Report - www.toprevenuegate.com/bbqpn4w1v?key=ee944c974d360eccc3a9f03c33aa0b43

Report Overview

Visited public
2023-11-28 06:44:57
Tags
URL
www.toprevenuegate.com/bbqpn4w1v?key=ee944c974d360eccc3a9f03c33aa0b43
Finishing URL
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
IP / ASN
192.243.61.225
#39572 DataWeb Global Group B.V.
Title
BootyHeroes

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.toprevenuegate.com	unknown	2023-10-20	2023-10-23 18:22:31	2023-11-27 10:27:28	2.4 kB	4.5 kB	192.243.59.20
somebestgamesus.com	unknown	2023-06-14	2023-06-14 20:35:19	2023-11-28 05:02:48	18 kB	588 kB	172.67.196.232
ln.gamesrevenue.com	117740	2014-05-30	2017-01-29 21:27:07	2023-11-27 00:43:58	418 B	15 kB	5.161.79.44

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-28	medium	toprevenuegate.com	Sinkholed
2023-11-28	medium	toprevenuegate.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	somebestgamesus.com/awpx_click.js?v=005	ScriptElement	1.5 kB	2023-03-26	2025-05-11
Pretty URL somebestgamesus.com/awpx_click.js?v=005 IP 172.67.196.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 01:11 Last Seen2025-05-11 11:38 Times Seen1610 Hash 7aeb87811ad3a82fde3e2783544819ee d1d9174cbcbb1abdccee6841f170ba21f899925b 7fff603702e9bea03cf47ba47947bb7f8655eb7fcb1c8f7091e9a38d8f5d949c Loading...

	somebestgamesus.com/bh/bh_1221/land_bh_121221_en/scripts/script.js	ScriptElement	345 B	2023-03-10	2025-05-01
Pretty URL somebestgamesus.com/bh/bh_1221/land_bh_121221_en/scripts/script.js IP 172.67.196.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 03:27 Last Seen2025-05-01 11:50 Times Seen264 Hash 684e2cf86a68f9c93c2e1e0c8f28cbcf 8728d81c5e3d811f6d1e373184fab88bb009c6fc a68eafa9db1c0ef2ffc528cf6258f35b34f504afaec13f84009ed9e750691966 Loading...

	somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648 IP 172.67.196.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 21:07 Times Seen4657410 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	somebestgamesus.com/bh/bh_1221/land_bh_121221_en/libs/jquery.min.js	ScriptElement	87 kB	2023-03-07	2025-05-11
Pretty URL somebestgamesus.com/bh/bh_1221/land_bh_121221_en/libs/jquery.min.js IP 172.67.196.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 19:39 Times Seen57575 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	ln.gamesrevenue.com/px1.js	ScriptElement	15 kB	2023-03-14	2024-08-20
Pretty URL ln.gamesrevenue.com/px1.js IP 5.161.79.44 ASN #213230 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 19:54 Last Seen2024-08-20 18:08 Times Seen59 Hash e354152e008d20fc1e9d5070b0f40541 ea0120adc3e3ff6a14456fc07e86511a97cad6dd 64087753b774405cdf859e3f5dc78d92e9d7942c6b3863cbcc914cb6d01409d5 Loading...

HTTP Transactions (20)

URL IP Response Size

www.toprevenuegate.com/bbqpn4w1v?key=ee944c974d360eccc3a9f03c33aa0b43

192.243.59.20

1.3 kB

URL
www.toprevenuegate.com/bbqpn4w1v?key=ee944c974d360eccc3a9f03c33aa0b43
IP
192.243.59.20:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (408)
Size
1.3 kB (1345 bytes)
Hash
4e8cd75f22096be90765fc3e2ec06ddf
a123b4213a80320ede7a232d7eb411721200fba1
6183f5a93681483403b3a89effa9192fed8b053a067038025b5c9199bc510e61

