r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14936
Expires: Fri, 09 Dec 2022 01:58:15 GMT
Date: Thu, 08 Dec 2022 21:49:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12945
Expires: Fri, 09 Dec 2022 01:25:04 GMT
Date: Thu, 08 Dec 2022 21:49:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3470f9f0a4df8c1496b577fa9435ff6
f83b0226bb57ed0f3e1acdad61b940414add135d
f542579e3a3577a646babde862282c2afda6ed784360a915143216100f7a3d91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7091
Expires: Thu, 08 Dec 2022 23:47:30 GMT
Date: Thu, 08 Dec 2022 21:49:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 21:08:14 GMT
content-type: application/json
age: 2465
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4g6IQCWliryShscOpVG02UEqMzF6H0azP4OnuoAM+HdkHImrx8ZWOraLlLA7KVxSYDAv3x2kQCI=
x-amz-request-id: TTPJCVP4HQTZFY4P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 21:48:04 GMT
age: 75
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 21:49:19 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 21:07:55 GMT
age: 2484
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1620
Cache-Control: max-age=128672
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:49:20 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 09:33:52 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ec5f6261a8262e9f94b29627f54cefe
7ac766cf2ac8c2d960ec033388a767ff8a7d45e2
5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:49:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ec5f6261a8262e9f94b29627f54cefe
7ac766cf2ac8c2d960ec033388a767ff8a7d45e2
5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:49:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GEiJyO0PqOsfuuUQXmp87Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PDs7VVnZMgXy1uVzYsH4ZDWs9F8=
luckyreelspins.com/casnzwof0115NW/index.html
200 OK 9.5 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (566), with CRLF, LF line terminators
Hash c351af12d0ae7a845629aaa29579ca7b
5eecc727a0065d5f844e02a78e4bda2f109b5423
1fc6f2350e8bb3e6b453a1eaea2fa28e154f34fc797aaca0825507a2e631ab1a
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/index.html HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:30 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UhkveFZN2yrnuj8O%2FiFfLaBRR1I40CjlNlNcbb04Br3cwoL4LfSsmcN0xaJuIDI0WD6Hi3Vh%2BUnarYYXvb0%2BRt4cKE1tl6JW2p4TdouYKlt3gnLL8GgQsnhdCI4cSwzIFj4Ay%2BU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7768b5d409dfb4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
luckyreelspins.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 luckyreelspins.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
Analyzer Verdict Alert fortinet Phishing
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 17:55:37 GMT
ETag: W/"638a3c19-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x0OD1QpNCDVqfvAVrN6DEJJauXsGwUuOapwGg%2BQ2YrizS0fJ7f1Ja0OHFigc55%2B8epgLLdZt5%2Fca8SKsH0etJRzSHw8zUrey9aA1ME%2BxtI0LorOwd26EDE5lazpx%2B8yuffIEYrQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5dc0bdcb4f7-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sat, 10 Dec 2022 21:49:20 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
luckyreelspins.com/casnzwof0115NW/assets/animate.min.css
200 OK 5.1 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/animate.min.css
IP
File type ASCII text, with very long lines (65338), with CRLF line terminators
Hash 80d8e4cdcab6549af071c43a532d15c7
2cbcd572480a25595bd5d98185e8ff935bf00f47
4927c4dda286db08df3ca6097ca4377355e5d03c952a45a322584db2febded6f
GET /casnzwof0115NW/assets/animate.min.css HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:30 GMT
ETag: W/"636b270a-11850"
Expires: Sat, 07 Jan 2023 21:49:20 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WSJfpRzVcrhgVFW%2FU%2FnFdQo12f8beVPzh%2Bfpi9K%2BmNhRFnaI8HZ9SgxTv0j3HydOeY3H4XQp51MlNLcF6kjbozWREPbqKLGlRMdC%2F%2BFFDBDnhL7yeGLIt2dLOQP%2FnoicD1IWvFs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5d8a8fcb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:49:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:49:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://luckyreelspins.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 94527
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://luckyreelspins.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:34:15 GMT
expires: Thu, 07 Dec 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 94506
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:49:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11308
