called url: 20250702 014117: /gameverse/idtl/promo_gamverse.php?req=lp 20250702 014117 : requested url:/gameverse/idtl/promo_gamverse.php?req=lp 20250702 014117 req2 = heder logs20250702 014117: header= Host=43.205.41.181 heder logs20250702 014117: header= Connection=keep-alive heder logs20250702 014117: header= Cache-Control=max-age=0 heder logs20250702 014117: header= Upgrade-Insecure-Requests=1 heder logs20250702 014117: header= User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 heder logs20250702 014117: header= Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8 heder logs20250702 014117: header= Sec-GPC=1 heder logs20250702 014117: header= Accept-Language=en-US,en;q=0.8 heder logs20250702 014117: header= Accept-Encoding=gzip, deflate Query:20250702 014117: insert into tbl_wapidentify_idtelcmsel (msisdn,referid,entrydate,pubid,subid,campid,serviceid,co,op,sid) values ('','250702014117000000JEL6SX',now(),'','','','','','','') lastid:20250702 014117: 473616 into lp block20250702 014117 inside lastid:20250702 014117: 250702014117000000JEL6SX urlcalled:20250702 014117: http://43.205.41.181/gameverse/idtl/lp.php?lastid=250702014117000000JEL6SX Redirecting to URL: http://43.205.41.181/gameverse/idtl/lp.php?lastid=250702014117000000JEL6SX called url: 20250702 021216: /gameverse/idtl/promo_gamverse.php?req=lp 20250702 021216 : requested url:/gameverse/idtl/promo_gamverse.php?req=lp 20250702 021216 req2 = heder logs20250702 021216: header= Host=43.205.41.181 heder logs20250702 021216: header= Connection=keep-alive heder logs20250702 021216: header= Upgrade-Insecure-Requests=1 heder logs20250702 021216: header= User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 heder logs20250702 021216: header= Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8 heder logs20250702 021216: header= Sec-GPC=1 heder logs20250702 021216: header= Accept-Language=en-US,en;q=0.8 heder logs20250702 021216: header= Accept-Encoding=gzip, deflate heder logs20250702 021216: header= Cookie=PHPSESSID=l1gdikchlf2mhpck99sldgm7r4 Query:20250702 021216: insert into tbl_wapidentify_idtelcmsel (msisdn,referid,entrydate,pubid,subid,campid,serviceid,co,op,sid) values ('','250702021216000000YZIHMS',now(),'','','','','','','') lastid:20250702 021216: 473617 into lp block20250702 021216 inside lastid:20250702 021216: 250702021216000000YZIHMS urlcalled:20250702 021216: http://43.205.41.181/gameverse/idtl/lp.php?lastid=250702021216000000YZIHMS Redirecting to URL: http://43.205.41.181/gameverse/idtl/lp.php?lastid=250702021216000000YZIHMS called url: 20250702 021244: /gameverse/idtl/promo_gamverse.php?req=lp 20250702 021244 : requested url:/gameverse/idtl/promo_gamverse.php?req=lp 20250702 021244 req2 = heder logs20250702 021244: header= Host=43.205.41.181 heder logs20250702 021244: header= Connection=keep-alive heder logs20250702 021244: header= Upgrade-Insecure-Requests=1 heder logs20250702 021244: header= User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 heder logs20250702 021244: header= Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8 heder logs20250702 021244: header= Sec-GPC=1 heder logs20250702 021244: header= Accept-Language=en-US,en;q=0.8 heder logs20250702 021244: header= Accept-Encoding=gzip, deflate heder logs20250702 021244: header= Cookie=PHPSESSID=l1gdikchlf2mhpck99sldgm7r4 Query:20250702 021244: insert into tbl_wapidentify_idtelcmsel (msisdn,referid,entrydate,pubid,subid,campid,serviceid,co,op,sid) values ('','250702021244000000IV8PT5',now(),'','','','','','','') lastid:20250702 021244: 473618 into lp block20250702 021244 inside lastid:20250702 021244: 250702021244000000IV8PT5 urlcalled:20250702 021244: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=250702021244000000IV8PT5 Redirecting to URL: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=250702021244000000IV8PT5 called url: 20250702 024148: /gameverse/idtl/promo_gamverse.php?req=lp 20250702 024148 : requested url:/gameverse/idtl/promo_gamverse.php?req=lp 20250702 024148 req2 = heder logs20250702 024148: header= Host=43.205.41.181 heder logs20250702 024148: header= Connection=keep-alive heder logs20250702 024148: header= Upgrade-Insecure-Requests=1 heder logs20250702 024148: header= User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 heder logs20250702 024148: header= Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8 heder logs20250702 024148: header= Sec-GPC=1 heder logs20250702 024148: header= Accept-Language=en-US,en;q=0.8 heder logs20250702 024148: header= Accept-Encoding=gzip, deflate heder logs20250702 024148: header= Cookie=PHPSESSID=l1gdikchlf2mhpck99sldgm7r4 Query:20250702 024148: insert into tbl_wapidentify_idtelcmsel (msisdn,referid,entrydate,pubid,subid,campid,serviceid,co,op,sid) values ('','2507020241480000001HA4DJ',now(),'','','','','','','') lastid:20250702 024148: 473619 into lp block20250702 024148 inside lastid:20250702 024148: 2507020241480000001HA4DJ urlcalled:20250702 024148: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=2507020241480000001HA4DJ Redirecting to URL: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=2507020241480000001HA4DJ called url: 20250702 025125: /gameverse/idtl/promo_gamverse.php?req=lp 20250702 025125 : requested url:/gameverse/idtl/promo_gamverse.php?req=lp 20250702 025125 req2 = heder logs20250702 025125: header= Host=43.205.41.181 heder logs20250702 025125: header= Connection=keep-alive heder logs20250702 025125: header= Upgrade-Insecure-Requests=1 heder logs20250702 025125: header= User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 heder logs20250702 025125: header= Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 heder logs20250702 025125: header= Referer=http://43.205.41.181/gameverse/idtl/errorpage.php heder logs20250702 025125: header= Accept-Encoding=gzip, deflate heder logs20250702 025125: header= Accept-Language=en-US,en;q=0.9 heder logs20250702 025125: header= Cookie=PHPSESSID=ahk6bmf3gff0ie5ocbgdi67h3k Query:20250702 025125: insert into tbl_wapidentify_idtelcmsel (msisdn,referid,entrydate,pubid,subid,campid,serviceid,co,op,sid) values ('','250702025125000000JU4HAK',now(),'','','','','','','') lastid:20250702 025125: 473620 into lp block20250702 025125 inside lastid:20250702 025125: 250702025125000000JU4HAK urlcalled:20250702 025125: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=250702025125000000JU4HAK Redirecting to URL: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=250702025125000000JU4HAK called url: 20250702 025816: /gameverse/idtl/promo_gamverse.php?req=lp 20250702 025816 : requested url:/gameverse/idtl/promo_gamverse.php?req=lp 20250702 025816 req2 = heder logs20250702 025816: header= Host=43.205.41.181 heder logs20250702 025816: header= Connection=keep-alive heder logs20250702 025816: header= Upgrade-Insecure-Requests=1 heder logs20250702 025816: header= User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 heder logs20250702 025816: header= Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8 heder logs20250702 025816: header= Sec-GPC=1 heder logs20250702 025816: header= Accept-Language=en-US,en;q=0.8 heder logs20250702 025816: header= Referer=http://43.205.41.181/gameverse/idtl/error.php heder logs20250702 025816: header= Accept-Encoding=gzip, deflate heder logs20250702 025816: header= Cookie=PHPSESSID=l1gdikchlf2mhpck99sldgm7r4 Query:20250702 025816: insert into tbl_wapidentify_idtelcmsel (msisdn,referid,entrydate,pubid,subid,campid,serviceid,co,op,sid) values ('','250702025816000000XUKNTM',now(),'','','','','','','') lastid:20250702 025816: 473621 into lp block20250702 025816 inside lastid:20250702 025816: 250702025816000000XUKNTM urlcalled:20250702 025816: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=250702025816000000XUKNTM Redirecting to URL: http://43.205.41.181/gameverse/idtl/lp_idg.php?lastid=250702025816000000XUKNTM