Overview

URLtodayprizeforyou.com/fr/tar/sur5box-495/400
IP 104.26.14.62 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-28 23:01:41 UTC
StatusLoading report..
IDS alerts0
Blocklist alert6
urlquery alerts No alerts detected
Tags None

Domain Summary (13)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-28 04:11:17 UTC 34.160.144.191
cdn.wildfungames.com (10) 0 2023-01-27 12:57:21 UTC 2023-01-28 14:12:32 UTC 104.26.5.134 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-28 04:12:05 UTC 54.148.75.183
wildfungames.com (2) 0 2016-11-21 03:51:35 UTC 2023-01-28 05:22:41 UTC 104.26.5.134 Unknown ranking
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2023-01-28 04:09:13 UTC 23.33.119.27
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-28 04:09:40 UTC 35.241.9.150
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-28 04:09:08 UTC 34.117.237.239
todayprizeforyou.com (1) 0 2021-11-23 12:02:29 UTC 2023-01-28 18:21:21 UTC 172.67.71.92 Unknown ranking
e1.o.lencr.org (1) 6159 2021-08-20 07:36:30 UTC 2023-01-28 04:09:21 UTC 95.101.11.115
ocsp.digicert.com (5) 86 2012-05-21 07:02:23 UTC 2023-01-28 13:54:46 UTC 93.184.220.29
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2023-01-28 04:09:52 UTC 69.16.175.10
beevakum.net (1) 156073 2021-02-10 03:56:26 UTC 2023-01-28 12:00:52 UTC 139.45.197.250
cdn.jsdelivr.net (2) 439 2012-09-30 00:15:09 UTC 2023-01-28 09:37:50 UTC 104.16.86.20

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-01-28 2 todayprizeforyou.com/fr/tar/sur5box-495/400 Malware
2023-01-28 2 cdn.wildfungames.com/land/rou/css/default.min.css?v=1 Malware
2023-01-28 2 cdn.wildfungames.com/land/rou/js2/confetti.js?v=1 Malware
2023-01-28 2 cdn.wildfungames.com/land/rou/js2/default1.js?v=1 Malware
2023-01-28 2 cdn.wildfungames.com/land/rou/js2/winwheel_game.min.js?v=1 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-01-28 2 beevakum.net Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.26.14.62
Date UQ / IDS / BL URL IP
2023-03-24 08:56:14 +0000 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-995/4/ 104.26.14.62
2023-03-23 20:08:10 +0000 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-495/400/ 104.26.14.62
2023-03-22 08:06:44 +0000 0 - 0 - 1 todayprizeforyou.com/fr/tar/sur5box-495/400 104.26.14.62
2023-03-06 08:53:00 +0000 0 - 2 - 1 todayprizeforyou.com/ 104.26.14.62
2023-02-26 17:04:19 +0000 0 - 0 - 1 todayprizeforyou.com/ 104.26.14.62


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-25 16:20:52 +0000 0 - 0 - 2 pouloopssurvey.space/ 188.114.96.1
2023-03-25 16:20:45 +0000 0 - 0 - 2 vpn-get.com/ 172.67.220.3
2023-03-25 16:20:43 +0000 0 - 0 - 7 99894.bid/ 188.114.96.1
2023-03-25 16:20:01 +0000 0 - 0 - 1 babes-near-you.com/us/multi/ms/7-661689/?cep= (...) 172.67.219.115
2023-03-25 16:19:54 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10772159625599 (...) 162.159.130.233


Last 5 reports on domain: todayprizeforyou.com
Date UQ / IDS / BL URL IP
2023-03-24 21:34:33 +0000 0 - 0 - 1 todayprizeforyou.com/fr/tar/sur5box-995/4 172.67.71.92
2023-03-24 08:56:14 +0000 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-995/4/ 104.26.14.62
2023-03-23 20:08:10 +0000 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-495/400/ 104.26.14.62
2023-03-22 08:06:44 +0000 0 - 0 - 1 todayprizeforyou.com/fr/tar/sur5box-495/400 104.26.14.62
2023-03-21 19:37:17 +0000 0 - 0 - 1 todayprizeforyou.com/ 172.67.71.92


