{"report_id":"44fde0e2-25e1-4a21-8d9f-76ecf4956992","version":6,"status":"done","tags":["suspicious"],"date":"2025-09-03T03:51:03Z","url":{"schema":"http","addr":"www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnBzdD0xNzU2ODY2OTY3JnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmcm10Yz10JnNodT01YzhkMzg1YjVkMjgzMmZjMTVkZGQwNjFjZTc0YjljZTVkYTlkZjI2ZDc2ZTRiODA5Y2Q4MDVmNjcxNzk4YmQyYmQ0NGJlYzI5NDliNmM2MzM2MTUyMmYxZjYwMjU2YzE0MDQ5OWNiMTk2ZDhjM2ViNzg3MmUxNTZiMmFmMGQ1OGU1NzZmODg5MGY5NTJhYmY5YTE0YTM0MzNiOTM2MWRiZDIzNzdkZGY1NGFmOGZmZTE0M2I4NSZwaWk9JmluPSZ1dWlkPQ","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"title":"Lust Goddess"},"submit":{"url":{"schema":"http","addr":"www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnBzdD0xNzU2ODY2OTY3JnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmcm10Yz10JnNodT01YzhkMzg1YjVkMjgzMmZjMTVkZGQwNjFjZTc0YjljZTVkYTlkZjI2ZDc2ZTRiODA5Y2Q4MDVmNjcxNzk4YmQyYmQ0NGJlYzI5NDliNmM2MzM2MTUyMmYxZjYwMjU2YzE0MDQ5OWNiMTk2ZDhjM2ViNzg3MmUxNTZiMmFmMGQ1OGU1NzZmODg5MGY5NTJhYmY5YTE0YTM0MzNiOTM2MWRiZDIzNzdkZGY1NGFmOGZmZTE0M2I4NSZwaWk9JmluPSZ1dWlkPQ","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T03:51:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"www.revenuecpmgate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-08-31T12:17:16.989191Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"syndication.realsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-07","domain_rank":176973,"first_seen":"2019-07-03T21:39:52Z","last_seen":"2025-08-30T17:04:48.131974Z","alert_count":0,"request_count":1,"received_data":419,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.dship2.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-09-02T02:45:52.470506Z","last_seen":"2025-09-02T02:45:52.470506Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.addtoany.com","ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-10","domain_rank":28267,"first_seen":"2012-05-21T12:58:18Z","last_seen":"2025-08-28T03:58:49.921952Z","alert_count":0,"request_count":8,"received_data":87480,"sent_data":3696,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.orbsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-05-16","domain_rank":50502,"first_seen":"2020-09-02T21:53:48Z","last_seen":"2025-08-31T16:31:58.006937Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.zlinkt.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-30","domain_rank":4002425,"first_seen":"2025-08-06T13:39:35.476818Z","last_seen":"2025-08-27T16:20:32.280452Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lgtrk.lol","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-16","domain_rank":0,"first_seen":"2025-08-16T21:21:19.500525Z","last_seen":"2025-08-31T03:09:26.906852Z","alert_count":0,"request_count":15,"received_data":290832,"sent_data":9789,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]}]},{"fqdn":"play-lustgoddess.com","ip":{"addr":"104.21.78.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-04","domain_rank":236296,"first_seen":"2025-03-04T15:03:22.127039Z","last_seen":"2025-08-29T04:20:10.262077Z","alert_count":1,"request_count":3,"received_data":113769,"sent_data":3613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2025-08-27T08:04:13.222156Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-29T14:53:30.388188Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.revenuecpmgate.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-29","domain_rank":0,"first_seen":"2025-08-30T18:38:56.215823Z","last_seen":"2025-08-30T18:38:56.215823Z","alert_count":4,"request_count":4,"received_data":101234,"sent_data":4923,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.opoxv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-12-02","domain_rank":213712,"first_seen":"2019-12-13T09:21:20Z","last_seen":"2025-08-31T15:47:00.544508Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.chnsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-15","domain_rank":356919,"first_seen":"2025-07-16T14:39:46.853439Z","last_seen":"2025-08-28T03:01:36.819337Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.dsgc99.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-08-29T20:31:41.575614Z","last_seen":"2025-08-29T20:31:41.575614Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.eln3ax.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-02-17","domain_rank":358654,"first_seen":"2025-03-22T19:46:49.365602Z","last_seen":"2025-08-29T09:24:57.05031Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2025-08-30T05:19:25.866366Z","alert_count":0,"request_count":1,"received_data":1390,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/reddit.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"408cc755e613b4f00fbe10d7411ed087","sha1":"14341990ed687477b3addbdd1a3b50ae8a98589b","sha256":"68ed9b82b62d45cf5d12587a7e9566a4ddeb94d69bcb225e9e3c7268c76b3cbb","sha512":"713379c452034896501703ce09391f7ddfb3b0053276ff0dd1a499eeb3c99ebed97ce8fd77e4910d962ba4ef4d8f1d23dfe7c51a0b7d0537baabd5be5cf05a01","ssdeep":"","tlshash":"891125fe471c94ec0ea36ae9af168059531fd875359b07b01a6fdbf92543008c407a92","size":893,"data":"","first_seen":"2024-04-16T17:58:32Z","last_seen":"2026-04-27T02:02:54.747573Z","times_seen":2751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417","fqdn":"play-lustgoddess.com","domain":"play-lustgoddess.com","tld":"com"},"ip":{"addr":"104.21.78.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"738759989fb4f57136cf2dda807b691f","sha1":"710359a8de6ac558e0a46c19ff015ce7857701c4","sha256":"d298754b8a063a0cabb1aeb4f66136d5aec1100e520d6fe9fac88da5f598bae0","sha512":"7dc9fa62867fabb94368fb6754aa42fe51ebfa801c622c0ff147acb97641beab5b91571b5fac7e93a8efdc3cba809718c3f6dc2b8f68ca1212bd00906e2625b3","ssdeep":"768:JlwEvHVkXc7HFpCefp1/wC/tbkgycYQEAqMrCVFYjuki3i3EnN+q1cqFipCbICbb:3VHVksZpCkpiC/PKFYy3iu+Iv5yJ8","tlshash":"6183e689fec1b0b557b3a561812f920ab17b1a58781e94d0e66bc1c0ed78e8f4127f7c","size":87461,"data":"","first_seen":"2025-09-03T03:51:05.979048Z","last_seen":"2025-09-03T03:51:05.979048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"107e713ee1be819b72679a9b20d1b704","sha1":"1d4a8f1f9af8ae391110851b0c5df66d50a1d8dd","sha256":"8eb57361472f7fa5e3b2def7d28f9a03330413fd300a2223ee2ca3291782a41f","sha512":"503b1a4d5d8ff0a9b6caf23041156bf016983c5243d3c129aa6da4a26b947dc73b4ca76400f3d0bed5b7e67c721948a6f77d4720eec763e78268718e4524ac3e","ssdeep":"","tlshash":"a7f0204ff21e393c86730615309a3c86e43e93708c003230a64fa38306d8b9b574af51","size":552,"data":"","first_seen":"2025-03-02T13:21:48.338565Z","last_seen":"2026-04-27T15:50:32.149879Z","times_seen":35506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27003a7d4b689b2951bdbe802bf40f9b","sha1":"46ca5cdec9e8f92aaea7ae55474ebc0cf3d4de86","sha256":"2b98a6fe5a81345f45a797ea2d8a5b0aa9c7662012d45c8a97b3bec99852fffb","sha512":"1924d25f1ae9d4c7cb6f9178011cfe3307909da941373c016db9e4ae24446cbab13d6bcbcb7cfd6b9c0694a8fa104dd11b91017649f1d28115b6d16dca6c759e","ssdeep":"","tlshash":"2c0199aad1b2008011e305c0a68f5835303786673d0e9758f97eca642f67e3a82421cf","size":658,"data":"","first_seen":"2025-06-21T13:18:35.884762Z","last_seen":"2025-11-02T02:33:39.71264Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fda02627a653f5298b01e673aa0ca11","sha1":"ffeea4a53f4b3254d782c592eabad7d116075e7d","sha256":"f46e0ffa95223ebab5b59b4aab3fab2993e02215e3c8e1b612795f4d6eed6845","sha512":"8944b229d93fc821563d1786a3f32e7314b77e9821242a194143d3b87ae826d54158a0c6443249bd2b9008e6dbb6c1e415de580cc81f8de3a7592a47f1aedabf","ssdeep":"","tlshash":"69016d3a023614320437538eabc756c675f520977452c94d3e1cecda2f9dac3db502ea","size":830,"data":"","first_seen":"2025-04-19T22:01:26.711666Z","last_seen":"2026-01-30T02:02:39.949338Z","times_seen":875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/facebook.