Report - chargen.one/layla+deline+of

Report Overview

Submitted URL
chargen.one/layla+deline+of
IP
104.21.50.99
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 21:54:34
Access
public
Website Title
EatCells.com
Final URL
eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
magnificent-listen.com	unknown	2023-09-11	2023-09-11	2024-04-22	1.3 kB	1.7 kB	88.85.68.219
eatcells.com	438054	2018-08-16	2018-08-23	2024-04-24	4.3 kB	168 kB	94.130.177.84
a.magsrv.com	unknown	2023-08-01	2023-08-04	2024-04-24	808 B	103 kB	185.76.9.19
avatars.mds.yandex.net	6545	2000-11-14	2014-12-15	2024-04-25	7.9 kB	252 kB	87.250.247.183
chargen.one	unknown	2023-07-04	2019-03-20	2023-11-24	5.2 kB	250 kB	172.67.204.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	magnificent-listen.com	Sinkholed
2024-04-25	medium	magnificent-listen.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31	0 B	2023-03-07	2024-05-05
Pretty URL eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31 IP 94.130.177.84 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-05 21:22:48 Times Seen37370536 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (40)

URL IP Response Size

avatars.mds.yandex.net/i?id=2a00000188fbfb2174cf75e3cdb2d7e60ed1-919303-fast-images&n=13

87.250.247.183

0 B

URL
avatars.mds.yandex.net/i?id=2a00000188fbfb2174cf75e3cdb2d7e60ed1-919303-fast-images&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /i?id=2a00000188fbfb2174cf75e3cdb2d7e60ed1-919303-fast-images&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
x-request-id: 8d52e606f7c159d4
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=4c3fe2793944cc724693bf716e0f8c37886e1345-10355200-images-thumbs&n=13

87.250.247.183

15 kB

URL
avatars.mds.yandex.net/i?id=4c3fe2793944cc724693bf716e0f8c37886e1345-10355200-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 226x320, Scaling: [none]x[none], YUV color, decoders should clamp
Size
15 kB (14568 bytes)
Hash
11761ace3294b345d24f6cde0e9cbc6a
d2238752dc31cc0cd80c4155fa04d963a53c28e7
911294482a978fd6269e06c5fa7441c67a0084f516574da8bec70e173931d5c0

HTTP Headers

GET /i?id=4c3fe2793944cc724693bf716e0f8c37886e1345-10355200-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 14568
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 5856bee8586a8417
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=f593d8576c0aa119f8de72dedb1e0b29-5233671-images-thumbs&n=13

87.250.247.183

12 kB

URL
avatars.mds.yandex.net/i?id=f593d8576c0aa119f8de72dedb1e0b29-5233671-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 228x320, Scaling: [none]x[none], YUV color, decoders should clamp
Size
12 kB (11486 bytes)
Hash
200b0090178cdf032482f8ac8a7f9c2a
da741e9ee41b19ae59ef9e052176e870286899fc
2b324c14b6ae5703090e485e093973e934523220f12079d4854338f9eaa82d44

HTTP Headers

GET /i?id=f593d8576c0aa119f8de72dedb1e0b29-5233671-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 11486
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 39eda9b031717ece
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=69a93bcf9f08c9af887e970af217b050d70f6c5f-9284609-images-thumbs&n=13

87.250.247.183

27 kB

URL
avatars.mds.yandex.net/i?id=69a93bcf9f08c9af887e970af217b050d70f6c5f-9284609-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp
Size
27 kB (27406 bytes)
Hash
ff36f4862a430c8ab33f5c46395f25a9
9ed2d26d004daff7db5e8cd48181ec0ba48398bb
40121d3165b11e2649b6ec2ca1affbcd0bbedcc70f5a8ad838ecf3d722249476

HTTP Headers

GET /i?id=69a93bcf9f08c9af887e970af217b050d70f6c5f-9284609-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 27406
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 257923e96a30f066
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=7b036ee75620ee24473e2b938da07de8b5ebbe65-9029818-images-thumbs&n=13

87.250.247.183

8.6 kB

URL
avatars.mds.yandex.net/i?id=7b036ee75620ee24473e2b938da07de8b5ebbe65-9029818-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x248, Scaling: [none]x[none], YUV color, decoders should clamp
Size
8.6 kB (8604 bytes)
Hash
8e5d59f65fec446eaeebcac3bf8440ca
4611dc99b656a734e1be85a463649cdc63c2a8e4
835a949c597fb791091d04a25e079e2fbb2e188b78406d080dd6dde3c76f0fec

HTTP Headers

GET /i?id=7b036ee75620ee24473e2b938da07de8b5ebbe65-9029818-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 8604
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 69ec29a424da4676
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=b4315b7d6cbcac968daee66511d6e1e97fa213f9-7554713-images-thumbs&n=13

87.250.247.183

18 kB

URL
avatars.mds.yandex.net/i?id=b4315b7d6cbcac968daee66511d6e1e97fa213f9-7554713-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp
Size
18 kB (18314 bytes)
Hash
b161a2e97fc3770af7d685350d2f7770
7f6f0b17a4354cb96d89b008770c15aa6d04c489
1be05a9a83ea47dc89834e95cb1f717c200ec41bc9d5b7924c1bf15113687390

HTTP Headers

GET /i?id=b4315b7d6cbcac968daee66511d6e1e97fa213f9-7554713-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 18314
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 765d7aed4375bbc3
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=2a00000189154d6aff916df7177423429550-1221853-fast-images&n=13

87.250.247.183

0 B

URL
avatars.mds.yandex.net/i?id=2a00000189154d6aff916df7177423429550-1221853-fast-images&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /i?id=2a00000189154d6aff916df7177423429550-1221853-fast-images&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
x-request-id: 41a21994a53bafa9
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=3cb200b1f7e852472472fb2b3f80d31cae00f9d7-6209271-images-thumbs&n=13

87.250.247.183

12 kB

URL
avatars.mds.yandex.net/i?id=3cb200b1f7e852472472fb2b3f80d31cae00f9d7-6209271-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 180x320, Scaling: [none]x[none], YUV color, decoders should clamp
Size
12 kB (11718 bytes)
Hash
293441b50149b9eb9a8ecaed93c471cb
ffcf48ee6cd436f8c0d5484524a465ad15d2d7e6
e3013d5f66d634efa13697c044221681273f458d2b79c42a908525715c569cc8

HTTP Headers

GET /i?id=3cb200b1f7e852472472fb2b3f80d31cae00f9d7-6209271-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 11718
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 954147cd3c2203c0
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=38e7d24a8aa012b061c4a85a6fe1858d5a5a23d8-6371080-images-thumbs&n=13

87.250.247.183

20 kB

URL
avatars.mds.yandex.net/i?id=38e7d24a8aa012b061c4a85a6fe1858d5a5a23d8-6371080-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp
Size
20 kB (19478 bytes)
Hash
f176ae9cdaae7c15f8f03ce4f7148645
47d92beaa91659d18526b783cc3d4b340f0cf6be
0f783eebc34b9581b342783950f51e5fe2f90b3ff6bc4466e3844fba04745714

HTTP Headers

GET /i?id=38e7d24a8aa012b061c4a85a6fe1858d5a5a23d8-6371080-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 19478
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: e5677536120cfb40
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=919238aaf213df995f76b8137396efa5c0f1fc3d-9093405-images-thumbs&n=13

87.250.247.183

14 kB

URL
avatars.mds.yandex.net/i?id=919238aaf213df995f76b8137396efa5c0f1fc3d-9093405-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp
Size
14 kB (13632 bytes)
Hash
b7dc271f7a8b2e09e58bccaa6fc72e3c
87cf1e0df124b5585c53063a5b834e28a9ce9d88
038f6a52b361005d1e382703f91007827cf42d65af5458efac9444e77397e3e9

HTTP Headers

GET /i?id=919238aaf213df995f76b8137396efa5c0f1fc3d-9093405-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 13632
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 2938dccba2d4c984
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

chargen.one/layla+deline+of

172.67.204.28

29 kB

URL
chargen.one/layla+deline+of
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10328), with CRLF, LF line terminators
Size
29 kB (29309 bytes)
Hash
297d0003e2065b7a9fa8633d48b774fe
a0f7632f538e9ee38e72531cbe05f4581a6d7f1f
4a80453b838941198ad439cbc9cec88ed97cc157592b916f46a678e217499400

HTTP Headers

GET /layla+deline+of HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/html; charset=utf-8
set-cookie: visitor=true; Expires=Fri, 26 Apr 2024 21:54:09 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fjm5NqWv0YUr1djbWFlkImtPKxBKq6m1FU1tiABoCbITU4KipfudF8PurR8W8%2FBLX55pnTiQ3Q99ovXhP%2FS%2BLza7rCv%2BUS2EFuyAP37SKX17TLtbRzOB4mNhQn2uLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a191e81b1a7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=dce36675104238813b005c0d028ae16cd1fa161d-9181638-images-thumbs&n=13

87.250.247.183

34 kB

URL
avatars.mds.yandex.net/i?id=dce36675104238813b005c0d028ae16cd1fa161d-9181638-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp
Size
34 kB (33576 bytes)
Hash
8606e0279bfe8dd90b0f32b60885d4ae
d29d11df09cd7920f03944f3da50474c87b219c4
cfde441900d70cdfeba26b2a3a367f86d6f79dd7f8418fccbc3c22bc219457c6

HTTP Headers

GET /i?id=dce36675104238813b005c0d028ae16cd1fa161d-9181638-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 33576
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: 5e4cc24cf0c3853a
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=b7ecebcd0dde72f7e20c5a744b37cb16d85ae90b-8763423-images-thumbs&n=13

87.250.247.183

17 kB

URL
avatars.mds.yandex.net/i?id=b7ecebcd0dde72f7e20c5a744b37cb16d85ae90b-8763423-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x222, Scaling: [none]x[none], YUV color, decoders should clamp
Size
17 kB (16692 bytes)
Hash
2114b909bb9bf66a68c9f408faf19614
cd766146db6dfc368d204c5f6e69258df57f274f
3187827b8b62f9cd20e299489a4f607c7eee11736e5515a00e9434680d2038dd

HTTP Headers

GET /i?id=b7ecebcd0dde72f7e20c5a744b37cb16d85ae90b-8763423-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: image/webp
content-length: 16692
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:09 GMT
cache-control: max-age=31536000,immutable
x-request-id: d0c1694fbf32196f
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=b5ec88b33c312b2ad9da89f2f9c50a1e5c4c9183-9103674-images-thumbs&n=13

87.250.247.183

10 kB

URL
avatars.mds.yandex.net/i?id=b5ec88b33c312b2ad9da89f2f9c50a1e5c4c9183-9103674-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp
Size
10 kB (10414 bytes)
Hash
f235c693976d371ce27c80eafcdc1e21
8f76a5196c35b6855cb97259b469d266b6c6a783
8d3b1279a9629e0778c12ed7783edc0e4279af0611e6aaabd989438b9c0f73fa

HTTP Headers

GET /i?id=b5ec88b33c312b2ad9da89f2f9c50a1e5c4c9183-9103674-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:10 GMT
content-type: image/webp
content-length: 10414
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:10 GMT
cache-control: max-age=31536000,immutable
x-request-id: b8e76787833527be
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=2a000001891b7c34fcccf56e8a1ef426ddab-775851-fast-images&n=13

87.250.247.183

0 B

URL
avatars.mds.yandex.net/i?id=2a000001891b7c34fcccf56e8a1ef426ddab-775851-fast-images&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /i?id=2a000001891b7c34fcccf56e8a1ef426ddab-775851-fast-images&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 25 Apr 2024 21:54:10 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
x-request-id: f9f8f3440eec8e01
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=5d0fc16bfe838293894918ce0c3618c6e8747255-9220156-images-thumbs&n=13

87.250.247.183

34 kB

URL
avatars.mds.yandex.net/i?id=5d0fc16bfe838293894918ce0c3618c6e8747255-9220156-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 453x320, Scaling: [none]x[none], YUV color, decoders should clamp
Size
34 kB (33744 bytes)
Hash
30d72520ef9bb5548f514b0acf25b750
894106c3348b10cbebaca8ef1ab29f21dc69f4fb
cd5371665c8b42b2dab5507fa790285f1d8a1007b161ab5d386dcc14cdaba916

HTTP Headers

GET /i?id=5d0fc16bfe838293894918ce0c3618c6e8747255-9220156-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:10 GMT
content-type: image/webp
content-length: 33744
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:10 GMT
cache-control: max-age=31536000,immutable
x-request-id: 6052d33672c914cd
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

avatars.mds.yandex.net/i?id=d2f40feecf78e1780821e5bd9461f005235c4984-8225379-images-thumbs&n=13

87.250.247.183

24 kB

URL
avatars.mds.yandex.net/i?id=d2f40feecf78e1780821e5bd9461f005235c4984-8225379-images-thumbs&n=13
IP
87.250.247.183:0
ASN
#13238 YANDEX LLC

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp
Size
24 kB (24342 bytes)
Hash
b88470dcb48c661a96f7667195cc2c40
a82d7fde0d1d26c2cfd1350c16f199c4b8804136
06fd020c40e982b134814b9b679964e701902ca4e08e703d5f803a5af1b82bae

HTTP Headers

GET /i?id=d2f40feecf78e1780821e5bd9461f005235c4984-8225379-images-thumbs&n=13 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:54:10 GMT
content-type: image/webp
content-length: 24342
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 25 Apr 2024 21:54:10 GMT
cache-control: max-age=31536000,immutable
x-request-id: 75797a9e40eaf143
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=KLG"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2

magnificent-listen.com/b-3MVM0-P.3Bpvvcb_mcVvJQZHDS0E0/OhDYQq5cOPDWcu1sL/TeQz4xNEDNkm4/NazcYM

88.85.68.219

0 B

URL
magnificent-listen.com/b-3MVM0-P.3Bpvvcb_mcVvJQZHDS0E0/OhDYQq5cOPDWcu1sL/TeQz4xNEDNkm4/NazcYM
IP
88.85.68.219:0
ASN
#35415 Webzilla B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /b-3MVM0-P.3Bpvvcb_mcVvJQZHDS0E0/OhDYQq5cOPDWcu1sL/TeQz4xNEDNkm4/NazcYM HTTP/1.1
Host: magnificent-listen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cbro.win/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Thu, 25 Apr 2024 21:54:10 GMT
content-type: text/html;charset=UTF-8
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-frame-options: DENY
location: https://magnificent-listen.com/ba3.Vb0cPd3-JfygahWiQ_9kZljmkn5-ZpmqMr3sY_juYvxwZxj-Ez1AMBDCB_jEZFTGBHl-ZJWKYL3MZ_GOUP0QZRD-ZTjUZVDWN_mYMZzaEbm-cdneNfygY_zi1jvkdlX-Qnmocp2ql_ksPtTuQv4-NxDykz4AN_zCUDmEdFH-ZHyIPJTKA_mMeNmO9Pu-ZRWSlTkUP_TWIX1YMZT-Qb5cMdDeE_
referrer-policy: no-referrer
x-content-type-options: nosniff
X-Firefox-Spdy: h2

magnificent-listen.com/ba3.Vb0cPd3-JfygahWiQ_9kZljmkn5-ZpmqMr3sY_juYvxwZxj-Ez1AMBDCB_jEZFTGBHl-ZJWKYL3MZ_GOUP0QZRD-ZTjUZVDWN_mYMZzaEbm-cdneNfygY_zi1jvkdlX-Qnmocp2ql_ksPtTuQv4-NxDykz4AN_zCUDmEdFH-ZHyIPJTKA_mMeNmO9Pu-ZRWSlTkUP_TWIX1YMZT-Qb5cMdDeE_

88.85.68.219

0 B

URL
magnificent-listen.com/ba3.Vb0cPd3-JfygahWiQ_9kZljmkn5-ZpmqMr3sY_juYvxwZxj-Ez1AMBDCB_jEZFTGBHl-ZJWKYL3MZ_GOUP0QZRD-ZTjUZVDWN_mYMZzaEbm-cdneNfygY_zi1jvkdlX-Qnmocp2ql_ksPtTuQv4-NxDykz4AN_zCUDmEdFH-ZHyIPJTKA_mMeNmO9Pu-ZRWSlTkUP_TWIX1YMZT-Qb5cMdDeE_
IP
88.85.68.219:0
ASN
#35415 Webzilla B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ba3.Vb0cPd3-JfygahWiQ_9kZljmkn5-ZpmqMr3sY_juYvxwZxj-Ez1AMBDCB_jEZFTGBHl-ZJWKYL3MZ_GOUP0QZRD-ZTjUZVDWN_mYMZzaEbm-cdneNfygY_zi1jvkdlX-Qnmocp2ql_ksPtTuQv4-NxDykz4AN_zCUDmEdFH-ZHyIPJTKA_mMeNmO9Pu-ZRWSlTkUP_TWIX1YMZT-Qb5cMdDeE_ HTTP/1.1
Host: magnificent-listen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
server: nginx
date: Thu, 25 Apr 2024 21:54:10 GMT
content-type: text/html;charset=UTF-8
content-length: 0
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
referrer-policy: no-referrer
location: https://magnificent-listen.com/b.3-VL0MPN3OJ_yQaRWSQT9-ZVjWkX5YZ_maMb3cYdj-YfxgZhjiE_1kMlDmBnj-ZpTqBrlsZ_WuYv3wZxG-Uz0AZBDCZ_jEZFDGNHm-MJzKELmMc_nONPyQYRz-1TvUdVXWQ_mYcZ2albk-PdTeIf1gM_TiQj5kMlD-Enmocp2ql_ksMtzu1vu-bx1y9zhAZ_HCMDmEdFH-ZHyIPJTKA_mMeNmO9Pu-ZRWSlTkUP_TWEXwYNZz-cb
x-content-type-options: nosniff
X-Firefox-Spdy: h2

eatcells.com/land/css/styles.min.css?2444

94.130.177.84

200 OK

8.0 kB

URL GET HTTP/2
eatcells.com/land/css/styles.min.css?2444
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
ASCII text, with very long lines (8034), with no line terminators
Size
8.0 kB (8034 bytes)
Hash
e8de8e719a4e8f350294a7c204e3f3f9
c66efa11e08dcc0d77d820a9d954c9ecb981c279
989c0b5c0ffc841e5a27c89336a87fb54b14712406adaafa9dd239a51ef9645a

HTTP Headers

GET /land/css/styles.min.css?2444 HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: text/css
content-length: 8034
last-modified: Mon, 18 Mar 2019 07:57:46 GMT
etag: "5c8f4f7a-1f62"
accept-ranges: bytes
X-Firefox-Spdy: h2

chargen.one/dashicons.min.css

172.67.204.28

1.8 kB

URL
chargen.one/dashicons.min.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (4868), with no line terminators
Size
1.8 kB (1765 bytes)
Hash
a48d5632456d2b17dc6e0cd1190cda68
2651ff01a14b44dfae4aab503b1936eff17785ff
f4317582dd2ffe6ca0dff87a82c4445a04a45b0698c53f44f40534b6bb32c187

HTTP Headers

GET /dashicons.min.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13184076
last-modified: Sat, 25 Nov 2023 07:39:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bOIcskfw%2BOO9SUEU8bD48cCfNQa2xTewO7XvDFleBELS5pJ77WdI9i8E6e45caQu7If%2FLSADZxBZkUR6Ol04XsdZq6OZBl%2Fx8uimO5%2B%2F0L5N3Nf8rFHcZdMJ1RbDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191ea9a7e56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

eatcells.com/land/images/logo.png

94.130.177.84

200 OK

19 kB

URL GET HTTP/2
eatcells.com/land/images/logo.png
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
PNG image data, 359 x 135, 8-bit/color RGBA, non-interlaced
Size
19 kB (18661 bytes)
Hash
afd19fc7285d88ba97604b97a2a7cb8b
9252c308b5c30cd289cddbbc81bd3e3a30405c54
0f9ac57272de3b968c2d8325248adaef7130acd9f0841d999ccda5242390b3c3

HTTP Headers

GET /land/images/logo.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/png
content-length: 18661
last-modified: Mon, 18 Mar 2019 07:57:49 GMT
etag: "5c8f4f7d-48e5"
accept-ranges: bytes
X-Firefox-Spdy: h2

chargen.one/cool-tag-cloud.css

172.67.204.28

34 kB

URL
chargen.one/cool-tag-cloud.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with no line terminators
Size
34 kB (34285 bytes)
Hash
cd4e53fd7e77d90cc6485a8fd47bcd06
2424c56a827e9f2a5e7af8d0ad8489976b9814e9
e5d82934281a5ecd4fd989bd5039cdc29a94c52da73c2025640f7f7c178c73f7

HTTP Headers

GET /cool-tag-cloud.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13011226
last-modified: Mon, 27 Nov 2023 07:40:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bqh9mGk%2BgGtKsHJSXbFO6KXrnY2SOyYy4a%2BrWicPU3UlWV9og%2BQnz9UY1wF7%2FD%2Bj0luRUb%2FMm%2Fnjte6UVaJIYAgWRNADIfwA5AwrA4c%2FP9UCgUntGniOYpSj%2B88JCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191ea9a8756ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

chargen.one/classic-themes.min.css

172.67.204.28

16 kB

URL
chargen.one/classic-themes.min.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
16 kB (16081 bytes)
Hash
1a0804b1a9d09705657f91fe7cad4c5a
feeece6f0b3e0bcf090547c475329a2772f6b26b
dcd9f488bd62ba0ee403b07a97e40b9ffd63a0eff61091588c913b16d5153d48

HTTP Headers

GET /classic-themes.min.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13116058
last-modified: Sun, 26 Nov 2023 02:33:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Apj1IxlruSX0ZcQG4qSMf1bv6NZswaa8wEDrdi6OIFeYVSLbFy7Gz8p3VxOZGiZuRDkgpY39J3HAva9sFxwrPJnZ%2FyknS5d%2FsljErc%2BPAGQVbAB0dl3Vjli4X51MuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191ea9a8456ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

chargen.one/wpp.css

172.67.204.28

51 kB

URL
chargen.one/wpp.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
51 kB (51116 bytes)
Hash
cff4a50b569f9d814cfe56378d2d03f7
05ce39fcbc35a4d8748fc8b64579d29e8e471b8a
291cf581b824e88d8e5292c399d39fe9940cc6d50c1cfe21e0525a510e9e0b2a

HTTP Headers

GET /wpp.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13282844
last-modified: Fri, 24 Nov 2023 04:13:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NLsbRXfyAzQb6hpW5PqKWTeRSDu6zSQkzY12Bez8%2BwnF8HOmZQDJyk6dK%2BQhLrYvzPPtrYjAF8DytVrXO0mnhEBNf3U0jPuOv7EQNx8kfeKpzulJaYwNuEVfvjbgTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191eaaa8d56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

eatcells.com/land/images/background@2x.png

94.130.177.84

200 OK

1.0 kB

URL GET HTTP/2
eatcells.com/land/images/background@2x.png
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1033 bytes)
Hash
16356bcb89c4056b582760b7d8948b3f
5b70d2ebcf6ea9773f86c0cdbf488c1d995a0441
dd4ceb64bf9395a2e5400a0790430b29b4328b54fcd249439e0f54395af31835

HTTP Headers

GET /land/images/background@2x.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/css/styles.min.css?2444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/png
content-length: 1033
last-modified: Mon, 18 Mar 2019 07:57:48 GMT
etag: "5c8f4f7c-409"
accept-ranges: bytes
X-Firefox-Spdy: h2

eatcells.com/land/favicon.ico

94.130.177.84

200 OK

32 kB

URL GET HTTP/2
eatcells.com/land/favicon.ico
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
32 kB (32347 bytes)
Hash
86a61de6ab87b83d46a4873affaa717a
8863fa661cf2a1561a7ea19261f0980010d20eac
04e2c050285112bcd703f8765b5104c8dcf2c5b7b463f47802ccbd1933b57adf

HTTP Headers

GET /land/favicon.ico HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/x-icon
content-length: 32347
last-modified: Mon, 18 Mar 2019 07:57:47 GMT
etag: "5c8f4f7b-7e5b"
accept-ranges: bytes
X-Firefox-Spdy: h2

chargen.one/style.min.css

172.67.204.28

5.8 kB

URL
chargen.one/style.min.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with very long lines (29201), with no line terminators
Size
5.8 kB (5831 bytes)
Hash
4fc4ffd55a32808d48a6b4b95339ec3f
a82c7705cc935bfc1167c8afb195b45dcffef7a0
d0d8ffdb83043e380eb6d81ea9137e7514b333c9ffb9dca46f69d0b251555aa9

HTTP Headers

GET /style.min.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13460833
last-modified: Wed, 22 Nov 2023 02:46:56 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2FBvdiBan1zVlZ4aAjFotGO1yq6fZDWloKKzfqFVJBr7ks2B8xlw7m%2Bpew1j%2F7RchlDAdyUGV7K63C%2BC4PCxAg88z4V5CW2%2FLaMqJPV5dlP5owaApGJhKHCzYUzcow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191ea9a8356ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

chargen.one/style-1.css

172.67.204.28

17 kB

URL
chargen.one/style-1.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (51185), with no line terminators
Size
17 kB (16714 bytes)
Hash
fcfb4d1114a2ed681bb106eb213e0e39
2c80e7153dc9620a5b959f41b834d7ec80c817e8
893d1d6316c6f39d420eb94247b40865ed71b01b11b4b5af13ee03fe3be05169

HTTP Headers

GET /style-1.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13374530
last-modified: Thu, 23 Nov 2023 02:45:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ylb1yVs6%2BQP9%2BAQ%2BLEn8AD%2FDjxCzblJHPOqb5iVFD5ww7Y58PmKcH1LtWA0%2BEzPfEiYs67gQk1j10QFnyXso8MEatnwJI4zKGKE%2Bp8HI4ePzgnpIc9Apj65okjEt1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191eaaa8956ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

chargen.one/fa.min.css

172.67.204.28

9.7 kB

URL
chargen.one/fa.min.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (2524), with no line terminators
Size
9.7 kB (9719 bytes)
Hash
2e0691cc989839202e9b3ceeaaffc1f7
7dc53c0b4d4c82ad54de3a0c8fb889952d595254
f24d079985158d8db68f7cf4c23c2a57a97553869c14c2784ba21dd3367a06b5

HTTP Headers

GET /fa.min.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13369512
last-modified: Thu, 23 Nov 2023 04:08:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s%2BOoP6W3J2dxLltj%2FnPtFvR1Z4M3A9KcP%2BC5gN2AP5R9m3vhB0XCHB07gWX5p2Kg7BxPPvjoBGRxnFqiB4mST3ddp5jtCFrlxzKs6fjBDHInVKdY21JlOBKy9PQOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191eaaa8a56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

chargen.one/uikit.min.css

172.67.204.28

7.9 kB

URL
chargen.one/uikit.min.css
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (4732), with no line terminators
Size
7.9 kB (7925 bytes)
Hash
a042f128ffe2d617f00194f65bea5e82
b5f84c799f3866800df7ea003511ff4bc8007594
9956a0f3e805c6240e0b2a0af7833c82fce2fe823fef56fe8de4ef6ae6489e48

HTTP Headers

GET /uikit.min.css HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: text/css
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13369512
last-modified: Thu, 23 Nov 2023 04:08:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2PyROGc13tusIkJ29noBSzLtcskk8nNsgVqsthbtGUELZVuFyk2PSqvgMh%2Bhy9T9TM8GpHb83gWyg3tFNucDm%2FvFFzqP%2FVUkJWMQZZEb43Ar%2BZfZbFP%2B4Ug01fHVZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191eaaa8b56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

a.magsrv.com/ad-provider.js

185.76.9.19

49 kB

URL
a.magsrv.com/ad-provider.js
IP
185.76.9.19:0
ASN
#60068 Datacamp Limited

File type
gzip compressed data, from Unix
Size
49 kB (49412 bytes)
Hash
124e32a1244a3d0c25fc64b656c31f4f
d8a95398ff5d1414de16b471fcca706377d1c02b
5c83836fac1c4c537887122861d7892fbf6ff8e6bbae71cc2c618947e5f18ff8

HTTP Headers

GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"e85e090c7bd1847e2936d843e14"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Wed, 24 Apr 2024 18:06:10 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJDQH3KwsAAAwBuUwKAQH3EQAAAAwBJRPCNAH3BAAAAA
x-77-nzt-ray: c0a4cc28e5eb069401d12a66c7f1b22d
x-accel-expires: @1714089990
x-accel-date: 1714079190
x-77-cache: HIT
x-77-age: 2859
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 2859
x-77-pop: stockholmSE
X-Firefox-Spdy: h2

a.magsrv.com/ad-provider.js

185.76.9.19

52 kB

URL
a.magsrv.com/ad-provider.js
IP
185.76.9.19:0
ASN
#60068 Datacamp Limited

File type
gzip compressed data, from Unix
Size
52 kB (52198 bytes)
Hash
429ede0f3f782a46cf6deddfec9a2023
c7f3faa60109a15a960b0ea5316e6f6ab063ccb4
83a24dabb93270569f3e1a4301796496a8cb82a157f100f1437520a6cd3f1c02

HTTP Headers

GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"e85e090c7bd1847e2936d843e14"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Wed, 24 Apr 2024 18:06:10 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJDQH3KwsAAAwBuUwKAQH3EQAAAAwBJRPCNAH3BAAAAA
x-77-nzt-ray: c0a4cc28e5eb069401d12a665df39e37
x-accel-expires: @1714089990
x-accel-date: 1714079190
x-77-cache: HIT
x-77-age: 2859
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 2859
x-77-pop: stockholmSE
X-Firefox-Spdy: h2

chargen.one/navigation.js?ver=20141205

172.67.204.28

12 kB

URL
chargen.one/navigation.js?ver=20141205
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
12 kB (12332 bytes)
Hash
64d5155758b525e74138c754d673b4f6
d6e881eb762841a9166175c6ab5d65df377040c6
b95d0bed638990470c2a8e7bb407f972d855f8ac0b5736342d2bc0e262820eb5

HTTP Headers

GET /navigation.js?ver=20141205 HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/layla+deline+of
Cookie: visitor=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13282844
last-modified: Fri, 24 Nov 2023 04:13:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmRtzDVGEfkVePfNsCQQOH9zfndoqUvOhYIAykD%2FTDSihSR6jZsDXXN9gYSFeLbkHcBVhIJ42ip649IHPqd0mSpvFQivN9jV%2BZSLR1EVGc6pgvwiBG3ZY3%2BysOj2yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191eacab356ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

chargen.one/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

172.67.204.28

58 kB

URL
chargen.one/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
172.67.204.28:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 48412, version 1.0
Size
58 kB (58074 bytes)
Hash
c448fd7e23161f6251ade3b1fca568b3
8f66aef5d612a5144d444680dbe78ba91469b976
cc82d6d3c201976194442d0ac9759846c733e38a3231bb03de9ec2360748df18

HTTP Headers

GET /memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: chargen.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://chargen.one/css.css
Cookie: visitor=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 21:54:09 GMT
content-type: application/octet-stream
cache-control: max-age=31536000
cf-cache-status: HIT
age: 13115465
last-modified: Sun, 26 Nov 2023 02:43:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sk4qB3B6IXYvh3Jnvw4IPADrJRXNI4Ny6NssaYsN6rdjjNn8%2BasnIdr38nJNoPMXFjuXY7XI8IpMlQpc0stSIIXK9ybNx46ntKrDDGWf%2BUnqmszF6v7VZVX%2BHWMB3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a191ec6bcf56ab-OSL
alt-svc: h3=":443"; ma=86400

eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31

94.130.177.84

200 OK

4.8 kB

URL User Request GET HTTP/2
eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
HTML document, ASCII text, with very long lines (5360), with no line terminators
Size
4.8 kB (4768 bytes)
Hash
79f3c4fb7bc01187202ad227608a739b
a9f9d60407651f0e9fc80be8c79fe8df28e107a8
24d13ff50f817c495f725054dad1a63ea7c468d3ad0d536dc78afc549babfc64

HTTP Headers

GET /land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31 HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
X-Firefox-Spdy: h2

eatcells.com/land/images/fire.png

94.130.177.84

200 OK

733 B

URL GET HTTP/2
eatcells.com/land/images/fire.png
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
PNG image data, 17 x 22, 8-bit/color RGBA, non-interlaced
Size
733 B (733 bytes)
Hash
75c3092c28d1699eeabd752dd5bd3f17
c57ca82128ae8b89a950c10778e19d79b6be6d3b
fde5580100131b735cf3bf3cf3fba3a59c18aea68c6ad20bffc69dac0815f490

HTTP Headers

GET /land/images/fire.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/png
content-length: 733
last-modified: Mon, 18 Mar 2019 07:57:47 GMT
etag: "5c8f4f7b-2dd"
accept-ranges: bytes
X-Firefox-Spdy: h2

eatcells.com/land/images/monster-02.png

94.130.177.84

200 OK

34 kB

URL GET HTTP/2
eatcells.com/land/images/monster-02.png
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
PNG image data, 438 x 334, 8-bit colormap, non-interlaced
Size
34 kB (34216 bytes)
Hash
7a6ce3ad0c184398c5f330adb2b5c36e
5e3ab82d8a7cb1f4b38c2caebe2d696ffbcbf135
46d43223ccbda0c345bbddd3a4a4d67f1e0c1a6f3eff2f24d756da663b56e9e3

HTTP Headers

GET /land/images/monster-02.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/png
content-length: 34216
last-modified: Mon, 18 Mar 2019 07:57:49 GMT
etag: "5c8f4f7d-85a8"
accept-ranges: bytes
X-Firefox-Spdy: h2

eatcells.com/land/images/monster-03.png

94.130.177.84

200 OK

51 kB

URL GET HTTP/2
eatcells.com/land/images/monster-03.png
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
PNG image data, 489 x 445, 8-bit colormap, non-interlaced
Size
51 kB (50568 bytes)
Hash
6f0406baa25b609af344ef52e922accd
c3514dc3fc1c9e4a7e27fb7af638fffc17f91428
95e062edfc9194d9ad1abbb7d752842a84278f52f780b8f9d8486a9e0503ea84

HTTP Headers

GET /land/images/monster-03.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/png
content-length: 50568
last-modified: Mon, 18 Mar 2019 07:57:47 GMT
etag: "5c8f4f7b-c588"
accept-ranges: bytes
X-Firefox-Spdy: h2

eatcells.com/land/images/monster-01.png

94.130.177.84

200 OK

16 kB

URL GET HTTP/2
eatcells.com/land/images/monster-01.png
IP
94.130.177.84:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Certificate
IssuerLet's Encrypt
Subjecteatcells.com
FingerprintD4:8A:30:30:2F:AB:06:2D:90:C7:A1:EF:09:7D:E4:5C:24:46:1C:DF
ValidityThu, 28 Mar 2024 09:48:38 GMT - Wed, 26 Jun 2024 09:48:37 GMT

File type
PNG image data, 236 x 243, 8-bit colormap, non-interlaced
Size
16 kB (15905 bytes)
Hash
45205dd02d5a4d032a43a731109dae30
a380604b350682a56849d213bbe1c6ddb7fc74bd
cf1815bd1ad125d1ffeb4a415af49dddca07913e919abb102ba26ef682c4d922

HTTP Headers

GET /land/images/monster-01.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=f99fc7b61f1500ce0eef7de4d6cd3f31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 21:39:06 GMT
content-type: image/png
content-length: 15905
last-modified: Mon, 18 Mar 2019 07:57:50 GMT
etag: "5c8f4f7e-3e21"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (40)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type