| cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js |  104.17.24.14 | 200 OK | 27 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js IP104.17.24.14:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 716761
expires: Sun, 13 Apr 2025 23:23:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iuxKYkSElwmbUWc41ep%2F84q4b6ewGqxMfASk3%2B04Y596IZ%2B5g07oVS179GLXUIw%2BPGcL8G4JcSnqUsYrcs0UXjD0leY%2FagZtfibV8lWHDTly9JK9j4CERrn%2Bh0bBMnMzbc%2ByweSj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87919a519d7956a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css | 104.17.24.14 | 200 OK | 23 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css IP104.17.24.14:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Hasha549af2a81cd9900ee897d8bc9c4b5e9 c5ac1dee961cb59a045256ec203f69e317872f7c 3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8
GET /ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css; charset=utf-8
content-length: 22709
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65d4c5f6-58b5"
last-modified: Tue, 20 Feb 2024 15:32:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1662878
expires: Sun, 13 Apr 2025 23:23:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0CDh5zP4QuImJvx9ZLsksaMuLrLSu%2BHOzgneafU71LgtZwnCxLAIkkdHE5mqsT5RmKnUemYYV7ijn47qCnLNAD58GEGkam8sFXRpACJZiKP4hg%2FwwYt9qYD49CJydoSaz%2FLzAwsY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87919a51ad7d56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js | 104.17.24.14 | 200 OK | 36 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js IP104.17.24.14:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (620) Hash4d456e43291a691699c12a9027f1f13a e2e691b338e64a94e68be7f4d2aded08fcca0759 9a4a11a15db88d5fab08f59c1c34796b03f1f15bb3cc928dd226e1c59f7f59a3
GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 36257
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65d4c5f6-8da1"
last-modified: Tue, 20 Feb 2024 15:32:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2778643
expires: Sun, 13 Apr 2025 23:23:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8viG4n%2FhLmaPpfL5f9%2F9BWqrmHJ794Nnghz5H5K1WkFauFtpFfKgM8BUq1bjUqUwYSYmHo7JPaCKxI0fQnMoHF%2Fxbo58DvESv4oF1BACEKzjTBQfYsunADmyyF%2BIb6iIPEDNegCr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87919a51ad8256a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css | 104.17.24.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css IP104.17.24.14:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (59119) Hashecd507b3125edc4d2a03aa6ae5d07da9 a57ee68d11601b0fd8e5037fc241ff65a754473c 99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e
GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 708087
expires: Sun, 13 Apr 2025 23:23:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rkq24VDOyhcMm8yESLcNgHBxitxaCDBWoe3FjqT62aIgv0C138Tw8gg62Cz23bN343Dn%2Bny9ooEpFSN%2FPWCSDztERGhKIzhMimUe%2FLzLzwhrQTuWFNoBftxIovYDk5fWQuzaV%2B13"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87919a522daf56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/4.jpg | 104.26.6.108 | 200 OK | 2.5 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/4.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hash32ac4d03af0ed3e0ecae362ee2aa7283 d76aaf7afd7e64b85bf3f6cd92530150ebbd3b62 4ba90609efbf3e11565b8b9005e57d80f53a8837ce693c9023ccb0626461d212
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/4.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 2542
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-9ee"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BhdG21FvHQDiysx3Ptduzls9D9YJqOH8fU2SkivGj%2FS1C1KorjR6YPZda%2F6MDVDo%2FOUvWcYoo5%2F3%2F%2BsyVeSw2PLLQ9%2BRN1H7DHo0l5pSdCpMmxMndL%2B1zrVksK8uAgNVsSsdnqxf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53ac9b5697-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 |  142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.67:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 77351
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.67:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 24964
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/6.jpg | 104.26.6.108 | 200 OK | 3.0 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/6.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hash159416e360a1ce596be4d73ada5f77e9 d86a4c7144208366d5fb501eb92106043b86995c 01ff0a6dfebce308d517e495941065eb38cc8b37a7b2bf67df272aea25f69c40
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/6.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 2997