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"014bcc757e484e12e3aea6c9d768fd4b","sha1":"4c17157d0012f8002e4e6cf77c5f4a9747792cf4","sha256":"4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49","sha512":"b00fab0ce2e56b56c18e0dc54ac3329d77fc18096e63bc2aef34342770f40dac91c10f7a8a9db1dcc5ce42fbafe637fcb1fdd51994ef937aa00923375476d467","ssdeep":"","tlshash":"dae0ab951236d9864d51093ec71fa48fb3b0b67fa1d8298006bc80b289d20fd3e0ba03","size":429,"data":"","first_seen":"2024-04-12T16:11:44Z","last_seen":"2026-04-27T15:50:31.95961Z","times_seen":17850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b1902ae4f7996eb18289b4aa31838a7","sha1":"e0b3695afae567bbdbcdf7ddf6de864c072fa8a5","sha256":"6ea740c0c352343f3210c5bb91d74a8ce46bd4d7caf8f1c9b28beec0c08c792a","sha512":"ebdceaf26cc211ad63127d4a0f2c8cbaab589563588529c3ed0990e2ea8dc495040017da19b4f1f22014af086bcdcdc475597f4f20d573aa84bf067c78094a11","ssdeep":"","tlshash":"3b110078b978913069911819a4fe9ea0f5ba06213f839ee104dfa804853cfda064afcc","size":877,"data":"","first_seen":"2025-09-01T22:41:23.451706Z","last_seen":"2025-09-04T06:13:55.50065Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/x.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"885be296b72c01b844a2addc97be03db","sha1":"0696c38c7746aa5c930b4a679282a156fc69784f","sha256":"122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764","sha512":"d498e95238c70940c277188c7aba66f260e721daeb220386a80424d5bd4641854019f6c797fb920ed8ebb9ce0b14d2e9b04689671cb2d492edbaa88e18d6256e","ssdeep":"","tlshash":"6ee0c28125115a418d230367db2f104f7332707a715c14d662ad99fde4d506e885bb13","size":297,"data":"","first_seen":"2023-09-17T09:47:27Z","last_seen":"2026-04-27T15:50:31.887101Z","times_seen":12945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/link.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2612b308f45d0aeddbd8540f3cf792f8","sha1":"6c6a34a46b238ae0372b7f6126c8686a3c6b91d7","sha256":"1b1e450814698cfd54d68f041c25c741d2adbde4e8e31a256db1be23d413d96c","sha512":"be13c24e01fa0fcd3796eada128e6b74680d433a553524c5671f97ab8e62e9c24e24ec00710cd28db8088e9743ed35f38a801a464131435a2d58f3b9d31fe50c","ssdeep":"","tlshash":"c22110c1931597dc189621899f308969222f30f6f6bf84d180edc3bca4d2699e807e11","size":1437,"data":"","first_seen":"2024-05-01T00:16:35Z","last_seen":"2026-04-27T03:35:33.397476Z","times_seen":2171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b268c32627d8d13671f43be7c47b84","sha1":"0eebe8bc9958922a2a354b4abdca2f4d326f49e9","sha256":"53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f","sha512":"72f220c33c49e4cf58f9fdd8d1f56e835e6b7f33c50d0eb754b9e7868f788c9f8705d83f06419f1191b9a528397a5ce6637df84fc232daea844410ed7027ed4a","ssdeep":"","tlshash":"bd61b74b774ea8734a5736bac19fb60f2223331f9c6589048914e4d849bcec6501fa7e","size":3179,"data":"","first_seen":"2025-04-25T03:57:25.57786Z","last_seen":"2026-04-23T22:59:46.228673Z","times_seen":9237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/whatsapp.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e8b3ac6bda5451ff39c5ecd6d7b3873","sha1":"fb477a11167000a30e45369e686ec43dd62d026b","sha256":"c15e1379ca2c59f99912500bbc23a0d1d88f43198cbe1b53d87776fa351385eb","sha512":"b9145fa20ccc86c3e3e28ded1df1611ec4bd8ff2fe0d93d392081248d59d77a4982150f85d8ef0b545850ac2a8797a136692e801b23cb26de1227c66e5dd4d24","ssdeep":"","tlshash":"d31100c92110d3a41c97d57edf6e9d46a61f707d75bc24d6039ecb28498f0edb50c845","size":1108,"data":"","first_seen":"2024-04-12T13:25:33Z","last_seen":"2026-04-27T11:58:54.541587Z","times_seen":4473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e998bb147b26903e88f08f39c0e2cfc","sha1":"6c93ab9cb3371591d4031dc60b9c3ae571c3329e","sha256":"ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674","sha512":"ed4bb35effa05b85d02fffbd65abdb28b1d88cf573475dc02c2c5b744914f09d06df2dd3f0928ec921e5e7e52f57d4898e58feeae3c139e36c5fb61e7a982431","ssdeep":"1536:h8fE77gdDGstI0AjiVG1COcfs6SngvUy4JfU8xAaj1rxv6G6zMDfPMUEqdb:2fqgPdvUJ1xlj1rxvV6zPub","tlshash":"09636c9f37056937aa1b30e8a8efa508a036275eaf080954f5a5d4b511fdecd3067f2c","size":71871,"data":"","first_seen":"2025-04-25T03:57:25.562762Z","last_seen":"2026-04-23T22:59:46.188493Z","times_seen":9397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmaW49JmRscnQ9dA","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":true,"md5":"60107c93e4f07017a7b787e809afb4ab","sha1":"135e95561ebaf5b0f24cd4274af2822ea6a49773","sha256":"7c6bf5450987d56b77c57a5a333ec10001cd811bbab7677b4a2a6e2cba40c4d1","sha512":"24f7b570f8cc2640f5dbf57042931775244c1b8aea60da23ec4fff448444b485c9e7112df6c63f37a1eed937413dda4e65be8d730f5ef3cf89967eb8edd2fab7","ssdeep":"96:LI38MnNeSa+ABlxzTnZ12JT/fIuVfsmwmPIHIboIgyEc8xMiPPOMy4:0tn/a3BbzTr2JT/fTV0Jkc6oBc8WiP2q","tlshash":"209163a57430387801790907e6efb36577334e16ba9234a0915c4ab42d2decba635fdf","size":4437,"data":"","first_seen":"2025-09-03T03:51:05.983604Z","last_seen":"2025-09-03T03:51:05.983604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ee805846f6199d173cbaa095b45cc24","sha1":"1e5f3573b89635a3537fc7befdbcc450418b7a58","sha256":"dbcd17d61d5a48b3258d28dab55254de4cb69ed1847db2ca9c6830d82ab77ef7","sha512":"d8a6dd32c236cb6c2b8e31e9d901aa0abbdc877622dad949c1f0bc34f3f5cad6304a5825b014ceb7214fb19ce41c668abd1095ca2d7b33cbb4b566884c18dfe6","ssdeep":"","tlshash":"8e019e00f2680e3d08d551c37acbf1802b2150e26cc2a8196f4cf605cb7981ae2f98cf","size":676,"data":"","first_seen":"2025-05-05T03:28:49.445427Z","last_seen":"2026-04-17T09:20:38.057425Z","times_seen":849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s.magsrv.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":145,"dns":1,"connect":26,"send":0,"wait":32,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.zlinkt.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.zlinkt.com","domain":"zlinkt.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlinkt.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 13:19:59 GMT","end":"Sun, 28 Sep 2025 13:19:58 GMT"},"fingerprint":{"sha1":"0D:83:D5:85:1F:36:D1:3E:36:ED:62:D8:55:80:33:42:06:09:96:AD","sha256":"0A:33:CB:06:D4:92:95:36:05:7E:5E:DE:62:1A:95:BB:F8:50:DE:C4:9A:E2:70:D6:23:1C:7B:7B:D8:9D:58:6D"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.zlinkt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.zlinkt.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":30,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/modules/core.pt5ow5lr.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lgtrk.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248d8f977b4f3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\netag: W/\"6e938442141e4680b5bd4187b8d6c216\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Fpt0OqrFRn1MRMF1RkSw8V6VarhGb9w3wVjudaOIXdvge1iNO%2FJZU6Z5CXKoCQNC1p7%2BYfYpKV3yV4HqAO8HYKEIOS4h2ZIG%2FGqQJuKf8ZAw8rg0ryMQdG8Ld5Ze6my6l1UqW8C6klsbY4jqFOYZy5mG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 25190\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71871,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7e998bb147b26903e88f08f39c0e2cfc","sha1":"6c93ab9cb3371591d4031dc60b9c3ae571c3329e","sha256":"ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674","sha512":"ed4bb35effa05b85d02fffbd65abdb28b1d88cf573475dc02c2c5b744914f09d06df2dd3f0928ec921e5e7e52f57d4898e58feeae3c139e36c5fb61e7a982431","ssdeep":"1536:h8fE77gdDGstI0AjiVG1COcfs6SngvUy4JfU8xAaj1rxv6G6zMDfPMUEqdb:2fqgPdvUJ1xlj1rxvV6zPub","tlshash":"09636c9f37056937aa1b30e8a8efa508a036275eaf080954f5a5d4b511fdecd3067f2c","first_seen":"2025-04-25T03:57:25.562762Z","last_seen":"2026-04-23T22:59:46.188493Z","times_seen":9397,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/facebook.