slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
188.114.97.1200 OK 2.7 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash a867777b3e4a09967eb2413d895a12f4
b670f5e8696ec9b478ef207766ec2712cfe21ed8
59eddf3308e42b092572a0fc25326eea07ba15f6acd53c1760a4fe1775119134
GET /ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 14:49:57 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2FG94oSlXEtA0XUF%2F69AIo1%2B8bOqXYY5KgeGG3KoHUy1MDShfFMAngqJA%2FPL3ZX4nlop4XAnEyZ0qs8x96a6bgPbGZ%2FK1oRSh%2BhArw70dY65ATdrrwtYOrkh7ac%2Fmxt0PJue42UeXqI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fcef3e78291c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13929
Expires: Fri, 27 Jan 2023 03:04:47 GMT
Date: Thu, 26 Jan 2023 23:12:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15826
Expires: Fri, 27 Jan 2023 03:36:24 GMT
Date: Thu, 26 Jan 2023 23:12:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 22:42:56 GMT
content-type: application/json
age: 1782
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2675
Expires: Thu, 26 Jan 2023 23:57:13 GMT
Date: Thu, 26 Jan 2023 23:12:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gbiLOX8cFd0rjr3bzk3zfBw8fXDL+5+QLvIX9XPmy5rwtvHLoDHL96ZIAG0blgSC3+n0nLXGiA4=
x-amz-request-id: 743ZSMNKQKW1TTEQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 22:20:17 GMT
age: 3141
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 23:12:38 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp1/style.css
188.114.97.1200 OK 7.0 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/style.css
IP 188.114.97.1:0
File type CSV text\012- , ASCII text, with CRLF line terminators
Hash ff862bbe0360547373b7e8248687cced
5155e65bb77155d161e652e8ef6ce32964405a14
2687d4a4f4980c569e528017b3dc23a303aaeb296700cc05b7321a0bfe05ec66
GET /ca/aweber/lp1/style.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:38 GMT
Content-Type: text/css
Content-Length: 6972
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:20 GMT
ETag: "9ab2-5c83ff9a1017b-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fL4hxpoKzTEDW5v40awLurHTj1qClMXnwHFxqPu8hur6j672QzlK%2BJuIN5f4K8HsHUj08liaLE4oOC4YDqDGVmDs%2BG%2FLtjUxHv08y%2BxTGM3CY6kcgEOcnRBjPcz7EGw4jelRCptgJzA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fcef4099db1c0a-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp1/main_script.js
188.114.97.1200 OK 311 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/main_script.js
IP 188.114.97.1:0
File type ASCII text, with CRLF line terminators
Hash 1d7c74d5c34b4eb5ebfc8074cf35dc74
4be502b35ed9eb4b6e99cb203e207d8e4c0445c4
acea34dfebc08b7e37dcf8448b95d8a5495313c45bb04f5f5b4945939a076314
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp1/main_script.js HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:38 GMT
Content-Type: application/javascript
Content-Length: 311
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:20 GMT
ETag: "3d7-5c83ff9a8835c-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2fcAdeWI29DPWd6oSaUKvZLn0mjIbN5Jyvb5KiB99zTMAJJTZ42Ke4Ns9kJBBktFPQzYLgZoOoYsb8kSN5zxiO4fT%2FPnSiCA9Zy%2BBGKVT4%2F28aT5%2BUuIESflKxTLC9%2FZms14zzDwUJE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fcef40ab1ab509-OSL
alt-svc: h2=":443"; ma=60
code.jquery.com/jquery-2.2.4.min.js
69.16.175.42200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-2.2.4.min.js
IP 69.16.175.42:0
File type ASCII text, with very long lines (32065)
Hash 82885772205f23cd59e25a221521b059
96ed36f45544295f28df1ab251e7e38faceeff0e
8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215
GET /jquery-2.2.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 23:12:38 GMT
content-encoding: gzip
content-length: 29811
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-14e4a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1674774758.dop068.sk1.t,1674774758.cds208.sk1.hn,1674774758.cds214.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2fd3b5487710791cafa87110d681647a
6f3de59c79cf8f93c3312d917e9bb225a8bb25f9
35c24aa8f70e97185a0a18761f04b283cefecdce3abcd2261ccc6377077730c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35C24AA8F70E97185A0A18761F04B283CEFECDCE3ABCD2261CCC6377077730C5"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13338
Expires: Fri, 27 Jan 2023 02:54:56 GMT
Date: Thu, 26 Jan 2023 23:12:38 GMT
Connection: keep-alive
my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
IP 139.45.195.8:0
Hash 1d1522de413d0b27a43e7be4efeb0405
58c52eec6da93a26b374308e6189b8af139624f7
d9b7a5a22d87f08fbcb41ab49b3494cf35afa659a2b143800bfab1c62b07b193
GET /p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 23:12:38 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 73a7ff43ac3116b22f3a79efb2638533
2c150ac52c970516e76b94cf7e150031d4c567bc
13aaff0d8adef1d2fffa19b0d43691178dd517a219bece4e406275b37b44e4fb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:38 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 20:20:01 GMT
Expires: Wed, 01 Feb 2023 20:20:00 GMT
Etag: "2c150ac52c970516e76b94cf7e150031d4c567bc"
Cache-Control: max-age=507441,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fcef41797db515-OSL
slotbusterscasino.com/ca/aweber/lp1/5e67f0a828b4f_v.png
188.114.97.1200 OK 46 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a828b4f_v.png
IP 188.114.97.1:0
File type PNG image data, 277 x 558, 8-bit colormap, non-interlaced\012- data
Hash cf230c7057040526271ef730a4f2c538
0cd0c1e88e60ad9ce4a70df1ba80c3c8879cda01
5d2d98590f2a25919b105a484458d20e03298c4369d5f1be42b03e76799fb61c
GET /ca/aweber/lp1/5e67f0a828b4f_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 46237
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:19 GMT
ETag: "b49d-5c83ff9997f9b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AdrbscHaO8ul%2FfNBq3425Qc2C5U%2BAuqO3BsqlslJgkQ1Yz1rjtao8E5eQxFT6cRLPFy2HYFPbG%2BVZV5%2B%2FM6kG2D3ZNEj5GySiXZKDx%2F12sOHdxa8SfMS8oGUeQoJllArg%2FeuXdZUQ%2FQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef430df7b509-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp1/5e67f0a6ca01e_v.png
188.114.97.1200 OK 13 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a6ca01e_v.png
IP 188.114.97.1:0
File type PNG image data, 268 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 4e9495005c85cc7cfbda4466110e48a8
3f6879faa94d4c3a767d4350a3cac329e433854e
ea2f092d35c2e705e0018963035cd06b13c9dc20dd892c0c011ee0473a05cd1a
GET /ca/aweber/lp1/5e67f0a6ca01e_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 13376
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:18 GMT
ETag: "3440-5c83ff98693da"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0HuHk4S3grYhWbtVEde90t4ZGK8HGkcVB37adgHkFflHw2N7I3DQBdOljjsiw6Zn260eqoBWRx%2FCuCeU4WJ3HSAMLgyi8hM%2BBcRgswV%2FVJMlLe7EUOSTZ%2Fr92NiAjebpqLasYutp5%2F8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef430a6cb50f-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp1/5e67f0a85429d_v.png
188.114.97.1200 OK 27 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a85429d_v.png
IP 188.114.97.1:0
File type PNG image data, 274 x 417, 8-bit colormap, non-interlaced\012- data
Hash fb6e700a3ec0afc5fb1988945bc01626
bd928bf177a203ee50b790b106df75d751771107
d9a0805ff6c8dfa8a676d3b19684c465469e1265177ee9747ce88a497714fcd5
GET /ca/aweber/lp1/5e67f0a85429d_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 26774
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:21 GMT
ETag: "6896-5c83ff9af0b3c"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p6YoqP5%2BVTw3VrYKjks2714WzgBLP81nSc%2FAbao1ziiG5Css0jlDTi1VChBXSjgL%2F1evyimRe0ANje%2BCv18FCTSkOEzGYEU8dCoOJySO1PaSyLe%2BXhgciIUAD8zJYjqisPAazGMpstg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef430cf60afa-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 86a25231794bbfd3f276118a68cf20f4
ee94ff69230178aa9294348bfe638acce39bda73
8aa3357c026c54209085411a849df78cd14f155d4991330fbd6ad039f8262985
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8AA3357C026C54209085411A849DF78CD14F155D4991330FBD6AD039F8262985"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=102
Expires: Thu, 26 Jan 2023 23:14:21 GMT
Date: Thu, 26 Jan 2023 23:12:39 GMT
Connection: keep-alive
slotbusterscasino.com/ca/aweber/lp1/cashhc.png
188.114.97.1200 OK 32 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/cashhc.png
IP 188.114.97.1:0
File type PNG image data, 363 x 284, 8-bit/color RGBA, non-interlaced\012- data
Hash 6c52de939909399530fe68c55d5d6c92
4c7b5a3461347694c6f8076c6a3192896909426b
ef9623401696a4c11151defd6e88c23175f831447eab99b2b49ef9501884e0a6
GET /ca/aweber/lp1/cashhc.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 31615
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:20 GMT
ETag: "7b7f-5c83ff9abdebc"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=62N6XCWaK10sq2FueQKhS3UhVAhb3Q%2F2v5pMEaBKV8MwMujHxL7SfJo5U40A3qD0qcmw26QG1q2fkQZTG3dzToECS8nveHPVV0ZTj2axlsCyXxvs87mOJgtX%2BMst9EMOgu3qd2ZBvwo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef43098eb503-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp1/5e67f0a4b11b9_v.png
188.114.97.1200 OK 757 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a4b11b9_v.png
IP 188.114.97.1:0
File type PNG image data, 872 x 872, 8-bit/color RGBA, non-interlaced\012- data
Size 757 kB (756748 bytes)
Hash 3ef027366bb237fd9eb040ccad94198c
3e588f5915a38786a29e2e1b10cbf9df4e09004c
4836e6c4891318fd9b274ec2076d04d0f0df3460b9d7d051894c55fd5334c2e7
GET /ca/aweber/lp1/5e67f0a4b11b9_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html?cid=wpdkop6t7f1gvf6mii1va74i&camp_id=89b6588c-3883-4740-83ac-3945f4881a0c&campaign.name=Email%20Collection&lander.name=AWeber%20Lander%201%20RollerAds&trafficsource.name=RollerAds&feedid=&zoneId=creativeId=&cep=9yhIflzyRHhzB7HMl-H0nB4KTgBXWp2-4TaG-1mZYjg0eEpvVjp4eMcSbc2q7XJA1FhRko6_Sbn0aKiitsBaPWMFRT0DeordZY3rogdBtkm4xagEKpwpKoxNVdQ6xm0hUn1ELSAByXqmnZyztBeHI3Hw6-EzySKuIHKlR3Tz2V6NO20IlSqxD4bSB8uCc5DS2o1CjGF3nQUU3EYhWETFx5KtDY_Jun747tb7P-orqJek68CAMSuFgWNOYzD9G8orWzkTaCEw-8_wOdcGeQ4e9mHhYurKxd53QUQojn6NcB6xOdsUndo8c9HQ038V_BHy_yzF-Mzc0J0KaaF-dmcn7xKHDsE0JpCPYOMSLsdQAKa2UvU9aebNuknj1fOv01vHX3UtZ1ZfnItzaqqDKKEfgg&lptoken=16ec7436779c655841a2
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 756748
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:18 GMT
ETag: "b8c0c-5c83ff980e6ba"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OWSMo0izjHiHBeq4QPTIiZMjiniLJrpG0pmnzwRcV44mBzjUA%2BQ%2Bj%2BdWqV690m91O5lVu3cj94SigOwamJIbs5ZUri8SYR1Q3zV0updjV%2BzYyBwv3Sq1eMuBnXD9BeiJhp0TYQ2DIk8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef430bb01c0a-OSL
alt-svc: h2=":443"; ma=60
bigrourg.net/pfe/current/micro.tag.min.js?z=4470108&sw=/sw-check-permissions-caf4e.js
139.45.197.251200 OK 14 kB URL HTTP/1.1 bigrourg.net/pfe/current/micro.tag.min.js?z=4470108&sw=/sw-check-permissions-caf4e.js
IP 139.45.197.251:0
File type C source, ASCII text, with very long lines (41006), with no line terminators
Hash 0d0b91b20b84e166ef796a936c9cf6b5
8a4b888b7757b133e9f449de360ad8901ab739d1
d2eaa67b16bf5e9e34cf720a7cba71ab80088e895d787741c2025e609c9309a0
GET /pfe/current/micro.tag.min.js?z=4470108&sw=/sw-check-permissions-caf4e.js HTTP/1.1
Host: bigrourg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 23:12:38 GMT
Content-Type: application/javascript
Last-Modified: Thu, 26 Jan 2023 14:02:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63d28811-a02e"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
unphionetor.com/vctx?t=90679
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=90679
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=90679 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 26 Jan 2023 23:12:39 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 5c129b1f742e921dc81fd6503b6c09e0
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp1/5e67f0a6b4533_v.jpg
188.114.97.1200 OK 53 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a6b4533_v.jpg
IP 188.114.97.1:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Hash 88d7f03fd819c7aefcdb1074bb7990fa
882217405770ad036505e193943f34947fbafa48
c3a48888af05fd6567be6d09d13fa63fad286297bf9cd027718c7a7e355ad9ae
GET /ca/aweber/lp1/5e67f0a6b4533_v.jpg HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/style.css
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/jpeg
Content-Length: 53443
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:19 GMT
ETag: "d0c3-5c83ff992f7bb"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fTfxQTAtd0io5qHBwm3VIt4g%2BS%2FS7Y7WIw%2BXGfNV4KW%2FQSqeeg6ne22WKuhgZryefknLZwuWCHDhBR%2F22m4oyuKsJA94fKGIX1IbmTvlV6DcPotdauYzVTnPgFOIkqkBvfH8ydBDJ8s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef434c110b39-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 22:49:01 GMT
age: 1418
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp1/sound.mp3
188.114.97.1206 Partial Content 49 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/sound.mp3
IP 188.114.97.1:0
File type Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Hash 277c43fdefb88a30fe36f33a148600f0
2bc68cf98b4b4902bc509c2b53af4baa7efe44d9
9eaa1694cf0be56df45f5424b8b314d45ed55e9ac372e5f0b05bf586e5d4552c
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp1/sound.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html
HTTP/1.1 206 Partial Content
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: audio/mpeg
Content-Length: 48945
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:19 GMT
ETag: "bf31-5c83ff99cbbbb"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-48944/48945
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7sebOcl2er%2FjAA0qhr%2F%2FDGr%2BL%2FpBfDp3eIe6vtonA0uioEmw0WbxAJydrsKlW%2FqtGcM3nKtRuZ3IqNAwqsk8N%2B1R3EiAe9%2BD8hW%2FVNQlc9UJ84O3avilN0%2BvahEiDQDqNfosgCYenPA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fcef43eb43b50f-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp1/coin.mp3
188.114.97.1206 Partial Content 22 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/coin.mp3
IP 188.114.97.1:0
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp1/coin.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html
HTTP/1.1 206 Partial Content
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: audio/mpeg
Content-Length: 22067
Connection: keep-alive
Last-Modified: Fri, 06 Aug 2021 19:29:55 GMT
ETag: "5633-5c8e90f728a62"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-22066/22067
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W9U48fHm9%2B3w9jfCWWnIcAVfA3qbMI1mfmgtkzo9Hs%2BY0%2FlxJX6wyR90Cbaf6BzXrzyyGpc8YGuXpiN71kTaAOZRtFLjvaYh0JDR9JgPKcrD3DkBx%2B6WO1M1K0b91zT00pyz3UWGsXg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fcef43ed870afa-OSL
alt-svc: h2=":443"; ma=60
propeller-tracking.com/fv.js?t=90679
139.45.197.240200 OK 9.6 kB URL HTTP/2 propeller-tracking.com/fv.js?t=90679
IP 139.45.197.240:0
Hash ca0c1bfa9f0a5567a7d7fc41f4dc2924
30343969f20f9f6fcff698d4767b2c9223130dc1
447e4ee6cf3b48ba466d8bb03791f93d1be2b5e36f1bb93d35d893ce5b2e0ecc
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 23:12:38 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 9cf838fcbfd6f62b39cae6239ed08b83
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp1/5e67f0a6ef344_v.png
188.114.97.1200 OK 6.5 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a6ef344_v.png
IP 188.114.97.1:0
File type PNG image data, 185 x 183, 8-bit colormap, non-interlaced\012- data
Hash 7816622da7fe6bb9b083251c85101dd1
eaa0af79fe084abb6b208d7694b04cf3784e80d0
1da0f0bfc01d6e5ed9d6dfb1ea07c9afb9100cf1a2be7879672059a7dd35c437
GET /ca/aweber/lp1/5e67f0a6ef344_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/style.css
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 6484
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:18 GMT
ETag: "1954-5c83ff98981da"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o9Oxa1USqk80IECR%2Fgq2Lix7Ipn7DidhlTHqPehCVoSeHc8GalAfTLWFS8k%2BrTODm%2BYccfD9PLxodRZfi%2FaHiAwkYzVnEn55jr%2BwN3mRdrIQAGtFAzeRrBIBk8qrLVacmLn7oZrm4Nk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef445cc70b39-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp1/coin.mp3
188.114.97.1206 Partial Content 22 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/coin.mp3
IP 188.114.97.1:0
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp1/coin.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/index2.html
HTTP/1.1 206 Partial Content
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: audio/mpeg
Content-Length: 22067
Connection: keep-alive
Last-Modified: Fri, 06 Aug 2021 19:29:55 GMT
ETag: "5633-5c8e90f728a62"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Content-Range: bytes 0-22066/22067
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l2dKu%2F3tsJH3Jzyd2mxzldvwjtCVtsq5P6OvyJmQaqrNFnI6R9w3n0Zq2nmtHz9ATUxATH%2F7qqpLqsHv5yu3RfXd%2BfnXqAEdsAQxKPdYYdosrhLrNKJGnL6CEn%2FAz0NS1YdNen%2FTYq0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fcef43fa3db503-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5b207d1a3bf8781b793c3b99c462a39a
2868e50363dea047d14af040496d333814a21bd7
0d3eed17073625137336be6264353a94285b274f87fa44fd69c5ff0ca2e44c5c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D3EED17073625137336BE6264353A94285B274F87FA44FD69C5FF0CA2E44C5C"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5156
Expires: Fri, 27 Jan 2023 00:38:35 GMT
Date: Thu, 26 Jan 2023 23:12:39 GMT
Connection: keep-alive
slotbusterscasino.com/ca/aweber/lp1/5e67f0a655940_v.png
188.114.97.1200 OK 77 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp1/5e67f0a655940_v.png
IP 188.114.97.1:0
File type PNG image data, 857 x 204, 8-bit/color RGBA, non-interlaced\012- data
Hash 22d35d6ee41512539e529961fd51f26b
fc8a8a521b4bbbb50871f7439effa916fa1e5a2b
ea18bede2d858dc8467bdc98c7fc9d751d1e1309476a5d5c81f0db96b66c505d
GET /ca/aweber/lp1/5e67f0a655940_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp1/style.css
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 23:12:39 GMT
Content-Type: image/png
Content-Length: 76995
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 09:46:19 GMT
ETag: "12cc3-5c83ff99633db"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G3MQMBU8TxiOPwZF4j6H%2Bk0AMVpVcDWMgYmCfaELeAV5E1bJN7f7IjK6Npvg3tqZ3r56wS8mpEi9DykuyvruX%2BDip5gUxWsJgig1UYV7LC8zeBHsEOic%2Fhf7iYKyKcvSvp7KPa1ao9A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fcef43decfb509-OSL
alt-svc: h2=":443"; ma=60
bigrourg.net/zone?&pub=0&zone_id=4470108&is_mobile=false&domain=slotbusterscasino.com&var=&ymid=&var_3=&dsig=&action=prerequest
139.45.197.251200 OK 0 B URL HTTP/2 bigrourg.net/zone?&pub=0&zone_id=4470108&is_mobile=false&domain=slotbusterscasino.com&var=&ymid=&var_3=&dsig=&action=prerequest
IP 139.45.197.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4470108&is_mobile=false&domain=slotbusterscasino.com&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: bigrourg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 23:12:39 GMT
content-length: 0
x-trace-id: ac5d6f0c1a423aeac5598f8e91ff7250
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c398b6b39d11d25b8ae9bc5cd94a1c98
640aa8c399ced71d0c2a9f5a90fbaf091b01d642
a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10261
Expires: Fri, 27 Jan 2023 02:03:40 GMT
Date: Thu, 26 Jan 2023 23:12:39 GMT
Connection: keep-alive
unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=90679&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 26 Jan 2023 23:12:39 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 748265467efb4eec24ae2e5f9d5a51fc
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp1%2Findex2.html
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp1%2Findex2.html
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp1%2Findex2.html HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 23:12:39 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=60776d1bd8ca4b7583470ae373a8f929; expires=Fri, 26 Jan 2024 23:12:39 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.149.149.164101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.149.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JhSgQH05He7NWTtGuy7fsg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RY7nOfVn/Bq/Deq0GEek1BDJbjw=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10521
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Thu, 26 Jan 2023 23:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10521
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Thu, 26 Jan 2023 23:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3394
Expires: Fri, 27 Jan 2023 00:09:14 GMT
Date: Thu, 26 Jan 2023 23:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3394
Expires: Fri, 27 Jan 2023 00:09:14 GMT
Date: Thu, 26 Jan 2023 23:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3394
Expires: Fri, 27 Jan 2023 00:09:14 GMT
Date: Thu, 26 Jan 2023 23:12:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:35:59 GMT
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
age: 16601
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5de6b54196befa95e9291a051c645d0
e3100707a4e9b1d5c30223d31f58cd6ee8ad010b
5bcc3dd7011df4e17d7ef86d892fedeca14b0d0eabbe782fecf35c9a82b25e40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7804
x-amzn-requestid: f2bfdd54-e6bf-449f-9731-087e4e848e2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUmhfF4MoAMFquw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1b7a2-3a06fc0b3cd076b23c947d99;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 23:13:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CVD5IG2xp8meHr_xgY1KgY8PPejuUnKuXPqDpbd6NQv6U1kKVvK0Vg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 08:45:17 GMT
age: 52043
etag: "e3100707a4e9b1d5c30223d31f58cd6ee8ad010b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1695371c247eedad65b4cac82f01215d
50510052f0e22e23f747c761d57cdf72910ac533
aadde426229f04f6a489b87d6949a485b19d4fd035cb244b6094549efc08013f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6394
x-amzn-requestid: 215e6698-30e7-45b0-8f8f-96a05c5f6992
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOirZG1doAMFW_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf4b15-3e1bec6759816cf84467339b;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 03:05:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tG3T0HguJWldw-LJ9SJSuuUT4ubLCWViwQFB-dZhNfEswMEexb7Tcw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 04:23:28 GMT
age: 67752
etag: "50510052f0e22e23f747c761d57cdf72910ac533"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 262b43386e404cb3d320c47c4cf792c1
87f304f8583fe6b6e942a9dbcb5efb5ee94987f2
ca0f72005920b2b2f49c387314540f3cd2f3d7808f0365dfb1c491500e8a8714
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8065
x-amzn-requestid: 4a4a6d4c-9c4b-418d-be96-8a0d1de4828a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYVuHZsoAMFmWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca0757-74c21aa22d11c4240019a4b3;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ep_QyiLEIxubEC9RgbxdlAVYnQ65fxR22squ9p-9aXfpUVyah_oSow==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:43 GMT
age: 5097
etag: "87f304f8583fe6b6e942a9dbcb5efb5ee94987f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d91ae98-1f78-4bbd-98ab-6e6d92c7fef2.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d91ae98-1f78-4bbd-98ab-6e6d92c7fef2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7364957de1b4c82a923bd947f0cce750
d8aa55b64a65757e043b4b1b63efd93c8261d275
f1f7059968d08adfa1c775c906ecb6e5b752210af0bcdcebfa77c2ba6f15bbf4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d91ae98-1f78-4bbd-98ab-6e6d92c7fef2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7573
x-amzn-requestid: 2946b91b-1d7e-4eba-966d-600ae368cd3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzVxGw1oAMF-xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce328b-04037751257e13ca156eee8d;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:08:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4TidB2H164ziAxKhEORFw4BBF0FB2pkkwNq3iMQfS4t7yObXCA59Pw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 14:49:11 GMT
age: 30209
etag: "d8aa55b64a65757e043b4b1b63efd93c8261d275"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bad60daf652c598a06510ff955137b69
235bf4642e726bb6a303fe1b69238e2e973414cb
d655c5ac17274a30a89c31674e14dc9c1b6bc39bfff94db1c9ff0d8006bb673b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12508
x-amzn-requestid: 68787c38-72fe-4d8a-9521-aeb9efa56b05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYWyGIHoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca075e-1ee9488d2dd0437728beac94;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0lNizMpeWOcOlokaaW-WB7LXRReZwaFfPE38C-SmsS_PbxJPhcRYfw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 15:21:30 GMT
age: 28270
etag: "235bf4642e726bb6a303fe1b69238e2e973414cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=3184
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=3184
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbri?t=90679&bid=undefined&aid=undefined&tp=3184 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 26 Jan 2023 23:12:41 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 9ecde4576a6c093c35975c16bd113b6d
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2