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-bb5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FgEpJ%2BU8XOyi09o2VvjvkpmClNDD7LazJ5ZOgVa%2BfvnZ8XNiP62rznhgOU6N7lV6xmounyjMbGtCqg%2Fu%2FJpBRK6oaJzVbSULxnlz13k3AP2THI%2F9j4yeddaefLMqq0KY92A5neam"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53bca65697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/5i9ndyew65.png | 104.26.6.108 | 200 OK | 28 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/5i9ndyew65.png IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typePNG image data, 480 x 350, 8-bit colormap, non-interlaced Hash455daaeb94d9644a50c0a745c3df20c5 336555d2e1a2e03851b5bb90183f2770970365a4 6629e831b8fb47bdd5226ab0a2ce9759647bba6cfa377aab46d45801ceb5b185
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/5i9ndyew65.png HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/png
content-length: 28217
last-modified: Thu, 18 Apr 2024 09:31:09 GMT
etag: "6620e85d-6e39"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rhR8LiJcvYO2%2Fow3wqpVovQI2lWd0hVoOAuk6quld4SW9ZWvhBmCy400bVw41gto3OoeD82J3w7LssBfywQW5SugmrwhdCcLMj8KZBxogTKkUDASRb40T1SzHdNOpyBFnDy6D%2B2t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a535c755697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/sur/sur3.css?v=1.13 | 104.26.6.108 | 200 OK | 2.7 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/sur/sur3.css?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
Hash3f9401a877cb75e550c646959ecd1343 038fbca8d375d51e01c312f19d18c34b93e17762 fdbeabb5b3aa977fa4416df3852acbf9fadf5755172a059961dc1ba72bb1d345
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/sur/sur3.css?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-18b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l6QPeBdDbpGEjXlxodNSLxQ02ajzlIyWTD7ETuWUptQ2z7Hcfjvgxp%2BOLStLi7iPRS2AVWdbanG%2B4OW0nUM%2F0E4do5MsTjvYoslLqeOdO2CjpCD3gnHzkTr1f4m3QgcBwpCFiiLy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a517ba95697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/like.png | 104.26.6.108 | 200 OK | 466 B |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/like.png IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typePNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced Hash0d9c764991a1ebba259ce1afc777c756 fedbba216589a0a40fabb2e0cb24911e663e679e 7adac1888791ad42f547c97c9c9dad37faee15dfb5e76f20eabc8a0a0b6168e9
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/like.png HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/png
content-length: 466
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-1d2"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7Q3zS7wYghoCMg%2BnBbY92gahwPY9cjmIgYhAmiPGJ96MSG0I0cme%2Bo7TsjNt1eWRCoCHrY57mvrVJ7mh5pMsbPBksVhU578IJaqWgkKuNEnElSx9xIXpvQuudAPPkf%2Fe5wmU5Lj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53ac9a5697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/1.jpg | 104.26.6.108 | 200 OK | 3.3 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/1.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hash496770fecdcf0a823ea2897217f288e9 c05e944b516786a6df67aa923e0170f7c8e86921 18f551911c68e079ef629648f47ad743c99d47e9d5c0d5a475c7392a1f0ab248
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/1.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 3286
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-cd6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zprUAp7CNikYYKK3kzp6c1omLQVmLBGurp4%2FyyKE0MRm03cbQD5ZEZJmMacvp%2FonTTvcHu0mbsIa6rJGs1FGzC7%2FfqJydBoU60NyCmgZgRq8r8v750dR4U7oN%2BoRPhRxpAetfnld"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53ac995697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/survey/survey.min.css?v=1.13 | 104.26.6.108 | 200 OK | 2.8 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/survey/survey.min.css?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
Hash6c9276f3d527ee8da644994a6ce48cca eb107297ac31f1410aa5ba830d8035ccd2ffa837 c714c752c8a7825f5993e5507190117ccf63ade68d44d455efcdd81c85ac7d48
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/survey/survey.min.css?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-575"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNbELRxTNfjPRFl1qGAT%2FCjTgXynuSguUmRBvVAhh1L2jS%2BQiuJHfd3d07g0EmKKe4Yk%2FolNNKTnIrKrJTnic3uIvPuWrudZxlYhZ%2BreBGVNVKaWO0%2FeOHlfsgBDo4Bj0E88jNex"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a517baa5697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap | 142.250.74.106 | 200 OK | 1.6 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap IP142.250.74.106:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hashdf9610289cd9b057bc63243ba1d08943 2726b94b6263c42792182bc2653a41c3802be7bc e2482c46b13d005dc12aeaa084f4a70fc29008471b9656bfcef2bff0d471ea70
GET /css2?family=Roboto:wght@400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 23 Apr 2024 23:23:41 GMT
date: Tue, 23 Apr 2024 23:23:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/surveys.min.js?v=1.13 | 104.26.6.108 | 200 OK | 4.7 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/surveys.min.js?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3093), with no line terminators Hash2c0d1ebb920c04a4a2687532ff5ecb26 220cdd2e88258bf3b1318d6a8581d5f45e99c08c d280128d65ef9533b5237c67d89064bfd9910fc31c8fb024782db20b9b78f0ed
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/surveys.min.js?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-c15"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ToDuskXRyOxsZ1laDj46iKwj8xiWGJInuNyAYQKyZ13Xzm6kv5xFNSCByIvSMRbwEwCbcT09zDfkyTC7LRx4Khgk5LCQsY7vXgZ%2F%2Bg02EKTsqnFjFxRYv3P62FzXmEnp0AT6AZcx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a518bac5697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/css/style.min.css?v=1.13 | 104.26.6.108 | 200 OK | 5.1 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/css/style.min.css?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeASCII text, with very long lines (7963), with no line terminators Hasha5aa5afbeacbac171d2bba0908d1c399 4fe40c781bd22fb38bd5e4d664ddd7d727a49960 a1229a31c253f94264172d95933eeaacce78213fc40f58db7ebc027383b5d9de
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/css/style.min.css?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-1f1b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MD4NiqrwoPdUsC6tE%2BlpRRe0z8nSGqBLP2RrAqcZSCbvpW9fpTKpO8Ql0UTEL2c2%2BjlfwsUBQzmmt8Lzbo5DnieAX1mm%2B71PgatSt7gH6SQ8FELausC71qsDjrUnvl0%2F3o52CbsM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a517ba35697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/seasons/153/element-fly.png | 104.26.6.108 | 200 OK | 7.2 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/seasons/153/element-fly.png IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typePNG image data, 80 x 70, 8-bit/color RGBA, non-interlaced Hashc0bf8a80d0e31b6a68073099bf8d7405 4f37a7958130a601f0bb8e85a0d7968f418aba31 bd32a448f53e202e9d54ad83c8ad4e9d9fcbe98888514e122506df7840308a3e
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/seasons/153/element-fly.png HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/png
content-length: 7214
last-modified: Thu, 18 Apr 2024 09:31:09 GMT
etag: "6620e85d-1c2e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c5wys9gJXmezEQfdlV8nSO6oJl6Ln%2B7ggAIXGOjKoAj3ooWCTQvLUGNuIwYUC0onoBEdxybKM%2BWfKm7SthLUhJle1tbtkvRxDD0FHNYJqS6TZqbvcBJrOWLvaDAEZRUszM46nZ1g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53bcac5697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/7-1.jpg | 104.26.6.108 | 200 OK | 10 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/7-1.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 189x139, components 3 Hash6f2b366b8bed0d0a49ca56d1f24fbbab a8a50b29165b6d0a916e68f4c395c2c0545880bd 9d425d2ee401fde3ddf7481b9df7ce8f724b7e1f2166fedda4ba0e6a94da85f5
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/7-1.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 10314
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-284a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTBLMR5QtsyM2eVsoX9Jy%2FAHf4Q3byv3doqzEXlTDqNlXOVRBiPTVVqyXw9ZvKu7J4O6q32bAolfgFflsSKx7UHP7bNVvbFvMpjGmU4PUGdc5u8ga6pQY3kOGo2g0hJXX0nvjdpg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53bca15697-OSL
X-Firefox-Spdy: h2
|
|
| woudaufe.net/zone?&pub=0&zone_id=5759770&is_mobile=false&domain=placetobeforever.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.501&trace_id=82963871-7ea3-4304-a5e2-687b1889389e&action=prerequest |  139.45.197.251 | 200 OK | 0 B |
URL POST HTTP/2woudaufe.net/zone?&pub=0&zone_id=5759770&is_mobile=false&domain=placetobeforever.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.501&trace_id=82963871-7ea3-4304-a5e2-687b1889389e&action=prerequest IP139.45.197.251:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerLet's Encrypt Subjectwoudaufe.net Fingerprint97:B7:E3:B4:46:26:82:1A:84:6C:4D:15:C2:B7:B8:FE:0F:00:67:F5 ValidityMon, 15 Apr 2024 05:41:42 GMT - Sun, 14 Jul 2024 05:41:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=5759770&is_mobile=false&domain=placetobeforever.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.501&trace_id=82963871-7ea3-4304-a5e2-687b1889389e&action=prerequest HTTP/1.1
