Report - track.freespicy.games/click?pid=8902&offer_id=324&ref_id=4fe3b17c5681b895afc02665c50ecea7&sub2=4

Report Overview

Submitted URL
track.freespicy.games/click?pid=8902&offer_id=324&ref_id=4fe3b17c5681b895afc02665c50ecea7&sub2=4
IP
34.90.14.205
ASN
#396982 GOOGLE-CLOUD-PLATFORM
Submitted
2024-04-24 12:42:30
Access
public
Website Title
Family cheaters
Final URL
playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
38

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
track.freespicy.games	unknown	2021-11-09	2023-08-11	2024-03-10	550 B	654 B	34.91.145.202
track.affstreck.com	unknown	2022-11-24	2022-11-28	2024-03-10	709 B	1.3 kB	18.156.93.177
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-24	448 B	29 kB	104.17.24.14
playfulcheaters.com	unknown	2024-01-26	2024-01-28	2024-03-10	14 kB	5.4 MB	134.209.88.167
adverster.b-cdn.net	342698	2016-04-25	2021-09-03	2024-03-28	3.3 kB	1.1 MB	138.199.36.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed
2024-04-24	medium	playfulcheaters.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js?_v=20231220153126	90 kB	2023-03-10	2024-05-05
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js?_v=20231220153126 IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 04:24:46 Last Seen2024-05-05 15:54:09 Times Seen17607 Hash cf2fbbf84281d9ecbffb4993203d543b 832a6a4e86daf38b1975d705c5de5d9e5f5844bc a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575 Loading...

	adverster.b-cdn.net/scripts/backOffer/backOffer-latest.js?_v=20231220153126	1.2 kB	2024-01-05	2024-05-04
Pretty URL adverster.b-cdn.net/scripts/backOffer/backOffer-latest.js?_v=20231220153126 IP 138.199.36.8 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-05 06:18:59 Last Seen2024-05-04 20:32:14 Times Seen15 Hash 6751dd28d56f7f2bb3c10b5a4f89f496 432e85e222a2a2dd7e4ac852c67bd09b7e555429 b2aaafc50285e9b3a2e45a6f1517ba2a877b01c1d3dc2319fb0d92de3070c6e7 Loading...

	adverster.b-cdn.net/scripts/secondOffer/secondOffer-latest.js?_v=20231220153126	1.4 kB	2024-01-27	2024-05-04
Pretty URL adverster.b-cdn.net/scripts/secondOffer/secondOffer-latest.js?_v=20231220153126 IP 138.199.36.8 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-27 12:59:10 Last Seen2024-05-04 20:32:14 Times Seen12 Hash a2b0e9b0e1c68510916b37fdf425c796 c1956b52d364c0b50bb63f43746ecec33eccee66 c7d7e6b78245539e1e956fa9e115080aa3209ef26fdbb614228248c0845e9c96 Loading...

	adverster.b-cdn.net/scripts/nextOffer/nextOffer-latest.js?_v=20231220153126	463 B	2024-01-05	2024-05-04
Pretty URL adverster.b-cdn.net/scripts/nextOffer/nextOffer-latest.js?_v=20231220153126 IP 138.199.36.8 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-05 06:18:59 Last Seen2024-05-04 20:32:14 Times Seen16 Hash 9c081b288e15f040c277f754deb47e54 bd00cf5f7fb1ad992aca446ef04690c2255842ec 5e1a94a099e02ac628cb3da1c4555a33db2acd6bcff2e2648e8ad6e67c3987e6 Loading...

	playfulcheaters.com/pre/FamilyCheaters_v19_1/js/main.min.js?_v=20231220153126	250 kB	2024-02-24	2024-05-04
Pretty URL playfulcheaters.com/pre/FamilyCheaters_v19_1/js/main.min.js?_v=20231220153126 IP 134.209.88.167 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 21:22:26 Last Seen2024-05-04 20:32:14 Times Seen8 Hash 482f4c489d36c2d252dc4d501d2c11e3 5a91d958f885b6af4e86babb57f7284392ff8b66 05f2eae33cb82fa7a1b5bc26e6691a07f0d6822bf8e4461402403f3e88318495 Loading...