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-25 04:05:41 +0000 0 - 0 - 4 wildfungames.com/land/rou?campaign=ThIi&utm_c (...) 104.26.4.134
2023-03-19 08:15:03 +0000 0 - 0 - 4 wildfungames.com/land/rou?campaign=ThIi&web=1 (...) 172.67.70.29
2023-02-20 07:56:03 +0000 0 - 0 - 1 premiumprizeplace.com/it/tar/sur3box-250/9 104.26.2.153
2023-02-19 18:56:06 +0000 0 - 0 - 2 placebonusextra.com/gb/tar/sur3box-650/15/ 104.26.14.156
2023-02-19 18:54:54 +0000 0 - 0 - 1 placebonusextra.com/it/tar/sur3box/291-chrono (...) 172.67.72.193

JavaScript

Executed Scripts (11)

Executed Evals (1)
#1 JavaScript::Eval (size: 80) - SHA256: 4a69686f7fc6a9f60691ff2a37cf3da0dcabb03c39f8a1e9e5b77ce41ad9087f
(() => {
    const a = async
    function name() {};
    window['pohys4qseie'] = true;
})()

Executed Writes (0)


HTTP Transactions (33)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16792
Expires: Sun, 29 Jan 2023 03:41:20 GMT
Date: Sat, 28 Jan 2023 23:01:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19229
Expires: Sun, 29 Jan 2023 04:21:57 GMT
Date: Sat, 28 Jan 2023 23:01:28 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 22:35:31 GMT
age: 1557
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    dcd75ca6daca51c5e39d431468511793
Sha1:   07f76d3bf23d65c9110d810fa71a994e39e085d3
Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3493
Expires: Sat, 28 Jan 2023 23:59:41 GMT
Date: Sat, 28 Jan 2023 23:01:28 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 2Gw17uo9UKqLRM4WCVZ4Psaiy1SUhW3+GdqJBJ/chTKHO3tKp10MsVkJrYVxSvyy/gJnSeLgi/w=
x-amz-request-id: 2Z9S057K2391PPBF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 22:21:08 GMT
age: 2420
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 28 Jan 2023 23:01:28 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /fr/tar/sur5box-495/400 HTTP/1.1 
Host: todayprizeforyou.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.67.71.92
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 28 Jan 2023 23:01:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
location: https://wildfungames.com/land/rou?campaign=ThIg&web=1&utm_campaign=plc03b55ef570d1c7ef91bbacdc1751c
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5AKiwSlE5wlvkKM5cW3xKa789oFKZzclpBYeJLNqf9NP3SjgD%2F%2Fvym00SHZYQqWnrxt1%2BwTulN9tyUNPJ%2FieQjfTD3BZ4teMkkE66Yn75o2I3w9Vyx4Wh4g7Wud2eidYFvYr%2BCvu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 790d59a4bd7bb4f7-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "6B29472D97CB1C0ACCFF38239ADDC6F5BD2D2CC49DC8441D4DC3FEF656AFE170"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=495
Expires: Sat, 28 Jan 2023 23:09:44 GMT
Date: Sat, 28 Jan 2023 23:01:29 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 22:41:40 GMT
age: 1189
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17623
Expires: Sun, 29 Jan 2023 03:55:12 GMT
Date: Sat, 28 Jan 2023 23:01:29 GMT
Connection: keep-alive

                                        
                                            GET /land/rou/img/spin_Roulette01.png HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
content-length: 43403
etag: "6e422805365b1b64d8da6b0d29ae8c69"
last-modified: Fri, 27 Jan 2023 12:51:52 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LwIsSkghH9iMIKupQQRhlHnfcmpo8bOJ9%2Bkn5dNzU9b8r3NKjpD1I91pKT7tFCJ4n19o8vYJhhBiRcBZuR90z1hVujii0rYXT7qfxZEpZ7wljejDGPxgcLdRtWiy%2FVgc72d7Rv0u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aadd41b4f1-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 540 x 540, 8-bit colormap, non-interlaced\012- data
Size:   43403
Md5:    6e422805365b1b64d8da6b0d29ae8c69
Sha1:   37d523943fb63f409cd9a6da32fb5d7663a692da
Sha256: a0c05360734297aae902dc48ed95cd7d3d3f818897f111c54aae6f042428b665
                                        
                                            GET /land/rou/img/spin_Roulette00.png HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
content-length: 12991
etag: "834a8095777aee926381dd13a5a8b3ab"
last-modified: Fri, 27 Jan 2023 12:51:51 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AGmjIs5Ew6poRcS6%2FuUQBBoshsmYBkNdfS8%2FyPKNkZ6jPZPWEQYYPsPXp7c1r0mojyhq%2BEmO5RrTFmtNGjKA4L590XDozfrda7TYrFQUU96ZWso4HH7SS186L8uC2TGughiIh%2F8p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aadd40b4f1-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 170 x 190, 8-bit/color RGBA, non-interlaced\012- data
Size:   12991
Md5:    834a8095777aee926381dd13a5a8b3ab
Sha1:   c0f06099eea950232f33e02355d84dda44a6e35e
Sha256: 589d62b11a4171fb3a9b7c97b6963447601e36f8c2dcb36370dce75f5bd9687e
                                        
                                            GET /land/rou/img/spin_Roulette03.png HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
content-length: 1316
etag: "5e45d498bdb0b010e058b92e5d5097ac"
last-modified: Fri, 27 Jan 2023 12:51:53 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ttS65V1A34erLrItmbL%2BovMPjnxdVN%2FG%2BAiYIoL9Vh%2FhB7dca7HOWyiKUNUk4BKiRCUCb6hYjzEQ0xNJNPgU5ttiGTpTuzLBXRo0GsNnabWgAu2MwlMOsvpxvrI17TEMYacVlKKh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aafd5cb4f1-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 269 x 138, 8-bit/color RGBA, non-interlaced\012- data
Size:   1316
Md5:    5e45d498bdb0b010e058b92e5d5097ac
Sha1:   8a1b41ef4c12fc85b4e4c7d28e3fcf48774054f7
Sha256: 9e860a039b138a3e94b704ff4aae7896c678d88d3c5e1ab2d08e3af5ceecdee6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4541
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 23:01:29 GMT
Last-Modified: Sat, 28 Jan 2023 21:45:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1348
Cache-Control: max-age=156818
Date: Sat, 28 Jan 2023 23:01:29 GMT
Etag: "63d56598-116"
Expires: Mon, 30 Jan 2023 18:35:07 GMT
Last-Modified: Sat, 28 Jan 2023 18:12:40 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1348
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 23:01:29 GMT
Etag: "63d56598-116"
Last-Modified: Sat, 28 Jan 2023 22:39:02 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /land/rou/css/default.min.css?v=1 HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: text/css
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
etag: W/"c87a79b32fd06185ea1eabe4af153677"
last-modified: Fri, 27 Jan 2023 20:13:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2FHamJKNmIkoP5ujPLnpMl4NLxWp%2FqArZXqCqgEM8kbGVOxtN1DjtdGd5mmB2NnIWRAUXFB3HeajuMUxZy9HSq%2B9mSfLtwuOfw6JmPrIdKBZ4p%2FbNzj%2BXvxnKJ89CLQRRGEX2jkE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aadd3fb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4431), with no line terminators
Size:   1526
Md5:    3003477540e987c392f8dc983c1c217f
Sha1:   035fe5c1f5c81c1dbdfb54dcc9407f475b1283b5
Sha256: d9e5fe2d9026c102330c410bc50c8c460cf0911c340ba15f2db953feae7729ac

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 23:01:29 GMT
Etag: "63d41418-116"
Server: ECS (amb/6BBC)
Content-Length: 278

                                        
                                            GET /jquery-3.6.0.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
content-encoding: gzip
content-length: 30875
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1674946889.dop212.sk1.t,1674946889.cds240.sk1.hn,1674946889.cds210.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30875
Md5:    899f0189aaf034bbba5340f724d91dfa
Sha1:   210ea9de03968edb9d839ba4a0ce2d48666a8ab8
Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4541
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 23:01:29 GMT
Last-Modified: Sat, 28 Jan 2023 21:45:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /land/rou/img/spin_bg_desk.png HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
content-length: 110359
etag: "eafcb5a49ddbee590cfe266b1b0c8820"
last-modified: Fri, 27 Jan 2023 14:03:36 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bG3hIUmjlEqmAcLnrUOUB1DxnI06G99FyTUt8c%2By%2FKsjEgcoOVQcz07IRweeGu9KuGnvtvQ5SkVHRKDh4qYlGb7UpP7FR3TDTIV4JzAim2STu5MMEiI8N3NAL6WU4Qbeaqa7HZzW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59ac0e7eb4f1-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 870 x 650, 8-bit colormap, non-interlaced\012- data
Size:   110359
Md5:    eafcb5a49ddbee590cfe266b1b0c8820
Sha1:   254de127e096c137b1a8c8e62cf3c96b7c6492e5
Sha256: da07ed253e14bcf56880e11d0eddb2276a7da9b4f679d49fb17976b97b81172b
                                        
                                            GET /land/rou/img/spin_Roulette02.png HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
content-length: 35051
etag: "320aa52aa7ccfde051920d20967e0baa"
last-modified: Fri, 27 Jan 2023 14:03:35 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JHl1wEiOFEbEHWM%2FjcUtgjapKeuuq9nCxSrA2zZ5%2FJ6bSIknx7wcvOCvLrZ%2FdYd3mp5ThYp5weud0GT0zjKp724hCL%2ByuCE1zC%2FIB0m%2Bg4ctD3%2BGk2d89AEoqunBqLNQIFe8infM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59ac3eb6b4f1-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 434 x 434, 8-bit colormap, non-interlaced\012- data
Size:   35051
Md5:    320aa52aa7ccfde051920d20967e0baa
Sha1:   7a6dc94d3aa311664e94d1259322f081b2f074f7
Sha256: 673f4069c0d4e4e256cd84e482cfc0e60fa76547aa6f62578b3f47c60299d4c1
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JaawCIL03I2h1VpDr0CY3A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.148.75.183
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SspG8qbOXUv8BmeijNWnkg87toM=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2C805382509DEE0D1A15A3132527B3D613A0689C88BB83E9F8FD2625BD90B380"
Last-Modified: Fri, 27 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8228
Expires: Sun, 29 Jan 2023 01:18:37 GMT
Date: Sat, 28 Jan 2023 23:01:29 GMT
Connection: keep-alive

                                        
                                            GET /pfe/current/micro.tag.min.js?z=5578843&sw=/sw-check-permissions-cb761.js HTTP/1.1 
Host: beevakum.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 28 Jan 2023 23:01:29 GMT
last-modified: Fri, 27 Jan 2023 11:03:52 GMT
etag: W/"63d3af98-a083"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (41091), with no line terminators
Size:   14496
Md5:    002d32199f9116c7429c84ef9d7849bb
Sha1:   328e4f6b8bdfb247e311b58cddab5eaa21d5b4e3
Sha256: 8b9b2a4d4da7ff539e51c4bb298f0587b0c14ed4158294bfa003cb8b6893d1dc

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /land/rou/js2/confetti.js?v=1 HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
etag: W/"594e7bd784c66babe7dd35e2cf498f14"
last-modified: Fri, 27 Jan 2023 19:45:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iyx1nHtNJ98ZIlWde8Bj6BYfB1HuL2R9%2FHPBNBydy2XNFdchOKriW9lYeJKjjHxctbetvl7DqeOVvz7KRCQbpE3%2FTNbCShQnApQFuEM%2BpHOAjmaQqBxwnQ3iK59rT%2Bsfp9aRMDVo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aacd34b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /land/rou/js2/default1.js?v=1 HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
etag: W/"cb6fb41521eaa67073568b2a55d1f30b"
last-modified: Fri, 27 Jan 2023 19:45:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6340
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=byheKO1GQZiMqeYiCc%2BxuDsecQKS3M5%2Fnd5bvhpSTykSPtBmUIc0zK8uYQnuKXvXAQRsnmJhY3JbXCpxqVSpjOBE%2BqrD67d2ijaihbgSXYvl5NOlfQhKs8Wuz%2Fes0Zn8rGyPxXdZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aacd30b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.16.86.20
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
x-served-by: cache-fra19138-FRA, cache-cdg20754-CDG
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 11403453
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KFdzkmar6FMKDpvc%2BQHcuBN75zKRCTI55bhsq%2BLb9BuGcx0eVYZJV9Zc3%2BIu%2FKMwBBGUfIKFyJ9wfdW6nb6Wl4I0PiEEMCgrDarFf7gtb2B%2BqWwQFkrhfbYCzcEOWfTVf0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59ab7cbdb4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.16.86.20
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
x-served-by: cache-fra19128-FRA, cache-itm18834-ITM
x-cache: HIT, MISS
vary: Accept-Encoding
cf-cache-status: HIT
age: 3819294
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DksiUBubJ%2Bm%2FDbxavCgXmjGyT40x5dEsiq9nKsM%2Bjlv70v9DFJS%2Fr2pRt5WrpnOSLOh3PQQgz93L2ufV38RRmFFdxu43XTDVHL%2Fw%2F05IfWcb%2FwsOLukdXbUQOx39YKVrLVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59ab6cb1b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/land/rou?campaign=ThIg&web=1&utm_campaign=plc03b55ef570d1c7ef91bbacdc1751c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: image/x-icon
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
last-modified: Fri, 27 Jan 2023 20:16:00 GMT
etag: W/"63d43100-96"
cache-control: max-age=14400
cf-cache-status: HIT
age: 493
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7E925Mhk4ijD1ky9kv0buKl52o0wtL2XkvZgSWQaJQofzNYTVhQDk3f4UYhGFbzLOpboFUVTZz7ejhwdzF9Y20R81a%2BXNyJ2%2F3C%2B9Ad5Pqclync6oP014gvXhLsymNYQM1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790d59acff83b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /land/rou?campaign=ThIg&web=1&utm_campaign=plc03b55ef570d1c7ef91bbacdc1751c HTTP/1.1 
Host: wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
cache-control: max-age=3600, must-revalidate, public
x-content-digest: en0f8c18dbc1074dd5dd560b8e502856f4
age: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eFkNDe01Sek3nST884P7fA6P41gKfe5XauZ70%2BTPpiG3bY5h3hXeQpSDf7%2F4sguwMdAZb5VILXQzsD10gUPgcUsHi9gdT%2F5uTDZqerNnTlR38LNQfjl7fWi1qEcI4a9oinI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59a86a74b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /land/rou/js2/winwheel_game.min.js?v=1 HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
etag: W/"93ae375d5794d7efc5759847e616b870"
last-modified: Fri, 27 Jan 2023 19:45:45 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8LqmIPhbWfr1CgvoWiLCtUeKj7UiFGnbchLUBFlj2V0h0ZZesQ5TkdSeURnmZYijMsblYJLcBTQO4P7jt6u1UMs4iWhaGoeNoyoqcqNdrvzGvQegU0jAWhKeV%2BphKkDJUNBEv7ZF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aacd2db4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /land/rou/js2/propeller.min.js?v=1 HTTP/1.1 
Host: cdn.wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.26.5.134
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 28 Jan 2023 23:01:29 GMT
etag: W/"20ff2d103a051f36069225e9bb9c87c0"
last-modified: Fri, 27 Jan 2023 19:45:45 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=om1BF5xnKQyAgQlaTSe3H0lr6qcqdpNZpmooBIrlOVtraW2fLiaqlY9XuxrqyxE39xXfUGt%2Byy2mAIwiyH8UK6SycUBLut3zri94U8jgkIgLFZPA%2FxywMXwVy6%2FTBV%2BHGgwtT8tM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d59aacd2cb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---