wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
172.67.70.29
200 OK
1510
URL
User Request
GET
HTTP/1.1
wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
IP
172.67.70.29:80
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash
d4a9165a06f9e9d1cd7452368b0254a3
bbe64a90b50c180f8354c61b0ab2a423274b7296
1848d431ae9db6b6838552a5f0c20b8a52bae65fb0f4080e87a3d26cadd12d08
GET /land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced HTTP/1.1
Host: wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
cache-control: no-cache, private
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XSFG%2FTcegTJT3fJLOsw%2F3EP28bxfvsZO%2BalBlotj8Nrlvy2U0uUPb2wVDNOoHiF5%2BAOiv0BSz%2F9f%2Bk0lLRH3ZyenVQGZtp2jGkkoPaklIu6WbotrHC8v%2FEg7hFoQZHnUWLE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f9573d30b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.wildfungames.com/land/rou/js2/winwheel_game.min.js?v=1
172.67.70.29
200 OK
1360
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/js2/winwheel_game.min.js?v=1
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
ASCII text, with very long lines (3694), with no line terminators
Hash
e8b1f90201cd46bfd3dc724c717a33e1
739f1e9d9673d2aa6e4de5bf0b46103854d6bda2
6b06ad34e47a22c70eddc60bd007de63dfe2928a1323c3e85cb76ef7c574f082
Analyzer
Verdict
Alert
fortinet
Malware
GET /land/rou/js2/winwheel_game.min.js?v=1 HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"93ae375d5794d7efc5759847e616b870"
Last-Modified: Fri, 27 Jan 2023 19:45:45 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6615
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Djm3zF1k9FBGJkgxOl%2BvoosuRWgrHt2hoASAW8dNfFfrUpARjtbvey3%2F43rZbC%2F377KBBPSOxnW5Qme6xOR9fRLf3G5Cw9zuRTwYt3KnkNufaEjOgTqzM5NyD2HUtXDQN2UC4X3R"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b1fd01c12-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.wildfungames.com/land/rou/js2/default1.js?v=1.3
172.67.70.29
200 OK
708
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/js2/default1.js?v=1.3
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Hash
868539b299e3d222198ce4584bff42d5
92281f722de18aec454f3655779bdbbcdfaff707
de0e3ca83bb57b6c72a0653de7103346f4a266dbcf79d3af2547c09a6cdabd43
Analyzer
Verdict
Alert
fortinet
Malware
GET /land/rou/js2/default1.js?v=1.3 HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"cb6fb41521eaa67073568b2a55d1f30b"
Last-Modified: Fri, 03 Mar 2023 09:09:59 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6615
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pMsgtQhXzfqL%2B%2FJCKeD7XzZlpCc9o%2B5FQjW5eqNw2E5rJX%2B8HsouCha2gx1%2FPTm5AB9RDh3fOX55IaJkQJSygGswR6K0RFzo0hw3Q%2BSi6havK5h1dpZFYqBSduYnFdHGE0v0hlHC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b192cb4f1-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.wildfungames.com/land/rou/js2/propeller.min.js?v=1
172.67.70.29
200 OK
3377
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/js2/propeller.min.js?v=1
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
ASCII text, with very long lines (11334), with no line terminators
Hash
2e5fd92be5b702ec0be7b381c2c76e49
7fc09db77b67cf82285a2eaf52b7d2a126893663
4fa34a85b0ee0d3daa6988527b7b6a4d9eccd493f54a96f7e0a05fa0d5d1130d
GET /land/rou/js2/propeller.min.js?v=1 HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"20ff2d103a051f36069225e9bb9c87c0"
Last-Modified: Fri, 27 Jan 2023 19:45:45 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 548
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nwBtRmDqEFIXlDcHuVa54XqI5KywWzX7lePk06zSuclXkQXnNFPIj%2FSpswfyMvJbtagpdxgfx4uW9eVnhDxW99jFD6Zn3wIrLX2999GgZ4ZhUDnVCpFX6bUjbsVdZx8B6N2rIsAS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b1950b511-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.wildfungames.com/land/rou/css/default.min.css?v=1
172.67.70.29
200 OK
1248
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/css/default.min.css?v=1
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
ASCII text, with very long lines (4431), with no line terminators
Hash
50330b27ab37012510258b86786ba759
30323f5a2fed4be78741ed7d6be027fcdc7ad19d
37c84a700f1e1ab7ca47ca811bc68176960ba1d7dee78c28eea3059b75d6d9ae
Analyzer
Verdict
Alert
fortinet
Malware
GET /land/rou/css/default.min.css?v=1 HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"c87a79b32fd06185ea1eabe4af153677"
Last-Modified: Fri, 27 Jan 2023 20:13:29 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6615
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C6%2BEtfGk7j7GajjvwAxKvS0TWKleFH1nelC3oegZW36f%2FUHTFwDhAwPLeS9pU0YMrAx5UDIEjJWxx76kfdtVVOnv5DYdkplolKRfbFpc3jby%2BOg7WLduTMj4mdb%2Bu%2BCRhCmMTDep"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b0dc8b4eb-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
code.jquery.com/jquery-3.6.0.min.js
69.16.175.10
200 OK
30875
URL
GET
HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
69.16.175.10:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (65447)
Hash
899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://wildfungames.com
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 15 Apr 2023 23:30:02 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1681601402.dop231.sk1.t,1681601402.cds255.sk1.hn,1681601402.cds210.sk1.c
X-Firefox-Spdy: h2
cdn.wildfungames.com/land/rou/js2/confetti.js?v=1.3
172.67.70.29
200 OK
1861
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/js2/confetti.js?v=1.3
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Hash
2526419743133ede6a0b7ea45e33d563
3b66e3ff3ff840449cc5b5e40aafc8008b15e9ea
d25b51238af48538cd3ef9d80712e04f751c882efd7b70e41ce7c719bfe2e5c6
Analyzer
Verdict
Alert
fortinet
Malware
GET /land/rou/js2/confetti.js?v=1.3 HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"594e7bd784c66babe7dd35e2cf498f14"
Last-Modified: Fri, 27 Jan 2023 19:45:44 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3259
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iwYRE6ixayzeO1fRJe%2FazzStEk29LKQ0koZeRTCUwDgq%2BglgaCX0Ta%2FTlC0CIxxLdUPLZZq9WVL6ypo23pVhByJUt%2FoHcxX6D%2FiXcR7KfdSz4NdKTz5%2FV1FVEFZaiNmbaibdbowS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b28db0b41-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
151.101.1.229
200 OK
23377
URL
GET
HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
IP
151.101.1.229:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
Magic
ASCII text, with very long lines (65299)
Hash
6d853527bcfe62daedfee90bb040bba3
c816b3ed28c00474ff4990ecd7c95f7fc193dfdc
565dba55a48167b85d6726f3c97fe38085f27752663ad29fd0d9ae6fa2c895ed
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://wildfungames.com
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: br
accept-ranges: bytes
date: Sat, 15 Apr 2023 23:30:02 GMT
age: 2716218
x-served-by: cache-fra-eddf8230133-FRA, cache-bma1676-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23377
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
151.101.1.229
200 OK
26291
URL
GET
HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP
151.101.1.229:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
Magic
ASCII text, with very long lines (65326)
Hash
54a2d3a00438bdd360b988f9d94a7723
41fdd8d0e372e15b5c4f3a941a200c8a22906889
b7c37dca701cbb6f704cb1ef6090a588a1193056fee47ec5ff044ae0ca825f4f
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://wildfungames.com
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: br
accept-ranges: bytes
date: Sat, 15 Apr 2023 23:30:02 GMT
age: 2561097
x-served-by: cache-fra-eddf8230111-FRA, cache-bma1676-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26291
X-Firefox-Spdy: h2
cdn.wildfungames.com/land/rou/img/spin_Roulette00.png
172.67.70.29
200 OK
12991
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/img/spin_Roulette00.png
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
PNG image data, 170 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash
834a8095777aee926381dd13a5a8b3ab
c0f06099eea950232f33e02355d84dda44a6e35e
589d62b11a4171fb3a9b7c97b6963447601e36f8c2dcb36370dce75f5bd9687e
GET /land/rou/img/spin_Roulette00.png HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: image/png
Content-Length: 12991
Connection: keep-alive
ETag: "834a8095777aee926381dd13a5a8b3ab"
Last-Modified: Fri, 27 Jan 2023 19:45:39 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6614
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2FQCCQcf%2FEQm2oaUi2uGCkj17%2Bcz%2FE1Wz1NEG9o9ptdNsmE8lg77FsInw1%2FAZ%2FlkYelhnsiBFfpzxsaYTgFrNvaMpqETx8vsO5H4CURdAF6fr38os6CoWe%2FIHRDPZUjduBLYirF%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b590e0b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.wildfungames.com/land/rou/img/spin_Roulette01.png
172.67.70.29
200 OK
43403
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/img/spin_Roulette01.png
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
PNG image data, 540 x 540, 8-bit colormap, non-interlaced\012- data
Hash
6e422805365b1b64d8da6b0d29ae8c69
37d523943fb63f409cd9a6da32fb5d7663a692da
a0c05360734297aae902dc48ed95cd7d3d3f818897f111c54aae6f042428b665
GET /land/rou/img/spin_Roulette01.png HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: image/png
Content-Length: 43403
Connection: keep-alive
ETag: "6e422805365b1b64d8da6b0d29ae8c69"
Last-Modified: Fri, 27 Jan 2023 12:51:52 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6614
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ahOAjZipZuwqcx%2F7fd60ALe7HVsvUUQnIXRnsBESdagwrAP8Dkt%2BTHycT%2FewuiY3LMW2FNBRzkgVUZHpGuP5%2FsNvlj2k4%2FV7r4MSUWyIfBp%2BS9fhU%2BNXDJwXY6b86PXHPE2xXhRD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b58011c12-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.wildfungames.com/land/rou/img/spin_Roulette03.png
172.67.70.29
200 OK
1316
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/img/spin_Roulette03.png
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
PNG image data, 269 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash
5e45d498bdb0b010e058b92e5d5097ac
8a1b41ef4c12fc85b4e4c7d28e3fcf48774054f7
9e860a039b138a3e94b704ff4aae7896c678d88d3c5e1ab2d08e3af5ceecdee6
GET /land/rou/img/spin_Roulette03.png HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: image/png
Content-Length: 1316
Connection: keep-alive
ETag: "5e45d498bdb0b010e058b92e5d5097ac"
Last-Modified: Fri, 27 Jan 2023 12:51:53 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6614
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BbUAKnqVtOTy6tjrbuXbNeRDBsarRHpUYguaRDkMH%2BU1Gr45zyTM2rzaCcOV7CJ7VuJGbz6Xag6Bp%2B98YBiBpIX5dPdPmpfFIHVdDJasTJGwXc51lwZmHKoJkZzyEZFV2QF9NjiK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95b59a2b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.21.226
1462
URL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
104.18.21.226:0
Hash
8424429f5c30efb8dee75c71bd895889
ae079af2dc8ad4e705bfdbdfbba8d25bb09088ab
54e6795ed1db07c89ce61257925d92fc8d4ac132e7f9bd6a2dc4a95404475ee3
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D97A6C9C9C0D4FD460B783DDDE1E6CB06EF839D8"
Expires: Sun, 16 Apr 2023 11:00:00 GMT
Last-Modified: Sat, 15 Apr 2023 23:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 591
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b87f95d99a61c12-OSL
cdn.wildfungames.com/land/rou/img/spin_Roulette02.png
172.67.70.29
200 OK
35051
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/img/spin_Roulette02.png
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
PNG image data, 434 x 434, 8-bit colormap, non-interlaced\012- data
Hash
320aa52aa7ccfde051920d20967e0baa
7a6dc94d3aa311664e94d1259322f081b2f074f7
673f4069c0d4e4e256cd84e482cfc0e60fa76547aa6f62578b3f47c60299d4c1
GET /land/rou/img/spin_Roulette02.png HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: image/png
Content-Length: 35051
Connection: keep-alive
ETag: "320aa52aa7ccfde051920d20967e0baa"
Last-Modified: Fri, 27 Jan 2023 19:45:41 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FHP9Ap0Qsr0H33%2B%2FfHkLNfQqpm1qyhaclGq9kJpJoWnoY7YXS46odkt1VdyZPrXiXkgnxhTHuw5rdQ54NGLarELDwlJIzwXKpbIZ5EJFG4WD4DBkH2Ei%2BAOTpWYPLjXMj3%2Fe4bIY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95dcb230b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.wildfungames.com/land/rou/img/spin_bg_desk.png
172.67.70.29
200 OK
110359
URL
GET
HTTP/1.1
cdn.wildfungames.com/land/rou/img/spin_bg_desk.png
IP
172.67.70.29:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerCloudflare, Inc.
Subjectcdn.wildfungames.com
Fingerprint12:07:77:64:D4:18:2D:3F:F1:FF:29:E7:5A:87:26:4A:BE:78:4D:1B
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Magic
PNG image data, 870 x 650, 8-bit colormap, non-interlaced\012- data
Hash
eafcb5a49ddbee590cfe266b1b0c8820
254de127e096c137b1a8c8e62cf3c96b7c6492e5
da07ed253e14bcf56880e11d0eddb2276a7da9b4f679d49fb17976b97b81172b
GET /land/rou/img/spin_bg_desk.png HTTP/1.1
Host: cdn.wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: image/png
Content-Length: 110359
Connection: keep-alive
ETag: "eafcb5a49ddbee590cfe266b1b0c8820"
Last-Modified: Fri, 27 Jan 2023 14:03:36 GMT
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kzNX7v51WhiTwK2HkioWZPrtNtQOu%2FpiZRupFb7chRQF0K9zQkEWP1%2F93eIhWVyyV30mRzu4RCKqB8KAJ%2FpeJ8C4b%2BOIh3yfE2wXI4cEVajXjAbbH%2BRRwoSjagf6Ji9wza8Hl751"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95dc9c01c12-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
redrotou.net/pfe/current/micro.tag.min.js?z=5759760&sw=/sw-check-permissions-93246.js
139.45.197.251
200 OK
14691
URL
GET
HTTP/1.1
redrotou.net/pfe/current/micro.tag.min.js?z=5759760&sw=/sw-check-permissions-93246.js
IP
139.45.197.251:80
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Magic
C source, ASCII text, with very long lines (41570), with no line terminators
Hash
df4cd1a3268baf94c248fd018b70c329
212a0b5dee3c02856708f92113c4cdddf12ee6c7
2e69ef67255c98d60d8cdd1839fb8358ee2f37be408cc1f9aab7685606d47520
GET /pfe/current/micro.tag.min.js?z=5759760&sw=/sw-check-permissions-93246.js HTTP/1.1
Host: redrotou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wildfungames.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 15 Apr 2023 23:30:02 GMT
Content-Type: application/javascript
Last-Modified: Fri, 14 Apr 2023 07:44:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64390464-a262"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
redrotou.net/zone?&pub=0&zone_id=5759760&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
139.45.197.251
200 OK
0
URL
POST
HTTP/2
redrotou.net/zone?&pub=0&zone_id=5759760&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.251:443
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Certificate
IssuerLet's Encrypt
Subjectredrotou.net
Fingerprint82:26:70:97:A6:64:2B:0D:51:75:05:03:52:AE:BE:EB:6C:F4:95:D6
ValidityThu, 02 Mar 2023 05:25:16 GMT - Wed, 31 May 2023 05:25:15 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5759760&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: redrotou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://wildfungames.com
Connection: keep-alive
Referer: http://wildfungames.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 15 Apr 2023 23:30:02 GMT
content-length: 0
x-trace-id: a2688deee6599a28f7afba248903f22d
access-control-allow-origin: http://wildfungames.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
wildfungames.com/favicon.ico
172.67.70.29
200 OK
62
URL
GET
HTTP/1.1
wildfungames.com/favicon.ico
IP
172.67.70.29:80
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Magic
MS Windows icon resource - 2 icons, 1x1, 2 colors, 1x1, 2 colors\012- data
Hash
70515ac92cadd905fa8fecef584d0083
c50b7f0f44d82b3f7dc4aff73145371232b0f703
03901e6846adfc7d2216e031eab780e4605c70d24af897afda998c40b53a3d30
GET /favicon.ico HTTP/1.1
Host: wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:03 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Fri, 14 Apr 2023 09:54:38 GMT
etag: W/"643922de-96"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k29%2BWLJLgCSEhgFty7zmGOX4yyJqSxGk95gZXTLiF4dB%2FyWnOQxlV8cXnTWvJ5qk2BrftbN4Y0ys6yhSdANTPCzSrwYC6Ft4GKUAmGW3RgheTcIYXoaSppPlCPWNWlVuQQ0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b87f95edbf1b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
wildfungames.com/sw-check-permissions-93246.js
172.67.70.29
200 OK
293
URL
GET
HTTP/1.1
wildfungames.com/sw-check-permissions-93246.js
IP
172.67.70.29:80
Requested by
http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Hash
ec208c8136cd07ae2ba78fd5b53a3fc5
0619c767616df2274786ddd89dd1625199adc850
80a5a536319cdec5aa7e9bbc2417f3e548d890b8f37f529ffd38f52b9d4d7518
Analyzer
Verdict
Alert
fortinet
Malware
GET /sw-check-permissions-93246.js HTTP/1.1
Host: wildfungames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
Connection: keep-alive
Referer: http://wildfungames.com/land/rou?campaign=TREhKw&utm_campaign=TREhKw&web=1&tcode=plc03101899cd081c4fbc690018d6ced
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 23:30:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Fri, 14 Apr 2023 09:54:38 GMT
vary: Accept-Encoding
etag: W/"643922de-236"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QhJbYxzY7k3Jd2LQF%2BgWXUd1Bsj8gU5yWXrTliHVyQCchrhjvF8I%2BjdbIjIrjib1enA4kBUU49%2BToDCF9TtwpsbTU2Mk6Xb7vNP4TyH5Q%2BIWXWXTd5GqBukZ3DF4Nu4D05Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b87f95f0d810b69-OSL
alt-svc: h2=":443"; ma=60