HTTP Transactions (29)

URL IP Response Size

track.freespicy.games/click?pid=8902&offer_id=324&ref_id=4fe3b17c5681b895afc02665c50ecea7&sub2=4

34.91.145.202

302 Found

0 B

URL User Request GET HTTP/2
track.freespicy.games/click?pid=8902&offer_id=324&ref_id=4fe3b17c5681b895afc02665c50ecea7&sub2=4
IP
34.91.145.202:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Certificate
IssuerSectigo Limited
Subjecttrack.freespicy.games
Fingerprint83:0C:9C:AF:D3:54:96:61:C7:F0:74:E6:29:B0:B6:E1:36:B5:7A:E9
ValidityFri, 10 Nov 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /click?pid=8902&offer_id=324&ref_id=4fe3b17c5681b895afc02665c50ecea7&sub2=4 HTTP/1.1
Host: track.freespicy.games
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-length: 0
location: https://track.affstreck.com/ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa?tsource=affise&offer_id=324&advertiser_id=608ac49f92ffdb7fffaa187a&affiliate_name=AdsyTech&partner_id=8902&offer_name=Smartlink+adult+games+-+CPL&filter=&clickid=6628fe1aa52ab6000106e4af&aff_source=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=6628fe1aa52ab6000106e4af; expires=Thu, 24 Apr 2025 12:42:02 GMT; secure; SameSite=None
afoffers={"324":1713962522}; expires=Thu, 24 Apr 2025 12:42:02 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

track.affstreck.com/ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa?tsource=affise&offer_id=324&advertiser_id=608ac49f92ffdb7fffaa187a&affiliate_name=AdsyTech&partner_id=8902&offer_name=Smartlink+adult+games+-+CPL&filter=&clickid=6628fe1aa52ab6000106e4af&aff_source=

18.156.93.177

302 Found

0 B

URL User Request GET HTTP/2
track.affstreck.com/ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa?tsource=affise&offer_id=324&advertiser_id=608ac49f92ffdb7fffaa187a&affiliate_name=AdsyTech&partner_id=8902&offer_name=Smartlink+adult+games+-+CPL&filter=&clickid=6628fe1aa52ab6000106e4af&aff_source=
IP
18.156.93.177:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjecttrack.affstreck.com
Fingerprint98:EB:57:A4:D8:E2:4F:5B:BF:D4:A8:9D:2F:5E:5C:A7:4D:A2:BB:23
ValidityTue, 19 Mar 2024 06:48:16 GMT - Mon, 17 Jun 2024 06:48:15 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa?tsource=affise&offer_id=324&advertiser_id=608ac49f92ffdb7fffaa187a&affiliate_name=AdsyTech&partner_id=8902&offer_name=Smartlink+adult+games+-+CPL&filter=&clickid=6628fe1aa52ab6000106e4af&aff_source= HTTP/1.1
Host: track.affstreck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
pragma: no-cache
set-cookie: ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa-v4=JoqtqaTMX111GZkXyVUXJqHzhC8cWaEm3NXBw2EFc5k; Max-Age=86400; Expires=Thu, 25-Apr-2024 12:42:02 GMT; Domain=track.affstreck.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=2DKjKquOKU8KxI3sY6BWBsytgo6upf5f5HwU2QNS8r5cWz%2ByVBlzwoRt2su25A5w7DoCwAnsvJi6DbCf4ln%2FlkXrlWFPsG6R3X0JJpU88N9vgjpwcGwoBvXJeeGBv54ERowQoC6xH%2BkrKY%2BDubFdKw%3D%3D; Max-Age=31536000; Expires=Thu, 24-Apr-2025 12:42:02 GMT; Domain=track.affstreck.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js?_v=20231220153126

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js?_v=20231220153126
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
28 kB (28112 bytes)
Hash
cf2fbbf84281d9ecbffb4993203d543b
832a6a4e86daf38b1975d705c5de5d9e5f5844bc
a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575

