyMDg3OTBmMDExZDUzMmE0ZGU2MGY0MjRhNTkyMWRkOTZkYjVlYmMzYTFkYmNlNDUyMzhiODc2MzRkZWE0MmY5NTUwZjg1ZjIxYTAwZTViZmQ5ZTk1MDAxODY3NTliMTRhZCZ0ej04JnY9MjAuOC52LjE&uuid=&pii=&in=false HTTP/1.1
Host: heedetiquettedope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heedetiquettedope.com/api/users?token=L3dzZjFuaXQyNmo_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0xNDIxNzAxNw
Cookie: u_pl=14217017; ain=eyJhbGciOiJIUzI1NiJ9.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.NXFUZu1i-8MB1mS_nnCekGb5P6ZzanObJCbI3m1Pt78; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 10 May 2024 22:55:10 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://holdhostel.space/?6622842d7176c&ag_custom_domain=14217017
Set-Cookie: iprc02d45aa419b52f8ed89b0ec4c28ff367=5188702; expires=Sat, 11 May 2024 22:55:10 GMT
pdhtkv=true; expires=Sat, 11 May 2024 22:55:10 GMT
uncs=1; expires=Sat, 11 May 2024 22:55:10 GMT
pdhtkv28=true; expires=Sat, 11 May 2024 22:55:10 GMT
uncs28=1; expires=Sat, 11 May 2024 22:55:10 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 43332060f0a4e588d0ef1559408aeae6
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/notice.png | 172.67.163.114 | 200 OK | 36 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/notice.png IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typePNG image data, 867 x 112, 8-bit colormap, non-interlaced Hash7316951b03c50f8b19d2581f000987b4 59d77ce4daafcfe93ae80690eada76cfdf31c655 06b413f4ed23c6076f4d636d99fcb1c7226caa7e78ebac86d8975b0d4ea1eaf6
GET /lg/lg_0324/land_lg_090324_en/image/notice.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/png
content-length: 36380
last-modified: Tue, 12 Mar 2024 16:34:58 GMT
etag: "65f08432-8e1c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 958
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jp3M1VLb6tp%2FMyD0IMziyDhZsHSnj3CLUm1xKQ2fKz1ZqCxJfqhb%2Fvvgus196%2Bz%2Bu1x7rsSbHRolxZylUuL15cOavrb75e%2Fo6FPmJ0lkd9f5DhMQ76dGEnSoOiLIYlAGdTn2TEvM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83ea9f185688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/1.jpg | 172.67.163.114 | 200 OK | 76 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/1.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, baseline, precision 8, 334x494, components 3 Hashd92d5c5a1127b3bd5b6cd6999abb4b85 acf50534137d4dd43930fa080d624f7f724f0cd0 9b809dcbad6e5ad1607417163f7d8e0f2dd0a374615c2d1d8d2d91b74793822f
GET /lg/lg_0324/land_lg_090324_en/image/1.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/jpeg
content-length: 75575
last-modified: Tue, 12 Mar 2024 16:34:56 GMT
etag: "65f08430-12737"
cache-control: max-age=14400
cf-cache-status: HIT
age: 958
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cHf0yU%2BiatyE6L%2F%2FfvvecykF0t4iKoEttd0Bfvhewxxv68%2BiJSD2gM3ZoTzub%2Bip5h417Q3a9%2BMZMYYh4gpw5DdVmFNq7omlmcuIZNPtt1AcatF9EHD4MIHCiI5O2pcGXOSwe9qP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83eaaf1b5688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/2.jpg | 172.67.163.114 | 200 OK | 63 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/2.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, baseline, precision 8, 334x494, components 3 Hash8f273547f5dedfd0f5e4874d085f909c fee16db489d5f992c20897686c4b300dc7813c16 6a45bc1e1d44d11f8d6e340e80c0f020a9cbe9544fe7d107b022fe8534aeda30
GET /lg/lg_0324/land_lg_090324_en/image/2.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/jpeg
content-length: 63244
last-modified: Tue, 12 Mar 2024 16:34:56 GMT
etag: "65f08430-f70c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4590
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0eMinAY92F6jXXY%2FVN3Eq3pB%2FBraYbZ40%2B2vvDldMkcH25q670NF8t6Ius360ozNh5QB9%2Bjrc2iFtYXByNPTejD0QE%2Bp%2BJzkc75WJ%2BCJMZVDvm9PYJQfl43jiM8dsDPpYdifeWmj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83eaaf1c5688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/3.jpg | 172.67.163.114 | 200 OK | 68 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/3.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, baseline, precision 8, 334x494, components 3 Hash520610908474b4b5e31b221344ef5a7c 5e6cdc0a25ae20c44e132f24b1e9dc88dbe1dad9 1e3f6bbed20302cba9858b78afb0bf0db80b26fd35c7ee314985489252221dad
GET /lg/lg_0324/land_lg_090324_en/image/3.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/jpeg
content-length: 67488
last-modified: Tue, 12 Mar 2024 16:34:57 GMT
etag: "65f08431-107a0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2213
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sGaJOPlr3ItGPgtrO%2BqkepVM%2BpslLt3N9UzuTXisMKEGt7BU4s4Km0Wx4QsKoaGvr9GIdNi835JNEiBIowDMeIDTNU4FzAVApASymj5zqH8foUMxCNTJI8ALfoYTrcpxX%2F2E98Do"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83eaaf1d5688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/4.jpg | 172.67.163.114 | 200 OK | 69 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/4.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, baseline, precision 8, 334x494, components 3 Hashfae1701ccce2f3ec4d4540333662d24a ad3a4b2ca3860f4ae4c84cb68bfd5f8360c644d1 d91303ba17e80a231cd3e32c4ce70231ac8617b4c9b0f754c734941976ee923e
GET /lg/lg_0324/land_lg_090324_en/image/4.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/jpeg
content-length: 68842
last-modified: Tue, 12 Mar 2024 16:34:57 GMT
etag: "65f08431-10cea"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3571
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eN7xluUNJ66OVvYtSYu8vlG9yy35gDWNXpNrzVF2L9bN9r6vZB6eHP0%2FpoNZivyAAoqvf2l%2FROwQT4QAdIldjwXDGoDMYZ%2B5Tj7YQG6sVDc3jd4ngc%2FWU5%2Bu2nS%2FDhC3dNhJeAX%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83eaaf205688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/button.png | 172.67.163.114 | 200 OK | 12 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/button.png IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typePNG image data, 345 x 124, 8-bit/color RGBA, non-interlaced Hash72ac404291d1849aac0aa1330297e7df 9206af27feba8f502823472c7a73e8f4fe0437c5 750619c204c2d4eb7654f9f7d7a8c34c57333b95214168ec43065a2d58744135
GET /lg/lg_0324/land_lg_090324_en/image/button.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/png
content-length: 11908
last-modified: Tue, 12 Mar 2024 16:34:58 GMT
etag: "65f08432-2e84"
cache-control: max-age=14400
cf-cache-status: HIT
age: 618
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YyyFUBndE0JdvEz4zmda2eAclBPXHnz1BGAok1gUYDxmHCpQs7JKqLPFRynXfsGtNBiEj5yPRdz03FO07%2FuZEtZgKKChtj%2BlUYpDXY%2Bbx9owEvvX0uOKRwbjxkAfT02evkhXUWuQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83eaaf235688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/scripts/main.js | 172.67.163.114 | 200 OK | 7.8 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/scripts/main.js IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJavaScript source, ASCII text, with no line terminators Hash7d34f846662d075cf9776018c9168a7e f3f5f181061268bb7e4bc326dbaec7f2c84d7857 adab57bc821cebfedc845c7b18ca9f55287eff4ef3a11f7f9dd5eda572418628
GET /lg/lg_0324/land_lg_090324_en/scripts/main.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:02 GMT
etag: W/"65f08436-124"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4590
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dq%2BSKK62v7TVzV2WLSh99c4coKmQmUsE2hpZOJRUK1qZ96%2BtCWWcGJvtsTjhxf%2BxfOe0F3GJTldZf019436Q1zwauB4g6z%2F9si1MDwaJNE1VschqN1CFQewXXHOalSyOw3BWkzq0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83eaaf255688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/libs/jquery.min.js | 172.67.163.114 | 200 OK | 39 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/libs/jquery.min.js IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /lg/lg_0324/land_lg_090324_en/libs/jquery.min.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:01 GMT
etag: W/"65f08435-1538f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 702
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZI6XZZt%2FZt2n5SlJAnYozl6ZYhgG%2BgyQ5uyuIsOnjzSLZDRiIaZS6JORcqjXAdIAk2%2B9BERuxt6fkThHU9ZHdH58R%2F%2FI3nMQxOieubhuGf32ya7tPCzfWAzZZV2bIaDRiJ9c4KwY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83ea9f0e5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/bg.jpg | 172.67.163.114 | 200 OK | 145 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/bg.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Size145 kB (145065 bytes) Hash611931bc9b4d5e585ab793f225e4f616 a141f65f4cbf210f42593cfe8508255cca9cc969 35210bab807a9ba2c348e212da0c4b44fad8dfe64735d9b8ae9f3bf3238b1c91
GET /lg/lg_0324/land_lg_090324_en/image/bg.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/jpeg
content-length: 145065
last-modified: Tue, 12 Mar 2024 16:34:57 GMT
etag: "65f08431-236a9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4501
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GA2knKYKGoV%2BRb%2FUXVkh%2BKX%2FoA3%2FReQrK7r4AiPdcFEioUllNEra%2FuVreuY%2FnaAsBNn8ao%2BrvKcRFdt%2B4ZwriyTtkLf56BpPVcDWIs8jDNTLdIaq%2BICogaqlaPzLkPYgSQv8Ru3R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83ecd8eb5688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/fav.png | 172.67.163.114 | 200 OK | 1.4 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/image/fav.png IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash10c5dd857fd3653492ef5eeaa86cd48b 193484a907a40d7b145af2136ef83bef593d2f21 a689201508b9dc7b2cc3049c7d89947f96a19790411506ecd6eb1875374fe329
GET /lg/lg_0324/land_lg_090324_en/image/fav.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: image/png
content-length: 1425
last-modified: Tue, 12 Mar 2024 16:34:58 GMT
etag: "65f08432-591"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3803
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EcwfTf3ZGalUnR%2F0QRBjUdeordh8V0RMSk%2BDA8AkUZlcwgG69qYngsArIokVlE3COJXQcKuyGdEZFmw5ZeQWCS8Uz%2BaFHx6beBoLJ1R0QxO%2F1VVBku%2FYlcyMajPg%2FLBg9gANO0L9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83ed09085688-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 | 172.67.163.114 | 200 OK | 6.3 kB |
URL User Request GET HTTP/2theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 IP172.67.163.114:443
CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeHTML document, ASCII text Hash6147c4d08a758445d3427dc89bc21d1c 63dc62a1940a65af22fadbbf7ff8c499c814e67d 887bc4ce0905a3feeedd02724d3a828a8bf2b4901139114a19cac3f35260fbfa
GET /lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heedetiquettedope.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ItGNdFYa1vQUCXXUFtU8vpizhwNlzzJk%2FH1yUtC%2Bz%2F1bLsC4vTgQpr%2Fd%2FN6rVc8txYHqu870I5MlNKAhVYsJBXBE1F3%2B0nP4BX638EmMUoycQrqq9fBfDUU7CL%2F%2BT29vTHY3iWFY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d83e8cbf65696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ln.gamesrevenue.com/px1.js | 5.161.79.44 | 200 OK | 8.9 kB |
URL GET HTTP/2ln.gamesrevenue.com/px1.js IP5.161.79.44:443 ASN#213230 Hetzner Online GmbH
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subject*.gamesrevenue.com FingerprintB2:A3:99:AD:22:46:FC:93:41:E9:59:40:F5:09:B0:23:B7:5B:FA:67 ValidityWed, 13 Mar 2024 09:55:06 GMT - Tue, 11 Jun 2024 09:55:05 GMT
File typegzip compressed data, max speed, from Unix Hash702d76319b3789801f0027c495540b7a b64fe08c81ae722a005da224644a721778de7cbf f115b3b95a90d60c1dd8876b2354557e49e156886482a9a9b382156439ae3941
GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 22:55:10 GMT
content-type: application/javascript
last-modified: Fri, 22 Dec 2023 10:12:56 GMT
etag: W/"65856128-3b88"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/awpx_click.js?v=005 | 172.67.163.114 | 200 OK | 10 kB |
URL GET HTTP/3theeverydaygame.com/awpx_click.js?v=005 IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
Hash7aeb87811ad3a82fde3e2783544819ee d1d9174cbcbb1abdccee6841f170ba21f899925b 7fff603702e9bea03cf47ba47947bb7f8655eb7fcb1c8f7091e9a38d8f5d949c
GET /awpx_click.js?v=005 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 09:49:36 GMT
etag: W/"6409abb0-5d2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6848
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OcyCFvKq%2FuCQdsbfg85%2BMZqimPgiaZOuVKSTxDl4KOBD6aHmDMv0dGu6cdmC44%2BehQgWN6dw6GnB%2FzLUjdjYK48VcmpfUw5XqGJP1U%2BfljyQG3FhOM1dpPYVdBFDzneLfGqL%2BDeF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83ea9f175688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_090324_en/css/main.css | 172.67.163.114 | 200 OK | 2.1 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_090324_en/css/main.css IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeASCII text, with very long lines (2093), with no line terminators Hash31823cbd645e0ba6fbf4dac6cf9d66c4 f15b3783e3646bcab7ec0be83cba38cd94e2802b 101fb6b4f172f145a4e7217420dcc49d9566fae074d7eaccf190fece72db2236
GET /lg/lg_0324/land_lg_090324_en/css/main.css HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 22:55:10 GMT
content-type: text/css
last-modified: Tue, 12 Mar 2024 16:34:55 GMT
etag: W/"65f0842f-82d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3064
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=beugHv2ypug52u7eLDkSYBSP5r%2FuY5%2FWjWQM6HIhLfKG3o0Q9zq6liDl0TWY2jIcUgvL2pP66L3kAm3dtP1MraDrdewD5%2B8oqeoRK8JkH5Gaz9VhPtIwkPmy3rNhxQFlKrDeTjck"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d83ea9f0c5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| holdhostel.space/?6622842d7176c&ag_custom_domain=14217017 | 104.21.76.98 | 302 Found | 1.4 kB |
URL User Request GET HTTP/2holdhostel.space/?6622842d7176c&ag_custom_domain=14217017 IP104.21.76.98:443
CertificateIssuerGoogle Trust Services LLC Subjectholdhostel.space Fingerprint30:62:41:BC:7C:17:FC:EE:0D:5B:5B:39:AE:06:1C:8A:08:6D:67:D6 ValiditySat, 20 Apr 2024 18:12:17 GMT - Fri, 19 Jul 2024 18:12:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?6622842d7176c&ag_custom_domain=14217017 HTTP/1.1
Host: holdhostel.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heedetiquettedope.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 22:55:10 GMT
content-type: text/html
location: https://theeverydaygame.com/lg/lg_0324/land_lg_090324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=14217017&bnid=land_lg_090324_en&land=land_lg_090324_en&crID=2503010&zID=100169
set-cookie: c_2022b6829ad3bc8a5d74a4bfe5cf4db8=1; Expires=Sat, 11-May-24 22:55:10 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
z_dd834028817d054ef3568898fa07ee8f=1; Expires=Sat, 11-May-24 22:55:10 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4hUKN4kaNQjeh5OC9ha5zqdg%2BIAdDBIFmkRHEsni3OyO86g%2FOcpEfyloW2eFF6fpzC2FpOAtiRxW9COfolVkBH1t%2FvFUTqwnKhy%2FPm2czpzIaFMiSV9mmSwuh6TgyhoOZgTg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d83e84cb556c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|