slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
200 OK 4.7 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 9b3c4583a9e93db8335b42d382d1b795
97723d89004aae9896565e52bbad760646747ecd
5c150dd9d64e5e2fb98921402c83ebd5bb7db9d0573312dab1c4b5567033116d
GET /ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 06 Mar 2022 17:15:34 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KqtNkKcprJz%2F1rL%2B5dG%2B0vRoWog6QAO3CWMJMEgAqObgTzCkfvirm6FqTcxRYd1uA%2F1DLC9nzgv%2FMTPSl7wsXjmj5WuUllR2PIw%2B0MV2vTtGBHBcJ8kU4EVVDpSH0Gj6rE6LZPGAaAA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78952aa9efa4b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11099
Expires: Sat, 14 Jan 2023 12:02:52 GMT
Date: Sat, 14 Jan 2023 08:57:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21375
Expires: Sat, 14 Jan 2023 14:54:08 GMT
Date: Sat, 14 Jan 2023 08:57:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64765d3d978fd74d7bc47d55d4f097cf
92eb3f0d55ba99be28105c0b28ef7dd456817f1f
761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6574
Expires: Sat, 14 Jan 2023 10:47:27 GMT
Date: Sat, 14 Jan 2023 08:57:53 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 14 Jan 2023 08:48:53 GMT
content-type: application/json
age: 540
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TbtfDBWvOE+zFwiNGf2wKvBTT9EqgHcpXgq7fRzqDOEcEC8//n9IcEJzooSgg2Vf1mgSmRELauQ=
x-amz-request-id: 47XT6PK0PP6ANNV1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 14 Jan 2023 08:43:40 GMT
age: 853
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:53 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 14 Jan 2023 08:17:25 GMT
age: 2428
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4dfdfc39a20d2bc7f54ea8596ea0a256
8369ca4584b1c1648a56cc51b7a3f293bebf985e
c39c404969ed7096a232a581e0a824460503568a93556d1e0dbd1c9d37ecc8fb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 11 Jan 2023 20:20:05 GMT
Expires: Wed, 18 Jan 2023 20:20:04 GMT
Etag: "8369ca4584b1c1648a56cc51b7a3f293bebf985e"
Cache-Control: max-age=385930,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78952aad1f66b50f-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3818
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 08:57:54 GMT
Last-Modified: Sat, 14 Jan 2023 07:54:16 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68b772596c395b9efb68bcd38254d58c
27bf30efda326cc79bf03d8fecd6fb527bc387d9
c10b0bcb09f64e03e34833e9b19cc1f84aaa43d2b86b5f90e3801216624183e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C10B0BCB09F64E03E34833E9B19CC1F84AAA43D2B86B5F90E3801216624183E1"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6070
Expires: Sat, 14 Jan 2023 10:39:04 GMT
Date: Sat, 14 Jan 2023 08:57:54 GMT
Connection: keep-alive
slotbusterscasino.com/ca/aweber/lp4/css/style.css
200 OK 2.9 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/css/style.css
IP
Hash 8dec581bc89d1c5e303e4dc5b27980f1
e5ba1200a6e29da15f0c396e23f55f1d30daa8c3
984bb9604ec435809a78bec33e7951677e7ac57fe1ee7657f1804255c8cec564
GET /ca/aweber/lp4/css/style.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: text/css
Content-Length: 2852
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:56 GMT
ETag: "33a6-5c844291642a9-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ebw7zvL2aQvNahy%2BrZOsYW%2BtSOfRHyjqhUWBxHgsK4GAX4%2BoKTCw70r1R2eiXUIdxcBhDw%2FFLUgpVaSOOIShifk5MR8OjZYS83mQTWRK2PeU7CHY1P02B2hc5R35C5Cp4yqHRWwqg0A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78952ab0cf42b506-OSL
alt-svc: h2=":443"; ma=60
propeller-tracking.com/fv.js?t=93925
200 OK 16 kB URL HTTP/2 propeller-tracking.com/fv.js?t=93925
IP
File type ASCII text, with very long lines (44772), with no line terminators
Hash a94aa54fa091d27c90c016a5d2b2d7a3
aeae0359690e0d3e8f37582883fae1ca2aa452b0
3b91f3fa69dc95e18b820794c584168ac904bd0f46626dca4a5c85ed6f5a1ab6
GET /fv.js?t=93925 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: cbc32713db58ef0d24d2bfe3c7da4672
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5afac20cdd09bb4cfe0759fab6264a9
9c791a7558b4a2d65356418273415152b2049658
e28338023d91f52f75da4bc44a382dde28124a29fbfce894272b6770f777124d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E28338023D91F52F75DA4BC44A382DDE28124A29FBFCE894272B6770F777124D"
Last-Modified: Fri, 13 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16236
Expires: Sat, 14 Jan 2023 13:28:30 GMT
Date: Sat, 14 Jan 2023 08:57:54 GMT
Connection: keep-alive
slotbusterscasino.com/ca/aweber/lp4/js/jquery.min.js
200 OK 34 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/js/jquery.min.js
IP
File type ASCII text, with very long lines (32063)
Hash 2e1a77cff3897ea5ccda07b27e30cdf7
ba342228e553e191e338864f50bbef55bfd4479c
d822c488fbf7435e53e413e6185a13019eabce3a49e1d2cafb2facc646989ec1
GET /ca/aweber/lp4/js/jquery.min.js HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: application/javascript
Content-Length: 33789
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:59 GMT
ETag: "17b4b-5c844294e0bed-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PMRhBEjXzOkQBHpRTAYd8h6c%2FYU3e1X8Lrfvs6pAlsI4W1GdqhFwziRAZ4NY%2BoAmRvDa9Cr1qiZs3hUeaK%2ByfmbWKTqqJw9%2BGSycgvoCgtcxXgIad5V4y%2FushxObS66E41WJh1PmJ%2FM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78952ab0de75b512-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/css/form.css
200 OK 439 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/css/form.css
IP
File type ASCII text, with CRLF line terminators
Hash c550f7fb8e1522be084f0e7970dd57d2
3663d3ee7595981db0e98994bca04893b5c85f41
22cea878f00d45bd39de3595b47c3dfc5ad0d86e95be6a91bb1f51322057d073
GET /ca/aweber/lp4/css/form.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: text/css
Content-Length: 439
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:56 GMT
ETag: "434-5c844292248ca-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y5KAlCaMYhxToRD3rHv5s3VhYfHCVcN8Ni%2BHyo3XSfX92fBbun%2BLFTnSIIvPYqpo19CKVM%2BaIzVPNZWWWUDvahcEo%2FpaCX7cX6ClSXbe86%2FlgBovDwRLdSzEILjevBH%2Bysx3AuQ%2FC9U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78952ab0d856b517-OSL
alt-svc: h2=":443"; ma=60
my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
IP
Hash 1d1522de413d0b27a43e7be4efeb0405
58c52eec6da93a26b374308e6189b8af139624f7
d9b7a5a22d87f08fbcb41ab49b3494cf35afa659a2b143800bfab1c62b07b193
GET /p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=90679
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=90679
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=90679 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 203930cb83aecaf6972984c9bd17aa5c
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=93925
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=93925
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=93925 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 5a654bfbe7f77de083e1ea9243b754b3
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=90679
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=90679
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=90679 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 2ed9cba1d193abd803f650783ed5e387
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp4/images/slot-start.png
200 OK 26 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/slot-start.png
IP
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 505136e8cd9273c4c021fcd128a5930e
c03168068ea00290499502b424e0d675e873d6cb
dcb1933fb72b31568b3bb0e41e8a18ae04af5c3e50d1d63a3be7f4f86eb0397b
GET /ca/aweber/lp4/images/slot-start.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 26144
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:48 GMT
ETag: "6620-5c84428a04780"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V2TvM9JJMT7ed6mdw9SI4dEcbWZBgdUlbwqneY41a%2BlU3lEmzmZqb6FQW01hQyUyuV0KBcvK4hx2czh9XnscFSoUbFC0YSRAIPe%2BQhhYLqtyPR9BgaN8WT1xNXTbFttlpQz42pHg1c0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab1af45b512-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/images/red-arrow-right.png
200 OK 916 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/red-arrow-right.png
IP
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 8cb7b80e85b72706fa368f13e40e6baf
08612867d514b3bf31e9f93390722963362064e1
721d5ad469a842631c8a8b4aca7b69a01efcad127397f1bef2c4cea3f197f93c
GET /ca/aweber/lp4/images/red-arrow-right.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 916
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:50 GMT
ETag: "394-5c84428c1d943"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D3DWVC1OCCPE0xaOMuzPs6d%2F4L7XS98f8U3PXw5uoTJVcIW2uqmgG62AYPTevGp0B6ZrQNntZIjhc8Zj5zMKxRlFDSB9ebjoNzmMIwg3bKMYfhZqOxpvx4Bvrqswzy77avmCKTBkgLc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab1a925b517-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/images/slot-win.png
200 OK 14 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/slot-win.png
IP
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash e44b8ccb1f094f7ab91e121c062b9d8b
7518c98361735271c17a0e204a5f54744b1dd4be
a8b500964a73f03d1b9b394f3704757c67c95492c6895d933c1347f0e2629b98
GET /ca/aweber/lp4/images/slot-win.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 13517
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:49 GMT
ETag: "34cd-5c84428ab0581"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JuB%2BK50HFBEo1AcIllIuuL9TuTh3eCPDNFOYRqZiFPxE%2BJ%2BF1YJgUPXgfBmwDIaB4aCp%2BBg%2BZE%2BscBU%2BBjN7jXnMKbYOPcnS4m8zb8u%2FZoLndAKFeqSTH8KbxK6gQJ5QJhi8Man9Lqg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab1a82bb506-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/images/red-arrow-left.png
200 OK 913 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/red-arrow-left.png
IP
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 130f4f22757530332ef944489bdb5aa5
cc007456d005e17183fc1cae19384bd9981da721
773a87f14e23870383294b8ecdef50e9c3c2f6bd0f025f58b9a18a86ab7da2cc
GET /ca/aweber/lp4/images/red-arrow-left.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 913
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:52 GMT
ETag: "391-5c84428e1c525"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=47yroHtV6Hy8AA3lvj4VMceTKoGd4nYGatjv0lC%2FmStw4uxLjUVk%2F%2FRP3K8kTIPppZRrdltPw8gTRwPRuSPKmNri6H8L9dailBbNWFEFx%2B0PoLJyzTq28mv1Fj%2B4escDyjsdPkckqPI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab1ad2a1c02-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/images/slot-result-1.png
200 OK 20 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/slot-result-1.png
IP
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 9e294699a5e44eae1fa11f56be812825
e6ed17668abfe8c78983e504b0b03583fced343c
70f040dc111e1c2e153959bcf8484dd72cd06d4c41619cf18525e03acec687e0
GET /ca/aweber/lp4/images/slot-result-1.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 20059
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:53 GMT
ETag: "4e5b-5c84428eb3b06"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jYBpNJRABF0IzGIGMtgjejDGv2Pbid%2F0Nr1r804%2BzsVVTLLkYICPJVaej%2BS436akTU6Qq%2FZHnbDKT5YV0DuXoi4egRRj00Y5YDqaSuCUrVbMAyvBNctch7wQV2cPu4sX46BkFhGVm9g%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab1afecb50b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/images/slot-result-2.png
200 OK 27 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/slot-result-2.png
IP
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash ad75288fbb44c2cc60575758fc08abea
4cb39e6873cf7e04473d7e612a49f27a580d9b24
9f6fb99bd75d5cbc91ca328778620775ffedbd8572d04e16cfd32fae52aca3b7
GET /ca/aweber/lp4/images/slot-result-2.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 26719
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:51 GMT
ETag: "685f-5c84428cb5ec3"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQIEWrC%2F38cwzUEQhfbzqSCi6v25tNO5V7tV9MGNW6oRO7X0BfUgdiPC7wmchKhaP87z4RoArjQAL%2FMf7KTriEKWenzP4ACp1C6PzOvj1svSpmt%2Bvcu5yEh%2F5muzv1%2Bbs9KY5Yy4h68%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab1af0eb51d-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f1QKXiVob1tFmpkxRUTozw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: r3/YEgLmFl0q29fXoHVgTXcBpCo=
slotbusterscasino.com/ca/aweber/lp4/images/slot-spin.gif
200 OK 88 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/slot-spin.gif
IP
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /ca/aweber/lp4/images/slot-spin.gif HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/gif
Content-Length: 87599
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:54 GMT
ETag: "1562f-5c84428f944c7"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fl6qptoHcpVUVNqDom5vocCRZxV3iXOMWpKsHGYEsA8%2Fwq0YBPxl4n6pD6OD0gkDGfUeDbxezPANyoQXIEwBYMP4EYrwZSAyxOwoPHqhcAUeV9%2FEGHP%2FpVon0mP3JUUBqEMyu4NKSvc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab259f5b517-OSL
alt-svc: h2=":443"; ma=60
propeller-tracking.com/fv.js?t=90679
200 OK 53 kB URL HTTP/2 propeller-tracking.com/fv.js?t=90679
IP
Hash 797140ac157d85cee15de32bf5c586a9
9f8d8da00ec67ab8096d0d59b679e0633dca28b1
d386063b4d42104feb3732673afb1d7f699ce35a46204d3226db637465870f45
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 6a6e8482c13017a4d7d69920a2c9b5f6
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp4/images/arrow.png
200 OK 168 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/arrow.png
IP
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 73d1df0363a7baacf1e60797df2d6e33
10795450f4aa1a2e3499a13a9135fe5d77bbdb87
75b5e0cdab12a3f715f38d7d1d5a7bdbcdd5f96e3f6a293841152ce47d4249cb
GET /ca/aweber/lp4/images/arrow.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/css/style.css
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 168
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:49 GMT
ETag: "a8-5c84428b70ba2"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=77UyvI30r16azc0uzkNBPGB788IC%2F5VIhMfB7cN3xFN2mau%2Bh0Edn89B5NepcF37ex6vghjrZLei5R83cO0Z2WOcna%2BNUWmAbhigYwVJCtOA%2BqQCWmSFkzFECoVGckolFa9NzqynaVo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab308fcb51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/sounds/alert.mp3
206 Partial Content 8.8 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/sounds/alert.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /ca/aweber/lp4/sounds/alert.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html
HTTP/1.1 206 Partial Content
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: audio/mpeg
Content-Length: 8802
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:46:02 GMT
ETag: "2262-5c844297a4c11"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-8801/8802
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=il%2BxzgkHB%2B9A%2FiK2h4JB%2BME%2BCX%2B7lQICjxyjR0Ov%2BCRuK8tYaeHpjxuQSAFknzrSBzl3JTg5TYcYyKXZok%2F8WptPQQkMs1qHkh7xFNLliUgc0WzEjYnnA2RmIbmUjWPd7DgbFrjSeAQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78952ab3195db50b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/sounds/win.mp3
206 Partial Content 22 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/sounds/win.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /ca/aweber/lp4/sounds/win.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html
HTTP/1.1 206 Partial Content
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: audio/mpeg
Content-Length: 22067
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:46:04 GMT
ETag: "5633-5c84429906452"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-22066/22067
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wfOHeW7TEzERcJzcMiAo3TZb8sL4KzXc1qtsVFKl6hcdMcSazN7RR5%2Fa6Dh2AK8b7votCF2d4SmagBC8UORMK08jUX13sCtBPo7VsERsO1xndB%2BBXGy1o1OCkdd27J%2FaV2iie86qN6o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78952ab31ebc1c02-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp4/images/CA.png
200 OK 791 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp4/images/CA.png
IP
File type PNG image data, 50 x 40, 8-bit colormap, non-interlaced\012- data
Hash d6e276a0216279a5e6ed6ea3583598ce
c6fa45c097325f23865622f48a5b2b7fa23ce504
029d2390b0d9b4362f0d05184f666e13f23242ea96f471cf595ac9a37ca531e3
GET /ca/aweber/lp4/images/CA.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html?cid=w90rta1s6qoas0tl2di1ales&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%204&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=yr1VupqnmSfVKRTx08AxMYpyH0SZ1wz4xfDr5-Yr1vTHs6mkZgp_lBhpqQ4ZUMhqAnfQOjrs8ktFe2Af5WzZYzTPyrpgQIeQd03kmU7849sBSjMqp7frSzN6vETMGavy554DVAZUSpdQMEU0GqVvYN1ATTn39HiDAm3VEv4NRiTtpnA5tjifvZyAep4dF9vH4pqGlue9y7aw75aNXWbRLmVUHIXMa07v_treEc65qnu2E2d1jEHH5Vcm5YruSS5R1OISoKrdmh6c2vLMGB47tUP2dTlAAeeAMmukGOdEKx0WF6Rya8Hf1jRXcgsUdCdlj_lpIySO6u5-snoC8OYje4XNKV5SvLyUQorsH2FsIlby62UmTsBv5ZWGb3GuGdeJ&lptoken=165a73806898842e564b
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: image/png
Content-Length: 791
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:45:52 GMT
ETag: "317-5c84428d73604"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ci7QYA%2Bx%2BLvg%2Bk8RCt4ZsVsFUj9ANiYHR7BWD7PJvmK90pQADECd56%2BMSirnbMscCJZjs8AhWkklAISMCwbW%2BTlwErxbT6js1Z1LfQ0ZKjy1lRlHlayCw9vD9149%2BeZq9NTwUVkdwbQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab25801b512-OSL
alt-svc: h2=":443"; ma=60
unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=90679&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 406ccf9df86182f9bc4474bd6133d720
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=93925&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=93925&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=93925&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 607403506c43438b36a9167d457883b1
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=90679&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 7c9aeb5d85fd9cf87c7e6967b38901e4
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
slotbusterscasino.com/favicon.ico
404 Not Found 234 B URL HTTP/1.1 slotbusterscasino.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 55fcd22ed967efd518aaa9f2b4337c53
99a4d34ee36a544e0ef2a94c40b03e85c952a30f
9c8794945b2b60106896b6efee212376433f522a28603ff34576a49f0250062e
GET /favicon.ico HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp4/index.html
HTTP/1.1 404 Not Found
Date: Sat, 14 Jan 2023 08:57:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zW2JCSXkwpg4fDFnhKoBBkdSI822U9j3uCCzUdXx84oZIPexY590mzI5KlxEAQEg8wkoeIwYzwAwqUDNM3tRmhlDGbzIyOJEJhXBVKegWtVxnV5SLbNeFSrilkQdDqZhiu1CTqCiOUM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78952ab47ccdb517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp4%2Findex.html
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp4%2Findex.html
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp4%2Findex.html HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=21472b25105e431195553381d5973633; expires=Sun, 14 Jan 2024 08:57:54 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14859
Expires: Sat, 14 Jan 2023 13:05:34 GMT
Date: Sat, 14 Jan 2023 08:57:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14859
Expires: Sat, 14 Jan 2023 13:05:34 GMT
Date: Sat, 14 Jan 2023 08:57:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14859
Expires: Sat, 14 Jan 2023 13:05:34 GMT
Date: Sat, 14 Jan 2023 08:57:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14859
Expires: Sat, 14 Jan 2023 13:05:34 GMT
Date: Sat, 14 Jan 2023 08:57:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64ba27a2f0a3bc61bd325f1fb317b755
c65c58476b66cbb6269ba1d8412d270a0a003ae3
5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9135
x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAnoG6roAMFzgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RnAGo4OuBl5UjyOlUOJqu2nlFLHTOe0ETxokWtbI4frbpkNVnIBSew==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 01:41:40 GMT
age: 26175
etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4f04f55a9d261ddda8128b0bb721446
5e8df480a1650606937ee493660177bf09c49c14
3a357fbbd9f41d384a06e151a0daff50b345520d4816e70cc1b2c694949ce79f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4936
x-amzn-requestid: f1808de3-5712-4a65-8394-c1624668cdb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0pZFbIIAMFnvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3b-48c4b0cd36319a2634c0c5f0;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rudCuuUXfxE8aRq8-FFIwHE4tqeSWxYrd8uilWI-8DZSY9A-8EiLQQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:06 GMT
age: 40129
etag: "5e8df480a1650606937ee493660177bf09c49c14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1378f107c1996ade14a8fe7fd728072
f52d98d9a0d1d343a539689ea14acf99e148cf8c
4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9154
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAkCEN2IAMFuMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 04:21:52 GMT
age: 16563
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d24ea1f095f492934a1f1c63f5d8590c
dade37148c9b9a941f93a8535d8ddc5de3952623
2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8181
x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0paH-OIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AHjOmYxva5avyA3gt9DvYLas_B2ACimer5QRQOi919HDtSjnKq22lw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:36:45 GMT
age: 40870
etag: "dade37148c9b9a941f93a8535d8ddc5de3952623"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JRzc2Mcl4EasyH6_1kFh7sr-57f1HNDu-YN8YptDe_kcTET9x8P9LA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 14:03:21 GMT
age: 68074
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3c35722c1c8a0b7a17b5a48a352aa64
4a939794eb33d9fb1b2cc56ca92f683a7d28e407
073d355bfc201c7feb4af2d1fac623fe7803f081c28467fa72b363074b0446a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7437
x-amzn-requestid: 0efc1457-5919-4244-9837-6e75d03ef1d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAd0F0poAMF6PA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7abe-24df70ad7e1811a744a7c9de;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GHOHtSwiU15cNal3kPt8BOKwjvozSDeXZ2zxhuGQcBjN6FYXAdjMDw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 03:59:23 GMT
age: 17912
etag: "4a939794eb33d9fb1b2cc56ca92f683a7d28e407"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=2480
204 No Content 0 B URL HTTP/2 unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=2480
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbri?t=90679&bid=undefined&aid=undefined&tp=2480 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:56 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: c564acd0ac80053dc9fba4d0cdcd191f
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbri?t=93925&bid=undefined&aid=undefined&tp=2480
204 No Content 0 B URL HTTP/2 unphionetor.com/vbri?t=93925&bid=undefined&aid=undefined&tp=2480
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbri?t=93925&bid=undefined&aid=undefined&tp=2480 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:56 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 8dc1e0800cdf716052358ba6508657ff
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=2681
204 No Content 0 B URL HTTP/2 unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=2681
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbri?t=90679&bid=undefined&aid=undefined&tp=2681 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 08:57:56 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 1d78e56b9bfd5e5df73d19eaed6ca909
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=90679
200 OK 0 B URL HTTP/2 propeller-tracking.com/fv.js?t=90679
IP
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:53 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 1c2abab68660096135e4fb3c8d1072fb
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=90679
200 OK 0 B URL HTTP/2 propeller-tracking.com/fv.js?t=90679
IP
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 08:57:54 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: a84037c5eeab18d10e97bc7d75e70ade
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.134.39
93.184.220.29
23.33.119.27
0.0.0.0