HTTP Headers

GET /ajax/libs/jquery/3.6.3/jquery.min.js?_v=20231220153126 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playfulcheaters.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 28112
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "63a24ddb-6dd0"
last-modified: Wed, 21 Dec 2022 00:05:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1094385
expires: Mon, 14 Apr 2025 12:42:02 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g59f1aLJujbixidvi%2FJfFMGyJEKo9r94If5PD4TohhX9LRswFuBBtvDnOBwNb2AB3%2BJ6iSJ4iL1e1SoFT2pEsQ%2BxJkuhc3S5iRThe2f9LHh5gcGDL16xR0GvDDl%2B8tVgkHN%2BHS5u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87962bc6fe7e0b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/icons/muted.svg

134.209.88.167

200 OK

1.4 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/icons/muted.svg
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1433 bytes)
Hash
a73c3624ebba787fc591c348d75b8e87
7676de781706a2ac95770639328ee1a00701875d
cc86b882050c7d5dfe34c70702143466ad9173e0c0c7e1b023a8bd0c5ca4d40d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/icons/muted.svg HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/svg+xml
content-length: 1433
last-modified: Fri, 26 Jan 2024 12:57:24 GMT
etag: "65b3ac34-599"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/fonts/Inter-Medium.woff2

134.209.88.167

200 OK

111 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/fonts/Inter-Medium.woff2
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
Web Open Font Format (Version 2), TrueType, length 111192, version 3.1245
Size
111 kB (111192 bytes)
Hash
823f35a845a9dfbf9800c8a37b635269
c3064c7e34213e30493c6a972f3d66f4d145885b
aaa02aa09b0bc5bc5c57095aaa6e15bea07480136e9aab705f69886daa213325

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/fonts/Inter-Medium.woff2 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: font/woff2
content-length: 111192
last-modified: Fri, 26 Jan 2024 12:56:31 GMT
etag: "65b3abff-1b258"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/fonts/Montserrat-Bold.woff2

134.209.88.167

200 OK

64 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/fonts/Montserrat-Bold.woff2
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
Web Open Font Format (Version 2), TrueType, length 63632, version 8.0
Size
64 kB (63632 bytes)
Hash
c65254ba70f8f5c7c236155c4bea47e2
678993691b6ab0856a3d5d8c3100b296c9388c46
6f91236632217bc47ea39e299d04e86086dc94fe627aa0e590855f6e2c672852

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/fonts/Montserrat-Bold.woff2 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: font/woff2
content-length: 63632
last-modified: Fri, 26 Jan 2024 12:56:31 GMT
etag: "65b3abff-f890"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/fonts/Inter-Bold.woff2

134.209.88.167

200 OK

112 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/fonts/Inter-Bold.woff2
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
Web Open Font Format (Version 2), TrueType, length 111736, version 3.1245
Size
112 kB (111736 bytes)
Hash
68011c0b032270d83de4f546ce48bf57
d1e442dbf714552c132e26d55da0234d61b305ff
b5d5e626a01da63aa252c7c469046a0f31ef2c2c9c09a176213eb0e6290d83f7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/fonts/Inter-Bold.woff2 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: font/woff2
content-length: 111736
last-modified: Fri, 26 Jan 2024 12:56:32 GMT
etag: "65b3ac00-1b478"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/files/audio/snap.mp3

134.209.88.167

206 Partial Content

6.3 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/files/audio/snap.mp3
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 48 kbps, 44.1 kHz, Stereo
Size
6.3 kB (6313 bytes)
Hash
00b7f5bc7963585e953baf12f6a9baa3
c4d8bf0b2130acbf1024ec48db5b709781f865a0
127f81f3512fa4535574857bd13d9dd05acf1660c0d323f3f2da6a5b9bfb9e89

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/files/audio/snap.mp3 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: audio/mpeg
content-length: 6313
last-modified: Fri, 26 Jan 2024 12:57:26 GMT
etag: "65b3ac36-18a9"
strict-transport-security: max-age=31536000
content-range: bytes 0-6312/6313
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=

134.209.88.167

200 OK

987 kB

URL User Request GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
gzip compressed data, from Unix
Size
987 kB (986815 bytes)
Hash
91322dc084a80619e6fb93c5a9e38526
c6a0821304b6acf07ccf9874df89e3cb9a967a5d
5e6e51660cd32505ba8a2292267a9f8af460b5fbe82e9294c3dc96e7a5b2956a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10= HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: text/html
last-modified: Fri, 26 Jan 2024 12:55:26 GMT
vary: Accept-Encoding
etag: W/"65b3abbe-142b"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/routes/routes.json

