Report - todayprizeforyou.com/

Report Overview

Submitted URL
todayprizeforyou.com/
IP
104.26.15.62
ASN
#13335 CLOUDFLARENET
Submitted
2023-05-17 10:11:59
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dn7u3i0t165w2.cloudfront.net	unknown	2008-04-25	2021-03-11	2023-05-15	467 B	32 kB	54.230.245.30
gauvaiho.net	285509	2021-03-26	2021-03-26	2023-05-16	982 B	43 kB	139.45.197.251
cdn.wildfungames.com	unknown	2022-11-08	2023-01-27	2023-05-16	868 B	8.9 kB	172.67.70.29
code.jquery.com	634	2005-12-10	2012-05-21	2023-05-16	443 B	31 kB	69.16.175.42
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-05-16	660 B	1.9 kB	172.64.155.188
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2023-05-16	1.5 kB	46 kB	172.64.203.28
wildfungames.com	unknown	2022-11-08	2016-11-21	2023-05-16	1.5 kB	7.1 kB	172.67.70.29
todayprizeforyou.com	unknown	2021-11-23	2021-11-23	2023-05-16	479 B	5.0 kB	104.26.14.62
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2023-05-16	965 B	247 kB	185.244.209.62
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2023-05-16	443 B	12 kB	104.18.22.52

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-17	medium	todayprizeforyou.com/
2023-05-17	medium	wildfungames.com/sw-check-permissions-7c336.js
2023-05-17	medium	cdn.wildfungames.com/land/banners/functions.js?v=1

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	cdn.wildfungames.com/land/banners/functions.js?v=1	3.5 kB	2023-04-17	2023-08-17
Pretty URL cdn.wildfungames.com/land/banners/functions.js?v=1 IP 172.67.70.29 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-17 18:09:05 Last Seen2023-08-17 06:26:02 Times Seen182 Hash 4a02b51b59e7ed04f4612597ddf601d3 de4d830af121ca6e30dcb933fa9e7f9255bfb69a 8777ab3391daceded13de2faef5194540faed3cb024e641c8f8ff11ba398a6c8 Loading...

	wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=	0 B	2023-03-07	2024-04-26
Pretty URL wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode= IP 172.67.70.29 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 21:41:31 Times Seen37101744 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js	84 kB	2023-03-07	2024-04-26
Pretty URL cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js IP 185.244.209.62 ASN #58286 Electric-IT Business S.R.L. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-26 15:16:07 Times Seen5286 Hash f81d0a1705048649befc8b595e455a94 aec551e4d573463088fca7d14fb644eb389f1839 b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b Loading...

	wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=	0 B	2023-03-07	2024-04-26
Pretty URL wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode= IP 172.67.70.29 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 21:41:31 Times Seen37101744 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=	0 B	2023-03-07	2024-04-26
Pretty URL wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode= IP 172.67.70.29 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 21:41:31 Times Seen37101744 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=	0 B	2023-03-07	2024-04-26
Pretty URL wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode= IP 172.67.70.29 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 21:41:31 Times Seen37101744 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	kit.fontawesome.com/7deea0368b.js	11 kB	2023-04-02	2023-05-29
Pretty URL kit.fontawesome.com/7deea0368b.js IP 104.18.22.52 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-02 21:23:16 Last Seen2023-05-29 08:59:13 Times Seen338 Hash e62478b6530cc566658fd2d20001b706 20026b56cb872f10c8adcc59b61721693da05e95 1b0d4be6be687d94e93e9c393f65ea1238654394490b5ed2bad59887a678f04c Loading...

	gauvaiho.net/pfe/current/micro.tag.min.js?z=4681922&sw=/sw-check-permissions-7c336.js	42 kB	2023-05-11	2023-05-29
Pretty URL gauvaiho.net/pfe/current/micro.tag.min.js?z=4681922&sw=/sw-check-permissions-7c336.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 16:26:45 Last Seen2023-05-29 09:32:34 Times Seen6742 Hash d44fd7b96fceca8f81b472766025d0d2 237541097413baf5cd3e703413f8bc9ea538a4db b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16 Loading...

	code.jquery.com/jquery-3.6.0.min.js	90 kB	2023-03-07	2024-04-26
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-26 21:38:48 Times Seen261783 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

HTTP Transactions (18)

URL IP Response Size

code.jquery.com/jquery-3.6.0.min.js

69.16.175.42

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
69.16.175.42:443
ASN
#20446 STACKPATH-CDN