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 21:49:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11308
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 21:49:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbdf939d23b987fd36a86b7a1258b10d
2cad45ad8e56699db3457501cf1e488fe85d479a
285a8a3d3ec439f493ca5d586477c3e3ed3b9e5d7a0133da73c426b69e112cb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10861
x-amzn-requestid: ad568a35-9eba-4c6d-a09d-97e518fbf503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gIFN4oAMFqrw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-434ca8281e48538e69e72e05;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4MrxT27cyrFqR70ofprhh4FbJAfVpKb787jT3TsH0l7BxQOf2tWh6g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:51:32 GMT
age: 86269
etag: "2cad45ad8e56699db3457501cf1e488fe85d479a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11308
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 21:49:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d44d17585c9a536c8da0e75ed90d175
9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:05:37 GMT
age: 42224
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d89b69ba37bf23c5d576aff4063caf
3d46a21b4da571d7e4962e335c18a28ca5f81ecf
09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv756DvAzOQnKae5wVg75wrQS6oDGPkfIZka86FNQ2vizBnZ7sIDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:12:45 GMT
age: 81396
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 80162
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98d2cf29c710d25bd2f03ff216fdd369
b8eb2e11f9655f19334befc036f21489a6473827
614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 14:20:11 GMT
age: 26950
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c408efaa98ac2ce63bb1618368d10c15
a51bbb49ebd862d04eaee465d0a35b22dcd21391
077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:21:22 GMT
age: 84479
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
luckyreelspins.com/casnzwof0115NW/assets/step_3.webp
200 OK 4.6 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/step_3.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c75abd9f8368a5fd071c90ac466a22c8
af377db6876180308ffe77cb4ab0529b864e8377
c4fb46c3b523407d7ec39700f644fd57c2b6248da2157600cde376d48818401a
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/step_3.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/webp
Content-Length: 4582
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-11e6"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fq1raL651Hc7ro7IGLsenmNNjcHVjaAFWZAEbrkZuRbQg4AFurU495Sui0QBeHnkIqPoOn60H54zlY%2BeCSSiRhcoBnXS1ARYmlTVZ2yBPmuq8LYmZfu2K24NfEvScKkSqYw2LL8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e15b09b4ee-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/step_1.webp
200 OK 3.2 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/step_1.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 792d3d34eb3dd0dd0d819e252e2d42c3
15f2e709a7751cdcef521dfee243319776015c17
fda2fc83f73a50db9e6af999d0bb654f98ce15fbedad91e9fc56166f7f0c2574
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/step_1.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/webp
Content-Length: 3186
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-c72"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YDdI3hgLAeIZfpSevKoH7dDxGu9bNBqGUP9dcujzcpzpkXsLe19UbTmIA249QuvXOU5HAaUhig1SSv0YRqeLoDBf%2F6ZAw%2F4mAKwSav%2FeVKxG0eY5Fv%2FaHhNOsO6iAECnGO%2F6sDM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e15a40b4f7-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/step_2.webp
200 OK 3.0 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/step_2.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash be11ce923d3bb8637cb397a00bf81810
b34fcdb69eb2315feeb23cccd132c854c2adca8d
b7172e50219d0e8f2b80c31f8462d9614e18343ce27c56ee9b5cf4a4e3564353
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/step_2.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/webp
Content-Length: 2966
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-b96"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o4f1vXJi2zhT8hj%2F%2BfNLcgHhJkWTbYPoknrK3bvxw6QFVSZZAK0N2PP%2FyUgAQl902zXEGg6jqrJbhJ%2FJ8xnCmLEAZbSfislNiQuSn7d7auvXqqmWvz8Fw%2Fk182%2BHLd%2BbvVwvP98%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e15eefb4ed-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/safe-secure-logo.webp
200 OK 3.1 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/safe-secure-logo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9a696b75d097ad7347932036de8959f4
939eba18f9394ba99865bd74c6e9de923714686d
923766e02644a243b07f95eeb79fdfae2787b7278c71e640efab45a7b2cc0f32
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/safe-secure-logo.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/webp
Content-Length: 3084
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-c0c"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fgaLp89Qy1itNcj08Bo%2BSs8cuXGKGqkFNOeUqZWuSaTd3sKCp2hJN2qDTJwcoxAJ%2BmVgrYNIXaXcbMQZYXGXIHm2SmSVzeiqXPh3IN4iJ%2BeE9t94iEUYvDpHsM5TXrksrFtoUCM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e15e0a0b06-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/step_4.webp
200 OK 3.6 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/step_4.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 12cf3b32ee632c827e7236d9c04cef76
0c745c0f1d258817791a61759278d3ad95d9dde2
b2871dfa0cc4e06349e1342cecf572f29d2b7f6b4b9f0d56fad0ecdcddd9edf1
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/step_4.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/webp
Content-Length: 3602
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-e12"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=03yLvWzAGyLRWkTz0knv4bFejjlgBN8qA2%2BPCcb7c8ATctGDuNIE25riJ0PEGaLuCrj68EveNLrBPBod%2FlMBZkF%2B2TUo3MQWH%2F4%2B6TFGXmLXAPCAVO11De%2BOZxZ3StJyVVHnJu4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e159020b41-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/main.js
200 OK 1.5 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/main.js
IP
File type ASCII text, with CRLF line terminators
Hash 99307b7efd6ba6a4ba26704d5210283d
444b058ad7b2b7125c484ebec080a92630b11ed3
28f1587265ccba8feb2c1b8f5c34114b6c8555378d226188bb1f5dfd9109a19b
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/main.js HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: W/"636b270c-13b8"
Expires: Sat, 07 Jan 2023 21:49:22 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iesHOgEbuHTqCq2Bt7q7XBAwcHG3p%2FUe%2BD1CWbNjY1jJbyY8gYDX%2B1robW6NNHE7gYVls%2Bq0cmm4RadaTVdD8mV80RiSgR3f4%2FELNA5z1MUuAJboefWy5MnR76EofY7Ccn4aQYU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e51f86b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/shake.js
200 OK 1.1 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/shake.js
IP
File type ASCII text, with CRLF line terminators
Hash 1472e52c031eb10a439846a03fa6cd4a
ab8716e9416b255265d203caba66587315173a90
76775712b1267852d05e16215a682b157328aa95898736b74aee6211c01d010d
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/shake.js HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: W/"636b270d-fed"
Expires: Sat, 07 Jan 2023 21:49:22 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QUADrHkX2qG6ynFEhDSXo2EDHdFNKNLSIRbEy4cgJ%2B3855Wy%2Bk7HeQgjVy8e4uCQx7zFQeNFubmFR44kxBXz31ddsqU7NgrvxypTeL5tP%2FaezLKoEKyjUFPDUKZ0AsSD3OI0uJo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e51c40b4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/bg_bottom.webp
200 OK 6.3 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/bg_bottom.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c110ddf0bc7f8fb81c3380125afb1551
0e19172e53aca1c79f4f430fb0fceecba679be0c
19a14f2b0e2aa4a524b45c814ead6b653d0d64f6d5d2fc8b231a6d3977168cce
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/bg_bottom.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/webp
Content-Length: 6284
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:31 GMT
ETag: "636b270b-188c"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UXP62qtGIm6ot7ahQiNUrLUYNqCMNGYMyDFRz8FIwmC6YagugyedIDYhFVQlZz3vS%2FQgpo6b8QVzS0eU13tLYywRxOhDrHbDSnQQuaZKbX66ymHM6UnIZ8jqFnowXJ7sjoFlxkg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e8cc5fb4ee-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/images/jackpot-sprite-ca.gif
200 OK 110 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/images/jackpot-sprite-ca.gif
IP
File type GIF image data, version 89a, 764 x 350\012- data
Size 110 kB (110227 bytes)
Hash fe364892ba2d24bd10079e7ca234c506
638388a79411957bbdaf18dd3f3797ceb4a5cf3b
f3030b1e0fc4828a8764efc02fcab06751a5b55112bc3137e119554dcbed19f5
GET /casnzwof0115NW/assets/images/jackpot-sprite-ca.gif HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:22 GMT
Content-Type: image/gif
Content-Length: 110227
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:31 GMT
ETag: "636b270b-1ae93"
Expires: Sat, 07 Jan 2023 21:49:21 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qy8SblYh%2BXH3CCvAdlWmkmRfeB9Nhb5Mt3wVIfbs5%2Bn8Trqq1WUqiBEJhXpLreoFDTXK4rS%2BZDFfLiANOVMUZfXvX1rrjtXk6sgc%2F1T7K2%2FFjXiF0DTm5FypotW0zPEf29kNiAw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e15d6cb50f-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/text_bg.webp
200 OK 35 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/text_bg.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 770x214, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fdf50da7f3f7d30eda72e0d5776748a8
880b16a633c300e2c1724ec4b41ea174e01f5ab3
e7d352130486166055919e5a46604b7bef40a5766414d625f41caea15d455945
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/text_bg.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: image/webp
Content-Length: 34590
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:34 GMT
ETag: "636b270e-871e"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yNhTXMehSNqGQRJ9rFY4avEQGb%2Bc%2FN2EMIe0ljDqqlqPR2SXAnGMMLr6lGXiLFGSbV7yG5SltWCrQmHs%2F6a9Rn1N%2F6drTHWQkXRf3D%2BFLDZJL73nhy6A3meOoGgmE0NIodv02X4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e52c0e0b41-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/jquery-3.js
200 OK 31 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/jquery-3.js
IP
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash ee8a670a87992d3db76e6869f085fd30
0084fffcb0232c6dac6b9978de2f3089bc523f01
eea79fd2def10fed08c749a6be60fa51c2227fe47fea3d9a6a16a54e007fe209
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/jquery-3.js HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:31 GMT
ETag: W/"636b270b-15853"
Expires: Sat, 07 Jan 2023 21:49:22 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WCKLkXh4D%2BwgPsNF0xMaed89b4i5qubrRQxRlVmsKUK9eAhusHHW%2BMTcznHY%2FXv8vGtNJXDwYtUod%2FFf9VFVQjsPeoFPABPnJw4kex3PfzzR5hs1%2Bd6vudQcecn43mLfWnLSo1Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e51ecdb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/bg.webp
200 OK 118 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/bg.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1349, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 118 kB (118030 bytes)
Hash a56f11344e887e0139b8dd9ceea2f1bc
efbab494d709fd1794b11030c6500363283821e8
01b8c19924330be6424f6a9d8d042f57f24e0b4da1f07450e159a31c590be6e9
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/bg.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: image/webp
Content-Length: 118030
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:30 GMT
ETag: "636b270a-1cd0e"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4eqINxunmrMcAPWqoWlJF9GHmU0z6opqnFhZOXMNeuePFZUFa1fEvqteeTjr4Rm28SoLCeiRrbVRCyM%2FmSs9%2B50DJSx32gB1FKng1sZ2XV9BkQGjmHcmciSN6QEnL4Gv%2BwD1JTs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e51a580b06-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/case.webp
200 OK 15 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/case.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 73b9e6ad6bc7fc1a54cbd303cc5670f9
00d427c87b93a51493230171d8dc58841fa76b64
34e7e286de3e12a5c0bf7f5cf70eae78de7a60a47472f41509e558b1ae8c2b54
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/case.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: image/webp
Content-Length: 14692
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:31 GMT
ETag: "636b270b-3964"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ouXSzNL2kU4marmp2alPbqqX6ly5Zbqnuf8St4%2Fg9MzUqaabCcKnlTtyvQHidHyozVUvY3GeHBJ6tUPTtvhpE2WvPmSMbI%2FDlslOjiI%2FCe2bLcEhhJgY0H%2BNoqCo1gNkBu3gJrc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5ee0c94b4f7-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/logo.webp
200 OK 13 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/logo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d40545af5263f863edc9771468b000b4
030519dc0457c8bef84c8b721d1f5225ecc1ebad
87e0a2275889086e84b0a24266867c8e01147a25c76563273b4266a8f7bba20c
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/logo.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: image/webp
Content-Length: 13054
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-32fe"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hc5uETPDAZdQ2%2F6CD2qxWzGJSu%2BmuicGBY4TwocSU10gFJr2xoqC4L72qTGcF5tF1olTehlGZEUeR9Ysw33A8lQXLg%2FbW0IJnJzJ51SHzF3ce9%2FNs1sH1EMnj9IcOsF4ogkMjvA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5eafc1db50f-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/images/wof-LOGO-desktop.webp