138.199.36.8

200 OK

557 kB

URL GET HTTP/2
adverster.b-cdn.net/scripts/routes/routes.json
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
557 kB (557071 bytes)
Hash
14be986b3bd07d7bc5b82d2c06b91a22
122d2b77c037463a38175ccecd2e6df9c34c37fd
92f96af7cf67db208a2767ed0f68f0b6f9d844cf0e97f7074dd873587e0b4602

HTTP Headers

GET /scripts/routes/routes.json HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playfulcheaters.com/
Origin: https://playfulcheaters.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: application/json
vary: Accept-Encoding
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-383
cdn-fileserver: 401
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/03/2024 12:36:29
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: d5b039a50c7462ae7616612c77227626
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/2%20step%20web/Frame%201.jpg

134.209.88.167

200 OK

38 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/2%20step%20web/Frame%201.jpg
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3848x2160, components 3
Size
38 kB (37901 bytes)
Hash
6f752cbb54b49179532db59438c3c4f3
7913225414f012a796f61d6a89280a36bc4d7c3f
2f7eb1a251660bf67759c2134c96c453ecfb059deee0a672ac36feb9c9cd3f58

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/2%20step%20web/Frame%201.jpg HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/jpeg
content-length: 37901
last-modified: Fri, 26 Jan 2024 12:59:27 GMT
etag: "65b3acaf-940d"
expires: Fri, 24 May 2024 12:42:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/stepmon%201%20web.png

134.209.88.167

200 OK

353 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/stepmon%201%20web.png
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
PNG image data, 416 x 690, 8-bit/color RGBA, non-interlaced
Size
353 kB (352905 bytes)
Hash
f2391b6302bc515ec3063f41ce70cf3b
1dcc65f7fc67426414c393b6285b83f718482a11
075f225a678542f6bfcfdbcb31c556f99a7da6d9cc19ec8adcfa3b0497c22e4e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/stepmon%201%20web.png HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/png
content-length: 352905
last-modified: Fri, 26 Jan 2024 12:59:46 GMT
etag: "65b3acc2-56289"
expires: Fri, 24 May 2024 12:42:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/stepsister%201%20web.png

134.209.88.167

200 OK

400 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/stepsister%201%20web.png
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
PNG image data, 416 x 690, 8-bit/color RGBA, non-interlaced
Size
400 kB (399857 bytes)
Hash
9a4146a3c90567ad87de2ae22ba408f8
b3399cf9638be15d3f0b659cee693b7c04e56efe
f3ae987ebb187d8ad2aeb2bf94bb45752cfb72b47713fcb355fc6eb349fc22d9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/stepsister%201%20web.png HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/png
content-length: 399857
last-modified: Fri, 26 Jan 2024 12:59:46 GMT
etag: "65b3acc2-619f1"
expires: Fri, 24 May 2024 12:42:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/secondOffer/secondOffer-latest.js?_v=20231220153126

138.199.36.8

200 OK

493 kB

URL GET HTTP/2
adverster.b-cdn.net/scripts/secondOffer/secondOffer-latest.js?_v=20231220153126
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1414), with no line terminators
Size
493 kB (493181 bytes)
Hash
a2b0e9b0e1c68510916b37fdf425c796
c1956b52d364c0b50bb63f43746ecec33eccee66
c7d7e6b78245539e1e956fa9e115080aa3209ef26fdbb614228248c0845e9c96

HTTP Headers

GET /scripts/secondOffer/secondOffer-latest.js?_v=20231220153126 HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: application/javascript
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: W/"660d4d4a-586"
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-383
cdn-fileserver: 756
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/03/2024 12:36:29
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: b4d807d72bb4e66adff8a50005432d4e
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/other%201%20web.png

134.209.88.167

200 OK

458 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/other%201%20web.png
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
PNG image data, 416 x 690, 8-bit/color RGBA, non-interlaced
Size
458 kB (457597 bytes)
Hash
1a498913381c8bb69432a57d90d01cdc
16cf77ab4b5a3fb96ef35d7b7187c525e8d8f86d
44b2d3bc3990f69f2583d1d797e4aa17af978a0a900940292950c8a74396c847