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 May 2023 10:11:41 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1684318301.dop066.sk1.t,1684318301.cds226.sk1.hn,1684318301.cds210.sk1.c
X-Firefox-Spdy: h2

ocsp.sectigo.com/

172.64.155.188

472 B

URL
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
41035de57d03043d5c0b2e079d21a611
0d780a6ffb55f5928f4909eb2837313f34d666f5
e2e7ad07380d1c8aede61ef0d50831b3a1ab3c5a2a886618745f866be99afc8b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 May 2023 10:11:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 15 May 2023 23:50:07 GMT
Expires: Mon, 22 May 2023 23:50:06 GMT
Etag: "0d780a6ffb55f5928f4909eb2837313f34d666f5"
Cache-Control: max-age=480848,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7c8b13eae8411c0a-OSL

ocsp.sectigo.com/

172.64.155.188

472 B

URL
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
41035de57d03043d5c0b2e079d21a611
0d780a6ffb55f5928f4909eb2837313f34d666f5
e2e7ad07380d1c8aede61ef0d50831b3a1ab3c5a2a886618745f866be99afc8b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 May 2023 10:11:42 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 15 May 2023 23:50:07 GMT
Expires: Mon, 22 May 2023 23:50:06 GMT
Etag: "0d780a6ffb55f5928f4909eb2837313f34d666f5"
Cache-Control: max-age=480845,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7c8b13eaea52b4f3-OSL

dn7u3i0t165w2.cloudfront.net/venta/images/aeu_16072021_720612.gif?1.0

54.230.245.30

200 OK

31 kB

URL GET HTTP/2
dn7u3i0t165w2.cloudfront.net/venta/images/aeu_16072021_720612.gif?1.0
IP
54.230.245.30:443
ASN
#16509 AMAZON-02

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT

File type
GIF image data, version 89a, 300 x 250\012- data
Size
31 kB (31115 bytes)
Hash
ac94aa6420f7ebec061b2b590d677734
2b2c46f0251df22ed43925d64aaab671b823606b
77bb91847d990f6f7cbcfe1812d98eef075f274fecd37ec1ac5361141c072137

HTTP Headers

GET /venta/images/aeu_16072021_720612.gif?1.0 HTTP/1.1
Host: dn7u3i0t165w2.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 31115
last-modified: Fri, 16 Jul 2021 12:52:48 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 17 May 2023 10:11:42 GMT
etag: "ac94aa6420f7ebec061b2b590d677734"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: voFs-KI9AWwRiIRQSMVWHoOvqPO4cDhPKuCI9g-rH5u-tGsF7kwuDA==
age: 1886
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b

172.64.203.28

200 OK

13 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (60130)
Size
13 kB (12893 bytes)
Hash
a12ec7ebe75a4d59a5dd6b79e2ba2e16
28f5dcc595ee6d4163481ef64170180502c8629b
fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda

HTTP Headers

GET /releases/v5.15.4/css/free.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wildfungames.com/
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 May 2023 10:11:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 774fddee085016d16b500fd9201faeb2.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P8
x-amz-cf-id: JHFxZAonSpxprCG6MuhOrJzr9MdzExCUA8u6EwM2tt1NOb1M-BDXlQ==
age: 3052407
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fgyZ%2Bw9Or2m7OCrgm9a4xB6c6K1XElh9ii2XqKp8IjE%2B7R4l9e3IRYWecQt3vSCFzsx4XNOnEUe4axF1AwFpnGJqagnzsjwdAy2f901YJ9Wk9MxOOYJ0GQilQkkAkAJuyrQsuxtaTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13ee6c0e0894-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b

172.64.203.28

200 OK

3.0 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (3007), with no line terminators
Size
3.0 kB (2956 bytes)
Hash
164aeedbf1c90c5467de5320f9f2d89e
63fdf9f59785c7b84dc82523cc76d81773e9c60b
676748e7bec72f0310e785f353d6b9e33305b577b57a08c57f98d1ce9e77ed25

HTTP Headers

GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wildfungames.com/
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 May 2023 10:11:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4e17b9920844b6a8df812cad8c3506ec.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 65uPGVUOFbuPDUQijcMG_W38PHX7BtRneD_GruDvPkHffEsmWQ3kbw==
age: 2720148
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zKBTTUPShgnP4blEDmXDvvclkV7N3SEqps67%2FJbiyr0ZKH0xAyk1jWVzubUPFZVFGYMWsxfs2emDZt0W6NyGR9dHYsg9YoUpGz9P19CPMySTU2Ms9hgmv10Ykntskily49waQN%2Fi9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13ee7c1b0894-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

wildfungames.com/favicon.ico

172.67.70.29

200 OK

150 B

URL GET HTTP/3
wildfungames.com/favicon.ico
IP
172.67.70.29:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerLet's Encrypt
Subjectwildfungames.com
FingerprintC4:79:84:45:AC:4F:BE:4F:C2:42:78:F1:B7:BF:1F:92:7A:D3:70:5D
ValidityThu, 04 May 2023 10:54:30 GMT - Wed, 02 Aug 2023 10:54:29 GMT

File type
MS Windows icon resource - 2 icons, 1x1, 2 colors, 1x1, 2 colors\012- data
Size
150 B (150 bytes)
Hash
b16ffe438aae1df8db0437e8466b9a2d
4891ca58b0df9d4b67f190eb5f6406f9dd188875
972206ec635266c0b99c42350817a834e92fbb64f1d7cbf5eb5ad7a26d7a41b9

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 May 2023 10:11:42 GMT
content-type: image/x-icon
last-modified: Wed, 17 May 2023 06:13:25 GMT
etag: W/"64647085-96"
cache-control: max-age=14400
cf-cache-status: HIT
age: 837
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DaPiysf81VG41H0WUmt94B5b%2FvqnmnFSzK%2B1fyO%2BytGtK%2BlZbw53OBpIo%2BsPrw9CP0C8ARVm%2FwCMLf1sTc2qRKAi4LAa49UlRG73v7VrB8OkqBfsLq4TgiHIN7bPWqHC%2FQ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c8b13efa9eeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

todayprizeforyou.com/

104.26.14.62

302 Found

4.4 kB

URL User Request GET HTTP/2
todayprizeforyou.com/
IP
104.26.14.62:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttodayprizeforyou.com
Fingerprint21:7D:E3:A6:B9:62:AF:57:E3:CD:3E:2C:44:38:32:F6:93:9E:EB:29
ValidityWed, 10 May 2023 02:36:49 GMT - Tue, 08 Aug 2023 02:36:48 GMT

File type

Size
4.4 kB (4366 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: todayprizeforyou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 17 May 2023 10:11:41 GMT
content-type: text/html; charset=UTF-8
location: https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1hYG97Y658bpey%2FGaR7Vk7XtgkdRdSVTmZZP5PmrzXr6Rc9ie0gQNC4JZT7ToS1rIGwcgh7%2FNR7Nv9mNhbU3WR8imzm0Q1hvFaCTHHbUGy3%2F1%2BxT7OLqKhCugTIEAQaAUXgtYxv5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13e71bacb51e-OSL
X-Firefox-Spdy: h2

gauvaiho.net/zone?&pub=0&zone_id=4681922&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
gauvaiho.net/zone?&pub=0&zone_id=4681922&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerLet's Encrypt
Subjectgauvaiho.net
Fingerprint48:F2:59:24:62:D2:38:17:BE:F0:80:94:87:94:4B:7D:CB:39:2D:D2
ValidityThu, 16 Mar 2023 06:02:59 GMT - Wed, 14 Jun 2023 06:02:58 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /zone?&pub=0&zone_id=4681922&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Wed, 17 May 2023 10:11:42 GMT
content-length: 0
x-trace-id: e32ce0e7f64424f2f6a68409151dc443
access-control-allow-origin: https://wildfungames.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=

172.67.70.29

200 OK

4.4 kB

URL User Request GET HTTP/2
wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
IP
172.67.70.29:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectwildfungames.com
FingerprintC4:79:84:45:AC:4F:BE:4F:C2:42:78:F1:B7:BF:1F:92:7A:D3:70:5D
ValidityThu, 04 May 2023 10:54:30 GMT - Wed, 02 Aug 2023 10:54:29 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4590), with no line terminators
Size
4.4 kB (4366 bytes)
Hash
285ac7ad5ae0f175cebba550c0945463
bc1db3595a1c1468a0f0f55feada42169caf0bbf
d89c8963075a271c5b2e2e418b91655752d22f48a5cb5603be9796c54a5655cc

HTTP Headers

GET /land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode= HTTP/1.1
Host: wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 May 2023 10:11:41 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tmnX49f4lmQ%2Foy7%2F4wGV4hhqTpgy3cwQFsiKR2aqpmG2gkWX2YOodyJm7VGFTpZPZ8KnPwUFOXolSE1CldRHB%2BocV5BBfSYjB5BgEpBWYDEex8sAwHu55AXAi7Q4ICcgsIY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13e87fd4fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js

185.244.209.62

200 OK

84 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
IP
185.244.209.62:443
ASN
#58286 Electric-IT Business S.R.L.

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerSectigo Limited
Subjectcdn.jsdelivr.net
Fingerprint95:B3:FD:0C:F5:9E:0C:6C:F5:81:AB:DD:5D:6D:67:BF:FF:4A:FD:CC
ValiditySat, 01 Oct 2022 00:00:00 GMT - Fri, 20 Oct 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65299)
Size
84 kB (84378 bytes)
Hash
f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b

HTTP Headers

GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 May 2023 10:11:41 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: br
cache: HIT, HIT
x-cached-since: 2023-04-28T12:25:42+00:00, 2023-04-28T12:27:35+00:00
x-id: am3-up-gc89, osix-up-gc4
x-nginx: nginx-be, nginx-be
X-Firefox-Spdy: h2

cdn.wildfungames.com/land/banners/boxgrotate.css

172.67.70.29

200 OK

4.0 kB

URL GET HTTP/3
cdn.wildfungames.com/land/banners/boxgrotate.css
IP
172.67.70.29:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerLet's Encrypt
Subjectwildfungames.com
FingerprintC4:79:84:45:AC:4F:BE:4F:C2:42:78:F1:B7:BF:1F:92:7A:D3:70:5D
ValidityThu, 04 May 2023 10:54:30 GMT - Wed, 02 Aug 2023 10:54:29 GMT

File type
ASCII text, with very long lines (4271), with no line terminators
Size
4.0 kB (4029 bytes)
Hash
a2bb26f39789387f451f476c6814a722
a008a5026fea054c7b3fa4895be6450234904bdd
3fe8b4ef466a7402d9735e256fa3601db1ba86d6444d34ca72b8c49233dc20e5

HTTP Headers

GET /land/banners/boxgrotate.css HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 May 2023 10:11:41 GMT
content-type: text/css
etag: W/"e8593b95e61b1a1a110aaab5195653ff"
last-modified: Fri, 21 Apr 2023 11:16:20 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1278
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BXO%2B6%2FA7nYnT6rNKQ6ryvw8%2FFX667yXG0%2FmtteSKxPXz6tJahwNAr%2FcAY17ztXTIwe%2BSzihyjohvwZP9k88GS8MESTXFkwL0l5rRLub8Usu%2FhXgI%2Bsd%2BUuGHZb3zyaS8D2rWpTGB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13eafcc5b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

kit.fontawesome.com/7deea0368b.js

104.18.22.52

200 OK

11 kB

URL GET HTTP/2
kit.fontawesome.com/7deea0368b.js
IP
104.18.22.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (11018)
Size
11 kB (11449 bytes)
Hash
e62478b6530cc566658fd2d20001b706
20026b56cb872f10c8adcc59b61721693da05e95
1b0d4be6be687d94e93e9c393f65ea1238654394490b5ed2bad59887a678f04c

HTTP Headers

GET /7deea0368b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 May 2023 10:11:41 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F1xnV0GGHmUSV4wABFlh
cf-cache-status: HIT
server: cloudflare
cf-ray: 7c8b13eaece4b529-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

wildfungames.com/sw-check-permissions-7c336.js

172.67.70.29

200 OK

566 B

URL GET HTTP/3
wildfungames.com/sw-check-permissions-7c336.js
IP
172.67.70.29:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerLet's Encrypt
Subjectwildfungames.com
FingerprintC4:79:84:45:AC:4F:BE:4F:C2:42:78:F1:B7:BF:1F:92:7A:D3:70:5D
ValidityThu, 04 May 2023 10:54:30 GMT - Wed, 02 Aug 2023 10:54:29 GMT

File type
ASCII text, with very long lines (605), with no line terminators
Size
566 B (566 bytes)
Hash
b9edfabdde9873f5dcf3c5624a441811
a4b23667e57f922003b4fb4d3af17f4b612bf38e
917377aeb4a77917f0da1311045b7ceb7550507e172d69597e5108fa5fc257e1

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /sw-check-permissions-7c336.js HTTP/1.1
Host: wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 May 2023 10:11:42 GMT
content-type: application/javascript
last-modified: Wed, 17 May 2023 06:13:25 GMT
vary: Accept-Encoding
etag: W/"64647085-236"
cache-control: max-age=14400
cf-cache-status: HIT
age: 379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZSdF%2Bek4sIb4CYSyWo9zt2kOU1Wsj6AILmOW7K66Czj9vcB3k1ftqA9792ICi8uyDwVh2JuOS2Xs4fK0Km3ySM9r8TLwnT6vrUs1jcyVu5ec6WUcqXp0QnSkVpRkw0eqq5k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13f02a86b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

cdn.wildfungames.com/land/banners/functions.js?v=1

172.67.70.29

200 OK

3.5 kB

URL GET HTTP/3
cdn.wildfungames.com/land/banners/functions.js?v=1
IP
172.67.70.29:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerLet's Encrypt
Subjectwildfungames.com
FingerprintC4:79:84:45:AC:4F:BE:4F:C2:42:78:F1:B7:BF:1F:92:7A:D3:70:5D
ValidityThu, 04 May 2023 10:54:30 GMT - Wed, 02 Aug 2023 10:54:29 GMT

File type
Unicode text, UTF-8 text, with very long lines (3780), with no line terminators
Size
3.5 kB (3476 bytes)
Hash
6d5c9d03316e29a9727efa3cd4721ab6
94b5ab0e7342032b0ca67769a10fcad235648c64
51db40a6410db2b3a9d9106edd641ee50907e36322b6750335f8e65533f36714

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /land/banners/functions.js?v=1 HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 May 2023 10:11:41 GMT
content-type: application/javascript
etag: W/"4a02b51b59e7ed04f4612597ddf601d3"
last-modified: Fri, 27 Jan 2023 19:45:28 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iswxcqWMdlfLFQHRBp9bDhsJ9BriaS9Lb7eRgR7R6DKGcvQ64jPtypW8qptpL%2Fyn09wnv5escfJZWNVuuvqp4KlpYcEFi41B7nuDikvcbNtkL9t%2FxDD5she3diN4GvtK7ocizjaA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13eafcc3b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

gauvaiho.net/pfe/current/micro.tag.min.js?z=4681922&sw=/sw-check-permissions-7c336.js

139.45.197.251

200 OK

42 kB

URL GET HTTP/2
gauvaiho.net/pfe/current/micro.tag.min.js?z=4681922&sw=/sw-check-permissions-7c336.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerLet's Encrypt
Subjectgauvaiho.net
Fingerprint48:F2:59:24:62:D2:38:17:BE:F0:80:94:87:94:4B:7D:CB:39:2D:D2
ValidityThu, 16 Mar 2023 06:02:59 GMT - Wed, 14 Jun 2023 06:02:58 GMT

File type
C source, ASCII text, with very long lines (41979), with no line terminators
Size
42 kB (41979 bytes)
Hash
d44fd7b96fceca8f81b472766025d0d2
237541097413baf5cd3e703413f8bc9ea538a4db
b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=4681922&sw=/sw-check-permissions-7c336.js HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 May 2023 10:11:42 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b

172.64.203.28

200 OK

27 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (26500)
Size
27 kB (26682 bytes)
Hash
76f34b71fc9fb641507ff6a822cc07f5
73ed2f8f21cd40fb496e61306acbb5849d4dbff4
6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8

HTTP Headers

GET /releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wildfungames.com/
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 May 2023 10:11:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 728b6476f3e2317ec8044d22806d4f94.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: _4_su9DW4H5AJFT-3FrjfgNFkYrC1g6-94DTezcmVn78thRF6Nk-7A==
age: 2720148
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9S%2BYNyEBIuj778wQsJcxqnS2qmEHlIG02sAnpPlPiWUJE1l9dso6B2JVRhrc%2FnxNo8m58n9wpTl853kyDYQENOsH2uaSFYMzs6BaL%2BQWpyJdL3a%2FBLkqXsL%2BlGm70y41afgwoznpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c8b13ee7c1c0894-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css

185.244.209.62

200 OK

161 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP
185.244.209.62:443
ASN
#58286 Electric-IT Business S.R.L.

Requested by
https://wildfungames.com/land/offers/GB-en?campaign=&utm_campaign=&web=1&tcode=
Certificate
IssuerSectigo Limited
Subjectcdn.jsdelivr.net
Fingerprint95:B3:FD:0C:F5:9E:0C:6C:F5:81:AB:DD:5D:6D:67:BF:FF:4A:FD:CC
ValiditySat, 01 Oct 2022 00:00:00 GMT - Fri, 20 Oct 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65326)
Size
161 kB (161409 bytes)
Hash
d432e4222814b62dd30c9513dcc29440
2cac4afc120983921411296bd4e8fd8a94ba237e
4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601

HTTP Headers

GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
DNT: 1
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 May 2023 10:11:42 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: br
cache: HIT, HIT
x-cached-since: 2023-04-28T12:25:42+00:00, 2023-04-28T12:28:30+00:00
x-id: am3-up-gc88, osix-up-gc4
x-nginx: nginx-be, nginx-be
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML