Website report · 27 Oct 2026

soulcraft.games

“Lo and Behold | Soulcraft Games”

Template-written 30 evidence items Code reader analysed 3 scripts
What this means for you

soulcraft.games talked to 16 outside services on a first visit, including 2 that measure visits or show ads.E14E15

  • What loads is a page only: no calls to its own backend, no wallet code, no contract calls, no AI services and no live connections.E30
  • Before you click anything, the page loads analytics or ad services: Google Ads / DoubleClick.E14E15
  • 6 cookies were set in your browser, 6 of them by other companies' domains.E21E22E23E24E25

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend none seen
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What loads is a page only: no own backend calls, wallet code, contract calls, AI services or live connections.E30

What it is

  • The site describes itself as: “Discover Lo and Behold, an immersive Roguelite ARPG where you play as Lo, a quirky young owl in a thriving animal village. Explore dungeons,”E2
  • It's built with jQuery (common tools for building web apps).E27
  • It has sections such as /index.html.E29

Where your data goes

AdvertisingShow ads and follow you across sites to target them. 2
googleads.g.doubleclick.netGoogle Ads / DoubleClick: Google's ad network (serving and measuring ads) 2×E14
static.doubleclick.netGoogle Ads / DoubleClick: Google's ad network (serving and measuring ads) 1×E15
Social & embedsEmbedded videos, posts and share buttons. 2
www.youtube.comYouTube: embedded videos 8×E8
i.ytimg.comYouTube: embedded videos 1×E17
Backend & data servicesDatabases, search and APIs the app runs on. 2
ajax.googleapis.comGoogle APIs: Google services 1×E5
jnn-pa.googleapis.comGoogle APIs: Google services 1×E18
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 6×E12
fonts.googleapis.comGoogle Fonts: fonts 1×E7
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 2
d3e54v103j8qbb.cloudfront.netAmazon CloudFront: CDN 2×E6
www.gstatic.comGoogle static files: Google's static file CDN 1×E20
Not identifiedServices we don't have in our list yet. 6
store.fastly.steamstatic.comnot identified 9×E10
cdn.fastly.steamstatic.comnot identified 1×E13
shared.fastly.steamstatic.comnot identified 1×E11
store.steampowered.comnot identified 1×E9
www.google.comnot identified 1×E16
yt3.ggpht.comnot identified 1×E19

How key features work

How ads get picked

Ads are chosen through ad networks and exchanges (Google Ads / DoubleClick); they receive details about your visit to bid on the ad space.E14E15

Google Ads / DoubleClick

Video

Videos are embedded from YouTube.E8E17

YouTube

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
sessionidE21store.steampowered.com until you close the browserother company
__Secure-YNIDE22youtube.com about 180 daysother company
YSCE23youtube.com until you close the browserother company
__Secure-ROLLOUT_TOKENE24youtube.com about 180 daysother company
VISITOR_INFO1_LIVEE25youtube.com about 180 daysother company
VISITOR_PRIVACY_METADATAE26youtube.com about 180 daysother company

Pages and API calls

Pages it links to

/index.html/

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Lo and Behold | Soulcraft Games
page title · https://soulcraft.games/
E2
Page description: Discover Lo and Behold, an immersive Roguelite ARPG where you play as Lo, a quirky young owl in a thriving animal village. Explore dungeons, craft gea
page description · https://soulcraft.games/
E3
Main heading: Lo and Behold
page h1 · https://soulcraft.games/
E4
34 request(s) to soulcraft.games
types: 29 image, 3 stylesheet, 1 document
GET https://soulcraft.games/ · image · 34 requests · network recording
E5
1 request(s) to ajax.googleapis.com
types: 1 script
GET https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js · script · network recording
E6
2 request(s) to d3e54v103j8qbb.cloudfront.net
types: 1 script, 1 image
GET https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js · script · 2 requests · network recording
E7
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css · stylesheet · network recording
E8
8 request(s) to www.youtube.com
types: 3 script, 2 stylesheet, 1 document
GET https://www.youtube.com/embed/ulGU_Hpq1Ww · script · 8 requests · network recording
E9
1 request(s) to store.steampowered.com
types: 1 document
GET https://store.steampowered.com/widget/2785640/ · document · network recording
E10
9 request(s) to store.fastly.steamstatic.com
types: 6 stylesheet, 2 font, 1 script
GET https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css · stylesheet · 9 requests · network recording
E11
1 request(s) to shared.fastly.steamstatic.com
types: 1 image
GET https://shared.fastly.steamstatic.com/store_item_assets/steam/apps/2785640/26c7e002afa9ccd089daf901093f46b4161149bd/capsule_18… · image · network recording
E12
6 request(s) to fonts.gstatic.com
types: 6 font
GET https://fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 · font · 6 requests · network recording
E13
1 request(s) to cdn.fastly.steamstatic.com
types: 1 image
GET https://cdn.fastly.steamstatic.com/store/icons/icon_platform_win.svg · image · network recording
E14
2 request(s) to googleads.g.doubleclick.net
types: 2 xhr
GET https://googleads.g.doubleclick.net/pagead/id · xhr · 2 requests · network recording
E15
1 request(s) to static.doubleclick.net
types: 1 script
GET https://static.doubleclick.net/instream/ad_status.js · script · network recording
E16
1 request(s) to www.google.com
types: 1 script
GET https://www.google.com/js/th/YI2XvVwvdBJTNOg4tmE81lkRxYCcxVDASxYzC3ult3w.js · script · network recording
E17
1 request(s) to i.ytimg.com
types: 1 image
GET https://i.ytimg.com/vi/ulGU_Hpq1Ww/maxresdefault.jpg · image · network recording
E18
1 request(s) to jnn-pa.googleapis.com
types: 1 xhr
GET https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT · xhr · network recording
E19
1 request(s) to yt3.ggpht.com
types: 1 image
GET https://yt3.ggpht.com/UnFXRD8ojP5qZq-D8Ip_dcH2DQFjvKgxCeL8SL4jrmdFa5nPewTmO0zlVHhY4AG3N1z481do-A=s68-c-k-c0x00… · image · network recording
E20
1 request(s) to www.gstatic.com
types: 1 fetch
GET https://www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg · fetch · network recording
E21
Cookie 'sessionid' set for store.steampowered.com
session cookie
cookie sessionid on store.steampowered.com · value not stored
E22
Cookie '__Secure-YNID' set for youtube.com
kept for about 180 days
cookie __Secure-YNID on youtube.com · value not stored
E23
Cookie 'YSC' set for youtube.com
session cookie
cookie YSC on youtube.com · value not stored
E24
Cookie '__Secure-ROLLOUT_TOKEN' set for youtube.com
kept for about 180 days
cookie __Secure-ROLLOUT_TOKEN on youtube.com · value not stored
E25
Cookie 'VISITOR_INFO1_LIVE' set for youtube.com
kept for about 180 days
cookie VISITOR_INFO1_LIVE on youtube.com · value not stored
E26
Cookie 'VISITOR_PRIVACY_METADATA' set for youtube.com
kept for about 180 days
cookie VISITOR_PRIVACY_METADATA on youtube.com · value not stored
E27
jQuery found in the code
soulcraft.games/ (page HTML) @ 334:57 · “jquery-3” · pattern scan
E28
Cloudflare Turnstile found in the code
soulcraft.games/js/webflow.js @ 1:76456 · “turnstile.render” · pattern scan
E29
2 links to pages on the same site
page links · https://soulcraft.games/ · /index.html, /
E30
72 requests on load: no own backend calls, wallet code, contract calls, AI services or live connections
GET https://soulcraft.games/ · summary · 72 requests · network recording

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 3 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 8kViEAao.