Host: woudaufe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:23:42 GMT
content-length: 0
x-trace-id: aaa155c0055073ea81869cf9872847f5
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://placetobeforever.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 395
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 92544464b108daa03230663ce33df4f0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://placetobeforever.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/box/box.css?v=1.13 | 104.26.6.108 | 200 OK | 920 B |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/box/box.css?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
Hash56591d9cbca8de25b9e8ed95b60d4f61 a3c74f31ce5fe4f0dc50dce291ae00ac3c14a0ff 967c2a487286ccb51d63128dfa97caae1b5dcfe39a22be90702285aed0f906c8
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/box/box.css?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-ead"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WuAWScmsySYBi%2FQYeFvcxERyMYuO13wdC3k9hqzryK1Vb9itoUV%2BkNF0ngSS8S2FLWGOpCeDgCv7F3Gjht6iC1%2FJeGkPuilW13CxAKxCI1HbHPI7ieeDoIsoCUyogUiwGfvRH%2BJK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a518bad5697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 398
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: e587dd25a373de2a74baca800867ce70
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://placetobeforever.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://placetobeforever.com/
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://placetobeforever.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashdb124a2d8fa2612d81e979b869a61edc 286af3db3ad5ec853f96c6df181f73521f1b5aa9 ec3859dc83db9586411c7bb786fec27946fb3845873eba6d6c417462aac73fc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://placetobeforever.com/
Content-Type: application/json
Content-Length: 1013
Origin: https://placetobeforever.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://placetobeforever.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/favicon/favicon_5.png | 104.26.6.108 | 200 OK | 235 B |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/favicon/favicon_5.png IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typePNG image data, 21 x 21, 8-bit colormap, non-interlaced Hash65fc2a43ae34ec0043a5133877e673c0 291ebef98ec6dbb999d1628de375247b52b0740a abacc7ab1a667a683adc25d71b2273bd638cb14a925d053c08e4c177cf225c41
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/favicon/favicon_5.png HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/png
content-length: 235
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-eb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNM7CtE6DJ9Ku3jipZFt7blRo2v%2FRPgyzjqThj%2FEbN4qA0C0QPgs1ifX3KH7OVvZrxhjLA2xyr%2Fq4gGBrzek5%2FZB733pfjSdV8CC3puXGrIVTnnb9P9q09vWvXt0R6wdk5xdktWE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a55dda45697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo | 104.26.6.108 | 200 OK | 48 kB |
URL User Request GET HTTP/2placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo IP104.26.6.108:443
CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eIXHEPl5zNJM1OxREu%2FCelCMFgIySjfnUxmo54weMEMVabgCw0mnmP5L5G9M6Y%2FRBkhM2iDYmrcCfeyJ84IbK%2BxDUlT%2BJrLYyCcGBYxT9QWwf6eGj6LlI2s0AgDiLEk%2FTlAsUjE2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87919a4e6a725697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/box_o.js?v=1.13 | 104.26.6.108 | 200 OK | 4.2 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/box_o.js?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4184), with no line terminators Hash540bfe138c793172e999f49b394ee71e d9bd4b33fc83ba9c878365eb93b214f0e8f1b44b b38ef2303ee7080d8fa982a22f79ebbfc138ac7f69bbc27f2d61ed1c9d60c7f1
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/box_o.js?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-1053"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2Fof9jqovX2B1lKKlpzqc6DxL%2Fpgb2iz98DEb51%2FaZtpEu5MWu9fRsdn1seXmV9pGnY0ltAzWNv231i9mElCqPMXCe1T9YSkeiqp3BCNnRMAz2hiEfc2J332htCmJj5b7%2F2wnB0m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a518bae5697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/3.jpg | 104.26.6.108 | 200 OK | 2.3 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/3.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hash330f92cd5307e33d2ce527894ddd43b6 f9bcd5d5afc9b8fc4dc3357ae88e548fd06b8023 0ca3bcdc244a011cff113f873678ee9de68479a7f6c7f360b171c3edbc96dd1a
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/3.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 2282
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-8ea"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=co8qwUZ6sWjIkatlXrtlmloh02jysV6pPJ7VyHMvmydRfNRyzLMJ04NZX0sadc5TGKWG4LwyNpi81ll5trNgcS%2FaYAAXlGFhAy0CWnX7KsMqOzBEUXBn2p5rG%2BZKu3P%2FVIyqwD6%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53ac9e5697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/comments/comments.min.css?v=1.13 | 104.26.6.108 | 200 OK | 1.0 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/comments/comments.min.css?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeASCII text, with very long lines (1038), with no line terminators Hash3471b1c397b0e3c7e0260710d5a8f381 4fc74a80a0f932659c40c8b8963d8fe525de49fd ee0febbabb76a8bd117697143098287cf4554865902ce18d4aa8cadbf984721f
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/templates/comments/comments.min.css?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-40e"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0yXeynTcIXevMagE6BmpWnJQlvLx9PNce1LJTQimCqCU4hYnEJJQNQx8Finq14CJ5kciFqkyxDTcb%2F%2F4aQBK49UVPnez74YqZd579SjC5ffyJrR24Nkhe%2BgdJrjxmfVc9Mm49IgM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a518bb05697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/preload_o.min.js?v=1.13 | 104.26.6.108 | 200 OK | 18 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/preload_o.min.js?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJavaScript source, ASCII text, with very long lines (17559), with no line terminators Hasha32d40b2f01f5a74c8077e46a4a8a73d 7abaeaf47545c71abc18c731d7bdfcbabcda087f b55e30ce0e6f42daacd35842c1edfc675673aa5d436a26ff8d8b796932ceda6c
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/js/preload_o.min.js?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-4497"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Siy1h4WJxl0j%2B8XO4vFIK7p5vz2bg30Zg34aaRyWcFpsZ9Ma5SmKRo6U3QFn1z7JsgM5ae4kLYpwHiak6qZM7mC0gl3J891fWQBMKLWK6t52EaJamxxCFClZRrWVorPcn8Kfkp4D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a517ba85697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/5.jpg | 104.26.6.108 | 200 OK | 2.5 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/5.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hashe5e3b6f514e114a415e560f88d5920c0 3488d33614eafc14866d4d5c575dbd2be6099c3a 182600ef12499261e2e971331530eb1caacd6c2106c4c864d158ac9c4a9a2327
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/5.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 2491
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-9bb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NoGkzFsd5qW6rx1CYQcghUOp0w8xECL8GJ6BWI7GzUI2xnbzzgDzg4m0Kk4sAAqg3wpB1ckv7S330GZXABddAV3JxSiqR%2BiCU%2FJW6uEZ%2FktgmFwvOyutmeT3ZHfPGRhZe5tD29F4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53ac9d5697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/7.jpg | 104.26.6.108 | 200 OK | 3.7 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/7.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hash9c2fa32775fffdebf00733ec18e3e341 e25e89f113c335ea1c2c4c4586844fd7d1727d28 845a5200eb01a02833e74b09ab84d6ec2aab5ee16211ee1a31b7eb6a4bb61ecc
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/7.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 3700
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-e74"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kg5fyhmAQTq5E9hEiMGRjby9lJ4ePpwdgfimWu4cxaNS2lscutNz8YLcbc3n8LYsX7Svc2TsEErbK5W0b3z%2FLPCGGJM3nNU2mEwCvrcLPOOgx2BV17BBIqt8Np7A8ACF3WYrwcZT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53bc9f5697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/particles_fly/particles.min.js?v=1.13 | 104.26.6.108 | 200 OK | 23 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/particles_fly/particles.min.js?v=1.13 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeASCII text, with very long lines (23002) Hash00debcf6cf0789a19cee2278011afcd4 8017f8b1869077db728573f1ca4684a00af69462 faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/assets/particles_fly/particles.min.js?v=1.13 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:41 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-5b44"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XioXQpkVeINL4dTOtzJFBHoUGMKgodD7ornHgk%2FRwcSk5gBO%2FqeDg19HjUFuPkt0Tw26Kyo4qc9Mj%2B5Y0tMQKOZfcSNpTyBPUmXys2spJgbLrHL7iDIj2VfuHFQ5y2lYexiP%2BLjb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a519bb45697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/sw-check-permissions-82431.js?zoneId=5759770 | 104.26.6.108 | 200 OK | 566 B |
URL GET HTTP/2placetobeforever.com/sw-check-permissions-82431.js?zoneId=5759770 IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeASCII text, with very long lines (605), with no line terminators Hash686535c4472d3a1b2f93529397abd300 131f74272eec6fe9819d587917ccf776153b66e4 38ad0f3b4884f108391ab18dfb9d0b69ca2fe3f6f7932f59a3d70aeaee087d8b
GET /sw-check-permissions-82431.js?zoneId=5759770 HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: W/"6620e709-236"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4322
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jme76pjn91GxFNWhl%2BQ%2FgWC7gFW7%2FwrXkJ3B4Yp8sHwPlfz5poGgMadbeAnMjNu2ksKPKn6OYNrBnWKBwIOlWTK9tHvmkCpVcCGoYwCfi1Kt33zAPE%2BteLjFa%2BR0pVXfz0bGNI%2Bv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a551d5b5697-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| woudaufe.net/pfe/current/micro.tag.min.js?z=5759770&sw=/sw-check-permissions-82431.js | 139.45.197.251 | 200 OK | 37 kB |
URL GET HTTP/2woudaufe.net/pfe/current/micro.tag.min.js?z=5759770&sw=/sw-check-permissions-82431.js IP139.45.197.251:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerLet's Encrypt Subjectwoudaufe.net Fingerprint97:B7:E3:B4:46:26:82:1A:84:6C:4D:15:C2:B7:B8:FE:0F:00:67:F5 ValidityMon, 15 Apr 2024 05:41:42 GMT - Sun, 14 Jul 2024 05:41:41 GMT
File typeJavaScript source, ASCII text, with very long lines (36570), with no line terminators Hasha20bcaec96bee3dbd00db263a10489fd 2b938c0fe930489aab17567f78269f42d43e0555 b09a1860a090fc1aa1b482392060a3bb197d25044275dda41fdce5770ba758ba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?z=5759770&sw=/sw-check-permissions-82431.js HTTP/1.1
Host: woudaufe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 08:30:07 GMT
etag: W/"66222b8f-8eda"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/8.jpg | 104.26.6.108 | 200 OK | 2.9 kB |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/8.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3 Hash3bff8ec56932f1b81cc4b04844f06f31 c2393919f9f1900783aaf770bb9535d264f5d408 b0c40a3ef77aea7e48c710fa701af1d074224846ebf30cd9d82b7596c15da2c1
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/8.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 2891
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-b4b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w8RzQCQX1fwpCU%2FMdNCyEnASpqcV0%2BIBxebrOo1MwSOYgDh7UYpkjrqMbR0qkPwpdZ51%2BRe4woiZMhAbEYFPcymMCMq4d6%2Bu5QE5RYGGJRARea%2FNrQirtnnLC4q1kL2OftC2ujuS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53bca85697-OSL
X-Firefox-Spdy: h2
|
|
| placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/2.jpg | 104.26.6.108 | 200 OK | 875 B |
URL GET HTTP/2placetobeforever.com/assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/2.jpg IP104.26.6.108:443
Requested byhttps://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo CertificateIssuerGoogle Trust Services LLC Subjectplacetobeforever.com Fingerprint9C:32:A0:70:8D:4B:67:57:43:DA:0C:0F:08:9E:20:30:E4:BF:19:0F ValiditySat, 02 Mar 2024 08:40:00 GMT - Fri, 31 May 2024 08:39:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x40, components 3 Hash5c6543cc0c9a84d141405bf0dfbc570f 4d43ff3884fa8edcb9adfa053525e912bb1baa2f 73cb358bf47ed149f8fd7e3eada678166cfab77538c313ba72cb6e38d13253fa
GET /assets/p092b0/mxtar249-wlmrtmoneda1g2ke3m/750/comments/global/1/2.jpg HTTP/1.1
Host: placetobeforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://placetobeforever.com/page/1g2ke3m/750?cost=0.001000¤cy=usd&aff_source=6343319&request_var=7vnT1THPaz&aff_transaction_id=806776621649371136&campaign=ThQhKvo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 23:23:42 GMT
content-type: image/jpeg
content-length: 875
last-modified: Thu, 18 Apr 2024 09:25:29 GMT
etag: "6620e709-36b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LuuQbiTd43rgv91vxLd4Nt%2BSpm1Kc0J3z1WHmkp4JsX4sRwiMEQo4IY3AtHoWw1FThOIjS%2FmYdXlgWK5b0oRQhxxzRQia0Hh3NpHIu6DJUYQKLLcDc0k%2FqvCUtzbYBS5zJ%2BQW14s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87919a53bcaa5697-OSL
X-Firefox-Spdy: h2
|
|