firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 03 Oct 2022 19:46:51 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jYi4aozqzM6hG9CamUOscXbE8pj2621P0jkgt_u7ZEDwc3iJWmlAUg==
Age: 1162
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19759
Expires: Tue, 04 Oct 2022 01:35:32 GMT
Date: Mon, 03 Oct 2022 20:06:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74134730f642b6f6dfeca3ecc61a329e
668914cc93cceb123d199a45df13ad764704fa84
d681a4c2e20a6019c7e2d980cbfa77b34db9356899099296c3b8b4263ca5fb5f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D681A4C2E20A6019C7E2D980CBFA77B34DB9356899099296C3B8B4263CA5FB5F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4899
Expires: Mon, 03 Oct 2022 21:27:52 GMT
Date: Mon, 03 Oct 2022 20:06:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ohLvFNeB1DJFyw33zTB+SxIzU9fdA/Gc41dXT6sqclDeEAms/nd0lAmHuwdVcao5jjtAa69Jzcg=
x-amz-request-id: Q2Z7N95A3P985FHC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 03 Oct 2022 19:53:44 GMT
age: 749
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
200 OK 4.2 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash df74fd3826a3f7109de4a420d2a15db7
df033d67c439b2da452547dbb28f3427c6e3b132
45a2e449ee3f97cc89295cd0a13866f1fa73b101803d4e21fd1ce823a49c9ea4
GET /cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515 HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:35 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KH35FU0eIWY48ucoWUUTv74T3cvDxK1l5joWCgvGUWF1Mb%2FOgezGUoYnEOOuEZv7nDUuRnNC%2FN526ZzzOFlJ3s0cgtrINAaDxVmgGmNUTiG7QEFnPBR9%2BBkp9cERKKXCwf8Xm5yY%2BHes"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0bbc0c1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 20:06:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.bigspinrewards.com/cascaCOOKspinval01/assets/font-awesome.min.css
200 OK 7.1 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 0ebb760c7d229fd1d2b3a63493306569
58961c039962ea4f5215caa2e0127a8658bcf847
18eecad8f04af6784d466cd2cad0337dea530bef457e6a7b3da473eea589b134
GET /cascaCOOKspinval01/assets/font-awesome.min.css HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:43 GMT
ETag: W/"7918-5d66bf294536e"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wtYKoZDm8JBht97k%2FoP1SngydoBBVm2kkkQSlQaZPGmb8%2FUwCXQHfUvyt2yH7TcfFqQlp8YSX1bu1UZjtKutq6eTugnzA%2ByXZJ5yr3KFvyE%2FWBVwA9Nq7lfTTstWZT1bJNwkWql556JX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0f0d32fab4-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/css
200 OK 9.5 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/css
IP
Hash d0976ef52085c1f8ba2cced000ed329e
0d9941089f7ebdc69363015df65e3d94f50fc465
f4f7abcc0932fc063dd404250f0b0c3f093218b9af321bb221b247ae51121270
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/css HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Length: 9521
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:43 GMT
ETag: "2531-5d66bf29184b0"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g2VduEWXdfdcZZW9y%2BOe3UP26oBwZNwRi8istMQl1yKvAyYepYTFZdT4HiU9zSp7a6w06KnCBJDfhiW3bV7x0IRmeJUcnUgXevIknjd%2FqY4I%2BQF8uFqGZZiGO1y1E2LRaprKF7mvP5bl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0f0f2b0b39-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/app.css
200 OK 2.3 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/app.css
IP
Hash 3cf8934d7c76110c0ef806dc54b5ed72
85ab74ae0ca1a9d9cf8bd409dc7d6a4935f227e5
c09a50061f411a6cdffe730876beb1e6481c1435cc5f59fdd06a996a59f85244
GET /cascaCOOKspinval01/assets/app.css HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:40 GMT
ETag: W/"2cfc-5d66bf26c8800"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bBmBf6xRlO9FqXPqxoUMAKoHDYhoptpwhCKMJBPDZKXpz00WvmVJiVGdq8kjThQceSfme3Nm7NVSJdKBgK0TysIHELOFBIcUCTcsz2xbTpfs46AjlhgR9Qz%2BN5XYDTWHAjrIeazcuEkA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0f1dcdb4eb-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/bootstrap.min.css
200 OK 20 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash 79c26a3bec8c8195107cb0e69f211ea6
084edec110715186ed997205a4dc3db1c81f56e5
729259be1acde44ee426a5c1acde0512b16e534fdecfb022feebc7334c969029
GET /cascaCOOKspinval01/assets/bootstrap.min.css HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:41 GMT
ETag: W/"1d970-5d66bf277077b"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cH7F%2Fa%2BxdCXJ%2Ba7CVGvbweod01KFedANmMXgRjFXKk%2FM6IxRx2WZD2idpfkpabdvIB94roL68T7klCogFv0OlNUMxylF2J0HsuPG4TgCGsipCq2rv4qagXnAAiRWKmQCI4y%2BSI6Tre7g"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0ef8671c12-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/modal.css
200 OK 2.5 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/modal.css
IP
Hash df2d914c7083b63ad0485004959ca196
7e04c3dac7de038d9757b208e61e26a9a5e30515
f0a7da4cdfa44c576d6c6cecf070f06adf4ff1bbf2ba58bb2126f18a4f17d6ee
GET /cascaCOOKspinval01/assets/modal.css HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: W/"4718-5d66bf2a4ed67"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JiU%2B3wIvAD8EegElbGjn8EUFYZfr8gc6tI%2FVWFiGPTeUdIcxuBqsfTrEcmXwQyy5naouChbyYAL7hhpJl8sLgTKscO4P2Immw%2FewwosnNqmz7hdM3%2FVzHNgRCKto9dYhxP1D8lvMvqVI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0f0fbd0b69-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 03 Oct 2022 19:29:33 GMT
Expires: Mon, 03 Oct 2022 20:15:09 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YkdSqy9JMHuZXmT0UFbBqtE3Zj1rmPt6TfnT87X7u_sJoAS09VXjww==
Age: 2200
www.bigspinrewards.com/cascaCOOKspinval01/assets/bootstrap.min.js
200 OK 13 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/bootstrap.min.js
IP
File type ASCII text, with very long lines (48664)
Hash 01bed6a8d74a350cd71547190b7dd196
22a5ab8be4a5ea822ddbc7e0ed2fb8238cb1482b
6ac7adb2d8d8cecda9bd2512ecfd7352a991759e4530bd8a9e09e5d71025ca3b
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/bootstrap.min.js HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:41 GMT
ETag: W/"bf30-5d66bf280db17"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jbDkqm7DK6q2DNKm51H0e7qeDQnOZEf2YHOuh0AibKNfIew6A%2FN%2BTfFmYuzRrgsop6w3IcgNEHzk6ktTLJAkKNxy53c%2BiUkmFs4HlpQbvt3at4U5Rrcj7XY9E8m1w9HJ0CBQRYkP0dPk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c1109310b39-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/ProgressiveJackpotTicker.min.js.download
200 OK 970 B URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/ProgressiveJackpotTicker.min.js.download
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1932), with CRLF line terminators
Hash b45c9b00b13f7295797f489847c01043
d0f1c46d606cbb1c8cf7942edde4bb3b8f521a1d
1dcbb9eff9ef90996c630dfd90519322992150618c86f895b71e068dae4cdfa7
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/ProgressiveJackpotTicker.min.js.download HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: W/"791-5d66bf2ac4064"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODAbRHMjIeiOBpaXDtzqoTKP1FbQl5%2B0GdsfT81FjDKmrrxlTksApyLuEXV%2FdH3stmyS%2BdmcZAbIFYiRTuDnOF5GUzOaXqp5IBtdFWgsWkLdDxGBaFCuiQ6sozeSS4dXyYoe%2FevcNhML"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c110887b4eb-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/classie.js.download
200 OK 679 B URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/classie.js.download
IP
Hash 1a5be8aeb4cbb0042187b878971199df
de61542f46bc1c5ec59d560b32b56c55f05399e3
e18de479f727203138a7623d14c63dd428bbcba3e76083089fbf862bb96f2619
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/classie.js.download HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:42 GMT
ETag: W/"72a-5d66bf2833c76"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xm7GHQDZt3eqMXYCU%2FXYSg9nlmPTeg5QRLpnI4k312oQU4RgRfWY%2BTnZ2aJBuYrgi37cl3xaMiuaBuGi4TUMgmzUDOcgfgkwFoXjHssAI9U9Nt44U9V%2BEJa1ABuMjMaGHKPH50d4XFtm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c111b4f1c12-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/modalEffects.js.download
200 OK 526 B URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/modalEffects.js.download
IP
Hash 74b1b0ca10f3cf1e3220bcf1b308c919
b02b7a404f12cd42f988f290a35ba07d7d64d089
3627aeee71f460d615995524b493d3912b508e38a5196a5e0624fa0018e027c3
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/modalEffects.js.download HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: W/"553-5d66bf2a76e06"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FbrL01FgjvOPcOuRlJPdayIoYf1ZZe8QgSerS0WXh%2F9l2H16ZuYQbou8UzcxVKGoVYXQKP5TYxgBl0mTpXQUUO9wO%2BxAr1DovHpg9iWwQhYo6hhqMGPoxRMeNsb1Jk5ibW8fQRg3Er8o"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c111a170b69-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/modernizr.js
200 OK 16 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/modernizr.js
IP
File type HTML document text\012- HTML document, ASCII text
Hash 9e591e8b9ac5f95b7fd1ea8dd64a9075
220a0a050773006af6188673501c1e4a487cf55f
8cebedb5c2afae5b5155f42fde8bedfcc8a4a16d9f9d9ba511d531594e0402f3
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/modernizr.js HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: W/"c897-5d66bf2a78d46"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4X%2FAo%2Flwrz8QTG%2FEiSS9Z0IS20bxu1OF5D0OqB4VAbKzgYdFuhQD%2FzlRWWSA42EnwZKvB6EfKwdTVno44QDXN4pgM%2FQOmx4v586uv0h6m7LokuHKz1W835ZPXeBqxSvoHrzmvBFh0H0u"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c0f1de6b51d-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 321fa9a78e31dcb66601ac5890bfba73
c325580db79bde6fd00d2d0c7e3f675e4c0046bb
83029b324b4c36522ae47eef9614c124b0ad2994de412d7ea82f990ad8ae9d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4454
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 20:06:14 GMT
Last-Modified: Mon, 03 Oct 2022 18:52:00 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.bigspinrewards.com/cascaCOOKspinval01/assets/jquery.min.js
200 OK 30 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/jquery.min.js
IP
File type ASCII text, with very long lines (32014)
Hash ae9d8d4c0dec623c2576c2fb03a51cea
d48b4b306fd21b80467d5b0913ff06bc5b949bb5
261d0b1ea5b85979c59923aa544fe4bea3743882b2e02a83020befc328c2d696
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/jquery.min.js HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: W/"1514f-5d66bf2a4ed67"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Km7cmKyXiTSDK45Xr%2B0JfHKyTwIddqI6HrB1q%2FgGNautI3h2IE6%2B6yF6KYRPdxm964QgBYI6f9HhBoXwbRFHI9OofMS4sFpNBUYyYL73GoYMhDF0FvpskRoi%2FbnZWddc3aHI0pFgcafQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c10fec0fab4-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 20:06:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bigspinrewards.com/cascaCOOKspinval01/assets/cssParser.js.download
200 OK 27 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/cssParser.js.download
IP
Hash 3d694576952e7a4b6aa734c18244a657
56280e98625b716fd95c1a4f99aa7b65df26a0a9
41de276bedc7a896c996bf606cf44ea11f3f5541bbf8165941936dc9c35ce140
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/cssParser.js.download HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:43 GMT
ETag: W/"2a52f-5d66bf291c32f"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BNUSqTgVYAggx6SY2RxmUhQK8%2FdASepQjtnpnUjZ4v4p4CkTJYpmy2%2FYF3Ym75itZP5lftNMuYk4tlyhEuxuqXvpa3C1gDxwv1so24F4h6is3kz2er0hVasvxg2A8%2FrHdZtWWhzf7XVo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c11fa6d0b39-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/css-filters-polyfill.js.download
200 OK 5.1 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/css-filters-polyfill.js.download
IP
File type exported SGML document, ASCII text, with very long lines (370)
Hash 25efe4f33c613569612c7ec2c8c70751
45e58f374235f09c2fdafc05ca330e51007ef62d
b42e342710a964b6803c7641e250493c30f3074974b6969ba1ec50813fb6069c
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/css-filters-polyfill.js.download HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:43 GMT
ETag: W/"5ef3-5d66bf291a3f0"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qdc2SpKQaZfPFxChTO6KbSU6pFt85Sgmhexlow16imTSLStcJdCri8lBQBbYZHOD5slTgZET2XkGlaXGS1MANgHF1prh3DSlPNtVbXVx4mzD0kkM6J0G4owQOrkb8wmsqbZ%2F78rnAPQV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c1209dfb4eb-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/countertick.js
200 OK 316 B URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/countertick.js
IP
File type ASCII text, with CRLF line terminators
Hash a06498bf00a468de5d20e57b3a725792
ca051ede4eac3d9bc720dd669c5f299f30466ab5
799127ec8c7193a7662c3116f53f0f1582f7d78a4cd4d120503681187f205ce7
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/countertick.js HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 25 Jan 2022 18:06:42 GMT
ETag: W/"442-5d66bf28a9f13"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2FURUAeRf4qnbIWmHtvmMuXT9NjNHXUF%2F3xnMFeqgpbbpmVE0RfJGFW3QzkvSaskLFexJr8WtGwCev64vPLKCMETGH5ng5Y%2BhNAqPAxexUg7CkvW8tprwgXsd7K8YDjq9cOyZv%2FOT3q7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c122ca61c12-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhp.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhp.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14564, version 1.0\012- data
Hash 60c866748ff15f5b347fdba64596b1b1
34f486906decb7c8cf7a02d4758add9a2408c7a5
5278c0f6063ca9ad85653b18a2ddf1aa57e3ab40b7973a69b09acf859db8264d
GET /s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.bigspinrewards.com
Connection: keep-alive
Referer: http://www.bigspinrewards.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 05:43:40 GMT
expires: Wed, 27 Sep 2023 05:43:40 GMT
cache-control: public, max-age=31536000
age: 570154
last-modified: Wed, 11 Oct 2017 21:49:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.bigspinrewards.com/cascaCOOKspinval01/assets/gmd-logo.fs8.png
200 OK 16 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/gmd-logo.fs8.png
IP
File type PNG image data, 390 x 151, 8-bit colormap, non-interlaced\012- data
Hash 23b6eddd0eecce5a6eea654ba41a1f97
035bbaa93c44364083927ffc71992ca732cef332
f84acb2dc865da9636297c1488e10cbde35986a147834b590ea6ff800f5151ec
GET /cascaCOOKspinval01/assets/gmd-logo.fs8.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 15821
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:43 GMT
ETag: "3dcd-5d66bf29954ac"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZOc3QbSUYGs5yO2eh6St2u5D%2B3p0XB9B%2B0M92sUyP723OD2YtYLpDrEEZ4xzEddh58JpFF8VWHo%2BiVfgXfoYQz1Exee3y0g7fSLBxz3qhmLICSsEqi61s%2BdxJD3PJkK1mzPcQsk3NE4J"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c123a26b51d-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 20:06:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bigspinrewards.com/cascaCOOKspinval01/assets/header.png
200 OK 28 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/header.png
IP
File type PNG image data, 650 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ba2225b5d549d4e085e7dec59031789
a2b2b470dd74a1dfddca4747ae9f4a2d97114251
4204e8a8a0003b4e2b917d61540e43e9918989d9951763ae9dbe1984a9082356
GET /cascaCOOKspinval01/assets/header.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 28153
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:43 GMT
ETag: "6df9-5d66bf29daa0a"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2BL7r0pnd5sGaF1MdUnHsmJvguDXmt3dW1XUDJZhzQAU7TFFLwFD0pUbNKvb2pu270CCgkXM3NzpEI7HX667%2FGdP0eoSYuPGPUdkmIyQC8jKikdr1ZRKKlAwjSAXzBuC3QNDl1%2BVAYRd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c12e869fab4-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/reel3.png
200 OK 35 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/reel3.png
IP
File type PNG image data, 124 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b374f1866c834573895cbe3848acf9a
9c4d3779d20ec4fce12cd33dd764fd22ae08df91
671eea44423c5a9fa2049e072b35abf42193ad6cfbca03b7deb7535496043d99
GET /cascaCOOKspinval01/assets/reel3.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 34626
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: "8742-5d66bf2ac7ee3"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u6RrFrxcWi3smWajFK6aBAl3FOG3QepyuP8%2FYVh5HQBcB2I6O9ZZLL2x67P6WLJunkC%2Bce9nJudaVdsMe9xqdxQ6oRxJF2nPima0wAN5FmWBcaggKv%2BKYXIvqMOh7AnFcUvtCeJRxcCa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c133dd31c12-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6njF97io7exYP5MyMi2qyw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cqCP4fg4NuC4X2vtXzAxGI9tw4k=
www.bigspinrewards.com/cascaCOOKspinval01/assets/signUpButton.png
200 OK 5.4 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/signUpButton.png
IP
File type PNG image data, 339 x 58, 8-bit colormap, non-interlaced\012- data
Hash 4f1b4ea4cb20b78e31121180936f0a5d
575d6cc08b108fac838cd1f053670b4c4a6dc339
9c23e18d28456cc3214784c8bdc6de84e471f67757d81bbf34c3c7a3c9d46e27
GET /cascaCOOKspinval01/assets/signUpButton.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 5391
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: "150f-5d66bf2ac8e83"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2FMzFOlCm38z5BhMlnY%2BANSqx2foNHZGRu70nhFn%2FYHnCwgSBiq4pLTq1LwVuQ3rsgg2KMeRuPVvm9Ev%2FsOYAP40YdPvuvnljnrCbgenEdvrnyc1%2FJKxCf6ZsPwSS05Te0v7zYcYrrgk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c13d937fab4-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/slot-machine-frame.fs8.png
200 OK 83 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/slot-machine-frame.fs8.png
IP
File type PNG image data, 600 x 566, 8-bit/color RGBA, non-interlaced\012- data
Hash 7eaa2d9092e6c61cfa9dc72248c5959b
b96d515fcbbfd4b9cbf813fbf2e8e55a04eecfa8
2253edb5c406ee264b0d65dbd610377d13842b8c8ae2a336c26f6c7ef5633f7f
GET /cascaCOOKspinval01/assets/slot-machine-frame.fs8.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 82821
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:44 GMT
ETag: "14385-5d66bf2af2e62"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SBK9RzdIp%2BYOUECpHUHaD1j9v0oWIM8zA4y0XSuLB9mSHqVMPkSg6PulpJBO6n0PHRE%2FO4k0F4O72X30j97gQ7dRCvIoJzkr3CgmnjUBZHcHDnwAhZWQAwQ5j80fvFffySudtQrzSz8T"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c135bbdb51d-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/bg-glowsplosion.jpg
200 OK 243 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/bg-glowsplosion.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size 243 kB (242556 bytes)
Hash 1124105a3ce805986140e5116cd4eed0
428d67aefa1df07bfed1596f9c38913678d4b2b7
f970d65fe158c9e872b2f3eba253b25d4e56ed07d06f044e5ca316e2b32f0f40
GET /cascaCOOKspinval01/assets/bg-glowsplosion.jpg HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/assets/app.css
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/jpeg
Content-Length: 242556
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:41 GMT
ETag: "3b37c-5d66bf274773d"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E5nwaBLAxDmFca8fQqwcuKJmCDGIMVx0y40oznv%2BB%2BRmPMCT859VKnR5bfgSlWnYsWZBaT7lWGFU3ApqLbcsfb2Dn7SimpVA5T5pg6y11NbcPG31fpRmw5Ms6aXLTm1mqW8hPb3P0aSY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c130b760b39-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/congrats.png
200 OK 112 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/congrats.png
IP
File type PNG image data, 456 x 551, 8-bit/color RGBA, non-interlaced\012- data
Size 112 kB (111762 bytes)
Hash fc423bb007b698443f8e1a00cab48f3e
8556fbdbd18a446bdcdf038820905b84abe41eba
9c425bde8240e35dcb9e2335be76e81103bc5d06bfe4fdfecd746c9532f82648
GET /cascaCOOKspinval01/assets/congrats.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 111762
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:42 GMT
ETag: "1b492-5d66bf287ff34"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p3ckU48XGTRdbAfYuDTwC5cFEHMIMJZ92xMA9PAyipRz81FKIf1PGig9vgw9dJvhYGzx5arwLagVXKXriPF9vxrrgcje%2FFJgJm8yPxY85VxX7VuST%2FtyAHHYXfKymW4kDJ44KHutqSCl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c13bbb81c0e-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/favicon.ico
200 OK 0 B URL HTTP/1.1 www.bigspinrewards.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:15 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 0
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRy%2BP5a4HFalSLj1JD9iYbfdjHr9lH0qv2oh%2BEI3R1aMotmV4F3okEDYIpECsjN6uPCgYSm6cqpl3PunBjHZQEM9Ee%2FrAWVc82PjOb%2BTUraBM5m6EfL9vhM0ktIcyceJ%2B1X0ooBqcCaV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c17c9640b39-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/cascaCOOKspinval01/assets/vault1Wall.png
200 OK 456 kB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/vault1Wall.png
IP
File type PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced\012- data
Size 456 kB (455715 bytes)
Hash f98f3a4015d654328b2cacc86f5dc11b
d0f167627527542633aa77f5eb533b1d8909b55a
1c909b72e2ae3943ee7b769a650f8690fd21cc7df64b31ab2690d77301bf4a4b
GET /cascaCOOKspinval01/assets/vault1Wall.png HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/png
Content-Length: 455715
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:46 GMT
ETag: "6f423-5d66bf2c2f4d9"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5yQzs5eiwxChKaXeS%2FrvHEYsHHJu1DbqvySgIEzcksoCWGXMTtLisO%2BpdxNVgCJKrEGfc5%2Fl6bWGyiy3GPyA7niA3pqlza2QiZEAnp0MBZ4v69yECjEDwnUcsxge0Cn8FhzlNnDxDe2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c130b99b4eb-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13574
Expires: Mon, 03 Oct 2022 23:52:29 GMT
Date: Mon, 03 Oct 2022 20:06:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13574
Expires: Mon, 03 Oct 2022 23:52:29 GMT
Date: Mon, 03 Oct 2022 20:06:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13574
Expires: Mon, 03 Oct 2022 23:52:29 GMT
Date: Mon, 03 Oct 2022 20:06:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13574
Expires: Mon, 03 Oct 2022 23:52:29 GMT
Date: Mon, 03 Oct 2022 20:06:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F382faf63-655f-460a-9545-c4d888a724c6.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F382faf63-655f-460a-9545-c4d888a724c6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36debc920b17e124779c01af9101a59e
b105f7bf041365d644c98c7e11ffa75e4656d29d
f518ccd094d0e187b91cfd36dfb282566c0d088ce13501157dc97c702211d938
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F382faf63-655f-460a-9545-c4d888a724c6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10839
x-amzn-requestid: 67718257-ee21-44f0-80bd-f15cea37ac5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWcKFD0IAMFV7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a044d-09a45a242bf4bdfe0f4608e4;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:13 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pS33yyA441ZNn2dtNy6mVDnm-rmd_Vi_M0q9ZN2AKGMUT7l-nEuEvw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:58:18 GMT
age: 79677
etag: "b105f7bf041365d644c98c7e11ffa75e4656d29d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F954ddf3b-951c-46b3-a8ce-00e3bd3ef239.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F954ddf3b-951c-46b3-a8ce-00e3bd3ef239.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bed17699f6b123b33b8df416b23c4cac
36458cca636c4ffc873df8acd254ff726b1a9544
65dac85ddf2d9918696ea270a5a3d034e07e43ca5714f169747feee09fc4b897
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F954ddf3b-951c-46b3-a8ce-00e3bd3ef239.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10490
x-amzn-requestid: a7e4d6b4-be77-41a9-94dd-83167d5b002e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y5tUrE72oAMFZYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632d5c1d-1ba0805b629e657b60ff1b85;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 07:11:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DZ6ZMlje50ktV6_cABRx3fr4Dke7Z2UhNhBDi1aCK00kRPTlnG691A==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 03:36:14 GMT
age: 59401
etag: "36458cca636c4ffc873df8acd254ff726b1a9544"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 721a8d8f94c3796abf021978fcdbc831
3fc3aeae907a0ce0db21753c67c1000681e48b8e
cb497b15e7c2e49930b99f8d6659f0394acefb7b11613ca04397ee782dac759d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8158
x-amzn-requestid: 424c8c6c-7075-4ace-97e6-2b0a609d1b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXDxGRlIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-046d963a345c15e81dc74e4d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aFBTRAsXhi4io7fSc02hftf9hRQ-J5yaBgU4Wgwijyir30xjTjdMLQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:46:36 GMT
age: 80379
etag: "3fc3aeae907a0ce0db21753c67c1000681e48b8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34ba42086104460665f7f4f579235592
58f10485c5273cbed8159c98b9065b192ba3d00b
79f1febc020ab611c5d9a8bc1af237a63420f8215963fd97f6c4b9bccfa17d24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4522
x-amzn-requestid: cc836204-3c4f-48d0-9569-b1622e6d2178
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMVoRH9toAMFwig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334cfce-096ff90412945ca06335e987;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 22:50:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fudDd0zzDKrnJFkd5SprRVtrhRWr9sSccbhORco9XUEJTO2TXYouzQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 17:50:25 GMT
age: 8150
etag: "58f10485c5273cbed8159c98b9065b192ba3d00b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 523edd86af4757d0bc5fa5b3b8a3596a
8118ee462077c291b9d6f1402b85b55a9ceba8c2
c27de9970317636df8c4a517a9ed38e573235b351bf92c9b8bb1f964cd100031
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9083
x-amzn-requestid: fda71fd3-ef25-4a63-94ae-1bfc8aef8d14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXD2H0DIAMFjrg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-198915fc17ce3dab571b7575;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BobS2JU-TqDuL8q31SVlerM15cRoMhL1oM5MkL7MVhY9RZG_Ukp5yA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:46:36 GMT
age: 80379
etag: "8118ee462077c291b9d6f1402b85b55a9ceba8c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 04:42:51 GMT
age: 55404
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.bigspinrewards.com/cascaCOOKspinval01/assets/vaultWall.gif
200 OK 1.1 MB URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/vaultWall.gif
IP
File type GIF image data, version 89a, 1200 x 1200\012- data
Size 1.1 MB (1140481 bytes)
Hash 90615312001d9a2f2c84c6b2960f5924
fc4064f61fa7f863411b7ba008a5e1f1dfbb2927
205f01e68e5ac9bec5e6192ea4dcacb981fa8ed067b23f00beef98153da6e484
GET /cascaCOOKspinval01/assets/vaultWall.gif HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: image/gif
Content-Length: 1140481
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 18:06:59 GMT
ETag: "116701-5d66bf38598a2"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=erfaw4toI9ltqCeg%2BqYrh9yVM7MSQBr08eauu01oYiwy3Fo4RRoBefbJ%2B8kFtfEGP53pgkCjZg%2FGtFsGYrfMc6au8qztATsSTzRB6jFP0qUNpOUIF5L1Ef%2FjDOUkZzS%2FHbdQQEU5rJmj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c144f1e1c12-OSL
alt-svc: h2=":443"; ma=60
www.bigspinrewards.com/assets/htc/sepia.htc
404 Not Found 17 kB URL HTTP/1.1 www.bigspinrewards.com/assets/htc/sepia.htc
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2562)
Hash a7f6416e69c0fd936b2f1ba0811a2946
381c4299f794353fe1f157acfd68a176da8167d7
2a14272b21bb153705891915f9769c1821bb601360cd0b83323f54f1988f623c
Analyzer Verdict Alert fortinet Phishing
GET /assets/htc/sepia.htc HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 404 Not Found
Date: Mon, 03 Oct 2022 20:06:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.bigspinrewards.com/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mBa5DEmynwcb0drDZbexeT7KCDblzgmF5aJbKAhESxKrFIxFBSIn%2FtjYvYdwL72Hu4AacMRN%2FOzSIRvgUjPb69DczS7Wkl3yhJnGjQe08yHP04ui6pHhy3z8oFHPWzokSvmKTQQgbt2I"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c204fc6b4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Sun, 02 Oct 2022 22:11:22 GMT
Age: 78896
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
www.bigspinrewards.com/cascaCOOKspinval01/assets/saved_resource
404 Not Found 0 B URL HTTP/1.1 www.bigspinrewards.com/cascaCOOKspinval01/assets/saved_resource
IP
Analyzer Verdict Alert fortinet Phishing
GET /cascaCOOKspinval01/assets/saved_resource HTTP/1.1
Host: www.bigspinrewards.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.bigspinrewards.com/cascaCOOKspinval01/index.html?&model=Desktop&browser=Chrome&city=Celina&brand=Desktop&isp=Google%20Cloud&ip=107.178.231.0&tid=425c3c2b-e1e0-41cd-9d5d-f0831c0c4380&cep=AJh0qUsTjTZcifdOPwoGBu2RKsrJ02oB9xZ2Ra0I_Q40MngtgVs5dCHOEj6oFXJq7h9ED2kLEzkrBh0GiVPPrvXbph0DdqIs7KRTvhnPyKecBTOek_ps0FsSHVeLt48beYSPmSsqEqM8o80D1la6SYDQdNJx2MBaohkpIU8revbhOgfLXx9pf3duC4yTI3Zu4AnxEhOGxhJ7ze_53VnxN2m3Hi7amHL7De5sK7osQ1tA7eaUts703U2TXJCJKByZArahZmSW9GGbV_MNN4Zl_WqpK6kL3cSvBVQmLVpVYkOpfuyEvZhE9xXHTOKOWBPcynWaGcNqqagLxaZ886xSUA5cJW9bGLqIWU85mRNyqHcJob6AYv3jKMvuTqiy8wRc&lptoken=167c64dc82b193445515
HTTP/1.1 404 Not Found
Date: Mon, 03 Oct 2022 20:06:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.bigspinrewards.com/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HxT04KJ1VqGxhp%2BQUOlyfsDahXPjrLUl2sZz8qQ5tPoGUJH9pcrrt7ZF%2Fh5in0O8pvCMe2ORfFXtKarEnJ1X9eFsrjjxIrvxkj87%2BN0GhJgp6PNbiYLZ4B1mcLFeDcWzM1JnWdsvg1yh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75484c123b9f0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
104.21.72.251
93.184.220.29
142.250.74.3
23.36.76.249