Report - playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx

Report Overview

Visited public
2023-11-26 22:25:53
Tags
URL
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx
Finishing URL
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
IP / ASN
172.67.223.236
#13335 CLOUDFLARENET
Title
WIN

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-11-26 07:38:01	2.2 kB	171 kB	142.250.74.131
playexcitinggame.com	unknown	2023-09-29	2023-09-29 10:32:00	2023-11-21 06:01:59	7.3 kB	742 kB	104.21.38.152
cdn.sendx.io	442457	2016-03-26	2018-06-13 17:58:48	2023-11-14 14:50:36	1.8 kB	3.5 kB	54.230.111.118
laugoust.com	unknown	2022-07-22	2022-07-22 13:11:39	2023-11-26 05:09:19	946 B	12 kB	139.45.197.250

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-26	medium	laugoust.com	Sinkholed
2023-11-26	medium	laugoust.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	From	Size	First Seen	Last Seen
	playexcitinggame.com/resources/dom_cs.js	ScriptElement	1.9 kB	2023-04-14	2024-08-21
Pretty URL playexcitinggame.com/resources/dom_cs.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-14 10:34 Last Seen2024-08-21 09:34 Times Seen25 Hash 7391043503906ad2879a55543032c789 36a0ec4175b8d2b0cc39b9793b54fdfc4046cf97 651e73e8777a4e2e92f9b7a63f1d0c20e259aaa1b43ab74b03df7b698e134a1b Loading...

	playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/jquery-3.3.1.min.js	ScriptElement	87 kB	2023-03-07	2025-05-09
Pretty URL playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/jquery-3.3.1.min.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 07:40 Times Seen57426 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	playexcitinggame.com/resources/jquery.validate.js	ScriptElement	51 kB	2023-04-05	2025-05-08
Pretty URL playexcitinggame.com/resources/jquery.validate.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 22:54 Last Seen2025-05-08 22:08 Times Seen159 Hash 067bd983edbdea6eb0ad5a0d7b9d28fd 54c0df61914ce16304a21aac9dbf3f1db2aa2c22 c65892d90815b530c2866445015f3ff3dd9069de477fbcc3ba000cfa79087287 Loading...

	playexcitinggame.com/resources/back_ht.js	ScriptElement	683 B	2023-06-16	2024-08-21
Pretty URL playexcitinggame.com/resources/back_ht.js IP 104.21.38.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-16 15:29 Last Seen2024-08-21 09:34 Times Seen23 Hash 879653b3d49ed16320f99ab7fe1eccec 6ac3ed59a4e2d263f9631787357443aa60ae2928 15fb5ec3adfa96454122017888f163f7d80883cc2d1598e47f6c681676e2f82d Loading...

	playexcitinggame.com/resources/input.js	ScriptElement	665 B	2023-04-05	2024-08-21
Pretty URL playexcitinggame.com/resources/input.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 22:54 Last Seen2024-08-21 09:34 Times Seen26 Hash 2a60e256c0cf09b947e16d4fe3052877 467ce78a1ef1378f07bc7367281914093972bfef 7b0172528e24a764e588057f6cc90ff24befe8cc2d5ec2dcbaa5f673ac575d4d Loading...

	playexcitinggame.com/resources/validate_agebinom_sweeps_sx.js	ScriptElement	6.1 kB	2023-11-21	2024-08-20
Pretty URL playexcitinggame.com/resources/validate_agebinom_sweeps_sx.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-21 07:44 Last Seen2024-08-20 18:31 Times Seen9 Hash ed4e51bbb6e56c0dea7966c25d2e87d3 608ed1ec4cc50861bd8939dc96388ab3bfc5cd4a 44b11a18b7f6cf6c3d35b798981666321c7d80287efeb5ee60081ac0d2a95289 Loading...

	playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/main.js	ScriptElement	249 B	2023-08-02	2024-08-21
Pretty URL playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/main.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-02 01:47 Last Seen2024-08-21 09:29 Times Seen14 Hash 2a06e72ba3324d03025a14ce57edffb7 25989ac0710096ea48f267eb64d4a6e2448c78b3 20e21beed6eb920162674468830ef25442b78d1a7ccb8708bb113c72fb0d3c33 Loading...

	playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/timer.js	ScriptElement	543 B	2023-08-02	2024-08-21
Pretty URL playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/timer.js IP 172.67.223.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-02 01:47 Last Seen2024-08-21 09:29 Times Seen10 Hash 16511809f860d148ed5e7e2b62f864ae 9aa595fb1cd7d6fc85eec0af43439b57082a642a d02b50bb5ed9103d737d5654a29e46fc0a646b90f8f412ad61963cc970c6ab5d Loading...

	playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/ IP 104.21.38.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 10:00 Times Seen4635202 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	laugoust.com/pfe/current/micro.tag.min.js?z=5998767&sw=/sw-check-permissions-8a6a1.js	ScriptElement	27 kB	2023-11-02	2024-08-20
Pretty URL laugoust.com/pfe/current/micro.tag.min.js?z=5998767&sw=/sw-check-permissions-8a6a1.js IP 139.45.197.250 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-02 09:44 Last Seen2024-08-20 21:23 Times Seen8998 Hash 5ccd2d5882a06f293d07510ac91c92e6 b44dc0eaa03981adb70d3313e728f9359c1d21c1 9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba Loading...

HTTP Transactions (28)

URL IP Response Size

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

104.21.38.152

200 OK

2.0 kB

URL User Request GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
IP
104.21.38.152:80
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
2.0 kB (2033 bytes)
Hash
c89c85870878d563d30f471478829980
b372f18d330cfed13def69350ee21169d2e881c1
b2c1859716423bae6651ddcf887fecee7fe9aa0bfb1f89741a7e561fd6d1d21f

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/ HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uWTOrTDYiQ8LN%2FuetTNRLNQiCPLgNqVsxXxtgY747txKSjvioeGZ7cLPKrwBhHwkMZisT%2FAx8Xj%2BTT%2FA5lno%2BNseycGV4nA6OZDTPvzfizQ8CfreoZFXzN%2Bhswi0cKqFvdp7fc2nOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c555e4556b7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/css2

104.21.38.152

200 OK

13 kB

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/css2
IP
104.21.38.152:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text
Size
13 kB (12810 bytes)
Hash
b749be4c6e02a117b9ae493f0da15651
18fee64f909938bb4e4f5892f3bc51e8b6718115
8ddeb7ec12091c67404c60e3c497bdf3c3796469223123329e2a598c83e628c4

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/css2 HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Length: 12810
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 14:51:46 GMT
ETag: "320a-6013cc0e28480"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KtK0ef4%2FY5PaJnu7j1zMmcJR6syFXEMWHevitMGJoQ%2BW3%2BHBs1x5ncohPnL2jnSoIk0DEKXVUZ4E8nfa8%2BPtqhM0m5NDN45BCBwgDsFOXo5GfXm7DiT%2BQsDJBCyVlSS%2FXAZSluqe7w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c5808fa56b7-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/index.css

172.67.223.236

200 OK

1.0 kB

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/index.css
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
assembler source, ASCII text
Size
1.0 kB (1049 bytes)
Hash
c3ae33b0e81ebec24b889c633f4325e4
6ddd7dc512283e5f08bba3dfb21ae4e5ebe99c03
fe3b0b19745f2e2f31bde20d00fc422c0287fbd6c3626154dd88852c56231824

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/index.css HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: text/css
Content-Length: 1049
Connection: keep-alive
Last-Modified: Mon, 09 Oct 2023 07:10:30 GMT
ETag: "e94-60743490c2580-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PexB6bCYxDenU%2B1CAK%2BiywR7GpxEIP8EznCPqX7X390SvolY%2FbTEGIkZEygzZjFcwL2huar7edlwPEbqaZF2lhT%2BHTwKIJ4StUkWjvpyU358xZzebF%2FJFMShopuSDiuG0KhEZ9HqfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c581c8a712e-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/resources/sxfrm2style.css

172.67.223.236

200 OK

1.7 kB

URL GET HTTP/1.1
playexcitinggame.com/resources/sxfrm2style.css
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text, with CRLF line terminators
Size
1.7 kB (1694 bytes)
Hash
2be5076bad7307df2fb40d76f87643f4
73f52444b4cdc68703cca7c59d508856d17a8a97
4ead0931f5d54a99c0e5f9c0947407d7b3e2a6f517ae7e346ed20b4b9473f103

HTTP Headers

GET /resources/sxfrm2style.css HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: text/css
Content-Length: 1694
Connection: keep-alive
Last-Modified: Thu, 19 Oct 2023 12:13:13 GMT
ETag: "2d28-60810ae0f4840-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bsk0DmbtGpXSOQjCaWKLnRf%2FkA72PifInvvNMGto8yu8m9il9jWoqGmTeGAWxhH%2Fmecron%2BndHueF4zUO6GE7vMluDVIt%2FPx7oJ4BqP19sv%2B576lILrWmzDZ9Ywl0m%2F5lguamEaTmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58184356ca-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/resources/jquery.validate.js

172.67.223.236

200 OK

14 kB

URL GET HTTP/1.1
playexcitinggame.com/resources/jquery.validate.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
Unicode text, UTF-8 text, with very long lines (582)
Size
14 kB (13754 bytes)
Hash
272ed07e4108fd8d2bd2dfded9fa7f9e
05b36e84d98cc0fe2970c3009b3c5c5ef7fc434e
9b497cd560cf886ec2706ec20ec4ee673bdc1afc859ab418e432c8c71dda446c

HTTP Headers

GET /resources/jquery.validate.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 13754
Connection: keep-alive
Last-Modified: Wed, 29 Mar 2023 13:40:14 GMT
ETag: "c7e3-5f80a1da0eb80-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GeqsNsVe%2FYkA8ENm%2BB4wX%2BF5TjBDUJzOqd61T1rq9uy5Vq1dKCUFLVcZ%2FiORDJ%2Bt%2FUUU2zFyNrmIwcUfVlng7a9U%2FyJTXWS3C14w%2FbcngOwWq1aJKM48%2FBnwIIZwgJycbVHnCa%2FEKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58183656ba-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/reset.css

172.67.223.236

200 OK

673 B

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/reset.css
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text, with very long lines (1144)
Size
673 B (673 bytes)
Hash
7cbfdc06833ccc81a0b4b2d4de955c3e
7a706e83be481a6c4370b005d5b61ab0d12eae95
862c1b255778d8f64215f0ffabbb0ef21d27017958b73a617fe5fd9973b297c7

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/reset.css HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: text/css
Content-Length: 673
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 14:51:46 GMT
ETag: "479-6013cc0e28480-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WJOGtFS4qUYPmKNNL1We92F5Knxtd6%2FW0OKNKrNKkyW%2FWJ%2FzBFMjlZ6rrZbHl5jjJEQfog2NTAVrppYysQOXuX9RvwkPlhyNsjt8plfRDnWgGhlWL4tMsIwqjrckaRbJPLUpnrFpoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c581f7956b9-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/jquery-3.3.1.min.js

172.67.223.236

200 OK

30 kB

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/jquery-3.3.1.min.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text, with very long lines (65451)
Size
30 kB (30307 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/jquery-3.3.1.min.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 30307
Connection: keep-alive
Last-Modified: Mon, 10 Jul 2023 12:55:27 GMT
ETag: "1538f-600217f202dc0-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A1pyeLU3UfsKkVJqt%2BvMVf1HgsMHN%2FRKDEK63mcHbpkLkOMenA2jjzyBerdZ%2BopoKD4fPl1u0TXbrHHwHWiWS5i63mDTM1PMzxsxd5UIvoj9ZkiQyom49IEfQiK9xJlGPPxx9n9%2F7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c581c98b4f1-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/resources/back_ht.js

104.21.38.152

200 OK

336 B

URL GET HTTP/1.1
playexcitinggame.com/resources/back_ht.js
IP
104.21.38.152:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text
Size
336 B (336 bytes)
Hash
879653b3d49ed16320f99ab7fe1eccec
6ac3ed59a4e2d263f9631787357443aa60ae2928
15fb5ec3adfa96454122017888f163f7d80883cc2d1598e47f6c681676e2f82d

HTTP Headers

GET /resources/back_ht.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 336
Connection: keep-alive
Last-Modified: Fri, 16 Jun 2023 02:11:24 GMT
ETag: "2ab-5fe35b3a1cb00-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6c2Z3JenIEVcH9Cql8SaJN3qC%2BXZSAkY2nykOSKh9NcbJIId2W8L%2BuwRyuAB4nCSa902%2FRJTu0SuYaGVfKtPaF%2BYA1Q6rt1MR0Rle2RF4hhOHh%2Fir5gbt9NL4mDLdtpcABYIo1AChA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58695656b7-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/main.js

172.67.223.236

200 OK

167 B

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/main.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text
Size
167 B (167 bytes)
Hash
2a06e72ba3324d03025a14ce57edffb7
25989ac0710096ea48f267eb64d4a6e2448c78b3
20e21beed6eb920162674468830ef25442b78d1a7ccb8708bb113c72fb0d3c33

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/main.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 167
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 15:34:59 GMT
ETag: "f9-6013d5b708ec0-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qsBw%2FSSvu1VdBLxqVsXE5VeI%2BkIQAcECM7i0%2Fq5O8mMqouG4iMMVT6n5Fa9ZmN76MWs0r0sy8Tm5jPYo%2Fwj2Cd1cbEEQxNpYJVdPuRyRm4FUD3xXc5fAm%2BAnmUEUMAMVjsBthtyrxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58c80656b9-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/resources/dom_cs.js

172.67.223.236

200 OK

699 B

URL GET HTTP/1.1
playexcitinggame.com/resources/dom_cs.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text
Size
699 B (699 bytes)
Hash
7391043503906ad2879a55543032c789
36a0ec4175b8d2b0cc39b9793b54fdfc4046cf97
651e73e8777a4e2e92f9b7a63f1d0c20e259aaa1b43ab74b03df7b698e134a1b

HTTP Headers

GET /resources/dom_cs.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 699
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 07:34:59 GMT
ETag: "789-5f932c3032ec0-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kbDOG7ZgCRY%2BgqDY7SwruU6m6TNh69Jfp84TioRvIgN3uPrqFFc3Qh6Pvvby1GIOIOIJFxgZVRMNymyG9Bvai5h5uI4tHoEDtEYBpNG%2Bdk%2BFMeplB8xysTSh1C1ZAsa8oDME%2Bg9jfg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58acef712e-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/resources/input.js

172.67.223.236

200 OK

303 B

URL GET HTTP/1.1
playexcitinggame.com/resources/input.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
HTML document, ASCII text, with CRLF line terminators
Size
303 B (303 bytes)
Hash
2a60e256c0cf09b947e16d4fe3052877
467ce78a1ef1378f07bc7367281914093972bfef
7b0172528e24a764e588057f6cc90ff24befe8cc2d5ec2dcbaa5f673ac575d4d

HTTP Headers

GET /resources/input.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 303
Connection: keep-alive
Last-Modified: Mon, 03 Apr 2023 06:08:38 GMT
ETag: "299-5f86863c9a580-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4xhuGseDjiI9lVwf3heXuY1qOIr%2BdBugqSARFVCxi7ap7Oa0vNtZQlENEBIfrsadF0Ri456HkesrMsfOW2YP2yX8M3GKaDAHOcgzbX%2FcWWXovp%2BFgDEz3KWxPCJs%2BPuOknXhdqKeQA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58a8d656ca-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/resources/validate_agebinom_sweeps_sx.js

172.67.223.236

200 OK

2.0 kB

URL GET HTTP/1.1
playexcitinggame.com/resources/validate_agebinom_sweeps_sx.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text, with very long lines (1416)
Size
2.0 kB (1992 bytes)
Hash
ed4e51bbb6e56c0dea7966c25d2e87d3
608ed1ec4cc50861bd8939dc96388ab3bfc5cd4a
44b11a18b7f6cf6c3d35b798981666321c7d80287efeb5ee60081ac0d2a95289

HTTP Headers

GET /resources/validate_agebinom_sweeps_sx.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 1992
Connection: keep-alive
Last-Modified: Mon, 16 Oct 2023 08:26:37 GMT
ETag: "17d6-607d12a26a940-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yC%2Bxhp4RM1PYIMh1sp%2B%2FKAom%2FVbwT2DyCC8YCbf%2FOwpxRfkX1f6DcAWSyxX3nnlWYlMazYMORB5bomEnvJZdwEEH%2FtwDEfzNdzqWLDqjpgjHhtDWh14ILmt%2FKtYJCWNPSY6LFpjxXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58c8e156ba-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/timer.js

172.67.223.236

200 OK

270 B

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/timer.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text
Size
270 B (270 bytes)
Hash
16511809f860d148ed5e7e2b62f864ae
9aa595fb1cd7d6fc85eec0af43439b57082a642a
d02b50bb5ed9103d737d5654a29e46fc0a646b90f8f412ad61963cc970c6ab5d

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/timer.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Content-Length: 270
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 14:51:47 GMT
ETag: "21f-6013cc0f1c6c0-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LubQJcXrBMSDvg%2B%2Flz3eSxDOwTpU1DxJLyI1fD62kAiLK34xAp24jKa4H8IH80ARMwnsNUAj%2BCE%2FaWac8ckSSdeq0LoiCLZYdICnDdoEGfoim8SEEtw7xfHEXF8OMS2VlGZm3MtmKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c58fd6db4f1-OSL
alt-svc: h2=":443"; ma=60

cdn.sendx.io/fonts/PT%20Sans.css

54.230.111.118

200 OK

223 B

URL GET HTTP/2
cdn.sendx.io/fonts/PT%20Sans.css
IP
54.230.111.118:443
ASN
#16509 AMAZON-02

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerAmazon
Subject*.sendx.io
FingerprintD4:AF:A9:76:FF:0F:FD:C9:10:6D:54:5A:AB:4B:C0:82:B4:74:49:90
ValidityWed, 04 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
223 B (223 bytes)
Hash
76271aaaa990c198067aff4c057e3f66
d9b323e6e120405df1855699b400a853f56b7ce3
1d12cb248aa500dc28b99afbdb79961dd9cc64318de27c19f2e2108d438c8eb1

HTTP Headers

GET /fonts/PT%20Sans.css HTTP/1.1
Host: cdn.sendx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 223
last-modified: Tue, 24 Jul 2018 06:47:07 GMT
x-amz-meta-s3cmd-attrs: uid:501/gname:wheel/uname:agnibha/gid:0/mode:33188/mtime:1532412827/atime:1532414517/md5:76271aaaa990c198067aff4c057e3f66/ctime:1532412827
accept-ranges: bytes
server: AmazonS3
date: Sun, 26 Nov 2023 22:24:51 GMT
etag: "76271aaaa990c198067aff4c057e3f66"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nuyN6VA-gqgwX87bVy55yPyAtQ3vHRqgdY_A2kmhPxNKqdqYWAiT4w==
age: 46
X-Firefox-Spdy: h2

cdn.sendx.io/fonts/PT%20Sans%20Narrow.css

54.230.111.118

200 OK

251 B

URL GET HTTP/2
cdn.sendx.io/fonts/PT%20Sans%20Narrow.css
IP
54.230.111.118:443
ASN
#16509 AMAZON-02

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerAmazon
Subject*.sendx.io
FingerprintD4:AF:A9:76:FF:0F:FD:C9:10:6D:54:5A:AB:4B:C0:82:B4:74:49:90
ValidityWed, 04 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
251 B (251 bytes)
Hash
3dbdfe5959d52b12e8d198e06428f193
509977d6c9ddf3d484ccb5bcdf774de66e7924dd
5590ac38a4230c96a31c19d874ce00bcb6d2b219d13dc882f0155432ac43c5c3

HTTP Headers

GET /fonts/PT%20Sans%20Narrow.css HTTP/1.1
Host: cdn.sendx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 251
last-modified: Tue, 24 Jul 2018 06:47:06 GMT
x-amz-meta-s3cmd-attrs: uid:501/gname:wheel/uname:agnibha/gid:0/mode:33188/mtime:1532412828/atime:1532414517/md5:3dbdfe5959d52b12e8d198e06428f193/ctime:1532412828
accept-ranges: bytes
server: AmazonS3
date: Sun, 26 Nov 2023 22:25:17 GMT
etag: "3dbdfe5959d52b12e8d198e06428f193"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GCgSw2tV6q4Fy3N_t2rRdPA6uPhLg9bdiwtKGQHVmuWs5IeoeMKTqA==
age: 20
X-Firefox-Spdy: h2

cdn.sendx.io/fonts/Open%20Sans.css

54.230.111.118

200 OK

242 B

URL GET HTTP/2
cdn.sendx.io/fonts/Open%20Sans.css
IP
54.230.111.118:443
ASN
#16509 AMAZON-02

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerAmazon
Subject*.sendx.io
FingerprintD4:AF:A9:76:FF:0F:FD:C9:10:6D:54:5A:AB:4B:C0:82:B4:74:49:90
ValidityWed, 04 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
242 B (242 bytes)
Hash
bbb86ab49185ee6d501181ef14535e3f
dd45e912c677b8073ab99c42903c617094061f67
b340f8680f0d4d6983c5c7aacaa68f7d0bdfab44923f2bf2fca8a438795cd278

HTTP Headers

GET /fonts/Open%20Sans.css HTTP/1.1
Host: cdn.sendx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 242
last-modified: Tue, 24 Jul 2018 06:46:58 GMT
x-amz-meta-s3cmd-attrs: uid:501/gname:wheel/uname:agnibha/gid:0/mode:33188/mtime:1532412820/atime:1532414517/md5:bbb86ab49185ee6d501181ef14535e3f/ctime:1532412820
accept-ranges: bytes
server: AmazonS3
date: Sun, 26 Nov 2023 22:25:37 GMT
etag: "bbb86ab49185ee6d501181ef14535e3f"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y4dgzFA1NzsUlDor_tMPVWce0deQtkc3QI0FD6K8rUZGS8oNwAO0uw==
X-Firefox-Spdy: h2

cdn.sendx.io/fonts/Cabin.css

54.230.111.118

200 OK

215 B

URL GET HTTP/2
cdn.sendx.io/fonts/Cabin.css
IP
54.230.111.118:443
ASN
#16509 AMAZON-02

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerAmazon
Subject*.sendx.io
FingerprintD4:AF:A9:76:FF:0F:FD:C9:10:6D:54:5A:AB:4B:C0:82:B4:74:49:90
ValidityWed, 04 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
215 B (215 bytes)
Hash
c5a9aa6ca98ca423c1aacc9aeab5f8be
5d984b5095ae501aa0a32c20061a95f9039a38eb
959114c53f8d0e862ac873e28fb5ff551a7c7d59c2956766fbfc39c2e866966f

HTTP Headers

GET /fonts/Cabin.css HTTP/1.1
Host: cdn.sendx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 215
last-modified: Tue, 24 Jul 2018 06:43:43 GMT
x-amz-meta-s3cmd-attrs: uid:501/gname:wheel/uname:agnibha/gid:0/mode:33188/mtime:1532412652/atime:1532414438/md5:c5a9aa6ca98ca423c1aacc9aeab5f8be/ctime:1532412652
accept-ranges: bytes
server: AmazonS3
date: Sun, 26 Nov 2023 22:25:37 GMT
etag: "c5a9aa6ca98ca423c1aacc9aeab5f8be"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9Dgd1deFEIuBNZrhhSFNnyeqU9Atjt2PEDaabb4foUlT6xU9cpSORg==
X-Firefox-Spdy: h2

laugoust.com/pfe/current/micro.tag.min.js?z=5998767&sw=/sw-check-permissions-8a6a1.js

139.45.197.250

200 OK

11 kB

URL GET HTTP/1.1
laugoust.com/pfe/current/micro.tag.min.js?z=5998767&sw=/sw-check-permissions-8a6a1.js
IP
139.45.197.250:80
ASN
#9002 RETN Limited

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
ASCII text, with very long lines (27007), with no line terminators
Size
11 kB (11156 bytes)
Hash
5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5998767&sw=/sw-check-permissions-8a6a1.js HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 22:25:36 GMT
Content-Type: application/javascript
Last-Modified: Thu, 23 Nov 2023 20:41:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"655fb917-697f"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip

fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

142.250.74.131

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size
31 kB (30928 bytes)
Hash
ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780

HTTP Headers

GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://playexcitinggame.com
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 21:36:43 GMT
expires: Wed, 20 Nov 2024 21:36:43 GMT
cache-control: public, max-age=31536000
age: 434933
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

142.250.74.131

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size
31 kB (30928 bytes)
Hash
ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780

HTTP Headers

GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://playexcitinggame.com
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 21:36:43 GMT
expires: Wed, 20 Nov 2024 21:36:43 GMT
cache-control: public, max-age=31536000
age: 434933
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/ptsansnarrow/v8/BngRUXNadjH0qYEzV7ab-oWlsbCGwRg.ttf

142.250.74.131

200 OK

46 kB

URL GET HTTP/2
fonts.gstatic.com/s/ptsansnarrow/v8/BngRUXNadjH0qYEzV7ab-oWlsbCGwRg.ttf
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
TrueType Font data, 17 tables, 1st "GPOS", 8 names, Microsoft, language 0x409, Copyright \251 2009 ParaType Ltd. All rights reserved.PT Sans NarrowRegularParaTypeLtd: PT Sans \012- data
Size
46 kB (46457 bytes)
Hash
2dbafe616960c2bbca9731b5326e788a
c1879316187bf895bca09ba3cbded2fd7e3b1ae5
f6da57c920f83838231c39cfc367ad3c453c1dabb2675da977feec396f78357e

HTTP Headers

GET /s/ptsansnarrow/v8/BngRUXNadjH0qYEzV7ab-oWlsbCGwRg.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playexcitinggame.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.sendx.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46457
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Nov 2023 22:37:42 GMT
expires: Thu, 21 Nov 2024 22:37:42 GMT
cache-control: public, max-age=31536000
age: 344874
last-modified: Wed, 11 Oct 2017 18:30:36 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/ptsans/v9/jizaRExUiTo99u79D0KEwA.ttf

142.250.74.131

200 OK

60 kB

URL GET HTTP/2
fonts.gstatic.com/s/ptsans/v9/jizaRExUiTo99u79D0KEwA.ttf
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
TrueType Font data, 17 tables, 1st "GPOS", 8 names, Microsoft, language 0x409, Copyright \251 2009 ParaType Ltd. All rights reserved.PT SansRegularParaTypeLtd: PT Sans: 2010Ve\012- data
Size
60 kB (59457 bytes)
Hash
4ffa4616720ccdaebdf6002f6839a326
4768f335500152861f8bf00f349b667b54d3990f
ed3b51f6240250bb0427957fc3fa326a1a1140acbc31d8f162a568346b8366da

HTTP Headers

GET /s/ptsans/v9/jizaRExUiTo99u79D0KEwA.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playexcitinggame.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.sendx.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 59457
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Nov 2023 23:53:25 GMT
expires: Tue, 19 Nov 2024 23:53:25 GMT
cache-control: public, max-age=31536000
age: 513131
last-modified: Wed, 11 Oct 2017 18:24:45 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

laugoust.com/zone?&pub=0&zone_id=5998767&is_mobile=false&domain=playexcitinggame.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest

139.45.197.250

200 OK

0 B

URL POST HTTP/2
laugoust.com/zone?&pub=0&zone_id=5998767&is_mobile=false&domain=playexcitinggame.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Certificate
IssuerLet's Encrypt
Subjectlaugoust.com
FingerprintA9:BC:65:A8:77:D8:43:88:8C:04:8F:7D:6A:BB:A4:AE:22:E9:11:52
ValidityTue, 14 Nov 2023 05:09:00 GMT - Mon, 12 Feb 2024 05:08:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=5998767&is_mobile=false&domain=playexcitinggame.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playexcitinggame.com
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 22:25:37 GMT
content-length: 0
x-trace-id: 0cc8a2d6cb0f642c7a2d3cf5a0403d10
access-control-allow-origin: http://playexcitinggame.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/KS7mvH

172.67.223.236

200 OK

3.5 kB

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/KS7mvH
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
3.5 kB (3540 bytes)
Hash
b86fabe1339bf6d4596dc06e37eaf590
b62e72ec9bc63e2124a8f9ba130983898da8f191
a5fd21899ef9e2ca2b020485ec192443133e766587e9773603561e277b320625

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/KS7mvH HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:38 GMT
Content-Length: 3540
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 14:51:47 GMT
ETag: "dd4-6013cc0f1c6c0"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YHlVuz0kRJ2eZutngiZvn%2F5Tm0%2FVHOh3ShP4JP%2Fdf1W5u9qcXklaS6A4s6GEh9vHGZK4gOJ%2FUzYEdiAsWBdGMry0m4N3WHg1QG6b0Qc0nmXtlfTJKe%2BQ4viqd3KrwxCZaKW72B7Ssg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c5a19c356ba-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/favicon.png

172.67.223.236

200 OK

561 B

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/favicon.png
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
561 B (561 bytes)
Hash
264f964f4c81a6b5106e5f153c03bb9c
739646f3c843704a1440fa6c3d4b66ce3c841a7d
b2397e993b8507af3435473283a4ee3fc01ca5797a40a3b82128db9c2cd17c49

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/favicon.png HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:38 GMT
Content-Type: image/png
Content-Length: 561
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 15:20:54 GMT
ETag: "231-6013d2912e180"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t3G9LRQM3aNWYcguvjyt3nrqOTPCseRSB7ASFXtbt3tCi13EtMiIBTT%2B1aDJkIMGKjkIk61nsrqfPQ41ZcQhsa7zaXx6e%2FRqBATPTf7jyLGsNAWWFc4YUo56J0zBcgEQXHq1GOF6vA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82c58c5eedce56ca-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/bottom.png

172.67.223.236

200 OK

650 kB

URL GET HTTP/1.1
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/assets/bottom.png
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
PNG image data, 768 x 560, 8-bit/color RGBA, non-interlaced\012- data
Size
650 kB (649559 bytes)
Hash
a90b20a181b86ce284e7231de675dbea
3443a97a4fdf661039f0f92ef8c97b51e18c7c84
3f434e09a21596ad6570e5d5cdf43da87288fd6f87d36cd0fba9e4bb1a2b7d53

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx/assets/bottom.png HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:38 GMT
Content-Type: image/png
Content-Length: 649559
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2023 14:51:46 GMT
ETag: "9e957-6013cc0e28480"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KghKovOyPl5AiD0bOvsa%2F9uNyNx1V1ivAiXcDG72KGDOeh1a52s5qpSF0sjq6qWgkCOvx4six8RCU408HqL5n1HGmKtAFd2WgCVWkV%2BuOKLZu95LmvTYEsPtaB9n9xywy1Qyu2iDIg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82c58c5a1e8bb4f1-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/sw-check-permissions-8a6a1.js

172.67.223.236

200 OK

294 B

URL GET HTTP/1.1
playexcitinggame.com/sw-check-permissions-8a6a1.js
IP
172.67.223.236:80
ASN
#13335 CLOUDFLARENET

Requested by
http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/

File type
Java source, ASCII text
Size
294 B (294 bytes)
Hash
56c81dc9934f178c8cee3587a2859759
152c7be387d9d0734130abd6993b49c66ef826ce
3bb068d00a175132a3a8b601cf61a71aedb4f2e1105bd7ba0a69cd7f24b83fa0

HTTP Headers

GET /sw-check-permissions-8a6a1.js HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 22:25:39 GMT
Content-Type: application/javascript
Content-Length: 294
Connection: keep-alive
Last-Modified: Tue, 30 May 2023 08:39:48 GMT
ETag: "236-5fce5255b3d00-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bl%2FaLnuiPCT9RvblfbliFeW4XQFzMOfzTRtoOxoVKpfbH%2BAQxS0SJzFSElUSHN1vtbaQqBmrnlGatyDZwotYyVD3xs69kQjfOrFNGsok04OQO2B1J5mHqSg%2FVer9MbwCrO2ywAkEdw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 82c58c692b32b4f1-OSL
alt-svc: h2=":443"; ma=60

playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx

172.67.223.236

301 Moved Permanently

8.7 kB

URL User Request GET HTTP/2
playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx
IP
172.67.223.236:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectplayexcitinggame.com
Fingerprint0A:B4:7E:4A:39:5C:0B:83:D8:53:E1:2D:C5:4A:E4:34:47:18:19:73
ValidityFri, 29 Sep 2023 08:00:25 GMT - Thu, 28 Dec 2023 08:00:24 GMT

File type

Size
8.7 kB (8708 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ht/csnlpsub/nz/lp21fcsx HTTP/1.1
Host: playexcitinggame.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Sun, 26 Nov 2023 22:25:35 GMT
content-type: text/html; charset=iso-8859-1
location: http://playexcitinggame.com/ht/csnlpsub/nz/lp21fcsx/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zt%2BHkDDiYMZ9o2jGKNzlPQq4rUkNFYhZ%2BkqNydbFSPU8ICr71mfVpsqXZX%2Bmnb6CgMs6ffyEQ3ecA8nUA%2BYdtJIOjfBsR%2FkhLcyvJ3vPypYwLokscmMnfQ7XBQPxXnW3LFs2sXuTtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c58c545d93568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by