200 OK 65 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/images/wof-LOGO-desktop.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 61b237245b425884d8b9d696e0e8cb88
7ecb5d3c635cdd2347258f9229994ffda933c0fe
f1e2f7dd06601c21012e5e578b4a8e6a595373092ee7cc11483541dca55ff1db
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/images/wof-LOGO-desktop.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: image/webp
Content-Length: 64970
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-fdca"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2Bj%2FbB4XPnM24mYMWoo9yXPESRlip3jLGLGSWMxuhZBRXq2Tv0zlqZP6mTaxHcrSo%2Fgba%2BljdcR33pDZieUqaDxnXgp8tNubzWcVZCvwYs9sRJp%2BexuVlu%2F6znc1pBewej92xYs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5e8d925b4ed-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/automaton.webp
200 OK 13 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/automaton.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b193217a02ee818c4eaeb532c01f5ad5
ad43d2af0b37ce5c2c644fd7f53077698fdb667d
dcd9fcb0684c02bfba647d9d1d0a2ff75ef61b219097bff14a92e026f2314532
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/automaton.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:23 GMT
Content-Type: image/webp
Content-Length: 13098
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:30 GMT
ETag: "636b270a-332a"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1FMiUJbLE6wPIwzz4phFe72jzj3MxUGTPoZ0ZVkrZD%2FL95D3HXp%2FBpovsqXovmJRlad%2BR6Ye1U1tn0hwDfZAuNT8d4NuCZQuCr3jY%2B6SEL0xT7z5iX6A1R%2Bi3%2Fnyt%2Bm0xnzUrug%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5eb79eb0b41-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/money1.webp
200 OK 3.9 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/money1.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b9c2a0d724c0c0ab37b4309fbc1a2ac0
837653b4981c8494d869ca124a3e6778bbcdd57b
e00431354224fb3f51b937fe0a9792bb9acbb1989debf165461e85c85995935c
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/money1.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 3892
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-f34"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RNEo0jXE8r7MC4I%2Bk0UV7d3JZBPzN5uGFCySyErU4L4qjsdCuoM%2FGk0sP3VXlkRRELcDQvEUyAhF59BAjlaTmmdJShI9elhd%2Fub0aMtF8NZzQGs9ibUTua53ZrG8qg3wnfoMpG8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5ef0b8b0b06-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/badge.webp
200 OK 6.5 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/badge.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bea03314199b26bc35f999adaf2fa3e1
a0aca04201639c966c69bf36ee45760e3051313f
2f3ae73c8a2e1579135ff1629e3497f8ceeb83cd7b8abf4f2b3fc0c7ec605cd3
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/badge.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 6486
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:30 GMT
ETag: "636b270a-1956"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dXiolPc2v3UqQYXPn7%2FuxYnLu1fQ3HcOGizsW6vMnTxjObgS0Nnbc%2F%2B%2BKdy1K6YMuFu%2FjVI32Bm3IQSGqEgFnzCmSypF8Qm9%2Fv%2F%2FWZIZqg49bA4IX0X94AfftNiReOIZ8GXIC%2FU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f0dcefb4ed-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/money2.webp
200 OK 6.1 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/money2.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 33ea9f83c05b33b5dbf415999aea6d9c
3ebb91c1b1910e6da5ec0b13e1dbf1f8f990c54f
902801adc2ebcac9686de3642df63de85d712a3812e8e8642d0c0d5e0964552c
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/money2.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 6088
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-17c8"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=shh0i70kUA8ZqasJf9KLkgKBX9cS6GmjGsheCEQpg4qq61zLIR1CK1ZCaED%2FAjSZzBkcPmIlq0fwgccrQCMQ%2BSKki9hA7ArsiLBG3nBfFAA8I%2Bps66oX1bxD0IcYX5vQNaCx8eI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f0fe790b41-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/stvol.webp
200 OK 5.3 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/stvol.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a59541e1f9bce7fb706afd267fa7b7a7
fde1c5af20dd9e4896db5460c970191551d13200
87cfa6bd1a019b158335fbc111700e182f7e8617013f1bb76b47cd541dd16333
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/stvol.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 5308
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-14bc"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8yvaxLUb7m02ArXFn5NGQDclvnoz1JFyef%2BJzhT94tjq15nKnOzLKCuyAGF0bQqBN2bHv5MYYYCBCcjK0OFIcXJ58yYnkifYZHYJUTWtNu%2F8W6uZz%2BovM%2FFC3HzemKaXHGkD89g%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f02fd8b4f7-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/limonka.webp
200 OK 2.5 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/limonka.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d2eab8271b02189d28bd926468bb5f4
ad43ec06b4c43b971a0cf6d3b87244722e6a9523
f3f638a5b090baa6adcddfcb52141db8e6a9ef705fd388e1b00835664e09e3dc
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/limonka.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 2454
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-996"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9tRyD4Ja1oTZ%2FSdOfz5tcf%2FY1djabtfkxrQ5hglvex8HVpG5JW8uoEVg%2FqWq9vAT2kwfVU4tLkvGidrd%2B8mx%2FHtPCRuJRHzsGrH%2FFKdwE3nEGaXyAe%2FIi7aUdm9VHxojuUMOhqM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f07c15b50f-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/smoke.png
200 OK 231 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/smoke.png
IP
File type PNG image data, 2560 x 577, 8-bit colormap, non-interlaced\012- data
Size 231 kB (230804 bytes)
Hash 1bc38021a1b1c6662149f911359a8d99
6c87b042d2af65ad236037c15fbbc08f33f66124
0138cde8a598f95b9ec30c47749ad68c93e61968faeb5ab0288f36e313f4762c
GET /casnzwof0115NW/assets/smoke.png HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/png
Content-Length: 230804
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-38594"
Expires: Sat, 07 Jan 2023 21:49:23 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XQrbe8LTG7udABed290zGSkXhLJDtiFAYJx%2F7%2BjOOkpE8XlNNmHmSdKhLty0%2FB8cNLOSXSKx4i4XXfE5M10ALYcSZc6zlcULCL8PJvum5etW7qK7GBjhNLB6Fph73l%2FsNKRuuf8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5eabf7bb4ee-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/money3.webp
200 OK 4.2 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/money3.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f09db27c14fbd16ab6d4777c0b6ebe30
a0ebff24242798395743e683cf48ef60e5b0f22a
2e8107907409a83582ba4dc139ba81f6e42c0c446b0d3d83f1ce228136c071d3
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/money3.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 4210
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:32 GMT
ETag: "636b270c-1072"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9IRGicSlydmYKhwbwgwSqIsNyhUrqX%2FlKwb9fQpBvZnQfoyONqIkk%2BwOaxNkts3%2FDjxICwxOKGYIYGfkYLmdlUuArY7a1LNyjwIBDg6aPvtDdZnh%2FbjeRpavIdbWB3vIAmrkYV8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f2bfba0b06-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/winner_arrow.webp
200 OK 23 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/winner_arrow.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b721f15106d770ad03323805a2102456
6d531bdd10027eeb72e7a998a5944db8ceb5d2d8
0f8b54e466becbb6a253806b7796d497e26b179f59fc90fae9dedefb5c0010eb
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/winner_arrow.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 22736
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:34 GMT
ETag: "636b270e-58d0"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SsNLPbY%2Bx51I2J60Hb6CiUFwYIF6lJ3GcfhrN1VC2W7VV9DCk%2F%2FG%2FJyfq3anpILTpyf56x9fpM%2FziJm5%2B5rqfHcBwnFQfV3%2BV1ZUicAWN2nOY7eeNJS%2BAZCp9oqXz17R5vujlio%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f42a73b50f-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/wheel.webp
200 OK 27 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/wheel.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09013b14c3ef62b485eb6d02f39aac82
4055c92651318caa715b2678cde05abd043817b8
de24e6e6b24786a38e875480b2842ed82bfdfcb9a5db5929f97e8e5b6c3e08a4
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/wheel.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:24 GMT
Content-Type: image/webp
Content-Length: 27430
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:34 GMT
ETag: "636b270e-6b26"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=np2VyvSWju6VDTWMDMyXLhC%2BQKYnYgzBPqL789hdn4gDaT5WflyZG6jxUQ9PqDEePk0iOyyB3vrUxxoeefVaERRZlD4t6lyOKJoIx6m5fr6sLolsfzv5rcUj2LkCHzCZzoSaxaQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f2cf50b4ed-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/wheel_light.webp
200 OK 19 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/wheel_light.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 79b4939c3a8c318097dce58df83e1874
7fc2768a250c0316fb5634694677b90033811250
2b8159c224fcda0d0bc5825b04d5ab08620ea3b25b697a23b97f8e395bb4699a
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/wheel_light.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:25 GMT
Content-Type: image/webp
Content-Length: 18704
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:34 GMT
ETag: "636b270e-4910"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aRtpyI%2BXOq3DTwG5WEA56HHb%2B7ZPZTh1rtvHNKyQQW7Ny3UDLml8YTULkRRyJPnqd1zA6oQ2wOlgInptNj12yX%2F9AyomYGbxTdXfHFz2m1d0DCh%2BlR5Kiru1hMoIRkwdBqx9%2BI0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f3dd12b4f7-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/btn_wheel.webp
200 OK 8.4 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/btn_wheel.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a44ac7f5dddffeab64fa8814ab0ede77
cf5476668d69494dd23ad4d5a1a99ddb056097f3
e78adbfc62c6bbfb0a9359f77ff7286e7491b1f5ad4900387f2567fd4328a732
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/btn_wheel.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:25 GMT
Content-Type: image/webp
Content-Length: 8430
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:31 GMT
ETag: "636b270b-20ee"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yzG17y%2FnL%2F3cmr%2F5nWZvy97dqFfZXMDnEgQhWSXJjJUMO4dgGGyvycyFZeoEwBdKV8fMpzDxymlgJv60WViMfDIoPYNjXAdod9rnW%2FJui%2Fn%2BQHkyZclkSFT8OYVp37kauq%2FtJ08%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f64f60b4ee-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/wheel_inside.webp
200 OK 80 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/wheel_inside.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 71fcd332ae0d4ccd42cc4cbd8fb7a90c
ec5342b60212c99ad82d16e0185ffeb00a13a45b
590ff39a344c77be67747f7d0075cc39db5cd2062fa0ade09607f6888b153b22
Analyzer Verdict Alert fortinet Phishing
GET /casnzwof0115NW/assets/wheel_inside.webp HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:25 GMT
Content-Type: image/webp
Content-Length: 80366
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:34 GMT
ETag: "636b270e-139ee"
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wP2LWHoGRLxtem%2BeRhGXh10RrfudCa%2B1giH7xGA435htEGJpgxAR1hacelcONW4wSTY2pcXzXxpGrxiOCLXXx8SQ8prJJtjTFwtJ9eNLhtaJXXaI413VInVINk%2BJsSMsuKuVdMs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f2e82a0b41-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/casnzwof0115NW/assets/safe-secure-payments.png
200 OK 13 kB URL HTTP/1.1 luckyreelspins.com/casnzwof0115NW/assets/safe-secure-payments.png
IP
File type PNG image data, 628 x 111, 8-bit colormap, non-interlaced\012- data
Hash ea417e15c537af576f26755f19416820
5ccdc7fdd346d8b490455d777809acee9ea8941f
7257bbef98e4ee902681cbc2470e4160f9ed3812d3e069a52d37fe4de5ef467c
GET /casnzwof0115NW/assets/safe-secure-payments.png HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 21:49:25 GMT
Content-Type: image/png
Content-Length: 13054
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 04:05:33 GMT
ETag: "636b270d-32fe"
Expires: Sat, 07 Jan 2023 21:49:25 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BK5ZLzqIPaABiKcKLiyQxaCoUxUCZxmTgasmQ9vknb0f6%2FVISmdl4ZhLL32EC5OIUC7pjm13aHEilt1EL0Ez14SPrMJTb35kRRWgWGOuaYFMejV99xCIlQqk7k4SSuNrTn9CAA8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f66be00b06-OSL
alt-svc: h2=":443"; ma=60
luckyreelspins.com/favicon.ico
404 Not Found 115 B URL HTTP/1.1 luckyreelspins.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 98058f0e2d9b8e1de680b04d5c5fe547
8f403216c88f17a89ca0da495f7af5684267ce07
987b4ac29b938af4660b3d54ae4aea6bb9d8dde1221ef9fade5f5f804243d359
GET /favicon.ico HTTP/1.1
Host: luckyreelspins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyreelspins.com/casnzwof0115NW/index.html
HTTP/1.1 404 Not Found
Date: Thu, 08 Dec 2022 21:49:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=691200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NThX4dTpPc2pzrQFKhfPdL2cC1os4j7g2%2FHOZJDIZV2sYt9OV%2FhDtwVAVPE9Rxbx%2BNUNFSWti0kLbWRKrthZ%2Bn9j6l3c2fgAjTp%2B5w5c7d0vqsOxxHB4G2O9z4IhCNpyqbcqgm0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768b5f90a0fb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
IP
GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://luckyreelspins.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 21:49:20 GMT
date: Thu, 08 Dec 2022 21:49:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
104.21.36.253
52.39.94.191
23.36.76.226
93.184.220.29