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/facebook.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lgtrk.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248d9799fb4f3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"68925fa8e347041c6006837e73c518bc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZMobboYFuFwr3eYHcj4tke9T6RWV2SIvlwgJ1oAIkJA5Hatji6i9%2FC1oMmcokbG1O4%2FEEJMfnE3bgEigc51dDROqSDwJ06Jjiqdzxdo%2BgIFpAHRtjONxku6SIkPOpFeyI4iq11OfXwG9cH9vA8KFImj0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21237\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (429), with no line terminators","md5":"014bcc757e484e12e3aea6c9d768fd4b","sha1":"4c17157d0012f8002e4e6cf77c5f4a9747792cf4","sha256":"4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49","sha512":"b00fab0ce2e56b56c18e0dc54ac3329d77fc18096e63bc2aef34342770f40dac91c10f7a8a9db1dcc5ce42fbafe637fcb1fdd51994ef937aa00923375476d467","ssdeep":"","tlshash":"dae0ab951236d9864d51093ec71fa48fb3b0b67fa1d8298006bc80b289d20fd3e0ba03","first_seen":"2024-04-12T16:11:44Z","last_seen":"2026-04-27T15:50:31.95961Z","times_seen":17850,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/1.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/1.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42294\r\naccept-ranges: bytes\r\nage: 6840\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"7c72ffc5f483968dfe0a9d58e86f744c-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SGWN87FVWKZAHQNSTYY\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFkjNGwW5XPJF9R%2FMrbIPGLuOTszHCZr8NUm5vB1VmF6xOgUNAKT0xOTawQ7ZQAcCy%2B5n9NUq4ZmjSGNfcO9ShKrIr9zb57WBA%3D%3D\"}]}\r\ncf-ray: 979248d7cc8a21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe44a0f148e5200220c45e0a1044439b","sha1":"9e2576ab30975833cd57ba00fa422536fc016959","sha256":"f8d444c7abd8f4ea2117324676582b1117f45a17816ae17c6cecbe9dac1a4f87","sha512":"1d00e005a8124477fd81406367c842ab193fc47289d7080f014a34c7245a0ad87ec0ca1a9fecc7dd2a9a2d838bc8d8572a8562aa561ac0f346b4cbadac85fbc1","ssdeep":"768:zgFx12CxAlCKjvdKehbqGkxHrirIgbogxGgqYziy0uXknO5a5D2YE:zg524KC+vWxsbog0I+y00oEa56YE","tlshash":"e113f1435438fb2e972f91b71c8171d390e9f8cb883e15660cad20569fc8e8d6617b5b","first_seen":"2025-03-06T05:14:21.109324Z","last_seen":"2026-04-17T12:08:01.543974Z","times_seen":887,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/marker_2_1.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/marker_2_1.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3144\r\naccept-ranges: bytes\r\nage: 24322\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"4da42491324613138f8f5b5d898f032c-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SMVQ4X1WQ9NB9NHBDYC\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5up2M06IxUrCWAfsEFXT1tqGv748rbDiRonaeem7yOPPOy06vCAT5ZwCCWyQxbnikXvEaZJzTblHXgL%2Fr8ksv9qiKZ0fekfPA%3D%3D\"}]}\r\ncf-ray: 979248d7cc9221fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e8b4ffa8ed05fbdff19146a518d8499","sha1":"18fe66a8be6b3771dba2942c92dd62627bcf1cda","sha256":"b5e70a788442d120438fef3718daa96387cc8ba5fd1739d354055bada38e2f82","sha512":"5d6173c8bb4f30a4a91759b15ea1ee78dc67b1b578b15b7869e13f7d1d20a43ec8207b4e3abe7a239786bf0e77266a2601ac3088fa9f20cced5dadc501fc132f","ssdeep":"","tlshash":"e5513b37c814086fe7d159bcdfa3d605d29a929388665da4c149d84b637284de3351bc","first_seen":"2025-03-06T05:14:21.100589Z","last_seen":"2026-04-17T12:08:01.538362Z","times_seen":891,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:28:32 GMT","end":"Sun, 09 Nov 2025 10:28:31 GMT"},"fingerprint":{"sha1":"49:F9:A3:64:80:4E:E7:1E:08:38:FE:16:31:4F:0C:5D:A2:56:E9:39","sha256":"60:92:1C:94:D6:08:A7:43:1E:69:C7:33:E1:1B:03:49:60:49:78:E2:72:D2:98:57:09:3A:90:E6:50:34:AF:48"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":1,"connect":31,"send":0,"wait":28,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 979248d8c965b4f3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QNAPmGslsP2naJJS%2FPX7uebUTbQ1rsEHjtw%2BrQwgdlGhJFgU%2B7TE11NP9K969415lqS6XpPvwGBgcbFYJf8IMPzBTGkkOHIu2caGU5aBTAP7J9d1AEcIDDPzOjkiUZkZkRbe3hUJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 3713\r\nlast-modified: Wed, 03 Sep 2025 02:48:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"41b7ed0cbe240173eea85148fcba633e","sha1":"39acd5fe099974486a1c9ba11ba0fe7be6bc97ca","sha256":"274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad","sha512":"1ee1d21b138a9f55f823b93d809b3bc58453ddfc3b3ee4d00a1010bbd4ec296546277c6777819cfb744c393ba93fe7578b60ccf0259fd17901f4542714d6c06f","ssdeep":"","tlshash":"c701448bf415382d9673172434e93d89d87e93609c402730b28f62e746c47e75b07b95","first_seen":"2024-01-05T10:14:09Z","last_seen":"2026-04-27T15:50:31.884691Z","times_seen":39678,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lustgoddess.com/favicon.ico","fqdn":"play-lustgoddess.com","domain":"play-lustgoddess.com","tld":"com"},"ip":{"addr":"104.21.78.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417","date":"2025-09-03T03:50:42.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-lustgoddess.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 17:46:22 GMT","end":"Wed, 26 Nov 2025 18:44:01 GMT"},"fingerprint":{"sha1":"48:9E:DD:76:9B:1C:88:66:A7:DD:C6:CA:CC:AC:47:87:1E:F8:FF:0F","sha256":"EA:FB:A9:18:02:61:47:3A:C4:AE:12:4C:DF:5F:1E:38:4D:AD:AA:8F:1C:8C:19:8A:92:48:0A:C5:29:69:7E:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: play-lustgoddess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 03 Sep 2025 03:50:42 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQeJSGBBJmTwGt5TRY822gr1GUtEK8n52Nr60hm8%2BpXYWskIyo7a3tYrkl1xp%2FDgh3CK4SKER0ASefGrh8RffDM4Xsmx5FdEu8MAPrvoJfqChA%3D%3D\"}]}\r\ncf-ray: 979248d25f58569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-27T16:17:49.230033Z","times_seen":497304,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/cursor.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/cursor.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 43718\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/webp\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\netag: \"51b7533a5c5c9e4be18ed138871884ff-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SVRF0AVSNPFAY0PEX4W\r\ncontent-length: 4748\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hr9sZTVYTf5fwM6jntLYmtrBhLjJH5%2BToVL%2FLpea%2Fb6WwxnVeOdzgJ2C36IvT2ejZsAYn9a4cPWb7WVwtQ1xNkbV4k7uuEzUw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979248d8fe93120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4748,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6c29b51aacfe0e9ff8b4ee1c7585a31","sha1":"4bffb872f2e439ff1b3afcd5cf42bb86723d9f71","sha256":"a1240bf95f0a0d01b762ae67561f305f465ed747a99ace9e682f041571cb3634","sha512":"73638a2036f7356a86960c752a2681adc96a05541df631c4d2f39dba3fd2afe06edeeb56ab2d465b2f66f63710137540b9a4bf69d206a911e6231aca82861bf5","ssdeep":"96:v27jeVMdPL08z1+YeBPQYdNwSHOy0m3212OkErP9XD1AuoKOqG:v22VM5LFz1+31QylYk21ZZPhDjowG","tlshash":"58a18f818e49c38155734cbb1f5d3be452eb605d294dfb936156fbdb011d6314005ea8","first_seen":"2024-12-20T16:58:03.478104Z","last_seen":"2026-04-17T12:08:01.527176Z","times_seen":907,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.revenuecpmgate.com/favicon.ico","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmaW49JmRscnQ9dA","date":"2025-09-03T03:50:41.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"revenuecpmgate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 10:31:51 GMT","end":"Thu, 27 Nov 2025 10:31:50 GMT"},"fingerprint":{"sha1":"9B:93:AB:0D:BE:A3:40:A9:58:BE:A3:A6:F2:18:92:29:E2:1A:7C:32","sha256":"3D:E6:EC:90:1B:27:54:04:90:26:18:BF:8B:27:48:04:F0:C5:14:27:1A:9A:E4:4E:F5:34:6A:12:D9:06:9D:41"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.revenuecpmgate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0yNzQ1MjYxNw\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xMjGlcv_NrP9h6KrdNilW2pxFxL6jxHaNGAoQydVmG4; cjs=t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"www.revenuecpmgate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:42.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://play-lustgoddess.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 21130\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4jRF7G7NdDpwprebPTHICY4gQOH%2BnpUkCqKMFakkFYTKC7XJZTa6uKreAO66SjLrmxjPcLW%2FRt29n542TcSwurZ0O9t12bUQQ%3D%3D\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K46V5GJ4QZ8B8FZJ287BCRGK\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 979248d6bb9d21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23384,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11567)","md5":"5e05ae6aae6f7560a321d1ef4aa40226","sha1":"376f845a5d0641891a6435c6f31575dd21c181e9","sha256":"c544028e8b51d72caf7d213ae9078e258cb625ce1fe54230d3cf83a69c0b587b","sha512":"7a487dc2d30fd2280c183132cdf087a49a0ee1acd1c79be89d9ac0620cf94a7da729c05870f201b03eff44b6130134eb193509f881964570e030390361fb3dbf","ssdeep":"384:dnOflNb2KjGkejPO0cjhFFkxmxzrh02DSNYx5MstvvG4/v:dnOflNb3GkejPOxBTv","tlshash":"9eb2d86357530428e51371952bfa6b483235d61f9b039f787dedb1a0cf8fa8849e2349","first_seen":"2025-06-21T13:18:35.876996Z","last_seen":"2025-11-02T02:33:39.707662Z","times_seen":766,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/marker_1_1.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/marker_1_1.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6640\r\naccept-ranges: bytes\r\nage: 34827\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"b93224e7b6e74fdf8ed3071e60b76861-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SGWPQWV096AG3YMTCXV\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkeMqANEh%2FECF%2F3X%2BurtWq2OGTcfD4RrteK1naWnm8ZNpH7UfhpOx%2FkpQjX87xCMsXE6TksQWOnPnwOSqNPF7PSiSja70Ac0zw%3D%3D\"}]}\r\ncf-ray: 979248d7cc8d21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bbb0193e42d13a57b665d92e75ea35ce","sha1":"001b2c91d2c49214a6bd6a9a152c01681ed1f6a9","sha256":"5438710fc83c1a8759df03e18cd2c65ecc18b36525fad33143b5e386a9ff830b","sha512":"ab5dae73917f8a0aaa71a70e5c1cd24e4bbd44a7cd9f7ae88e483535a07d77686083fa3375adb6e586153e61faa84c8d54213143b32e6a1c2c0b909fea36db4a","ssdeep":"192:xqCujhXhnwWnVWnrnd9BRLYi0oFyPQOO43oMz17xKKAt5K:QbtfVWrnv7rrNp43oMrQ","tlshash":"fcd18f58043d30b2ec8df5194bb5105f131a4671e3a170f5eecae1ba8a51369a37dbc8","first_seen":"2025-03-06T05:14:21.102413Z","last_seen":"2026-04-17T12:08:01.537613Z","times_seen":889,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/3.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/3.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50062\r\naccept-ranges: bytes\r\nage: 29099\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"ceb2dc96bed7bac7697ecf3661434578-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SQ72FXMVT9KKYTSJRAG\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxftBriFwhuG5%2FSOFaIRTpRpAvPjngJfhY7wxnN1pB6AppnsTzVomEY9rtj0BlzjEGF9qmpefMBeF07ffTe6U%2BRnKpmDc45e1g%3D%3D\"}]}\r\ncf-ray: 979248d7cc9321fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":50062,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d4aca73b3d25ee0c5a3988cef6d37a2","sha1":"73172b51401932ac74c4e28a4dab5eae192e4c74","sha256":"7b652297f5a18797efafd8765736f9aae21834c437e1bff14a09739f285ca92c","sha512":"1413e96b5d359b2e7f8b17d13f3e4e6ef036a2a845287c60f2d2d9ce43af9222229d755569745dde7f80ad1b0dc660fb9e83923d4a697c4943e7809b8ea25f0d","ssdeep":"1536:TMRMiWHl+lARD8Qg/s8t/WFJ8E8svbGGUCA6/UU:P1F/SFpBEnjLUW/UU","tlshash":"8d2302ee13f917d88a76218333db407875b758822b8fd24fda4994e606341dcbc6a70e","first_seen":"2025-03-06T05:14:21.114716Z","last_seen":"2026-04-17T12:08:01.532098Z","times_seen":790,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":27,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:30 GMT","end":"Sun, 09 Nov 2025 10:26:29 GMT"},"fingerprint":{"sha1":"5F:47:25:B6:96:C0:63:5C:07:7B:C4:6F:89:5C:87:0B:49:94:70:EA","sha256":"B5:77:8A:78:DA:8C:29:56:B2:2E:AD:B2:BC:02:75:DB:93:32:DF:FD:CA:6F:97:04:2E:34:4F:41:C4:5E:7B:09"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":30,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/favicon.ico","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/favicon.ico HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 24941\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAMGKcwWuhlqUndKKE%2BZLYbX%2FPwJ0gAHQyqDGercNw%2BMZh3OP6dwFwGqu6xPe%2FucM8SHrzI005TgpIf02cVEbV%2BkfKp%2BR8PNwA%3D%3D\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22T2891EXEWYXJP5DSD25\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"561d22dce3d3d7e3fc9444fa023f908a-ssl\"\r\ncf-ray: 979248daae94120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e928aeb43ea2ad11cda9d1bc798c9012","sha1":"6708c88a3d7a8818492823893c7f6f23ee88e5f7","sha256":"b2c232c53020199bf08a0a54ec7fc2417644e30f496beee9a25ffa3e56054674","sha512":"997526cf5c835c7c6729e82020b53c3412d19892c0b43713d632c1d40353e2a82c0d1506ede28b8ea8ef2e8bb7e40cb2c14605cce8ccfc3ea40a258a39d4d659","ssdeep":"192:omT7VmsRxiBxaLiZyulsfRkhrefFNVHkdPuPTkzVvtSId+Q35wpXYW:omXfaxmiZWZ1HkRgUvtS9QJwpI","tlshash":"f4628e573d8483fcccaa4c36815b95812ff234bbe37032de658ab73616910614d16d39","first_seen":"2025-04-19T22:01:26.689317Z","last_seen":"2026-01-30T02:02:39.947204Z","times_seen":870,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/x.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/x.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lgtrk.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248d989a3b4f3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=864000, stale-while-revalidate=30, public\r\netag: W/\"7cdbf2d5d94ad6e7bf6e7cc1418dd608\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DflswRmShzbs0bekkKGUaK5iC%2F0okK6zTl6fKGWY6jRp%2Fl4kZJDSS%2B2OdL70GJiYBlz4WYzdRQlAYfbsXc4bC8HyBEeJMLfJH6RQe5yXOd0GPde6rAS4ccWttE0%2BcQClAp%2FTlh%2Bgbd5X0ciIUM9jf%2F92\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 24135\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"885be296b72c01b844a2addc97be03db","sha1":"0696c38c7746aa5c930b4a679282a156fc69784f","sha256":"122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764","sha512":"d498e95238c70940c277188c7aba66f260e721daeb220386a80424d5bd4641854019f6c797fb920ed8ebb9ce0b14d2e9b04689671cb2d492edbaa88e18d6256e","ssdeep":"","tlshash":"6ee0c28125115a418d230367db2f104f7332707a715c14d662ad99fde4d506e885bb13","first_seen":"2023-09-17T09:47:27Z","last_seen":"2026-04-27T15:50:31.887101Z","times_seen":12945,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnBzdD0xNzU2ODY2OTY3JnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmcm10Yz10JnNodT01YzhkMzg1YjVkMjgzMmZjMTVkZGQwNjFjZTc0YjljZTVkYTlkZjI2ZDc2ZTRiODA5Y2Q4MDVmNjcxNzk4YmQyYmQ0NGJlYzI5NDliNmM2MzM2MTUyMmYxZjYwMjU2YzE0MDQ5OWNiMTk2ZDhjM2ViNzg3MmUxNTZiMmFmMGQ1OGU1NzZmODg5MGY5NTJhYmY5YTE0YTM0MzNiOTM2MWRiZDIzNzdkZGY1NGFmOGZmZTE0M2I4NSZwaWk9JmluPSZ1dWlkPQ","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:40.