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/other%201%20web.png HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/png
content-length: 457597
last-modified: Fri, 26 Jan 2024 12:59:45 GMT
etag: "65b3acc1-6fb7d"
expires: Fri, 24 May 2024 12:42:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/icons/arrow-left.webp

134.209.88.167

200 OK

358 B

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/icons/arrow-left.webp
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
RIFF (little-endian) data, Web/P image
Size
358 B (358 bytes)
Hash
a42284a3b6acee062661173b7afef6b8
d2559159ce5178242b18e07ab5bd25de56ecf6f5
01e25c23e64110382c8c3ad42ff457be20fcbb201b637842fe14aecb342fe34e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/icons/arrow-left.webp HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: image/webp
content-length: 358
last-modified: Fri, 26 Jan 2024 12:57:24 GMT
etag: "65b3ac34-166"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/icons/arrow-right.webp

134.209.88.167

200 OK

366 B

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/icons/arrow-right.webp
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
RIFF (little-endian) data, Web/P image
Size
366 B (366 bytes)
Hash
61285767caf2ea902d6eff75f1ee682d
e98ba385b49c365e9c6aff9322ba0343dcdd6fd0
230b5e8ca4dc76f97c85de1228d3a6b00dbb989caf91459be8a00f7dd5e3a63e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/icons/arrow-right.webp HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: image/webp
content-length: 366
last-modified: Fri, 26 Jan 2024 12:57:24 GMT
etag: "65b3ac34-16e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/3%20step%20web/Frame%20217.jpg

134.209.88.167

200 OK

533 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/3%20step%20web/Frame%20217.jpg
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], progressive, precision 8, 1919x2698, components 3
Size
533 kB (532777 bytes)
Hash
50665ab64c98c345033659f351ea9c8a
e7a5030fa1e21bbdeeb9caf77d0b41c589aa9603
b73ec43334e0d4d0449a2d4a0504d3902950fc32780548b9037ab4f9bf02b76c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/3%20step%20web/Frame%20217.jpg HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: image/jpeg
content-length: 532777
last-modified: Fri, 26 Jan 2024 12:59:28 GMT
etag: "65b3acb0-82129"
expires: Fri, 24 May 2024 12:42:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/favicon.ico

134.209.88.167

200 OK

25 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/favicon.ico
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Size
25 kB (25270 bytes)
Hash
ae2e7a218050f98c6a299c44a37691b1
d8afe1a44b80785b55f1e4f73ba6f1f9a31ac1dd
12eeb9b0c09d1d0ea28de82ef467923f79dd40b4915f76eabe7fe02c250faec9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/favicon.ico HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: image/x-icon
content-length: 25270
last-modified: Fri, 26 Jan 2024 12:56:31 GMT
etag: "65b3abff-62b6"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/routes/routes.json

138.199.36.8

200 OK

7.8 kB

URL GET HTTP/2
adverster.b-cdn.net/scripts/routes/routes.json
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
7.8 kB (7817 bytes)
Hash
8395b3df674cb245692983d7607418ee
14294c952bda07bd86aadab45633831ef1639418
7cbf49523b3a8d62f994f11e19b2c614630a24b07f8e8272613e0bac242728fc

HTTP Headers

GET /scripts/routes/routes.json HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playfulcheaters.com/
Origin: https://playfulcheaters.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: application/json
vary: Accept-Encoding
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-383
cdn-fileserver: 401
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/03/2024 12:36:29
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: b3e74546c7f762810feae36525efa83c
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/routes/routes.json

138.199.36.8

200 OK

11 kB

URL GET HTTP/2
adverster.b-cdn.net/scripts/routes/routes.json
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
11 kB (10639 bytes)
Hash
9914abdb0e70f15b781fb9d26cdfa8b3
8f8dbc5023fa2ac9c6c742bacc05a9e465c8d9a4
af3213adccf9ac43ed86212aa8b1236c74c7327bbdbb0232c094989d3034646d

HTTP Headers

GET /scripts/routes/routes.json HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playfulcheaters.com/
Origin: https://playfulcheaters.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: application/json
vary: Accept-Encoding
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-383
cdn-fileserver: 401
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/03/2024 12:36:29
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 51e90de716eaaa4c71ab2d7a940b5158
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/additionalTrafficVariablesTable/additionalTrafficVariablesTable.min.json

138.199.36.8

200 OK

6.3 kB

URL GET HTTP/2
adverster.b-cdn.net/scripts/additionalTrafficVariablesTable/additionalTrafficVariablesTable.min.json
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
6.3 kB (6254 bytes)
Hash
8ac6b3b9126b08189477052c5102fe13
3ccd74cafa1b9a12800381b09719087941ca336a
f8fd3f95ae368d848c0d6ef91210a14fc1b6e301fac20373f334d952f186a946

HTTP Headers

GET /scripts/additionalTrafficVariablesTable/additionalTrafficVariablesTable.min.json HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playfulcheaters.com/
Origin: https://playfulcheaters.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:03 GMT
content-type: application/json
vary: Accept-Encoding
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-680
cdn-fileserver: 569
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/03/2024 12:36:29
cdn-edgestorageid: 723
cdn-status: 200
cdn-requestid: aae9033e61b158f75613d75a8ec35edf
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/files/audio/audio.mp3

134.209.88.167

206 Partial Content

985 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/files/audio/audio.mp3
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 44.1 kHz, JntStereo
Size
985 kB (985255 bytes)
Hash
94d04dc788cbfb4f8008e7b9e590974b
d07856473e1156b0d71097d84443465c4f91d480
2f30142d6771f0b4172472747f26c5ef6ce0c3e7b4c41e3e0bbf65a286c2a564

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/files/audio/audio.mp3 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 206 Partial Content
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: audio/mpeg
content-length: 985255
last-modified: Fri, 26 Jan 2024 12:57:26 GMT
etag: "65b3ac36-f08a7"
strict-transport-security: max-age=31536000
content-range: bytes 0-985254/985255
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/nextOffer/nextOffer-latest.js?_v=20231220153126

138.199.36.8

200 OK

463 B

URL GET HTTP/2
adverster.b-cdn.net/scripts/nextOffer/nextOffer-latest.js?_v=20231220153126
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (475), with no line terminators
Size
463 B (463 bytes)
Hash
c036d52fecb065527cab00bbb0f8ccc6
004d76a1d0754e35099bff9cdfabd715bc0e8ef5
9bb64085bcfc044395fca99d5614db3280d23fccb4fb6610f4335308036c44cf

HTTP Headers

GET /scripts/nextOffer/nextOffer-latest.js?_v=20231220153126 HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: application/javascript
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: W/"660d4d4a-1cf"
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-679
cdn-fileserver: 125
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/03/2024 12:36:29
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: bcd66a1355cbe47cafe604ac8e5dd361
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/js/main.min.js?_v=20231220153126

134.209.88.167

200 OK

250 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/js/main.min.js?_v=20231220153126
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type

Size
250 kB (249759 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/js/main.min.js?_v=20231220153126 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: application/javascript
last-modified: Fri, 26 Jan 2024 12:56:31 GMT
vary: Accept-Encoding
etag: W/"65b3abff-3cf9f"
expires: Thu, 25 Apr 2024 00:42:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/1%20step%20web/collage_04.jpg

134.209.88.167

200 OK

556 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/1%20step%20web/collage_04.jpg
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x3245, components 3
Size
556 kB (556445 bytes)
Hash
a5810bd9f63fc54d6bd0bec67f67bda6
50b588b4348ed68fdc0bb66c02b7394194f36a86
b51db9a8a592c01f4f47a6bdb7aa7a0d5a8b40bea0f96097ec78469cd26b0ffb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/FamilyCheaters_v19_1/1%20step%20web/collage_04.jpg HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/jpeg
content-length: 556445
last-modified: Fri, 26 Jan 2024 12:59:24 GMT
etag: "65b3acac-87d9d"
expires: Fri, 24 May 2024 12:42:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126

134.209.88.167

200 OK

34 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
ASCII text, with very long lines (34395), with no line terminators
Size
34 kB (34395 bytes)
Hash
5778eb3108cbc88aa139bb427003fd8e
6bf21114fa240f3776b8978ced9b3a05cf53752c
a1f848644c7520a222109344c424e7d5f9ee168c501d7e9e086ebd495a98fda5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126 HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: text/css
last-modified: Fri, 26 Jan 2024 12:56:30 GMT
vary: Accept-Encoding
etag: W/"65b3abfe-865b"
expires: Thu, 25 Apr 2024 00:42:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

adverster.b-cdn.net/scripts/backOffer/backOffer-latest.js?_v=20231220153126

138.199.36.8

200 OK

1.2 kB

URL GET HTTP/2
adverster.b-cdn.net/scripts/backOffer/backOffer-latest.js?_v=20231220153126
IP
138.199.36.8:443
ASN
#60068 Datacamp Limited

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1207), with no line terminators
Size
1.2 kB (1187 bytes)
Hash
94d68c7e4e1d48bee78b74b7696ee530
2c876fa18ea26baa906b96f3d224add299bdbfab
eb2acf8582480386a11998a240377ac0893a17c34e4316cf9a9ccaf5a8efe1e6

HTTP Headers

GET /scripts/backOffer/backOffer-latest.js?_v=20231220153126 HTTP/1.1
Host: adverster.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: application/javascript
server: BunnyCDN-DE1-1048
cdn-pullzone: 303693
cdn-uid: f45a7a2e-6fd6-42fa-b15d-1efd29fb00dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: W/"660d4d4a-4a3"
last-modified: Wed, 03 Apr 2024 12:36:26 GMT
cdn-storageserver: DE-661
cdn-fileserver: 569
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/07/2024 18:16:12
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: e7a12677c8a61d989aa24fed08e5f686
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/neighbor%201%20web.png

134.209.88.167

200 OK

493 kB

URL GET HTTP/2
playfulcheaters.com/pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/neighbor%201%20web.png
IP
134.209.88.167:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://playfulcheaters.com/pre/FamilyCheaters_v19_1/?partner=BC&next=FamilyCheaters_v21_violet_1&clickid=wui99v8lkcjaakq0jg3civ12&country=NO&tsource=8902&m1=Firefox&m2=Norway&voluum_id=ebbe02d8-90ca-4e6c-a00e-4a58cfc60caa&p1=affise&p2=324&p3=Adult_Games%20-%20Straight%20-%20Smartlink%20-%20for%20lead%20%28324%2C%20357%29&p4=AdsyTech&p5=8902&p6=Smartlink%20adult%20games%20-%20CPL&p7=adult%20game%20-%20%28FamilyCheaters_v19_1%20%2B%20FamilyCheaters_v21_violet_1%29%20-%20iframe%20-%20Affiliate%20-%20playfulcheaters.com&p8=&p9=&p10=
Certificate
IssuerLet's Encrypt
Subjectplayfulcheaters.com
Fingerprint94:F3:45:D0:D1:51:89:4D:2D:B5:1D:3B:DD:BA:BA:E3:7E:D2:4B:A9
ValidityThu, 28 Mar 2024 23:11:37 GMT - Wed, 26 Jun 2024 23:11:36 GMT

File type
PNG image data, 416 x 690, 8-bit/color RGBA, non-interlaced
Size
493 kB (492575 bytes)
Hash
75f7c1a0a4b97a4ea9be3dee9420e085
f93e3a5d39b155c2de3aee06da667e9cca1ca71f
eb6be5075473dd2ff5d5ed5315f03e4f2cf810b07bf0eceeffe4f88ead2569aa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pre/FamilyCheaters_v19_1/img/backgrounds/cards/FamilyCheaters_v19_1/2%20step/neighbor%201%20web.png HTTP/1.1
Host: playfulcheaters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playfulcheaters.com/pre/FamilyCheaters_v19_1/css/style.min.css?_v=20231220153126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 12:42:02 GMT
content-type: image/png
content-length: 492575
last-modified: Fri, 26 Jan 2024 12:59:45 GMT
etag: "65b3acc1-7841f"
expires: Fri, 24 May 2024 12:42:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP