| shotgunchancecruel.com/e1/64/87/e1648704479adff993cd7471b4e1209d.js |  172.240.108.76 | 200 OK | 98 kB |
URL GET shotgunchancecruel.com/e1/64/87/e1648704479adff993cd7471b4e1209d.js IP172.240.108.76:443
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerLet's Encrypt Subjectshotgunchancecruel.com Fingerprint57:F1:91:12:31:BB:80:19:FF:41:09:D0:8D:7B:40:3F:77:DF:B2:B3 ValiditySun, 20 Apr 2025 02:16:11 GMT - Sat, 19 Jul 2025 02:16:10 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash9c61ae16db8667456078c8c6e9581a57 b330184aba90a6600c17c50074a67e34e93d20b0 fa1f345d8630e4317a39e882d0b9a22b940ff67b0ba38ddbe099d41a6868ee5f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /e1/64/87/e1648704479adff993cd7471b4e1209d.js HTTP/1.1
Host: shotgunchancecruel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 05 May 2025 03:28:24 GMT
Content-Type: application/javascript
Content-Length: 30997
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 10
Host: shotgunchancecruel.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7015fbd3b321ea116fb65abc17f78ed1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| playadultgames.site/lg/lg24/2.webp |  104.21.84.231 | 200 OK | 51 kB |
URL GET playadultgames.site/lg/lg24/2.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hash605e082bf8356cabcb842b863f598708 f767af75cf7da8ac7cdb0efb1ae43a3cd6e9ed84 77834442ed0e8f36b31d755e9908d37f36067f0cd94479e9601a1aba84f6d29b
GET /lg/lg24/2.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 50818
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ds2QXAXUOjAPvR2D7qVIaQCuXpq%2B08twBvYqYe0H5KqfJUQ89z1N5%2Fp8ASecRYsywTI3rRcw0o90Z060CwQCQO0yD73bIB3Fd02k9z%2FLm%2FoUMEwcdpwCKY%2BEq01hImcJOcqGLZRI"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 20391
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "e4030da67ff4dd22adcae2ddb8ab40fd-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55S0GJ4RCCJPW5V6BF7
cf-cache-status: REVALIDATED
cf-ray: 93ad25ce79af568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6066&min_rtt=2069&rtt_var=5364&sent=86&recv=85&lost=0&retrans=0&sent_bytes=26028&recv_bytes=9297&delivery_rate=49679&cwnd=15600&unsent_bytes=0&cid=b21d8e979fc7b949&ts=308&x=16"
|
|
| playadultgames.site/lg/lg24/marker_1_1.webp | 104.21.84.231 | 200 OK | 6.6 kB |
URL GET playadultgames.site/lg/lg24/marker_1_1.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hashbbb0193e42d13a57b665d92e75ea35ce 001b2c91d2c49214a6bd6a9a152c01681ed1f6a9 5438710fc83c1a8759df03e18cd2c65ecc18b36525fad33143b5e386a9ff830b
GET /lg/lg24/marker_1_1.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 6640
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7s54BKG5zOEK7cJrBQx1ehVTTleO6pUb5pnI70Ieynh0AjlyItHIxlTGj9FRs%2B67%2FjgR9csy8kyH3iTNxwYt1OvswQnYdp413PO3jSNSuNpdWTa1nV4ISYHRRzRPoup6X3wrav2z"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "b93224e7b6e74fdf8ed3071e60b76861-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSMAPDK60CYR8NW459YY985N
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 93ad25ce79ad568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6637&min_rtt=2388&rtt_var=5629&sent=77&recv=84&lost=0&retrans=0&sent_bytes=16914&recv_bytes=9252&delivery_rate=2419&cwnd=12000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=306&x=16"
|
|
| playadultgames.site/lg/lg24/3.webp | 104.21.84.231 | 200 OK | 50 kB |
URL GET playadultgames.site/lg/lg24/3.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hash5d4aca73b3d25ee0c5a3988cef6d37a2 73172b51401932ac74c4e28a4dab5eae192e4c74 7b652297f5a18797efafd8765736f9aae21834c437e1bff14a09739f285ca92c
GET /lg/lg24/3.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 50062
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQ0iH4Qo1d1WgjHRETIbcI60qsBcCyOMHNh9M6pQPAeJy5T%2BjXr%2BEmb4YDEl0MpDRRC1ZGgjK2rf1rbsJ4VrVncBVGuuKsKXaRZUb7cuA4H%2F18k%2FbP4dRw3at%2F%2FA%2FHli%2F7%2F1vEY%2B"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 10046
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "ceb2dc96bed7bac7697ecf3661434578-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSZX6DGB17PN50XBPFBX5620
cf-cache-status: REVALIDATED
cf-ray: 93ad25ce89b1568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5617&min_rtt=2069&rtt_var=4921&sent=101&recv=86&lost=0&retrans=0&sent_bytes=42433&recv_bytes=9342&delivery_rate=149224&cwnd=24000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=309&x=16"
|
|
| static.addtoany.com/menu/page.js | 104.22.71.197 | 200 OK | 3.2 kB |
URL GET static.addtoany.com/menu/page.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3179), with no line terminators Hash57b268c32627d8d13671f43be7c47b84 0eebe8bc9958922a2a354b4abdca2f4d326f49e9 53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25cf5c618f59-CPH
access-control-allow-origin: *
cache-control: max-age=86400, stale-while-revalidate=30, public
etag: W/"060b0026b51016bf08c9d4b4a73b7960"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0lIFM3bMTXormETVGYt3PcWDl0CQYBhqrP6wgDshgz8pBa7tZKMMErCPiQIQYSJg8yaFfRx6OWepPisOQ33ZPir0XqzfZWuwXdFVKU1NRUZ1ukzMoSx78g84PuC2IS1CwiI1zI8Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 1640
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.addtoany.com/menu/modules/core.pt5ow5lr.js | 104.22.71.197 | 200 OK | 72 kB |
URL GET static.addtoany.com/menu/modules/core.pt5ow5lr.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash7e998bb147b26903e88f08f39c0e2cfc 6c93ab9cb3371591d4031dc60b9c3ae571c3329e ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674
GET /menu/modules/core.pt5ow5lr.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playadultgames.site
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25cffd25997e-CPH
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
etag: W/"6e938442141e4680b5bd4187b8d6c216"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7VFqOVb%2Fa5Iwoqh4Ga7YeG4Lf2hlXPfho4wi3IBLIHL%2Bfk94FM74DgrUQzX7%2Bc4eiN%2B%2BpokeTlg9BLdOgaMTYL%2FoEy5O8MctmytuWQT5z5Oh5KrsK%2BzV%2FZc3xjfpzatJcZiPI4Iye9zw%2FQ0tVq5car8A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 4518
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| static.addtoany.com/menu/svg/icons/link.js | 104.22.71.197 | 200 OK | 1.4 kB |
URL GET static.addtoany.com/menu/svg/icons/link.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (1437), with no line terminators Hash2612b308f45d0aeddbd8540f3cf792f8 6c6a34a46b238ae0372b7f6126c8686a3c6b91d7 1b1e450814698cfd54d68f041c25c741d2adbde4e8e31a256db1be23d413d96c
GET /menu/svg/icons/link.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playadultgames.site
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25d0bd49997e-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"dd9ed66e949db0815ba57f9db1b47951"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W4ysuq2CJHjH0Mq5iINBjnfmEzw18eZiAlTs%2Boa8H8wJ5GrHsKEzJ37nqI%2F8cgivVzXxMfLfUeVjuh%2Bt1d76AafhJW9W5B2LbDfc%2BSeSY49Dz9bh8gsHcbnb3CXAsSqWjxb89M0y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 4726
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| playadultgames.site/lg/lg24/bg.webp | 104.21.84.231 | 200 OK | 11 kB |
URL GET playadultgames.site/lg/lg24/bg.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp Hash5b3a3b5388de5ecaa6dcc22f3bd41549 26ff542089ddfeabb2f69bc3c8daedf372cf890d ddef3f488b6680c7d5b064485ad21a79aa1f176e991397b46cb23f5b4f595d29
GET /lg/lg24/bg.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 11112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TwBlH68iFc77PE5uPrNIISqNTfwjCUadt%2BDscfFyIZB6LMIv0kX0DWKBRzfX4zozpuis0P4A%2FHLc%2BHbYFAm1A4c59kt%2F1tE56m8CdD2uKIOzuz%2BTJu8aqfgvlpLYm21%2FmxobMELX"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 20473
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "d6f8f2e2e79dc3070164e8e52ac76d4b-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55M83M1ZK9E1AR9KMTX
cf-cache-status: REVALIDATED
cf-ray: 93ad25ce89b5568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5617&min_rtt=2069&rtt_var=4921&sent=101&recv=86&lost=0&retrans=0&sent_bytes=42433&recv_bytes=9342&delivery_rate=149224&cwnd=24000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=309&x=16"
|
|
| streameastv-v2-0.s3.amazonaws.com/output.css |  16.12.9.23 | 200 OK | 9.3 kB |
URL GET streameastv-v2-0.s3.amazonaws.com/output.css IP16.12.9.23:443
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerAmazon Subject*.s3.amazonaws.com Fingerprint2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69 ValidityFri, 14 Feb 2025 00:00:00 GMT - Sat, 07 Feb 2026 23:59:59 GMT
File typeassembler source, ASCII text Hash024c2950a6ccbb2cd8027369750ffce7 b374474404c39eacfbeb37a70185b34b2230a3c9 9448178d3de9ae0cf896d0775c4322d994d734a9c528d9c541dc46dabfc2e4c1
GET /output.css HTTP/1.1
Host: streameastv-v2-0.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: QGGSreZsNKKvMcReMbIoJD4Efxw0o1F9Z27rPNiZxjR9Eo31vDIVvdr0qW18ywPL/7rSAlYPiI8=
x-amz-request-id: 84CQVQBCEZR65GHP
Date: Mon, 05 May 2025 03:28:24 GMT
Last-Modified: Sun, 04 May 2025 16:16:41 GMT
ETag: "024c2950a6ccbb2cd8027369750ffce7"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Content-Length: 9296
Server: AmazonS3
|
|
| recordedthereby.com/sfp.js |  185.196.197.72 | 200 OK | 85 kB |
URL GET recordedthereby.com/sfp.js IP185.196.197.72:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerLet's Encrypt Subjectrecordedthereby.com Fingerprint19:45:8B:8A:1B:43:8F:CB:7D:D5:AA:7C:FF:FA:04:93:35:CA:9D:47 ValidityThu, 06 Mar 2025 21:25:47 GMT - Wed, 04 Jun 2025 21:25:46 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash108625937affa4b38bb17cea65510d72 2c0f48e9efa3fb5554d1fa393b28d74d5339f9ee c84263fcf6b091998dd37f5f600b3bfea92ac1d31cbf9631bb87fa411124a9e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 05 May 2025 03:28:24 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28255
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: recordedthereby.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8e5b4305c923777dfae4ea6693b7aa74
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| playadultgames.site/lg/lg24/marker_1_2.webp | 104.21.84.231 | 200 OK | 2.6 kB |
URL GET playadultgames.site/lg/lg24/marker_1_2.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hash62e98f5c81d17109d27314102933bce9 5d1bfa2afc50e82680a22f5f2014bfb9ba97c569 9905e0e996bf0c127f42336542eb769541f54791ab7bd22ee1c7e44fa8226cc7
GET /lg/lg24/marker_1_2.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 2552
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jCuA%2BdF1nEtVEW7R0G8AR9cAwPrULgTV5Wwhzo9qrNGQJmSm2CUAmNtBVLpYXQqCMz%2FlMbSrfphy01m59hQQxQkIF0KFnNRE%2Bp%2Fr9ukTZBw0vipTGqU8bs7K3tIiU8q7UHwhU01l"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 20416
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "85749aa895a4be3b4f76a1d7e6d7310d-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55YHAMPSRE5MFF00BN7
cf-cache-status: REVALIDATED
cf-ray: 93ad25ce79ae568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6066&min_rtt=2069&rtt_var=5364&sent=86&recv=85&lost=0&retrans=0&sent_bytes=26028&recv_bytes=9297&delivery_rate=49679&cwnd=15600&unsent_bytes=0&cid=b21d8e979fc7b949&ts=308&x=16"
|
|
| playadultgames.site/lg/lg24/marker_2_1.webp | 104.21.84.231 | 200 OK | 3.1 kB |
URL GET playadultgames.site/lg/lg24/marker_2_1.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hash7e8b4ffa8ed05fbdff19146a518d8499 18fe66a8be6b3771dba2942c92dd62627bcf1cda b5e70a788442d120438fef3718daa96387cc8ba5fd1739d354055bada38e2f82
GET /lg/lg24/marker_2_1.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 3144
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9qOW9xBz%2F%2Fdus6xHivjEJ0YTZT1iTRE%2BbP%2BrOOV2h33B2RI%2BKPEa1LhbbmJ3vHbkn35WVB%2FYMrl6EQM3hSmRlbpNsDyqYscYqhYKVbtJxVUTriZG8j1z7gRwh8ZJ9X2eBJL72Jk"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "4da42491324613138f8f5b5d898f032c-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55NDVZ4QTE7P8YHA68E
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 93ad25ce79b0568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6637&min_rtt=2388&rtt_var=5629&sent=67&recv=84&lost=0&retrans=0&sent_bytes=6433&recv_bytes=9252&delivery_rate=2419&cwnd=12000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=305&x=16"
|
|
| playadultgames.site/lg/lg24/marker_3.webp | 104.21.84.231 | 200 OK | 6.7 kB |
URL GET playadultgames.site/lg/lg24/marker_3.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hashf6c3b53e19e7e34ed006212974b1e7d9 830e28e0e11843d6b7c8303198c484fb70b1a8f7 92e173ad824fd0ff835afc9bdbea13e4d0777519ba801000a2ffb5649d382d6e
GET /lg/lg24/marker_3.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 6686
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TDqV0BfRf7D0tVi3rKfszAufJFqgjN5WETmuQ4YK7%2Bh7hokOeznyfgyMLuARV4HdVNpjLd0GMtwgsUFiBFxA4tLxRCxAXHIDK8lUmYHW0EFUo%2FGPLPUiSp1l34kfOTMv7zDtPKcI"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "3ef731845707b51272f5a60b28b99fe1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55Q0GTE6DF305CMS56K
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 93ad25ce89b4568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6637&min_rtt=2388&rtt_var=5629&sent=79&recv=84&lost=0&retrans=0&sent_bytes=18433&recv_bytes=9252&delivery_rate=2419&cwnd=12000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=307&x=16"
|
|
| playadultgames.site/lg/lg24/2_1.webp | 104.21.84.231 | 200 OK | 56 kB |
URL GET playadultgames.site/lg/lg24/2_1.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hashb404a464e461996628124e3ec6c72094 488837eec9739c940ec65e76aa3667201a8e82be 675d8eb13b4c108b440e63308cc8f59bb0c3cb31c4343b13f51ba86e39353479
GET /lg/lg24/2_1.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 56130
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmno7sN1%2FBJZEEMQnEv%2FEYJRWRsfnhmbsCIKvaqzIu1QHd0RTDJjyxKifGSdaRUS9x1%2B%2FHnHZY2lza3xtFB20aE0EYIjv5Oxe%2BPtUy%2B3Nbv8gCoD%2FdPl1oQjfCg8K9tnDF34AQ5K"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 20798
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "fa38cdedeafd8f99c4b44172c5b4d1d1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVVEHMS9WZVVQFHCWSAYZY
cf-cache-status: REVALIDATED
cf-ray: 93ad25cf49b8568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5502&min_rtt=2069&rtt_var=3431&sent=272&recv=92&lost=0&retrans=0&sent_bytes=237326&recv_bytes=9983&delivery_rate=6507930&cwnd=124800&unsent_bytes=0&cid=b21d8e979fc7b949&ts=427&x=16"
|
|
| biologicalrendrefuge.com/c9d57413ef9b816b0e70ed543e0ab47a/invoke.js | 172.240.108.84 | 200 OK | 26 kB |
URL GET biologicalrendrefuge.com/c9d57413ef9b816b0e70ed543e0ab47a/invoke.js IP172.240.108.84:443
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerLet's Encrypt Subjectbiologicalrendrefuge.com FingerprintBE:4C:94:6F:57:4C:16:FB:4B:A1:1B:1F:72:37:78:D9:89:9B:97:71 ValidityFri, 04 Apr 2025 09:07:55 GMT - Thu, 03 Jul 2025 09:07:54 GMT
File typeJavaScript source, ASCII text, with very long lines (26449), with no line terminators Hash4322ad659c575223ca0f78235b7e59b2 38c56f91460b9828a89f4cf9cb556afbb485ce6c 638bbd3a5cf7a604aba1c18073a881c32f2805a2ed4f845519275545a0c14465
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /c9d57413ef9b816b0e70ed543e0ab47a/invoke.js HTTP/1.1
Host: biologicalrendrefuge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 05 May 2025 03:28:23 GMT
Content-Type: application/javascript
Content-Length: 11108
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 6
Host: biologicalrendrefuge.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8ac37888c2e3f46e6d5e0cffeb5a08d0
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| experttrafficcounter.com/stats |  3.125.27.73 | 200 OK | 40 B |
URL GET experttrafficcounter.com/stats IP3.125.27.73:443
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerAmazon Subjectexperttrafficcounter.com FingerprintCE:93:F6:82:20:C2:20:51:6E:53:85:EC:03:9C:48:F0:13:0B:67:D7 ValidityTue, 29 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
File typeASCII text, with no line terminators Hash0e6d9396a9ece3d291b078ba04fcdf27 af54481b8e838f930e57e30c82fee832063bf76c 912a10556a6f00a728680e95b787b88d27fd43f4a7b3c6fdb71f5a281e9332fb
GET /stats HTTP/1.1
Host: experttrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streameastv-v2-0.s3.amazonaws.com
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 May 2025 03:28:24 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://streameastv-v2-0.s3.amazonaws.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=849f689a-9ab7-4fce-ba17-ff32d26cfc37:1:1; expires=Thu, 03 May 2035 03:28:24 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| shotgunchancecruel.com/6b/26/00/6b260046ec25a767f5c0a661af7868d5.js | 172.240.108.76 | 200 OK | 34 kB |
URL GET shotgunchancecruel.com/6b/26/00/6b260046ec25a767f5c0a661af7868d5.js IP172.240.108.76:443
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerLet's Encrypt Subjectshotgunchancecruel.com Fingerprint57:F1:91:12:31:BB:80:19:FF:41:09:D0:8D:7B:40:3F:77:DF:B2:B3 ValiditySun, 20 Apr 2025 02:16:11 GMT - Sat, 19 Jul 2025 02:16:10 GMT
File typeJavaScript source, ASCII text, with very long lines (33845), with no line terminators Hash2f24d44a915217d8658c473768c36b1f ae592787d5e8ea25dd9043f78e405cc5a1eb0ff8 6080e85106d266e9ce2c8c6b5bcbbe49aa374808e55e92fd1d54677e1bceb01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /6b/26/00/6b260046ec25a767f5c0a661af7868d5.js HTTP/1.1
Host: shotgunchancecruel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 05 May 2025 03:28:24 GMT
Content-Type: application/javascript
Content-Length: 12952
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 9
Host: shotgunchancecruel.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 6af14fb27afb214947b0f2db0871383b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| playadultgames.site/lg/lg24/hand_3_2.webp | 104.21.84.231 | 200 OK | 5.8 kB |
URL GET playadultgames.site/lg/lg24/hand_3_2.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hash59b4039534c6bfa5132c7346435acacc 11c78b3718e4ea451b87e9930b65f64d055495dc 2ffddf412e80905ac2bc8ecb423c51f3826f1704134820b3b9f317902b830374
GET /lg/lg24/hand_3_2.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 5790
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXC3GTpqSX8TSVU9viwUAQ%2FIt2Mv%2FKZogr9ps7wOOW1ol4JQd9UzZhYTd37s0t9vlxxnKTn0wxvtgD5OUom7oCMT8uFqMsM%2FBAJgMfwp1a5wXwO9Dc4JvGVG7IhJKyXBUejwDN1g"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "9ef8e903338e5b3e79e43d7d6e050c3e-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JTAXQWNKGDXPR9DPS8W08BA0
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 93ad25ce89b3568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6066&min_rtt=2069&rtt_var=5364&sent=86&recv=85&lost=0&retrans=0&sent_bytes=26028&recv_bytes=9297&delivery_rate=49679&cwnd=15600&unsent_bytes=0&cid=b21d8e979fc7b949&ts=308&x=16"
|
|
| play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1&SUB_ID_SHORT=5079d1997817d4bb3f68090beac0a98d&COST_CPM=0.050000&PLACEMENT_ID=24651380&CAMPAIGN_ID=1225791&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3344121 |  95.217.197.157 | 307 Temporary Redirect | 23 kB |
URL User Request GET play-lustgoddess.com/c4thl3k.php?key=wsimf6l8rglpjx2tjad1&SUB_ID_SHORT=5079d1997817d4bb3f68090beac0a98d&COST_CPM=0.050000&PLACEMENT_ID=24651380&CAMPAIGN_ID=1225791&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3344121 IP95.217.197.157:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectplay-lustgoddess.com Fingerprint2C:C3:D1:90:5C:F9:7A:D3:64:8C:C1:F1:D7:4C:D3:3A:27:38:AD:4A ValiditySat, 03 May 2025 09:27:40 GMT - Fri, 01 Aug 2025 09:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c4thl3k.php?key=wsimf6l8rglpjx2tjad1&SUB_ID_SHORT=5079d1997817d4bb3f68090beac0a98d&COST_CPM=0.050000&PLACEMENT_ID=24651380&CAMPAIGN_ID=1225791&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3344121 HTTP/1.1
Host: play-lustgoddess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Mon, 05 May 2025 03:28:24 GMT
location: https://playadultgames.site/LG/lg24/index.html?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
server: Caddy
set-cookie: bc1180=splc0|733a91fc41778cd072377dc2490c513e::1853:327; Expires=Tue, 05 May 2026 03:28:24 GMT; Max-Age=31536000; SameSite=Lax
rc1180=splc0|733a91fc41778cd072377dc2490c513e::630; Expires=Tue, 05 May 2026 03:28:24 GMT; Max-Age=31536000; SameSite=Lax
uclick=zO/bkV4NbdI13+X3YGCY4pY7RBtAHm1s9Sd+GfZuejGWDRehcmIfULYqIXPbsodTDQUu1eut; Max-Age=31536000; SameSite=Lax
bcid=d0c30m49tknc73eohi60; Max-Age=31536000; SameSite=Lax
x-request-id: 4f6fe7fc-c850-4d30-b517-a8aad5b3cfb3
content-length: 0
X-Firefox-Spdy: h2
|
|
| playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 | 104.21.84.231 | 200 OK | 23 kB |
URL User Request GET playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 IP104.21.84.231:443
CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (11567) Hash67698ac9cecbf949ac57b032fd97e3ec f1758dd9563507755724785addd812a216346593 5391125c3019d1c2e085b3938c08368c3cc185aa678c061552c83a0d6fb3f388
GET /lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streameastv-v2-0.s3.amazonaws.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: text/html; charset=UTF-8
age: 40567
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
cf-cache-status: DYNAMIC
server: cloudflare
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01JTF7SQ1XQDFTH2MMEM6R9VKR
content-encoding: br
cf-ray: 93ad25cd1c28b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.addtoany.com/menu/sm.25.html#type=core&event=load | 104.22.71.197 | 200 OK | 716 B |
URL GET static.addtoany.com/menu/sm.25.html#type=core&event=load IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeHTML document, ASCII text, with very long lines (624) Hash41b7ed0cbe240173eea85148fcba633e 39acd5fe099974486a1c9ba11ba0fe7be6bc97ca 274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad
GET /menu/sm.25.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: text/html; charset=utf-8
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25cfed1b997e-CPH
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IoLI6PZtgBiZ8%2BefTmVd2ShRJ7AS583zvgw5P1BrTv9XsbY9Q%2FRTq2uhQMd0NMoXp%2F00bf68tfDixd4qUkumCyF6AyU73itcDPggKjGQquhw68jcChHNkSqsP%2Bo198EXe91uPYBW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 5179
last-modified: Mon, 05 May 2025 02:02:06 GMT
priority: u=4,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| playadultgames.site/lg/lg24/label.webp | 104.21.84.231 | 200 OK | 27 kB |
URL GET playadultgames.site/lg/lg24/label.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hash4a4f9ee224c2e6ce7baab69432eb106f a950280dbab07ebeee5917a0cd4e198d4bd77841 624e6eb13e9fdfb72f98a5e151f8e56672c8060870c42770e1e615cedeb400d9
GET /lg/lg24/label.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 27126
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9uE9DjwmXczMEnr81RNsoVjuNsxI7ghNubcZZT16aQRyZM3oRk21MDbVCu0fBX%2BnyEDiOEo05LUUYw4de4pG3lLTVuPaBipfp%2FpCHGjAj17MmgfNVPTJaGetjltHeSWhYa%2Fg3pd"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 20343
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "0b79c8aeeb55505ccaef3892ca3c5f6f-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55M05Y8SJQJG1Y7DY7P
cf-cache-status: REVALIDATED
cf-ray: 93ad25ce79ab568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6637&min_rtt=2388&rtt_var=5629&sent=79&recv=84&lost=0&retrans=0&sent_bytes=18433&recv_bytes=9252&delivery_rate=2419&cwnd=12000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=307&x=16"
|
|
| playadultgames.site/lg/lg24/hand_3_1.webp | 104.21.84.231 | 200 OK | 5.6 kB |
URL GET playadultgames.site/lg/lg24/hand_3_1.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hashc8642a31d689e801be4e2dedb4896902 459b643b4134efe589c2374047cfbe3db0cdcb91 ace67b74e1315169b7eba12e6562a6a90164ba862e85a354a3a44a416a3c77da
GET /lg/lg24/hand_3_1.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 5620
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oUxIa0vbcX7hQP1sfFWVGdF0VuEYZd7sKQW4GwsShwnguD9naOJP%2FD%2FQg6fBHsXyUV7K9fDeI9t8CVsw%2FiuxNDw6qHQD%2BARR237x3F5uaF97nZF34Chep3scq0OSKrS%2BVLTPLIvC"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "4ce3bde2f22d75e73e43a87b5c06678c-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JTAVYZS26YD8ZJCGV666A8QX
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 93ad25ce89b2568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6637&min_rtt=2388&rtt_var=5629&sent=71&recv=84&lost=0&retrans=0&sent_bytes=10428&recv_bytes=9252&delivery_rate=2419&cwnd=12000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=306&x=16"
|
|
| static.addtoany.com/menu/svg/icons/facebook.js | 104.22.71.197 | 200 OK | 429 B |
URL GET static.addtoany.com/menu/svg/icons/facebook.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (429), with no line terminators Hash014bcc757e484e12e3aea6c9d768fd4b 4c17157d0012f8002e4e6cf77c5f4a9747792cf4 4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49
GET /menu/svg/icons/facebook.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playadultgames.site
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25d09d41997e-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"68925fa8e347041c6006837e73c518bc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhCamlBgVlL9jWKKCHxYXPjSDy6yevHLyYemrIrIhKdZU8tuuWIHNeaJjY3UVAwVCw3YMbCicf6MJatgTdoO%2B0VE5WX4ZcCXWP8OCMb4k4%2F%2Fw%2B4tUaWB0cYWPA7rP1kW0gdQc9HH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 4726
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| streameastv-v2-0.s3.amazonaws.com/index.html | 16.12.9.23 | 200 OK | 14 kB |
URL User Request GET streameastv-v2-0.s3.amazonaws.com/index.html IP16.12.9.23:443
CertificateIssuerAmazon Subject*.s3.amazonaws.com Fingerprint2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69 ValidityFri, 14 Feb 2025 00:00:00 GMT - Sat, 07 Feb 2026 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (383) Hash771324949958e81def3253cfbc2100b1 3387ff3ed9c2964c81bd83c0d03668aa46090223 2e683219a20fc3705bb02182e6450c06af35dc0aeefc9a5d16b4d096c8ba4842
GET /index.html HTTP/1.1
Host: streameastv-v2-0.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 2ANoIx9OzpvB0sFN0pDva2G2Z3gRPca/R1sunmAh0dkHz30iASRMVtaEF2NfA9gDuRITZNMgQiI=
x-amz-request-id: 84CX4R74W58QVY5E
Date: Mon, 05 May 2025 03:28:24 GMT
Last-Modified: Sun, 04 May 2025 16:16:40 GMT
ETag: "f9203f6e2d38a92d65566037257cb228"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 14025
Server: AmazonS3
|
|
| shotgunchancecruel.com/watch.942668317168.js?key=c9d57413ef9b816b0e70ed543e0ab47a&kw=%5B%22streameast%22%2C%22watch%22%2C%22live%22%2C%22sports%22%2C%22streams%22%2C%22anytime%22%2C%22free%22%5D&refer=https%3A%2F%2Fstreameastv-v2-0.s3.amazonaws.com%2Findex.html&tz=0&dev=e&res=14.3095&rb=&uuid=849f689a-9ab7-4fce-ba17-ff32d26cfc37%3A1%3A1 |  192.243.59.13 | 307 Temporary Redirect | 0 B |
URL GET shotgunchancecruel.com/watch.942668317168.js?key=c9d57413ef9b816b0e70ed543e0ab47a&kw=%5B%22streameast%22%2C%22watch%22%2C%22live%22%2C%22sports%22%2C%22streams%22%2C%22anytime%22%2C%22free%22%5D&refer=https%3A%2F%2Fstreameastv-v2-0.s3.amazonaws.com%2Findex.html&tz=0&dev=e&res=14.3095&rb=&uuid=849f689a-9ab7-4fce-ba17-ff32d26cfc37%3A1%3A1 IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerLet's Encrypt Subjectshotgunchancecruel.com Fingerprint57:F1:91:12:31:BB:80:19:FF:41:09:D0:8D:7B:40:3F:77:DF:B2:B3 ValiditySun, 20 Apr 2025 02:16:11 GMT - Sat, 19 Jul 2025 02:16:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.942668317168.js?key=c9d57413ef9b816b0e70ed543e0ab47a&kw=%5B%22streameast%22%2C%22watch%22%2C%22live%22%2C%22sports%22%2C%22streams%22%2C%22anytime%22%2C%22free%22%5D&refer=https%3A%2F%2Fstreameastv-v2-0.s3.amazonaws.com%2Findex.html&tz=0&dev=e&res=14.3095&rb=&uuid=849f689a-9ab7-4fce-ba17-ff32d26cfc37%3A1%3A1 HTTP/1.1
Host: shotgunchancecruel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streameastv-v2-0.s3.amazonaws.com
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Mon, 05 May 2025 03:28:24 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://streameastv-v2-0.s3.amazonaws.com
Access-Control-Allow-Origin: https://streameastv-v2-0.s3.amazonaws.com
Access-Control-Allow-Credentials: true
Location: https://shotgunchancecruel.com/watch.942668317168.js?dev=e&key=c9d57413ef9b816b0e70ed543e0ab47a&kw=%5B%22streameast%22%2C%22watch%22%2C%22live%22%2C%22sports%22%2C%22streams%22%2C%22anytime%22%2C%22free%22%5D&pst=1746415764&rb=&refer=https%3A%2F%2Fstreameastv-v2-0.s3.amazonaws.com%2Findex.html&res=14.3095&rmtc=t&shu=a57ace00ecf3e2690871575396341809814c6b88e685d9f832aa77c08b100dce015c7e4c622ca0e9bd47865845718e46023da209160a9ccfdedd8844f9b4ba9d48ce9f217ad161a58c8c9548b757df0e79bc65b54ae8fc740b&tz=0&uuid=849f689a-9ab7-4fce-ba17-ff32d26cfc37%3A1%3A1
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.6Bp6y5WdEyStmtkk8VwJtSX0ggcl1VXSlFPxcLuRDUQ; expires=Mon, 05 May 2025 03:29:24 GMT; path=/; secure; SameSite=None
Host: shotgunchancecruel.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 28f40c12f59688980dc29c450163d896
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| recordedthereby.com/sfp.js | 185.196.197.72 | 200 OK | 85 kB |
URL GET recordedthereby.com/sfp.js IP185.196.197.72:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://streameastv-v2-0.s3.amazonaws.com/index.html CertificateIssuerLet's Encrypt Subjectrecordedthereby.com Fingerprint19:45:8B:8A:1B:43:8F:CB:7D:D5:AA:7C:FF:FA:04:93:35:CA:9D:47 ValidityThu, 06 Mar 2025 21:25:47 GMT - Wed, 04 Jun 2025 21:25:46 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash108625937affa4b38bb17cea65510d72 2c0f48e9efa3fb5554d1fa393b28d74d5339f9ee c84263fcf6b091998dd37f5f600b3bfea92ac1d31cbf9631bb87fa411124a9e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streameastv-v2-0.s3.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 05 May 2025 03:28:24 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28255
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: recordedthereby.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 55dc50841929049c6a2fe999f056316f
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| playadultgames.site/LG/lg24/index.html?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 | 104.21.84.231 | 301 Moved Permanently | 23 kB |
URL User Request GET playadultgames.site/LG/lg24/index.html?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 IP104.21.84.231:443
CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /LG/lg24/index.html?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streameastv-v2-0.s3.amazonaws.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 05 May 2025 03:28:25 GMT
content-type: text/html; charset=UTF-8
accept-ranges: bytes
age: 40575
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
location: /lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
server: cloudflare
strict-transport-security: max-age=31536000
x-nf-request-id: 01JTF7SQ0MQWBKNCD7MDDXBMWN
cf-cache-status: DYNAMIC
cf-ray: 93ad25cc8becb515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.addtoany.com/menu/svg/icons/whatsapp.js | 104.22.71.197 | 200 OK | 1.1 kB |
URL GET static.addtoany.com/menu/svg/icons/whatsapp.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (1108), with no line terminators Hash0e8b3ac6bda5451ff39c5ecd6d7b3873 fb477a11167000a30e45369e686ec43dd62d026b c15e1379ca2c59f99912500bbc23a0d1d88f43198cbe1b53d87776fa351385eb
GET /menu/svg/icons/whatsapp.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playadultgames.site
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25d0ad43997e-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"83af4df8173e43227812296bb8542dcf"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3m9XPigDd3Htp7%2BdCKzI2rvwwnNlRRvtH541yse3%2FxyOqE5M1FSeJMRcholZtUMESTVU81B04q%2BP%2Ff4X%2Bs6zbCnr8XgO49dkt6NvP%2FQ%2FCR16ncCslTk49bo3WS07UcUSbepEKN1Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 4726
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| static.addtoany.com/menu/svg/icons/x.js | 104.22.71.197 | 200 OK | 297 B |
URL GET static.addtoany.com/menu/svg/icons/x.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with no line terminators Hash885be296b72c01b844a2addc97be03db 0696c38c7746aa5c930b4a679282a156fc69784f 122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764
GET /menu/svg/icons/x.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playadultgames.site
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25d0ad44997e-CPH
access-control-allow-origin: *
cache-control: max-age=864000, stale-while-revalidate=30, public
etag: W/"7cdbf2d5d94ad6e7bf6e7cc1418dd608"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yUxrIMaU3OXQ%2B%2BwvlDvJT7aZx8I3V2h%2BxUEDj5syW%2BrXWN%2Bysr2XlZHPoz4OGwxwnjYKAsHQzZ7Pte37Ag03bIWHatmK5jKouVTYRIZ8pv24NbAGOvjmnSQ85cbM%2FYN1lRn11ff%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 4726
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| static.addtoany.com/menu/svg/icons/reddit.js | 104.22.71.197 | 200 OK | 893 B |
URL GET static.addtoany.com/menu/svg/icons/reddit.js IP104.22.71.197:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (893), with no line terminators Hash408cc755e613b4f00fbe10d7411ed087 14341990ed687477b3addbdd1a3b50ae8a98589b 68ed9b82b62d45cf5d12587a7e9566a4ddeb94d69bcb225e9e3c7268c76b3cbb
GET /menu/svg/icons/reddit.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playadultgames.site
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 93ad25d0ad46997e-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"1fe5b5008de689ce6464d7bcb07e742c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hCqJkL7%2F%2FRsOfloOfV15nB8biRyX5sbJMaVImhG1l%2Bb7MLlKJ3fmVMOxnK0wuWHTxGyOD4Qz3WbFOGw%2BWS8YUmlaia2uVWqyCgOfb2OSf5XR%2BQVLAkR1kqgkLbIZoGuiblm4vBWZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 4726
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| playadultgames.site/lg/lg24/1.webp | 104.21.84.231 | 200 OK | 42 kB |
URL GET playadultgames.site/lg/lg24/1.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hashfe44a0f148e5200220c45e0a1044439b 9e2576ab30975833cd57ba00fa422536fc016959 f8d444c7abd8f4ea2117324676582b1117f45a17816ae17c6cecbe9dac1a4f87
GET /lg/lg24/1.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 42294
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vp2S%2FTaqC94PJMk9sEVEs3x2Xwz94hYjGh20VCE92iZdxQIaJsO3%2FtxcQOE1GlILXGcDQ71HKVj3P%2BQ7QthYGgFcB5%2BbShAKcJZtLgXCePwNt15Qu1o7YTFIrLxrAOV74ENUGaRj"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
age: 12441
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "7c72ffc5f483968dfe0a9d58e86f744c-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55S2KB7V24PV98S46BV
cf-cache-status: REVALIDATED
cf-ray: 93ad25ce79ac568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6637&min_rtt=2388&rtt_var=5629&sent=79&recv=84&lost=0&retrans=0&sent_bytes=18433&recv_bytes=9252&delivery_rate=2419&cwnd=12000&unsent_bytes=0&cid=b21d8e979fc7b949&ts=307&x=16"
|
|
| playadultgames.site/lg/lg24/cursor.webp | 104.21.84.231 | 200 OK | 4.7 kB |
URL GET playadultgames.site/lg/lg24/cursor.webp IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeRIFF (little-endian) data, Web/P image Hashc6c29b51aacfe0e9ff8b4ee1c7585a31 4bffb872f2e439ff1b3afcd5cf42bb86723d9f71 a1240bf95f0a0d01b762ae67561f305f465ed747a99ace9e682f041571cb3634
GET /lg/lg24/cursor.webp HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/webp
content-length: 4748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TKecrkAnCYmQFp13pqxM1hnSZjrHsmTGhtpqY1Qno2EJ6g8Fxzh%2BnkwWwiM5il5Vu27jY9pvGOzoDKr89UUSC1nRr%2BvU9U0Mu4cJttgplxmVuXVQ6EO3e1s5YdZneZ3A979b8rzk"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "51b7533a5c5c9e4be18ed138871884ff-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHVH55S9YHQ2C10F1V2VV5S
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 93ad25cea9b6568f-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4690&min_rtt=2069&rtt_var=3498&sent=266&recv=89&lost=0&retrans=0&sent_bytes=231714&recv_bytes=9479&delivery_rate=10204593&cwnd=124800&unsent_bytes=0&cid=b21d8e979fc7b949&ts=329&x=16"
|
|
| playadultgames.site/lg/lg24/favicon.ico | 104.21.84.231 | 200 OK | 15 kB |
URL GET playadultgames.site/lg/lg24/favicon.ico IP104.21.84.231:443
Requested byhttps://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180 CertificateIssuerGoogle Trust Services Subjectplayadultgames.site Fingerprint55:F1:19:43:09:DB:4D:BA:40:38:C5:45:F6:51:DE:70:0C:47:78:1C ValidityMon, 31 Mar 2025 09:43:19 GMT - Sun, 29 Jun 2025 10:41:49 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashe928aeb43ea2ad11cda9d1bc798c9012 6708c88a3d7a8818492823893c7f6f23ee88e5f7 b2c232c53020199bf08a0a54ec7fc2417644e30f496beee9a25ffa3e56054674
GET /lg/lg24/favicon.ico HTTP/1.1
Host: playadultgames.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playadultgames.site/lg/lg24/?clickid=d0c30m49tknc73eohi60&t1_md5=a141e5d3282e3458d2cf4445d8cc8ba4&t2_md5=d0536a99fd253671ea17ab7c9d7cfaee&t3_md5=88183b946cc5f0e8c96b2e66e1c74a7e&campaign=1180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 03:28:25 GMT
content-type: image/vnd.microsoft.icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KSqeiNnBLdOyjBRjE1cghMaE4eLTfeporAaiOBIMJsRQ4c42L4Ouj7yuyi6WkTXkxnJx5yaXwpokJj27WdHEF%2BzmS%2F8CVYhjV%2FfQ6Aux58oZrD7fBo%2BNP611mnfQyGVbecOlBJ1L"}],"group":"cf-nel","max_age":604800}
age: 21565
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"561d22dce3d3d7e3fc9444fa023f908a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01JSHWJKVWB8K253NHA8JCD6QK
cf-cache-status: REVALIDATED
content-encoding: br
cf-ray: 93ad25d059c0568f-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5164&min_rtt=2069&rtt_var=3250&sent=322&recv=94&lost=0&retrans=0&sent_bytes=295605&recv_bytes=10443&delivery_rate=717749&cwnd=124800&unsent_bytes=0&cid=b21d8e979fc7b949&ts=601&x=16"
|
|