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"revenuecpmgate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 10:31:51 GMT","end":"Thu, 27 Nov 2025 10:31:50 GMT"},"fingerprint":{"sha1":"9B:93:AB:0D:BE:A3:40:A9:58:BE:A3:A6:F2:18:92:29:E2:1A:7C:32","sha256":"3D:E6:EC:90:1B:27:54:04:90:26:18:BF:8B:27:48:04:F0:C5:14:27:1A:9A:E4:4E:F5:34:6A:12:D9:06:9D:41"}}},"request":{"raw":"GET /api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnBzdD0xNzU2ODY2OTY3JnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmcm10Yz10JnNodT01YzhkMzg1YjVkMjgzMmZjMTVkZGQwNjFjZTc0YjljZTVkYTlkZjI2ZDc2ZTRiODA5Y2Q4MDVmNjcxNzk4YmQyYmQ0NGJlYzI5NDliNmM2MzM2MTUyMmYxZjYwMjU2YzE0MDQ5OWNiMTk2ZDhjM2ViNzg3MmUxNTZiMmFmMGQ1OGU1NzZmODg5MGY5NTJhYmY5YTE0YTM0MzNiOTM2MWRiZDIzNzdkZGY1NGFmOGZmZTE0M2I4NSZwaWk9JmluPSZ1dWlkPQ HTTP/1.1\r\nHost: www.revenuecpmgate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.19.5\r\nDate: Wed, 03 Sep 2025 03:50:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nLocation: https://www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmaW49JmRscnQ9dA\r\nHost: www.revenuecpmgate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c49124a174e849ed5934caaa41f8c40a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4583,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":298,"dns":15,"connect":91,"send":0,"wait":109,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"www.revenuecpmgate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_ZGxydD10JmluPSZrZXk9ZTMyNGQwN2M3NDczMTdlYzg5MjI5NjYzYTA1MDNlY2ImcHN0PTE3NTY4NzE1MDEmcmVmZXI9aHR0cHMlM0ElMkYlMkZyZXVybC5jYyUyRiZybXRjPXQmc2h1PWIzOGM2ZWVmN2M1NTc0NmZhMzE0ZDcwNjgyODA2Njg1MTg3YTIwODZiYmM3OWQ2ZjY0NGU5Y2RjMzYyNDJiMzQ1ZmU5MTA5ZWY0OTQzMjBlOTA4NTBhY2Y5Nzg4ZGUwY2Y1ZjU4ZGNmNzgxMzc3ZTMzYzMwZjBmNGJmZTZkNjQ2NWNlZDMwZDIwMWZhMmEyYmRlZjcwM2Y3YThlYzE1ZTgwNWIzZDhkNmY0YzM1ZTQ0ZmJhNTliJnBpaT0maW49JnV1aWQ9","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:41.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"revenuecpmgate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 10:31:51 GMT","end":"Thu, 27 Nov 2025 10:31:50 GMT"},"fingerprint":{"sha1":"9B:93:AB:0D:BE:A3:40:A9:58:BE:A3:A6:F2:18:92:29:E2:1A:7C:32","sha256":"3D:E6:EC:90:1B:27:54:04:90:26:18:BF:8B:27:48:04:F0:C5:14:27:1A:9A:E4:4E:F5:34:6A:12:D9:06:9D:41"}}},"request":{"raw":"GET /api/users?token=L2V6OWlwemRld2I_ZGxydD10JmluPSZrZXk9ZTMyNGQwN2M3NDczMTdlYzg5MjI5NjYzYTA1MDNlY2ImcHN0PTE3NTY4NzE1MDEmcmVmZXI9aHR0cHMlM0ElMkYlMkZyZXVybC5jYyUyRiZybXRjPXQmc2h1PWIzOGM2ZWVmN2M1NTc0NmZhMzE0ZDcwNjgyODA2Njg1MTg3YTIwODZiYmM3OWQ2ZjY0NGU5Y2RjMzYyNDJiMzQ1ZmU5MTA5ZWY0OTQzMjBlOTA4NTBhY2Y5Nzg4ZGUwY2Y1ZjU4ZGNmNzgxMzc3ZTMzYzMwZjBmNGJmZTZkNjQ2NWNlZDMwZDIwMWZhMmEyYmRlZjcwM2Y3YThlYzE1ZTgwNWIzZDhkNmY0YzM1ZTQ0ZmJhNTliJnBpaT0maW49JnV1aWQ9 HTTP/1.1\r\nHost: www.revenuecpmgate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0yNzQ1MjYxNw\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xMjGlcv_NrP9h6KrdNilW2pxFxL6jxHaNGAoQydVmG4; cjs=t\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.19.5\r\nDate: Wed, 03 Sep 2025 03:50:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nLocation: https://play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417\r\nSet-Cookie: pdhtkv=true; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\nuncs=1; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\npdhtkv28=true; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\nuncs28=1; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\nu_pl27452617=1; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\niprc_c+d7cf3339fb333b0c28c5046a119c7bb4=1281620; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\niprc_c:1281620=1; expires=Thu, 04 Sep 2025 03:50:41 GMT; path=/\r\nHost: www.revenuecpmgate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f94c5ce9cb94c13a7f3b416aa00989ba\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87780,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":873,"timings":{"blocked":288,"dns":1,"connect":93,"send":0,"wait":295,"receive":1,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"www.revenuecpmgate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/LG/lg24on/index.html?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:42.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /LG/lg24on/index.html?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://play-lustgoddess.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 03 Sep 2025 03:50:42 GMT\r\ncontent-type: text/html\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\nlocation: /lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K46V5GDDXDQ66D1GMSCFN7CZ\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGfSGG5rXWlmfbMhhFP2lQH%2F6jbe6%2BI0qKDjHIIR8IyA1hfD4JKzHa0vTR2rBkg75tjiZJG3cjBjaswxBKDbyjYrP8G3EXFaEQ%3D%3D\"}]}\r\ncf-ray: 979248d58a7e21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23384,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":188,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/label.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/label.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27126\r\naccept-ranges: bytes\r\nage: 40647\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"0b79c8aeeb55505ccaef3892ca3c5f6f-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SGVQ43DDYETV496R2NV\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R97NWPeV%2FBsXsX0NEm0rTAKIL%2FWSvrffEy7EdqWVjxJR2tuproLozWz1Oux7QBRle%2FXYtGzwgCJK6K%2BAUfQR1XEkE6GrlgDczg%3D%3D\"}]}\r\ncf-ray: 979248d7cc8821fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a4f9ee224c2e6ce7baab69432eb106f","sha1":"a950280dbab07ebeee5917a0cd4e198d4bd77841","sha256":"624e6eb13e9fdfb72f98a5e151f8e56672c8060870c42770e1e615cedeb400d9","sha512":"a21aba9302edbd928212c7f60b385ece28cb4d9514ade539e6c79a38ecad50fe6d302bea80149aa4293182ab2a6c4298058feb139954f49e6944412b1c4a546f","ssdeep":"384:09FSANn9bzc8WZ7yaO4WVSEFP4HChwUBixqEmNlLD1x7srB2CVuEI:GVNnlWZdO4ASe3hwhxNmvLpVsrB1u","tlshash":"20c2e17e972251c0bb352d7663012a153ca90f73ae661f4dcc4de646c88ee2206bdedd","first_seen":"2025-03-06T05:14:21.112586Z","last_seen":"2026-04-17T12:08:01.53379Z","times_seen":889,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/marker_1_2.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/marker_1_2.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2552\r\naccept-ranges: bytes\r\nage: 45707\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"85749aa895a4be3b4f76a1d7e6d7310d-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SMHDS4ZC7KBV35ANSQE\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDS4eoi4Qfc8w5d%2BGdwyp8PpUxcFQg0feZPVk%2Ffp0SqHoSHEul%2Bh%2Bp7calcAbiNtIvybcXJKb30UCvpUNaRy8eVQm7epoRZ%2B6A%3D%3D\"}]}\r\ncf-ray: 979248d7cc8e21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62e98f5c81d17109d27314102933bce9","sha1":"5d1bfa2afc50e82680a22f5f2014bfb9ba97c569","sha256":"9905e0e996bf0c127f42336542eb769541f54791ab7bd22ee1c7e44fa8226cc7","sha512":"1d90a7ee4dfcc8b5c5f65cb46066af7f053d948ecb8589caef6d44a3dec9e37bbe29d5cee492f54b95c087d5ce40514e428167813c2ff2c6bfcd3a4ef51227c4","ssdeep":"","tlshash":"bb51398816684eb8f99e72ea484179fdf9626b39b07be630450621ed01ebf1dc51fc34","first_seen":"2025-03-06T05:14:21.104158Z","last_seen":"2026-04-17T12:08:01.530332Z","times_seen":891,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/2.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/2.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50818\r\naccept-ranges: bytes\r\nage: 46162\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"e4030da67ff4dd22adcae2ddb8ab40fd-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SM6Q922AQZZQGJ83DJG\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yA1yy9xq8PFM15LY%2BsWk%2FsdUXkMFEHtUs7s532J33U7VazD9gh%2Bn99RmstOBc0RCmIbXMDUwUxdO2fxc6lI7mcnqpetftuV9SA%3D%3D\"}]}\r\ncf-ray: 979248d7cc9121fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"605e082bf8356cabcb842b863f598708","sha1":"f767af75cf7da8ac7cdb0efb1ae43a3cd6e9ed84","sha256":"77834442ed0e8f36b31d755e9908d37f36067f0cd94479e9601a1aba84f6d29b","sha512":"a59d86f6164876c613454dbe2ac3b29ae8a18a7920b018fb795cfa856e8b006745897eb5a84742100de7427680ed142f8ea8d162cb67ddd7cf32f5ec30a527b7","ssdeep":"768:5DXXpsZhXF4lUiVnz8yg/xAqJMuOxKNxxRN85NwFkgtE9uoNDiMp+JxGlm:5Dne2FBg/xJJIqzPqwFkBNNRpYv","tlshash":"fd330243d633d19cf73607f919383f878322e99127ba475d47051fad61125ab1ddac90","first_seen":"2025-03-06T05:14:21.113365Z","last_seen":"2026-04-17T12:08:01.524659Z","times_seen":886,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.opoxv.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.opoxv.com","domain":"opoxv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opoxv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:25:12 GMT","end":"Sun, 09 Nov 2025 10:25:11 GMT"},"fingerprint":{"sha1":"68:5E:F5:98:80:4F:51:62:3E:34:DE:D7:9A:F2:A6:B0:4D:A9:FF:09","sha256":"BC:6E:9E:51:56:04:CF:25:D2:4F:63:33:72:D6:77:40:07:C1:10:91:CA:BE:47:D5:EE:CA:5F:0A:5C:EE:D5:DD"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.opoxv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":176,"dns":0,"connect":35,"send":0,"wait":28,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.chnsrv.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.chnsrv.com","domain":"chnsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chnsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 09:16:35 GMT","end":"Tue, 14 Oct 2025 09:16:34 GMT"},"fingerprint":{"sha1":"59:4D:80:EA:7C:DE:6F:33:62:C3:4A:29:65:1F:47:62:05:CF:71:E8","sha256":"07:87:A9:C4:F7:7D:F2:D3:EB:57:06:76:8D:2A:38:6C:41:06:E0:42:EB:92:0E:5E:10:5E:CE:48:B8:F9:78:95"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.chnsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":143,"dns":1,"connect":26,"send":0,"wait":39,"receive":1,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmaW49JmRscnQ9dA","date":"2025-09-03T03:50:41.318Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.revenuecpmgate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.revenuecpmgate.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417","fqdn":"play-lustgoddess.com","domain":"play-lustgoddess.com","tld":"com"},"ip":{"addr":"104.21.78.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:41.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-lustgoddess.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 17:46:22 GMT","end":"Wed, 26 Nov 2025 18:44:01 GMT"},"fingerprint":{"sha1":"48:9E:DD:76:9B:1C:88:66:A7:DD:C6:CA:CC:AC:47:87:1E:F8:FF:0F","sha256":"EA:FB:A9:18:02:61:47:3A:C4:AE:12:4C:DF:5F:1E:38:4D:AD:AA:8F:1C:8C:19:8A:92:48:0A:C5:29:69:7E:F5"}}},"request":{"raw":"GET /c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417 HTTP/1.1\r\nHost: play-lustgoddess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.revenuecpmgate.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-original-referer: https://www.revenuecpmgate.com/\r\nx-request-id: 37b79cdb-a636-4bb4-9aa7-17a74c7bd5b3\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHtPptcIbbJC69WmVMelov%2BVurinHOjoLMxkQTFetTpTsRvP2XC5mCQ98ivYeDkAPda9js7%2FDJyMkTJLcYYfo5xvxhUzk0nzGuGSC1cHJTcAYfQJ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 979248d05bd84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87780,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65244)","md5":"49be6f4b1013f5ed082224e9439cb708","sha1":"92d1355393664bbf345247b91b324c8b5ac8709e","sha256":"23b3bc8767489f2bffc98ec133255d677fcbc438117c8983d5ed909f4f9c7132","sha512":"318c7b3980a7c027a55837b096a7f32bc1a039cec818c3671d4b37798364b8a76d8afb4912b5f4c470a17e55c62b1d9bbe1ee5560a57fd368790b527077f425d","ssdeep":"768:1lwEvHVkXc7HFpCefp1/wC/tbkgycYQEAqMrCVFYjuki3i3EnN+q1cqFipCbICba:7VHVksZpCkpiC/PKFYy3iu+Iv5yJr","tlshash":"9c83d589fec1b0b553b3a561812f920ab17b1a58781e94d0e66bc1d0ed78e8f4127f7c","first_seen":"2025-09-03T03:51:05.966173Z","last_seen":"2025-09-03T03:51:05.966173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":24,"dns":4,"connect":1,"send":0,"wait":79,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/hand_3_2.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/hand_3_2.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5790\r\naccept-ranges: bytes\r\nage: 5698\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"9ef8e903338e5b3e79e43d7d6e050c3e-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SR738KW4ME0MYWC4VGM\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsTXGGz26jLu8b%2BBAgL8W0DUj4ut8mGqfqg9RK9jsoR1NPjdWx71XLLSfdzLKh5yhCYc6%2BinRgHbAFs4GGOwHdR8ZviI1k14jw%3D%3D\"}]}\r\ncf-ray: 979248d7cc9821fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5790,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59b4039534c6bfa5132c7346435acacc","sha1":"11c78b3718e4ea451b87e9930b65f64d055495dc","sha256":"2ffddf412e80905ac2bc8ecb423c51f3826f1704134820b3b9f317902b830374","sha512":"21a0fd713ec193b0b59daf28218c474511001f9f41478e64b7fec624e04c02c0f8ce90066a0e806cb6560af308aba683215c7a312bb551a85c5752233e210aee","ssdeep":"96:h5k6elljGZM3KDVKlh3e4iCIDM9UuuGm46VCJg6XmxT7kk3aS2f6VZjn:c3YM3KDe3nWyUubkSgxTsvSVZ","tlshash":"2dc19fc7137129fcfe1bb2f28060526be5fb11a75a4e6006c8d995a1513027cd7d9ef2","first_seen":"2025-03-06T05:14:21.117545Z","last_seen":"2026-04-17T12:08:01.531422Z","times_seen":887,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/marker_3.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/marker_3.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6686\r\naccept-ranges: bytes\r\nage: 5503\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"3ef731845707b51272f5a60b28b99fe1-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SRTHQGYYHQEQP4TXK7V\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LntSOmsmuUrRMRAgIKVShe2fDBfQiCvPZ78s0e%2F5bRPL2Ltzo4fivC3gEu02XhyrI6CT1gKzpnvaSPFinhXCSa3jIKHPxdoBVg%3D%3D\"}]}\r\ncf-ray: 979248d7cc9a21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":6686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6c3b53e19e7e34ed006212974b1e7d9","sha1":"830e28e0e11843d6b7c8303198c484fb70b1a8f7","sha256":"92e173ad824fd0ff835afc9bdbea13e4d0777519ba801000a2ffb5649d382d6e","sha512":"d65ea191b18752257459dc74b0d8bdc24f9280d49827f886dfd5d8e50411401b19076e6500533917f24e7c1bcbadab0aa0f3f61d73810262fa8aa84ffba33910","ssdeep":"96:ETKB6O6+212tXt8RvzPuV3+FBYRZrpTW9Nc6lYj9EKzzGhEJN96Qzsd0op5I/+Kn:RkO58RL7URZF4NbijRqhSN96Qm0Qe32","tlshash":"0ed19f0f95415b15d06115fa2d0896c76d93ca278cea781e5ce8e703325b3302f2b9c5","first_seen":"2025-03-06T05:14:21.108617Z","last_seen":"2026-04-17T12:08:01.521811Z","times_seen":889,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/bg.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/bg.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11112\r\naccept-ranges: bytes\r\nage: 25623\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"d6f8f2e2e79dc3070164e8e52ac76d4b-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SWV7MW1VCZB3ZFB49WN\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oUJfcMQ6KXnAXGme5IJoyicbGRalHLw4GZ%2B0EkArWiD2%2Fz%2FkCEvQ0lFXK6WxI9sSD%2BMqbdvarvO%2F9ItdAGUVuGob02aFoV1Kg%3D%3D\"}]}\r\ncf-ray: 979248d7fcd121fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":11112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b3a3b5388de5ecaa6dcc22f3bd41549","sha1":"26ff542089ddfeabb2f69bc3c8daedf372cf890d","sha256":"ddef3f488b6680c7d5b064485ad21a79aa1f176e991397b46cb23f5b4f595d29","sha512":"c2abc0a12b96821edf08a09c50e5f9f3ce154bf6b87e8e9c887c96e3fdd7061df3bcc8b8ad5eec93810d1ebbabd292090878549e12fa62964bd30eccb8e4e762","ssdeep":"192:ntEwJ8l47gEC3riEFb6CQCrW1lfDpig4jJROisabm1dTX4pPDCw/KWRAYt++0xrc:tEwq4lC3pZQgcFx4FGdTUGcPAiRhPQ6","tlshash":"0332bee35e389a48cd762b76893017a6022b3f2137175d2a91b5010e2493e5bca5f383","first_seen":"2024-12-20T16:58:03.475233Z","last_seen":"2026-04-17T12:08:01.542227Z","times_seen":791,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dsgc99.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.dsgc99.com","domain":"dsgc99.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsgc99.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 11:51:12 GMT","end":"Mon, 24 Nov 2025 11:51:11 GMT"},"fingerprint":{"sha1":"3D:6E:45:71:D5:57:35:AB:63:40:40:AA:08:75:8B:79:BE:FD:25:ED","sha256":"C8:5C:69:F3:BB:35:38:0B:B0:C1:10:B4:34:77:01:C6:F1:04:AB:57:33:98:C9:41:6E:17:D4:BE:EB:3C:28:A2"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.dsgc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.dsgc99.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":144,"dns":1,"connect":29,"send":0,"wait":37,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/link.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/link.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lgtrk.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248da2fff5690-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"dd9ed66e949db0815ba57f9db1b47951\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qHoIi4ZBpg4isQMkLqF1Omt93p3m99YobxPRAShRdlMJMcmvsor4IiOeEYsjfsPqwe2nVMtcLmWfB8iHkQSa7ZuEIXHzUpcsQ69ictpr%2B5zI5ZhHeJrD8y9oB8dihS2%2F69dilnva\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 10588\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1437), with no line terminators","md5":"2612b308f45d0aeddbd8540f3cf792f8","sha1":"6c6a34a46b238ae0372b7f6126c8686a3c6b91d7","sha256":"1b1e450814698cfd54d68f041c25c741d2adbde4e8e31a256db1be23d413d96c","sha512":"be13c24e01fa0fcd3796eada128e6b74680d433a553524c5671f97ab8e62e9c24e24ec00710cd28db8088e9743ed35f38a801a464131435a2d58f3b9d31fe50c","ssdeep":"","tlshash":"c22110c1931597dc189621899f308969222f30f6f6bf84d180edc3bca4d2699e807e11","first_seen":"2024-05-01T00:16:35Z","last_seen":"2026-04-27T03:35:33.397476Z","times_seen":2171,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":91,"dns":8,"connect":6,"send":0,"wait":13,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.revenuecpmgate.com/api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmaW49JmRscnQ9dA","fqdn":"www.revenuecpmgate.com","domain":"revenuecpmgate.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:40.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"revenuecpmgate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 10:31:51 GMT","end":"Thu, 27 Nov 2025 10:31:50 GMT"},"fingerprint":{"sha1":"9B:93:AB:0D:BE:A3:40:A9:58:BE:A3:A6:F2:18:92:29:E2:1A:7C:32","sha256":"3D:E6:EC:90:1B:27:54:04:90:26:18:BF:8B:27:48:04:F0:C5:14:27:1A:9A:E4:4E:F5:34:6A:12:D9:06:9D:41"}}},"request":{"raw":"GET /api/users?token=L2V6OWlwemRld2I_a2V5PWUzMjRkMDdjNzQ3MzE3ZWM4OTIyOTY2M2EwNTAzZWNiJnJlZmVyPWh0dHBzJTNBJTJGJTJGcmV1cmwuY2MlMkYmaW49JmRscnQ9dA HTTP/1.1\r\nHost: www.revenuecpmgate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Wed, 03 Sep 2025 03:50:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 2267\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nVary: Accept-Encoding\r\nSet-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xMjGlcv_NrP9h6KrdNilW2pxFxL6jxHaNGAoQydVmG4; expires=Wed, 03 Sep 2025 03:51:41 GMT; path=/\r\nHost: www.revenuecpmgate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4a46860c08738be6ea8c395aa7ed7e25\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4582)","md5":"819b2bbbcb85a7e6db7d746c6d565a46","sha1":"db301c4136e51e9eb8279de7f167da0ac4a5d359","sha256":"0ff467c60e4e9972e44ecd639752a76d422b66de491a1c8ee0dd7f9dde40fd01","sha512":"f346945aec23c0dd850bae992f883e78f3202b3c9e629cc9d25b8f036db1f4bd24fe683cb852a5585331b5be74c50ca9dd1ab1165a5fdebf8adcf97438f44df8","ssdeep":"96:z90I38MnNeSa+ABlxzTnZ12JT/fIuVfsmwmPIHIboIgyEc8xMiPPOMyP:5tn/a3BbzTr2JT/fTV0Jkc6oBc8WiP2Z","tlshash":"5c9195a17430387801791907e6efb36537334e16ba923460925c4ab42d2decba635fdf","first_seen":"2025-09-03T03:51:05.972604Z","last_seen":"2025-09-03T03:51:05.972604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"www.revenuecpmgate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417\u0026__bjs=eyJiIjp7ImpzIjoxLCJjIjoxLCJtIjowLCJtY2YiOjAsImJhIjoxLCJtcDQiOjEsIm10IjowLCJ0eiI6MCwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInAiOiJXaW5kb3dzIn0sImEiOnsiYzEiOjAsInciOjAsImN3IjowLCJhZSI6MCwidHMiOjB9LCJ3ZyI6eyJyIjoibGx2bXBpcGUiLCJlIjpmYWxzZX0sInMiOnsic3IiOiIxMjgweDEwMjQiLCJhcyI6IjEyODB4MTAyNCIsIml3IjoiMTI4MHgxMDI0Iiwib3ciOiIxMjgweDEwMjQifSwibiI6eyJlIjoxfSwiaCI6eyJoYyI6NDgsImtsIjoiMCJ9LCJmIjowfQ==\u0026__originalReferer=https%3A%2F%2Fwww.revenuecpmgate.com%2F","fqdn":"play-lustgoddess.com","domain":"play-lustgoddess.com","tld":"com"},"ip":{"addr":"104.21.78.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T03:50:42.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-lustgoddess.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 17:46:22 GMT","end":"Wed, 26 Nov 2025 18:44:01 GMT"},"fingerprint":{"sha1":"48:9E:DD:76:9B:1C:88:66:A7:DD:C6:CA:CC:AC:47:87:1E:F8:FF:0F","sha256":"EA:FB:A9:18:02:61:47:3A:C4:AE:12:4C:DF:5F:1E:38:4D:AD:AA:8F:1C:8C:19:8A:92:48:0A:C5:29:69:7E:F5"}}},"request":{"raw":"GET /c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417\u0026__bjs=eyJiIjp7ImpzIjoxLCJjIjoxLCJtIjowLCJtY2YiOjAsImJhIjoxLCJtcDQiOjEsIm10IjowLCJ0eiI6MCwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInAiOiJXaW5kb3dzIn0sImEiOnsiYzEiOjAsInciOjAsImN3IjowLCJhZSI6MCwidHMiOjB9LCJ3ZyI6eyJyIjoibGx2bXBpcGUiLCJlIjpmYWxzZX0sInMiOnsic3IiOiIxMjgweDEwMjQiLCJhcyI6IjEyODB4MTAyNCIsIml3IjoiMTI4MHgxMDI0Iiwib3ciOiIxMjgweDEwMjQifSwibiI6eyJlIjoxfSwiaCI6eyJoYyI6NDgsImtsIjoiMCJ9LCJmIjowfQ==\u0026__originalReferer=https%3A%2F%2Fwww.revenuecpmgate.com%2F HTTP/1.1\r\nHost: play-lustgoddess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1\u0026SUB_ID_SHORT=580ac7e55f4880a339044af3251fb70e\u0026COST_CPM=0.550000\u0026PLACEMENT_ID=27452617\u0026CAMPAIGN_ID=1281620\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3456417\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 Temporary Redirect\r\ncontent-length: 0\r\ndate: Wed, 03 Sep 2025 03:50:42 GMT\r\nlocation: https://lgtrk.lol/LG/lg24on/index.html?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nserver: cloudflare\r\nset-cookie: bc1180=splc0|c6d1aac0e6ae908b96e22727b2be9379::1971:334; SameSite=Lax; Max-Age=31536000; Expires=Thu, 03 Sep 2026 03:50:42 GMT\nrc1180=splc0|c6d1aac0e6ae908b96e22727b2be9379::630; SameSite=Lax; Max-Age=31536000; Expires=Thu, 03 Sep 2026 03:50:42 GMT\nuclick=mOnenQ8IaI410uH8YGCYttP7zS5i+7sAwFd9Br9BMqMDk99uvoFGL7ebffg3Zsrsn01YhhzH; SameSite=Lax; Max-Age=31536000\nbcid=d2rrm4m301mc738voarg; SameSite=Lax; Max-Age=31536000\r\nx-request-id: b1130532-1f8d-446f-9ee5-71ef7e7a6a4d\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiYvO7ECXlX3%2BgmNLJtUXYE4uwpHE1COB472pQS0Wt6wdPL5zWrwNZan%2F0wWFYPE96C8MzlG7UlWfoK7eHcSdrZahQn8rkKNnqXiu5leticx4Q%3D%3D\"}]}\r\ncf-ray: 979248d4ff5d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23384,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lgtrk.lol/lg/lg24on/hand_3_1.webp","fqdn":"lgtrk.lol","domain":"lgtrk.lol","tld":"lol"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lgtrk.lol","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 16 Aug 2025 18:32:16 GMT","end":"Fri, 14 Nov 2025 18:39:36 GMT"},"fingerprint":{"sha1":"42:18:2F:A2:FA:54:4E:EC:97:C0:0C:34:AE:DF:A1:5F:53:7B:2F:4B","sha256":"6E:9A:B8:C4:CB:D9:16:02:7F:2D:29:97:F9:B1:D3:0C:C4:97:A3:93:FC:75:FC:42:22:48:C4:31:C1:AF:93:02"}}},"request":{"raw":"GET /lg/lg24on/hand_3_1.webp HTTP/1.1\r\nHost: lgtrk.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5620\r\naccept-ranges: bytes\r\nage: 44024\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"4ce3bde2f22d75e73e43a87b5c06678c-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3T22SQHMJVG7RFMN3AM63P3\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sz1VlNhzJ2qm2CIfmCBYUsDMKpilaRPSsr6x5rH7QUSAqLv5NWC88SZZ3ne%2F80X6%2FoHPPVdHl81yguy9LPXnKc8HcSJ8QlLB%2BQ%3D%3D\"}]}\r\ncf-ray: 979248d7cc9621fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8642a31d689e801be4e2dedb4896902","sha1":"459b643b4134efe589c2374047cfbe3db0cdcb91","sha256":"ace67b74e1315169b7eba12e6562a6a90164ba862e85a354a3a44a416a3c77da","sha512":"b9dd6fbc9f1d7227b160f58e996924e82b017a710389cc93ea951c18f594a5de53d29dd293a2c0c512d519125b027e5dbbdf7c128d8c6965fdf31579032e9884","ssdeep":"96:om9gkr62DQo8w5/5jnlpxTmQWrB8UHvFR2P8Zopl/0oHq1/gucHskYKOMJCCMJLi:omqkrxcRs5jlph3WrB8UHX2C801IucHp","tlshash":"01c17c58c34703346a3a636d2ca2857dced22668b6371a95c287d6d44b38f038f75e2c","first_seen":"2025-03-06T05:14:21.114027Z","last_seen":"2026-04-17T12:08:01.53962Z","times_seen":790,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dship2.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.dship2.com","domain":"dship2.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dship2.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 11:51:29 GMT","end":"Mon, 24 Nov 2025 11:51:28 GMT"},"fingerprint":{"sha1":"BC:5B:34:62:A7:10:C3:06:22:1D:30:BE:7F:46:7E:82:E8:BF:60:FF","sha256":"61:D5:FE:8B:7E:5C:A6:06:F5:86:5E:07:61:72:66:44:74:42:F7:2C:C3:F1:0B:AF:37:34:BB:46:14:6E:16:09"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.dship2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.dship2.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":204,"dns":18,"connect":41,"send":0,"wait":28,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.eln3ax.com/tag.php?goal=060973ab153f43c67c70a8459d6ac844","fqdn":"s.eln3ax.com","domain":"eln3ax.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eln3ax.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 08:05:35 GMT","end":"Sun, 19 Oct 2025 08:05:34 GMT"},"fingerprint":{"sha1":"4C:9F:8A:6C:95:E2:DF:3D:E5:4B:29:AB:DF:B3:52:B8:14:2B:82:D6","sha256":"6E:A3:45:B4:18:FA:51:9E:A2:EA:93:01:06:A4:A9:9F:A3:05:13:E2:B9:99:FB:C2:6E:F4:CB:C0:F7:83:B2:BC"}}},"request":{"raw":"GET /tag.php?goal=060973ab153f43c67c70a8459d6ac844 HTTP/1.1\r\nHost: s.eln3ax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 03:50:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A138818%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222025-09-02%22%3B%7D%7D; expires=Thu, 03 Sep 2026 03:50:43 GMT; path=/; domain=.eln3ax.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":141,"dns":1,"connect":27,"send":0,"wait":37,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/whatsapp.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/whatsapp.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lgtrk.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248d989a0b4f3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"83af4df8173e43227812296bb8542dcf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kyfFOkBje4oPHPRSStHv36KanoCHB%2B4uRk93tOCCYf2BMLkd2QVKiTiqFHqh2kemAqN%2BFju0D6Jl52t0%2FcKKnsuXP%2BzBVxgblu9M%2BGu63w9dTONK2ZOX%2BD1L44VkcCxEz0xixUdaH0MmrK%2B9XDrPn8Rz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 18239\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1108), with no line terminators","md5":"0e8b3ac6bda5451ff39c5ecd6d7b3873","sha1":"fb477a11167000a30e45369e686ec43dd62d026b","sha256":"c15e1379ca2c59f99912500bbc23a0d1d88f43198cbe1b53d87776fa351385eb","sha512":"b9145fa20ccc86c3e3e28ded1df1611ec4bd8ff2fe0d93d392081248d59d77a4982150f85d8ef0b545850ac2a8797a136692e801b23cb26de1227c66e5dd4d24","ssdeep":"","tlshash":"d31100c92110d3a41c97d57edf6e9d46a61f707d75bc24d6039ecb28498f0edb50c845","first_seen":"2024-04-12T13:25:33Z","last_seen":"2026-04-27T11:58:54.541587Z","times_seen":4473,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/reddit.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/reddit.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lgtrk.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248da2ffd5690-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"1fe5b5008de689ce6464d7bcb07e742c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bws9zuNfspAkR0YkhlGku03FMHE7lTUAMgu0AdembxrKKxg6SBFoWbLZCvePEMlQZ5qu87%2B23Yfxchekq8VWyO68dNs14aLCgAmwRgiNkInZd0m12avTFzHiJmTlRcqYq41zMlNV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 10588\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (893), with no line terminators","md5":"408cc755e613b4f00fbe10d7411ed087","sha1":"14341990ed687477b3addbdd1a3b50ae8a98589b","sha256":"68ed9b82b62d45cf5d12587a7e9566a4ddeb94d69bcb225e9e3c7268c76b3cbb","sha512":"713379c452034896501703ce09391f7ddfb3b0053276ff0dd1a499eeb3c99ebed97ce8fd77e4910d962ba4ef4d8f1d23dfe7c51a0b7d0537baabd5be5cf05a01","ssdeep":"","tlshash":"891125fe471c94ec0ea36ae9af168059531fd875359b07b01a6fdbf92543008c407a92","first_seen":"2024-04-16T17:58:32Z","last_seen":"2026-04-27T02:02:54.747573Z","times_seen":2751,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":92,"dns":13,"connect":30,"send":0,"wait":15,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /tag_gen.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e0b3695afae567bbdbcdf7ddf6d\"\r\nexpires: Tue, 02 Sep 2025 13:22:22 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3rSIAAAwBuUwKCQH35QAAAAwBw7WvAgG3kwAAAA\r\nx-77-nzt-ray: 2a494a154b7159df38bbb768f48f510c\r\nx-77-cache: HIT\r\nx-77-age: 8877\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (877), with no line terminators","md5":"9b1902ae4f7996eb18289b4aa31838a7","sha1":"e0b3695afae567bbdbcdf7ddf6de864c072fa8a5","sha256":"6ea740c0c352343f3210c5bb91d74a8ce46bd4d7caf8f1c9b28beec0c08c792a","sha512":"ebdceaf26cc211ad63127d4a0f2c8cbaab589563588529c3ed0990e2ea8dc495040017da19b4f1f22014af086bcdcdc475597f4f20d573aa84bf067c78094a11","ssdeep":"","tlshash":"3b110078b978913069911819a4fe9ea0f5ba06213f839ee104dfa804853cfda064afcc","first_seen":"2025-09-01T22:41:23.451706Z","last_seen":"2025-09-04T06:13:55.50065Z","times_seen":109,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":37,"dns":21,"connect":4,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lgtrk.lol/lg/lg24on/?clickid=d2rrm4m301mc738voarg\u0026t1_md5=417220ae44c0fd8a0b3aa32677a3b29e\u0026t2_md5=a19b36bf2585b9e4371a0e7725a4462f\u0026t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e\u0026campaign=1180\u0026campaign_domain=wetrackgames.com","date":"2025-09-03T03:50:43.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lgtrk.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 03:50:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 979248d7f921b4f3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\netag: W/\"060b0026b51016bf08c9d4b4a73b7960\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HU8YGS4Y3JMSj67ApyKclRYT8NO3Un%2BqTabza8yEnl3XlapRulshB5jdZ1iRUL7E7kgyXXAhR%2BONY1vU295x2XGc1k%2BKzhhDZF9CkPKXosBMTkNIDe6EioTGb40wUmED3FSv3vKn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 20123\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3179), with no line terminators","md5":"57b268c32627d8d13671f43be7c47b84","sha1":"0eebe8bc9958922a2a354b4abdca2f4d326f49e9","sha256":"53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f","sha512":"72f220c33c49e4cf58f9fdd8d1f56e835e6b7f33c50d0eb754b9e7868f788c9f8705d83f06419f1191b9a528397a5ce6637df84fc232daea844410ed7027ed4a","ssdeep":"","tlshash":"bd61b74b774ea8734a5736bac19fb60f2223331f9c6589048914e4d849bcec6501fa7e","first_seen":"2025-04-25T03:57:25.57786Z","last_seen":"2026-04-23T22:59:46.228673Z","times_seen":9237,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}