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bbqpn4w1v?key=ee944c974d360eccc3a9f03c33aa0b43 HTTP/1.1
Host: www.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 06:44:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=21430648; expires=Wed, 29 Nov 2023 06:44:38 GMT
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMTQzMDY0OCwiayI6ImVlOTQ0Yzk3NGQzNjBlY2NjM2E5ZjAzYzMzYWEwYjQzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozMjUyNDUwLCJwaWQiOjE0NDI1MzUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MzgsImFpZCI6MjgsInB0Ijo0LCJwayI6ImJicXBuNHcxdiIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiIn19.g9_WqTuIQDH8R_5OUtsdht31l2vw9JbjhLcgUTDWxkY; expires=Tue, 28 Nov 2023 06:45:38 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 603d4d4e1f03de8051ad90ae9c6910fd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.toprevenuegate.com/api/users?token=L2JicXBuNHcxdj9rZXk9ZWU5NDRjOTc0ZDM2MGVjY2MzYTlmMDNjMzNhYTBiNDMmcHN0PTE3MDExNTM5Mzgmcm10Yz10JnNodT0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMx&uuid=&pii=&in=false

192.243.59.13

302 Found

0 B

URL User Request GET HTTP/1.1
www.toprevenuegate.com/api/users?token=L2JicXBuNHcxdj9rZXk9ZWU5NDRjOTc0ZDM2MGVjY2MzYTlmMDNjMzNhYTBiNDMmcHN0PTE3MDExNTM5Mzgmcm10Yz10JnNodT0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMx&uuid=&pii=&in=false
IP
192.243.59.13:443
ASN
#39572 DataWeb Global Group B.V.

Certificate
IssuerLet's Encrypt
Subjecttoprevenuegate.com
Fingerprint7D:44:5C:97:A8:B4:D2:87:5C:7C:4E:B7:DA:3A:38:99:85:00:67:40
ValidityFri, 20 Oct 2023 09:02:00 GMT - Thu, 18 Jan 2024 09:01:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L2JicXBuNHcxdj9rZXk9ZWU5NDRjOTc0ZDM2MGVjY2MzYTlmMDNjMzNhYTBiNDMmcHN0PTE3MDExNTM5Mzgmcm10Yz10JnNodT0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMx&uuid=&pii=&in=false HTTP/1.1
Host: www.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.toprevenuegate.com/bbqpn4w1v?key=9ca601a9f47c735df76d5ca46fa26a66&submetric=21430648
Cookie: u_pl=21430648; ain=eyJhbGciOiJIUzI1NiJ9.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.g9_WqTuIQDH8R_5OUtsdht31l2vw9JbjhLcgUTDWxkY; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 06:44:39 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Set-Cookie: iprcf469318b8e31a337c1b87cc2829a531b=4586510; expires=Fri, 29 Dec 2023 06:44:39 GMT
pdhtkv=true; expires=Wed, 29 Nov 2023 06:44:39 GMT
uncs=1; expires=Wed, 29 Nov 2023 06:44:39 GMT
pdhtkv28=true; expires=Wed, 29 Nov 2023 06:44:39 GMT
uncs28=1; expires=Wed, 29 Nov 2023 06:44:39 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1a5da13d63223bb23f44a0f4b50297a0
Strict-Transport-Security: max-age=0; includeSubdomains

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/notice.png

172.67.196.232

200 OK

4.6 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/notice.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 772 x 70, 8-bit colormap, non-interlaced\012- data
Size
4.6 kB (4572 bytes)
Hash
d3e3c2ab2353d60e9a2594bff41757b8
cf51cdb77f7ba4f24ebce6639311fd4d81427f65
ec8d72a4add74100771c2735ed08902a719ec94b3219c5e5ed44ba1d1a86e053

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/notice.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 4572
last-modified: Wed, 15 Dec 2021 16:52:27 GMT
etag: "61ba1d4b-11dc"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I760VE8vQiIoBDBQukt%2B1zKwjUCayCXl8kiSe%2FVDch500vGT0gBz4836I0KvkrCZJ0YtAGTefDg%2BXufM4Isbc%2BGVs3FvOKFeuqBWEVZyU7HQX3PmUHN54MvQijvT6hfapvxESh8A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db356bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/logo.png

172.67.196.232

200 OK

81 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/logo.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 1351 x 172, 8-bit colormap, non-interlaced\012- data
Size
81 kB (80552 bytes)
Hash
4ad1c4680e08f5cce52488461a8c1808
423b4f3575f01fd728a4f3f624b7c0a0df8a919e
9cd6b96bc9e3d40079402623fc8ddf772a262c8732f20b3ff59b45f1d5ed8ff9

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/logo.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 80552
last-modified: Wed, 15 Dec 2021 16:52:26 GMT
etag: "61ba1d4a-13aa8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6163
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CCoVmYsDTogU6rZEZW9BW9JPExDW7XL5WOu663WzT3v8te4G7et%2FovWI5i29waHAwGYgjBMiZxPG2OMyGDtAsFqqqi8wYhG2zeRgcelfKm0vfHwGUn6qd0H5iCRxr9Tdd700telL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db256bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card1.png

172.67.196.232

200 OK

32 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card1.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
32 kB (31450 bytes)
Hash
de58c374d11cd2e1a7d53023bf7e79f4
15abbe713f2cce0364ed04e939b90acf84a1f7fd
eedf9d6b5c1e08a0a3cbc3f3ebb43cbd5d1e424751a816d7f81b7baa979945e1

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card1.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 31450
last-modified: Wed, 15 Dec 2021 16:52:24 GMT
etag: "61ba1d48-7ada"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1212
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EDcTgAmaOQNtwlgcARNVmGHHh8Vnf9E%2BZ1XFIKa9NtNiVstOoSlbUDcjZmvl4%2Bg9WQcPum0HE6GxXGIhvxqAlpqTxf8ynTDzkpnd1m4H%2FCcKBqd1w0aWCQBmKesW9ShC4tQzFGCg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db456bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card1a.png

172.67.196.232

200 OK

32 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card1a.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
32 kB (31848 bytes)
Hash
1dea30dc2228d0c617268a7d9cc731a7
a2dae65872dfaf25d54c10fafd44bf3456b78725
e1029dc059006e6aafd3555f7299cc16810aea01e03aa8f7ffbd74be6cb1b3a0

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card1a.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 31848
last-modified: Wed, 15 Dec 2021 16:52:23 GMT
etag: "61ba1d47-7c68"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QBJNVCS56%2FK5ILvBBBPjimlr0DFREkK1aQ03O2Shmo7%2B4PYr0125vC3OamFrsrhlyM1%2FAun%2Bd3D6Leh2vMi93Crh%2FuN8WxN36b4LXh0wtBVAh%2F68yvKvXWVZFk7iO%2FrYQjhuLRrv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db756bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card2.png

172.67.196.232

200 OK

42 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card2.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
42 kB (41621 bytes)
Hash
b8034d1e7c53e5fd79fb077b786fa044
511ebd742e68288f51d86a49494a1e669c14df29
48eade5e0b4071ca508775f6dfea35645f0dc967f0d2bbd9e73af483271ab08f

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card2.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 41621
last-modified: Wed, 15 Dec 2021 16:52:24 GMT
etag: "61ba1d48-a295"
cache-control: max-age=14400
cf-cache-status: HIT
age: 909
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hJYLyKZQqyiY5z%2BJTQ6YfQ7kapUgvbjwDfPEFbQqr2go0Ckf5QBIk973TejL91ATnmnRJOxwWyBuQC96h6jCxh4xXtUoaWuUVa5kZAQbHy63DKcR9HRkE7nwqAoTGlUpsVjRwj2L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db956bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card2a.png

172.67.196.232

200 OK

42 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card2a.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
42 kB (42179 bytes)
Hash
3f88a28f8ad18db5ac0f3297875b5292
06fd8e7ef2bafa2002b8d01e719ae75b2192fcd1
f2fa01a529468e448cca239674214a9ad01e5cb8c79f6ab7410ff1bc623daf5a

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card2a.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 42179
last-modified: Wed, 15 Dec 2021 16:52:24 GMT
etag: "61ba1d48-a4c3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r7dCMmWReqZW2scRP%2B36LxYxc6%2B91AjBDg8FzG5gSkCe0Dhs0FnTBSZBvZGuVAPmoPAkRfafzH0f29cWt90E2jpH03g1VOfuOYIPKITpt6Tp3CQdM8e%2FuBtXPW29JJgqwmLyig7q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c71dba56bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card3.png

172.67.196.232

200 OK

50 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card3.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
50 kB (49609 bytes)
Hash
af9679f92e7652ec0cd753b11811c0fd
df456bc963169a9a91f01d193a116ecda98194a7
3429276a6715de1889e4eff58df0f404f66c93445cd707302ec17eede706015f

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card3.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 49609
last-modified: Wed, 15 Dec 2021 16:52:25 GMT
etag: "61ba1d49-c1c9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6161
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BtxggNBJke%2BBbdhzMpj3obMeEgIe84XETYQdPa0lvly3Bg92jl2ZX%2B9eDqF9DCePGpTuV4gkziDKLA7PProA0hYtlyWwQ3PV3lugYZyEGkMdQGrX95shgaJKx0AzCpRoO2XHKILg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c71dbc56bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card3a.png

172.67.196.232

200 OK

50 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card3a.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
50 kB (50020 bytes)
Hash
b230b9d92394fbaefe2708e0e0dec082
47ee817b3adf0cc7dbf1085773d4d74a2cb6d67e
4f604bd004ffcd828047132bfd96aeae68bde1ab067c4562ce4afbba7370c856

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card3a.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 50020
last-modified: Wed, 15 Dec 2021 16:52:25 GMT
etag: "61ba1d49-c364"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZDKox1tRn2kvr5GCvLC5SmaG%2BtZnT5k07LNtg9QzshFZUor2W0Nnc4y6rqGrUCHNe7EE7laFB%2BTxLyFB9Yo6VKa7B%2Be94ISvD6D1O05Ey7xZgeSGaaIIOmg8WVc1GbiIY1wOvzTl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c71dbd56bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card4.png

172.67.196.232

200 OK

34 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card4.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
34 kB (34541 bytes)
Hash
a65456fd9561c4022e871c74db35f751
d82dd71f84ab4628004cc6bb276a5fc027171110
7984a72a799552686ff8ca1e0f98db25473ebcdae876c53f4b8096de6d24ae2d

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card4.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 34541
last-modified: Wed, 15 Dec 2021 16:52:25 GMT
etag: "61ba1d49-86ed"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sqd%2FzlwNmo5Zi6rTflrpcikJfbCBMPGeZeqQTUQTbDVVz0qKyvAP4bXFkn3AUS7lgERS7iFG39oFQYYqsqooxXrhZo5oRT3OQrA7jTiq%2Fq7hMmXBTkraR3R%2Bv%2Bcm2uASp8yAyklH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c71dbe56bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card4a.png

172.67.196.232

200 OK

34 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/card4a.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 323 x 456, 8-bit colormap, non-interlaced\012- data
Size
34 kB (34352 bytes)
Hash
7256f6e1ca6847453f8a12527dca4c02
5fb5643de84644abe6023b90edea04575aa4632a
955d1ea05a93b5b5dffe3f25110c3eaf34b1740b60e8c8f04fb1cf384a79a0f2

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/card4a.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 34352
last-modified: Wed, 15 Dec 2021 16:52:26 GMT
etag: "61ba1d4a-8630"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6161
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2FcIPvDX8lo2EpJ37Da5nMgQvB7ZMnWRhPCabvHrsEkvHTjx%2FTSqbBPNnSYE9QdLL72K6js0Z0TWyoiwh6GGlD10ChgAb1f2NLzK683Hih7VRUUSajHVQeJ1QXhXS1V63h9cwRVf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c71dbf56bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/bg.jpg

172.67.196.232

200 OK

80 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/bg.jpg
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size
80 kB (80486 bytes)
Hash
f13e1f3747dee799e33f38beb90fc4fd
9df5a8eed29d5f7d63434dba3650f12e9409c533
be9ad7fdfa41cdb68b4739dd1f6029c2878a58b440f25f04a667555317b2bd07

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/bg.jpg HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/jpeg
content-length: 80486
last-modified: Wed, 15 Dec 2021 16:52:23 GMT
etag: "61ba1d47-13a66"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pvTF%2BxxHPW2YkUZwtBIDoJXko3eM61NauvxKr5zuzGoTsTAYBQj99l2tUndsP4swk9%2Fs695RfK53xsggB2nY81N4GoyGvp3YOj%2FN%2BtS0bJnrSd4xjrxDkCdG1Rh9PD2BrLdbFElS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c9ef6256bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/favbh.png

172.67.196.232

200 OK

1.9 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/image/favbh.png
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size
1.9 kB (1945 bytes)
Hash
4516ac7fbf10bd52963dccecadb51b7a
9a36fd28e093cf977b99820d57d224c71a86ea32
f11be769921e7ce52edb250be020b0f838ed7c509b00456edfc15ca7b94d507f

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/image/favbh.png HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: image/png
content-length: 1945
last-modified: Thu, 23 Dec 2021 17:24:51 GMT
etag: "61c4b0e3-799"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6785
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5eK%2FFsMIotQjiK16a7OjRHlfNscf4fTZcBTmSnQsko2ro9vkze6mqN%2FoQs7%2FgmtvUoz0V58Qpl4kfiVFiv%2F97Eg2wIfX4tZ21DuJvphkeWBeIXs%2FSUDzG340fxtHnUd4RmaW71bA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4ca0f7756bf-OSL
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648

172.67.196.232

200 OK

2.8 kB

URL User Request GET HTTP/2
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (3032), with no line terminators
Size
2.8 kB (2845 bytes)
Hash
f256a47bc93eb58159fdd6fa119fa67a
cfb709849c68d941ce2ff3bbb7fcd83e261a3c50
4565b98797eb8745c5d44e70bfb44fb195652d3c7d5f2d2eda7fa527cd3f6694

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648 HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.toprevenuegate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dFf5Ralnh9oLXynZxRqs1HwWS%2F1Wz0EuJbm%2FomF%2BiV9FS1wzGKQ3LW62aJdeqXmH9w0ngqFJa1OOVfLXdTWDhKHojaYMw4T29SYKKgaBNielWD%2F%2FS6sVZ5nNf%2BVHeH%2FXY2SO9yki"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d0a4c4dee056b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/scripts/script.js

172.67.196.232

200 OK

345 B

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/scripts/script.js
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (367), with no line terminators
Size
345 B (345 bytes)
Hash
ae785c0d9035f2361512adfa5f30cabd
c92d5c55886c858cf9c9418aace79b387ea07d33
94fdc9307719ee8df8eb12587002be6446d17b0a3413fb496083a99aff4dab9f

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/scripts/script.js HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: application/javascript
last-modified: Wed, 15 Dec 2021 16:52:29 GMT
etag: W/"61ba1d4d-159"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oquyPTk1dxb7LdVQYVVs6lqU0Y55UWPZ0wiTK4yp%2FU59lZ5j9rhAmsy7TL5zNbOlrwHFCyGFyTCjxUlFS7lxYLnNEbd8YLvB6LqAFM%2Blsm6NOw0jZf4gG5oFa58GCrEKwxOUnv%2Fz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c71dc256bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ln.gamesrevenue.com/px1.js

5.161.79.44

200 OK

15 kB

URL GET HTTP/2
ln.gamesrevenue.com/px1.js
IP
5.161.79.44:443
ASN
#213230 Hetzner Online GmbH

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerLet's Encrypt
Subject*.gamesrevenue.com
Fingerprint70:21:04:E8:FE:50:F1:6F:47:BE:46:8F:A0:99:72:FB:3D:F4:25:C6
ValidityWed, 15 Nov 2023 09:30:14 GMT - Tue, 13 Feb 2024 09:30:13 GMT

File type
ASCII text, with very long lines (15199)
Size
15 kB (15200 bytes)
Hash
e354152e008d20fc1e9d5070b0f40541
ea0120adc3e3ff6a14456fc07e86511a97cad6dd
64087753b774405cdf859e3f5dc78d92e9d7942c6b3863cbcc914cb6d01409d5

HTTP Headers

GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 08:33:55 GMT
etag: W/"63f481f3-3b60"
content-encoding: gzip
X-Firefox-Spdy: h2

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/libs/jquery.min.js

172.67.196.232

200 OK

87 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/libs/jquery.min.js
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
ASCII text, with very long lines (65451)
Size
87 kB (86927 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/libs/jquery.min.js HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: application/javascript
last-modified: Wed, 15 Dec 2021 16:52:29 GMT
etag: W/"61ba1d4d-1538f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2247
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F23RM5PgkZP09rxrdI5Xw7JhUeJKg2r47%2Bf%2FXL8KMdScF4y3n8yIk2njhXb2I5wGCQCoQhGIBvNEY85Mr26yLwr9IxaLfXxoWxqNc4SxL5FMlpIX4Gb5rcMsG2isVJVgw5JFbpsh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/awpx_click.js?v=005

172.67.196.232

200 OK

1.5 kB

URL GET HTTP/3
somebestgamesus.com/awpx_click.js?v=005
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
ASCII text, with very long lines (1544), with no line terminators
Size
1.5 kB (1490 bytes)
Hash
684379265eb9f58cc45bc0d82f0db964
dcceb2eb66dd485a8df52da17210e1ea660354ee
45f7be3af362b2f0b894e51e8394ecc08066d8b9004fb095ba7665edbd8ce078

HTTP Headers

GET /awpx_click.js?v=005 HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 09:49:36 GMT
etag: W/"6409abb0-5d2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cSl%2BZuTvFeegxrJSum%2FkM1LnbssD59k1xCzgdgE%2B7Vzz02mi8NLRPHV8yK4Vrgf%2F9JjSlPyIO4%2FDqnhk7ccL7YCLerF1MI3rGkRuoqOOmSpxZfCkVw8MKXONrStD72OyD3bjmwhy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70db156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

somebestgamesus.com/bh/bh_1221/land_bh_121221_en/css/main.css

172.67.196.232

200 OK

1.8 kB

URL GET HTTP/3
somebestgamesus.com/bh/bh_1221/land_bh_121221_en/css/main.css
IP
172.67.196.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Certificate
IssuerGoogle Trust Services LLC
Subjectsomebestgamesus.com
FingerprintAB:9B:39:A9:7B:4B:0F:14:55:FA:47:5D:61:57:AD:D3:DF:74:E9:CC
ValidityTue, 10 Oct 2023 22:43:59 GMT - Mon, 08 Jan 2024 22:43:58 GMT

File type
ASCII text, with very long lines (1910), with no line terminators
Size
1.8 kB (1801 bytes)
Hash
ee2e7a50ccfba266b26adf8227847b3c
e0531775bbbbdbc06db509516d49873193c9a767
17fa83f3112b1ba2a38f11f1d55c7025695347285cb41a0c6282eab4be79a42a

HTTP Headers

GET /bh/bh_1221/land_bh_121221_en/css/main.css HTTP/1.1
Host: somebestgamesus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somebestgamesus.com/bh/bh_1221/land_bh_121221_en/?p1=https%3A//click.hooligapps.com/%3Fpid%3D3%26offer_id%3D43%26ref_id%3DVjN8MjE0MzA2NDh8NDU4NjUxMHw5MDc1MzQ1N3wxNzAxMTUzODc5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxzaD0xZmM3NWMyOGVmOGM2Y2ZkOGI2NDM3YWIwYjQzNDliOWFlOGEwNzRiNzAxOWM4NzYyOTIzOTFhZjNhZTU5OWZjZmQ2MWVmYzhjNTgyZWYwYTI3YTllYTJmMTc5NjA2YzQ3ZTZiYjVkMDkxNzI2NGQxNGMyMDBhNjU0MzQyYzA4NDc2OGU1OGJjODU4YThjZTMxMzczNTlhY2EyNWNmM2RlZWMzNzNmYzhhMWRlMTE0NzEzYzYzNGNjM2I0YzMxfGxzPTN8b3R2PWJ8b3RnPTE3fGZjMDVhNTFiM2Q1MjM4MGIxOTcxZDQ1MGIzMDQ5N2Uz%26sub1%3Dpu_main%26sub2%3D21430648
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:44:40 GMT
content-type: text/css
last-modified: Wed, 15 Dec 2021 16:52:22 GMT
etag: W/"61ba1d46-709"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BZUTvJVdNnUmsY3WJCmE5bfM%2F1CGlhnEm9r%2BR%2F%2BGgyikseWDxKIttvHI3QeFUVwy9X5l9QmqJcA62y0HAgQXVHERdJTV5rTWdm7zw4C7l%2FNQKAfPvygQTQHfrqGVYdiiPAickaNX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d0a4c70daf56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate