Report - verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom

Report Overview

Submitted URL
verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-09 02:31:10
Access
public
Website Title
-
Final URL
verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
proftrafficcounter.com	unknown	2023-11-16	2023-11-21	2024-05-08	468 B	771 B	52.57.164.94
experttrafficmonitor.com	unknown	2023-11-16	2023-11-23	2024-05-04	648 B	509 B	52.57.164.94
verygoodminigames.com	unknown	2022-11-18	2022-11-18	2024-02-26	1.1 kB	12 kB	188.114.97.1
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-05-07	512 B	6.5 kB	35.244.181.201
bigstoreminigames.space	unknown	2024-02-21	2024-02-21	2024-04-22	480 B	715 B	0.0.0.0
twistconcept.com	unknown	2022-04-14	2020-08-23	2024-05-06	450 B	1.3 kB	172.67.215.17
my.rtmark.net	9054	2014-10-29	2015-02-04	2024-05-08	466 B	678 B	139.45.195.8
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-08	338 B	942 B	143.204.53.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	experttrafficmonitor.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c%22	653 B	2023-11-23	2024-05-19
Pretty URL twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c%22 IP 172.67.215.17 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-23 14:59:07 Last Seen2024-05-19 22:07:47 Times Seen282 Hash 2058d53d084116ff3d36c8a630556710 8bcd226cf5ddb64be846ad645360638e82269097 6af3e3bd3016f5762e3dc3dbd8fc7bbf00f4ec9349bee71a23bbe5547dcffd1e Loading...

HTTP Transactions (9)

URL IP Response Size

my.rtmark.net/img.gif?f=sync&lr=1&partner=3c31714cb43d8cad76b686191340e198fbf9abb01c60cc8f2696befec37406ed

139.45.195.8

200 OK

43 B

URL GET HTTP/2
my.rtmark.net/img.gif?f=sync&lr=1&partner=3c31714cb43d8cad76b686191340e198fbf9abb01c60cc8f2696befec37406ed
IP
139.45.195.8:443
ASN
#9002 RETN Limited

Requested by
https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Certificate
IssuerLet's Encrypt
Subjectrtmark.net
FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC
ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

HTTP Headers

GET /img.gif?f=sync&lr=1&partner=3c31714cb43d8cad76b686191340e198fbf9abb01c60cc8f2696befec37406ed HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:30:45 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=088057eb0e8c4ffaf9dabe03bd9fcadb; expires=Fri, 09 May 2025 02:30:45 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
17d83a6a1ce5ec032b9d0be6c8c68106
9b412e1c9f9694753b73daa262811ec4c420e7d1
935af939ae598190c9c8175f1ac54241ab2614b3c7599a4c92e1be2ecd42ab23

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 09 May 2024 02:30:45 GMT
Last-Modified: Thu, 09 May 2024 01:55:00 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: T8NJLpGQqynHEAqV7DOtTPAitYg8w7P4SsCNfuRZ-1mJE6EciSqf8A==
Age: 2146

proftrafficcounter.com/px.gif?akey=c73209e3a548f31485d4d93c096d1d6c

52.57.164.94

307 Temporary Redirect

0 B

URL GET HTTP/2
proftrafficcounter.com/px.gif?akey=c73209e3a548f31485d4d93c096d1d6c
IP
52.57.164.94:443
ASN
#16509 AMAZON-02

Requested by
https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /px.gif?akey=c73209e3a548f31485d4d93c096d1d6c HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://verygoodminigames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 307 Temporary Redirect
date: Thu, 09 May 2024 02:30:45 GMT
content-type: image/gif
content-length: 0
location: https://experttrafficmonitor.com/dbs?uuid=f21cdfde-ac94-46bc-be06-c05fbea3d162&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsiNDIxIjoxNzE1MjIxODQ1fSwiYWNjbCI6eyIyMCwzIjoxNzE1MjIxODQ1fX0.9L_OSCfQamDVpnXPhWwng-_xxu2B4iTpCxcNCN0jdNA
server: nginx/1.21.6
set-cookie: uid_id2=f21cdfde-ac94-46bc-be06-c05fbea3d162:1:1; expires=Sun, 07 May 2034 02:30:45 GMT; secure; SameSite=None
ak=421,1715221845; expires=Wed, 07 Aug 2024 02:30:45 GMT; secure; SameSite=None
acl=20,3,1715221845; expires=Wed, 07 Aug 2024 02:30:45 GMT; secure; SameSite=None
expires: Thu, 09 May 2024 02:30:45 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2

experttrafficmonitor.com/dbs?uuid=f21cdfde-ac94-46bc-be06-c05fbea3d162&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsiNDIxIjoxNzE1MjIxODQ1fSwiYWNjbCI6eyIyMCwzIjoxNzE1MjIxODQ1fX0.9L_OSCfQamDVpnXPhWwng-_xxu2B4iTpCxcNCN0jdNA

52.57.164.94

200 OK

7 B

URL GET HTTP/2
experttrafficmonitor.com/dbs?uuid=f21cdfde-ac94-46bc-be06-c05fbea3d162&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsiNDIxIjoxNzE1MjIxODQ1fSwiYWNjbCI6eyIyMCwzIjoxNzE1MjIxODQ1fX0.9L_OSCfQamDVpnXPhWwng-_xxu2B4iTpCxcNCN0jdNA
IP
52.57.164.94:443
ASN
#16509 AMAZON-02

Requested by
https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dbs?uuid=f21cdfde-ac94-46bc-be06-c05fbea3d162&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsiNDIxIjoxNzE1MjIxODQ1fSwiYWNjbCI6eyIyMCwzIjoxNzE1MjIxODQ1fX0.9L_OSCfQamDVpnXPhWwng-_xxu2B4iTpCxcNCN0jdNA HTTP/1.1
Host: experttrafficmonitor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://verygoodminigames.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 09 May 2024 02:30:46 GMT
content-type: image/gif
content-length: 7
server: nginx/1.21.6
set-cookie: uid_id2=f21cdfde-ac94-46bc-be06-c05fbea3d162:1:1; expires=Sun, 07 May 2034 02:30:46 GMT; secure; SameSite=None
ak=421,1715221845; expires=Wed, 07 Aug 2024 02:30:46 GMT; secure; SameSite=None
acl=20,3,1715221845; expires=Wed, 07 Aug 2024 02:30:46 GMT; secure; SameSite=None
expires: Thu, 09 May 2024 02:30:46 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2

verygoodminigames.com/favicon.ico

188.114.97.1

404 Not Found

9.4 kB

URL GET HTTP/3
verygoodminigames.com/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Certificate
IssuerGoogle Trust Services LLC
Subjectverygoodminigames.com
Fingerprint8D:0A:F8:16:FB:44:38:BF:2A:AC:87:99:1C:BB:D4:01:25:58:C0:5D
ValidityWed, 08 May 2024 05:53:00 GMT - Tue, 06 Aug 2024 05:52:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
9.4 kB (9409 bytes)
Hash
13316c222e0c0ec8d199b041c4bd8b01
95259989d61766afee6cdf19b56ddac9802568b1
363bcf79e2d0a504ef280e7716c4a17c15023333feee1d1cf0bc4d5be3c259ca

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: verygoodminigames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Cookie: c_2e4156fa013a29f12c9bc117bf86f372=1; z_c752eb781317b133b3f421e698a9f0ba=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 09 May 2024 02:30:45 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZyMevrs7xL5q%2BOWOPpUwUbIPpYre3EJczreSP2SR%2BsI%2F5qawIjMnLj%2BB%2BmYXboFPzFXbjTEF6JDVqOA4UXvoIRiWOMhWCe7jAqu7dTj0qkHJi6kyFqy3QJaLiZtfeVKeLAiSaZ%2Bn8ew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e44f8adbb56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

5.8 kB

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
gzip compressed data, max speed, from Unix
Size
5.8 kB (5759 bytes)
Hash
aa33725c2d0a3d1c2f9c878d64914807
6e83d13ec860384a977738b04ff0891a01ab519a
fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:31:04 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=5YNVgWM1PAXFM4JHiZx98GEO2XkJbdbRq5DeXPujXw_niM2X4e7c3OUkaOIaFd1sBL11K3h1j0A6EuTCTpQ7MTRJSw6XAiDAq0MaGNbGLqiqsWRJTNgL5qfq08Sp0Arh
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to

188.114.97.1

200 OK

1.1 kB

URL User Request GET HTTP/2
verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectverygoodminigames.com
Fingerprint8D:0A:F8:16:FB:44:38:BF:2A:AC:87:99:1C:BB:D4:01:25:58:C0:5D
ValidityWed, 08 May 2024 05:53:00 GMT - Tue, 06 Aug 2024 05:52:59 GMT

File type
HTML document, ASCII text, with very long lines (1174), with no line terminators
Size
1.1 kB (1146 bytes)
Hash
e280b63b382f7854d50e03ac7adbd5bb
142e6332ce530c6904290eeca79d1741d2f795b7
2be6aeeb43dc154a3425dfae2eb403b5776a8e40fd1c9afc9e03fec57bdc827d

HTTP Headers

GET /iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to HTTP/1.1
Host: verygoodminigames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 02:30:45 GMT
content-type: text/html
set-cookie: c_2e4156fa013a29f12c9bc117bf86f372=1; Expires=Fri, 10-May-24 02:30:45 GMT; Domain=verygoodminigames.com; Path=/; Secure; SameSite=None
z_c752eb781317b133b3f421e698a9f0ba=1; Expires=Fri, 10-May-24 02:30:45 GMT; Domain=verygoodminigames.com; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mqTikhHFkP%2FBnKENyzU2GJlYq7RuvstOMYOGv8bynFpaOOkUVBP28KfCOH4JtatWkYAJ1dSRJ9UrMcvDvM%2F2DeZEjYlxavzCwCmZzsJH%2FK9ZTNwky2qauaQJXsWOFF4X1c9hfeemzhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e44f3db6a5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bigstoreminigames.space/bnr/4/f0d/9cd224/f0d9cd224da949103b675e7d622a70a4.jpg

0.0.0.0

0 B

URL GET
bigstoreminigames.space/bnr/4/f0d/9cd224/f0d9cd224da949103b675e7d622a70a4.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Certificate
IssuerLet's Encrypt
Subjectbigstoreminigames.space
Fingerprint95:FE:47:6D:B5:53:60:39:97:F1:99:25:7C:50:80:7E:BD:62:59:8B
ValiditySat, 20 Apr 2024 16:24:19 GMT - Fri, 19 Jul 2024 16:24:18 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /bnr/4/f0d/9cd224/f0d9cd224da949103b675e7d622a70a4.jpg HTTP/1.1
Host: bigstoreminigames.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://verygoodminigames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 02:30:45 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=31536000
x-cache-status: HIT
cf-cache-status: HIT
age: 27911
last-modified: Wed, 08 May 2024 18:45:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPM6ZZbo1%2B1s%2FhURxIFl2elkownARJWBsV5pefYqxczIR9RytUs9Y0TyLAuwrGNLD6kC2l59bspansLbM64iChIYBTMoj0t8rgfwl%2F%2BKsvzBRJSCTcdLec5oqKR8HoqcBKZzIOdP8tiiAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e44f6ae6f712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c%22

172.67.215.17

200 OK

653 B

URL GET HTTP/2
twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c%22
IP
172.67.215.17:443
ASN
#13335 CLOUDFLARENET

Requested by
https://verygoodminigames.com/iframe/5dcda983a80c7?iframe&ag_custom_domain=chapmanganato.to
Certificate
IssuerGoogle Trust Services LLC
Subjecttwistconcept.com
Fingerprint73:11:A2:75:AF:3F:76:30:B1:19:9F:59:CD:02:5E:98:3C:A1:12:6B
ValiditySat, 23 Mar 2024 03:02:17 GMT - Fri, 21 Jun 2024 03:02:16 GMT

File type
JavaScript source, ASCII text, with very long lines (656), with no line terminators
Size
653 B (653 bytes)
Hash
e1b26acebd3ad2c11bf53fe6e99737ec
8676d5c0973a09d71c95b427cd453d5514e77eac
56b092f22e468081835fe837e953180a39406307c0a889e135da563bc8d60e41

HTTP Headers

GET /index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c%22 HTTP/1.1
Host: twistconcept.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://verygoodminigames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 02:30:45 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 13:06:26 GMT
etag: W/"655f4e52-28d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2437
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OdFcJmtIwU771HmYKoAwkwfYi45le%2Bxni82SNS%2FIBNyx5MKdoXph0Y7FsNsvyzPqyb5KRymvMKQM4FmuEc7WhCt8iCCfaT4ESWuZWH%2FSZcR0tO1H56Ld3KM3YgT2W4HLfy9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e44f6ac9b56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP