slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
200 OK 5.9 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1557), with CRLF line terminators
Hash 3694965be86aabdf1ccab9fc5e854a1a
c521d7a2b5f3468604829824cf1d5b84142efedf
615a9beb8fe5df7b870adeea5e002656662a2ee975435aee5a294dea8c0cf615
GET /ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 07 Mar 2022 10:41:01 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2FxhYQ1uNSnhqtkiBAfO76yrIVrn5kEh8sRX6%2F5w%2FGWyYef1o7bavFtMptu2QmrvsPMIgjmEUfFUNFHgOKYgH4x7TbeVrTZcGU0NcmlpcwoDeyUrmXG6NfAFkhdZ4Kx2WPdzjSxdYwg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197305885ab50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3961
Expires: Tue, 29 Nov 2022 08:03:29 GMT
Date: Tue, 29 Nov 2022 06:57:28 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6543
Cache-Control: max-age=105776
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:57:28 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 12:20:24 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 06:19:36 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2272
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16669
Expires: Tue, 29 Nov 2022 11:35:17 GMT
Date: Tue, 29 Nov 2022 06:57:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rk8420aHGTvyen5i9aIqlNFDbqqaa2BxzCGl1YGE+MVBHuhRKkbJ0bnyfrxYVCPcDKFmk9PDnts=
x-amz-request-id: M8ATQWX3M0TK4KK4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 06:42:24 GMT
age: 904
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:57:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8e8c89c17e336cca7a61b55895462e74
e27f9646f415cb235ed8eef9de30639dd355fad1
3cf03691d11e79366511035adff2fabce3d362860e670f4de949794d3b6268ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF03691D11E79366511035ADFF2FABCE3D362860E670F4DE949794D3B6268BA"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12888
Expires: Tue, 29 Nov 2022 10:32:16 GMT
Date: Tue, 29 Nov 2022 06:57:28 GMT
Connection: keep-alive
slotbusterscasino.com/ca/aweber/lp2/5e4c60d92ac63_v.css
200 OK 1.6 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60d92ac63_v.css
IP
File type ASCII text, with very long lines (7048)
Hash 74db55934849aee470cf0435186a054e
4a9e7fded8c13eb54e9c7d663ae6a99042b1a623
e263b9daec7ced107993d0fd0204a5a9d4913471a2d0a120018ec8ae6486cf55
GET /ca/aweber/lp2/5e4c60d92ac63_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 1645
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:41 GMT
ETag: "1c28-5c7be012fd222-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1AOTC8YLKdHCyEO7PoAvCRg%2BaBagI4pEacoPu4T4jM8jjBb9b7eUZoLagV9IS%2F57otmmdV3ya3PuUiC%2BFSa%2FZmixPWh7g3IXkgzpH4YjB0yJzD7J56DnJ6HlGnAMmKuDIcBKwkiZ5bs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197307b8e0b51b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60d91d0a5_v.css
200 OK 0 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60d91d0a5_v.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ca/aweber/lp2/5e4c60d91d0a5_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 0
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:38 GMT
ETag: "0-5c7be0104f95e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YYN2aOGiH6aWhDMDoRPK6Pq6FkqiIA0TOitT5cyUXQYkRLKpu5%2Fh72OJr9cR%2BekCZxDDZftANQBkdqCCAnH%2FLoel%2F8lw%2F2skhb3N1%2Fs5qKnaF1pPDYtYOk7iOW%2FkNnVS6qU33SJdutw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77197307cba5b51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60dac2620_v.css
200 OK 67 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60dac2620_v.css
IP
Hash 63b00463b943556bac81bdcfc377dfc3
7f51e39070eb10fa13181a72f39275cf3f549f9b
155b548ccf8efe104619bd351c8ee01421b5e70c40e2b4ad3e5b43fb913f9ead
GET /ca/aweber/lp2/5e4c60dac2620_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 67
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:42 GMT
ETag: "4b-5c7be0149c2c5-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nqank9ZLchD%2BjDuXzJSf4%2BEHGnJAIhAW3ezwX8zNF%2Fvmd82me9jTBhLjIB%2BygVugLmUyS91IKIKU9HYfL1whdNkYYbNkuKIM5oAslu1N6fK4xnRHmlIngpwmElDJXJgMixSRmPg8SAQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197307ca861c02-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60e1aa979_v.css
200 OK 3.1 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60e1aa979_v.css
IP
File type ASCII text, with very long lines (557)
Hash 6ae867c4714957cb49f27869629aafd4
48e2f8f6722aef57038fc0da879b8ad290c8e74b
e2f249bc52db965a026bf0f02ffd4815b834de0c584b9a8bb2f8df651d04d928
GET /ca/aweber/lp2/5e4c60e1aa979_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 3073
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:41 GMT
ETag: "3cff-5c7be0132c023-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rVX68zvCoR5B%2BQ1EvkcHQ5N9myK2b43vSpM4n%2Bg4bmr0PXlYhQ7PEgxi8KJ3ijQZxVBOAHmRbQCsC%2BH5nt10tnD%2FnOehs%2FvSgAfrdi2R5YORuNmDGvF8wyLMxDdri2IEXFRgS2%2Bgz9U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197307bf38b506-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60db281d8_v.css
200 OK 7.1 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60db281d8_v.css
IP
File type ASCII text, with very long lines (31320)
Hash 1974a679d99199a1aa650ce29a8fa9a5
60e8aa83ef50ef9d14504ac4fb8182eea7a70d33
a0813b88750cb9f2fc6f15ec13ff6ce8f3fea38118d379378f7cae1fd53d99a0
GET /ca/aweber/lp2/5e4c60db281d8_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 7104
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:38 GMT
ETag: "7afb-5c7be010b331f-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tAibs4ipIXgKsvfGZCMdQY2AIUy%2BF6aSoNhrGmJZ2Ht6EGW3W61i3I7KKNMWd1D36KoMCxp83osa2JnOGqWwxCYpmx5A11sGbFTgCFW24e4OH%2FfJIh28xWY2%2FA9YNiEFddS%2FWswu0%2BU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197307bb9cb51d-OSL
alt-svc: h2=":443"; ma=60
ocsp.sectigo.com/
200 OK 471 B IP
Hash 0379df9b5cab177bf437ac41f2268be4
56db4d2ed92e1cbd13a3950ca0cc72969fbcc354
155885d99d8a1e961d92f649f6838d9bd7039c019930d76ad170a3c5b39e27bc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 08:20:01 GMT
Expires: Sun, 04 Dec 2022 08:20:00 GMT
Etag: "56db4d2ed92e1cbd13a3950ca0cc72969fbcc354"
Cache-Control: max-age=436351,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771973084963b4f4-OSL
slotbusterscasino.com/ca/aweber/lp2/5e4c60da1215a_v.css
200 OK 20 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60da1215a_v.css
IP
File type ASCII text, with very long lines (65371)
Hash d66dd0ebfa6897fc864f17350f82ee71
eb486805413ce6e2d51d6b30ec9af018eebe4f44
56a3d9e5bf910037b74e05de648055af502d787c277a3370eed97164ee88443e
GET /ca/aweber/lp2/5e4c60da1215a_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 19802
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:40 GMT
ETag: "1db52-5c7be0129f622-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uGmUy6mgaDb%2FIjRHsiPW7Ix975Yw4j7ro%2Fn3h3oDc%2B3fb0rR9DIDIF%2FV5aX2tzHZm4d9lvRyB%2FL4PbOeS8ZmHFfP31u%2FEZevHBq5Dg3m%2BQ9s6YBvIxIXBTwZuM8RqPCbRdocuLIoVco%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197307ba54b50b-OSL
alt-svc: h2=":443"; ma=60
my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
IP
Hash 1d1522de413d0b27a43e7be4efeb0405
58c52eec6da93a26b374308e6189b8af139624f7
d9b7a5a22d87f08fbcb41ab49b3494cf35afa659a2b143800bfab1c62b07b193
GET /p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:57:28 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp2/5e4c60e44796a_v.css
200 OK 422 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60e44796a_v.css
IP
Hash 9f82ea0a829c5849f628e22d7c8b3187
52102e2fb153ccd5a927da49550330fe7dea77a9
000067a7ed787deab36f39be14e1b3d3d0067d2b00c945ffe0213cf4779a5b35
GET /ca/aweber/lp2/5e4c60e44796a_v.css HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/css
Content-Length: 422
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:39 GMT
ETag: "406-5c7be01157420-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qFHBumZ%2BPri1mgG8shXj4nEeTPZR782A6owXJ5xOfnqcfcNhhoAB%2BOFLTMeJ9AjxauGR1jpZmipyvewR9szhA3TiXpOUyfAhSqLfpZ17A%2B72TltzhBkCYT5sKKDTV3IasB8jKZEqox0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77197308798cb51b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60df17883_v.js
200 OK 37 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60df17883_v.js
IP
File type ASCII text, with very long lines (526), with CRLF line terminators
Hash 07c8dc9a8076ba9c70f3c8ffa73bff8c
221e08e6d78472603eb0032aefc58bcf00e099a2
284872944d136c874993f339141624dd957270274f60d1271049b1f8c6bc64f4
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/5e4c60df17883_v.js HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: application/javascript
Content-Length: 36952
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:37 GMT
ETag: "25372-5c7be00ff3c9d-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vj780vsO2UtQPL1HgdbSGwNKgdhmfbpNpMV3tk4fG08wb%2BR6LWWverJqZzQE%2B9eeOQ%2B8MS2sU3hGebIOxM5l3%2BwHkvtiPETb6oJwDboMfEi7RORrwQ8%2BZCRi7qp2zra1y7vr3%2BB9z0A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 771973087c3cb51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60dce6a19_v.js
200 OK 15 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60dce6a19_v.js
IP
File type ASCII text, with very long lines (57791), with CRLF line terminators
Hash 51be772add27a10203d8286e2ce21713
f0e7618a8ccc65d9c8a7381eb9fef9e0182f3c61
d600b452bb0a5034afb83cacb05af8e9be275357c7780fadaf9e22fc0e9a0e71
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/5e4c60dce6a19_v.js HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: application/javascript
Content-Length: 15413
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:42 GMT
ETag: "e2b5-5c7be013f4344-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d68b5sDMbmF3ckKFHP50mugGnNddjTC5aeyar4GvACYndazvInwWFKEHuWNWl9fxpUXI9pmASSV%2BpsJVEHfSW2YoJabByiOEJ4c7Q2jD2XS63qsC1h0aGPtevWVMSpJWdUgG4heU6zs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 771973088b271c02-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 614da8f925b88a5a7b662acd4eadffc2
024547cda47a0ae4b4fd9aa1b3637e1b4fcce46f
85177a491b51d70649cd6a7d6bc40f71bafd26f63ad522650f777fa733ebe498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85177A491B51D70649CD6A7D6BC40F71BAFD26F63AD522650F777FA733EBE498"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1911
Expires: Tue, 29 Nov 2022 07:29:19 GMT
Date: Tue, 29 Nov 2022 06:57:28 GMT
Connection: keep-alive
bigrourg.net/pfe/current/micro.tag.min.js?z=4470108&sw=/sw-check-permissions-caf4e.js
200 OK 27 kB URL HTTP/1.1 bigrourg.net/pfe/current/micro.tag.min.js?z=4470108&sw=/sw-check-permissions-caf4e.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 44702f11a7b61f534fecc7809465cde9
418254b9eb4bbc21b9d839e6db5b56bc474a62dd
4b8b8b52ce1028e5877b71ac5b3e93867207d3030f31ee9deaec2eda11e4263c
GET /pfe/current/micro.tag.min.js?z=4470108&sw=/sw-check-permissions-caf4e.js HTTP/1.1
Host: bigrourg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: application/javascript
Last-Modified: Thu, 24 Nov 2022 15:53:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"637f9392-12fca"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
slotbusterscasino.com/ca/aweber/lp2/5e4c60dd8206d_v.png
200 OK 6.5 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60dd8206d_v.png
IP
File type PNG image data, 200 x 60, 8-bit colormap, non-interlaced\012- data
Hash cc3640f8d9c0e62d481db7d02a4eef7d
4122480d540224ecee27a45ed6851004c6b46a04
2bf523c5c856b0d43878370f7b7c1b9d586689141806fae6db83b986912b26e0
GET /ca/aweber/lp2/5e4c60dd8206d_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 6460
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:41 GMT
ETag: "193c-5c7be01391923"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F0U3pUGIo3r%2FdxAGeI9%2BzoqjquNG05657qe58EcUIGCuWsFNGRfjt6BP2fMRPPW41HCYtVY0PI6KvpAXpcDymayUbLVsV33Q6qMWnqb9W8APbnZ7VXdgAiLIGUicXwyXxYDAA4c3%2BlU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7719730928d8b506-OSL
alt-svc: h2=":443"; ma=60
unphionetor.com/vctx?t=90679
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=90679
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=90679 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 29 Nov 2022 06:57:28 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: d6cbeb71377e1905eafda9eb3f4721db
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp2/download.png
200 OK 4.4 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/download.png
IP
File type PNG image data, 330 x 153, 8-bit colormap, non-interlaced\012- data
Hash 2a30989f45d9fb77ae8ea63ab7edfd01
550e4499e96d46819d077d8686cc1fc3391aa271
81540fe6f970e646c60cc2891b048e019b3d3bc94f293ccce40a54c57cdf8f74
GET /ca/aweber/lp2/download.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 4447
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:39 GMT
ETag: "115f-5c7be01111ebf"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sbUAsSE%2BQzUS16x2DEjngp3CNTv%2F1f9S7wh7jU6l5sLflOYvDMql6VALdEnJ3j52YI9piJNu2BvfSwz72ewfKI4kfn4Pt8nh14dKQjACn4cZfnOSnWyZ0gQUQpRX0s82a%2BLxQbTdpK8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771973092a2ab51b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60e2e3d2d_v.png
200 OK 95 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60e2e3d2d_v.png
IP
File type PNG image data, 558 x 322, 8-bit colormap, non-interlaced\012- data
Hash 802e9223fa26fae356596c079e4e2474
a46851b3a70409f2f64e228de8c97235384910a2
87ad93db364db9ed4d0eb9cc838dd002d126f4c8b9dfaafee846096896d3be3a
GET /ca/aweber/lp2/5e4c60e2e3d2d_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 95050
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:42 GMT
ETag: "1734a-5c7be01427f64"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FUj6MPdVFHvIP3MsibLjYj%2BW3RR4jLT6V60ZgnAgGhn3sbeXJtLI%2FgSbV%2FKXoafNrHjOUvJ04tUA%2BWaS5AReN2XjXWSAjT3f%2Bhr2hoV3Zs86QHmhszZSaeT2Z2ry5FAy2UztDfbwiLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771973093cdab51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60de5bb9f_v.png
200 OK 51 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60de5bb9f_v.png
IP
File type PNG image data, 560 x 528, 8-bit colormap, non-interlaced\012- data
Hash 5e9a658d01128cbcf30ad2a905906f5b
70ef0f9e53f0076cac95db60614566245a6a6dd8
89659abae3d30df93fb9bf7515a14aaaa4da2f56f32156bcf0fad8da59cf6327
GET /ca/aweber/lp2/5e4c60de5bb9f_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 50614
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:38 GMT
ETag: "c5b6-5c7be0100b39d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mMHzwL7zKmorQIy9Ydy5eFt6s0n2V2PXUgHKNb%2BdaULiOeKOzzCOOflxm39lEQB5yEfKEbqH1A%2FJP7ReM7NC%2FqnHs4PJCHamJwDxGB6OBR9o%2BfFjXym4Ch86XuMcW8U3Krlo8SYVIo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771973092b8cb50b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60e3b2101_v.png
200 OK 76 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60e3b2101_v.png
IP
File type PNG image data, 558 x 322, 8-bit colormap, non-interlaced\012- data
Hash 2f47d4bd093d6511cf76a449fb672dfc
c2482408a7d5ec6d2ce9e3415832b16fe8e2a7e0
7fed6a9fb598bcea573009c0be86610ce24dd877f97d415ffe7ceed3b44a686e
GET /ca/aweber/lp2/5e4c60e3b2101_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 76234
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:38 GMT
ETag: "129ca-5c7be01099cde"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=35Z7K%2F1ZHj7%2Fg40328dzHR%2FJElfyu5L5KTAmkE5v0RAHWYtJpET0W0KfwH773U%2FQWpd4cs72XjPJUiGbdlnIbxlHfQ7WSLE%2FTfciefbiUcNm0rBqq33sbuDaSt8uZ7kGg1R%2FlKGZGO0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771973092ccfb51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60e233c94_v.png
200 OK 85 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60e233c94_v.png
IP
File type PNG image data, 558 x 322, 8-bit colormap, non-interlaced\012- data
Hash 55e9f817e0ef97c590a4c229e0529854
d0c61dd6fa85e390b427bf3e3908ca23671e2ad2
a58a58c915d407390d40a48eb719bd3860466ab47c533250dd47f6938b2551e6
GET /ca/aweber/lp2/5e4c60e233c94_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 85345
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:39 GMT
ETag: "14d61-5c7be011c88a0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MapFg3NdLe%2BtSqBkDy3ldYUhmJ73DSny2pQ02nAGUJUqTssooYx9sR8XwSjRrcJIy%2F8Lw4LeATx%2Ft1L0j4tpV6JIdmr6s7yyw%2FQq%2FAFtqicgK2GZcSO5LRBZAXBLfGZvcfAbxhC3wbc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771973094bc71c02-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v16/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v16/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15056, version 1.0\012- data
Hash 0edb76284a7a0f8db4665b560ee2b48f
02496387a5f7bf7b79df52c7b76ece4ebc7a0710
74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b
GET /s/opensans/v16/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:41:29 GMT
expires: Fri, 24 Nov 2023 21:41:29 GMT
cache-control: public, max-age=31536000
age: 378959
last-modified: Mon, 25 Mar 2019 20:12:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp2/5e4c60dfd9d98_v.png
200 OK 2.1 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60dfd9d98_v.png
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 72cd866136817a6f7c16d204a4c0331d
1e3078ff441240bc9c24b074818167adf4f6eb4e
ad82010277c5d9b77233c6b068d278cdf4e15d702d57c39cf6900a494f0ee784
GET /ca/aweber/lp2/5e4c60dfd9d98_v.png HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/5e4c60e1aa979_v.css
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/png
Content-Length: 2117
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:41 GMT
ETag: "845-5c7be013c3604"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GxTwbbl2wWiQv2kx9MMOsUE7UjcUIlQWUEVczzGwyz4OBcw1JO6Pi6X22GWUr7w7ovL3Wd6QfShk%2BFNT2%2BQ5EusW7JD8ko59YziHkePEAD1xSho6vmKOJF2JmC2lp9BdcYBVhfwmti0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77197309eac4b51b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/5e4c60dba3171_v.jpg
200 OK 35 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/5e4c60dba3171_v.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1300x442, components 3\012- data
Hash c89b0c713601891480a7629c4ff15236
1efa87c2fc4d483df5347fbe4f71b2ae3dd710b9
dfd7a5590f7cd486818c55098a5a3d391a3e5a82323625e2dd17b7a7dcdd125e
GET /ca/aweber/lp2/5e4c60dba3171_v.jpg HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/5e4c60e1aa979_v.css
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: image/jpeg
Content-Length: 34833
Connection: keep-alive
Last-Modified: Thu, 22 Jul 2021 22:42:43 GMT
ETag: "8811-5c7be014cef46"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1UiUlVquPfYP%2FqjUaIjS2sD8OWA2n9dHLsoSXNwvpwiFebUnf7n1Mt4jmc5pHqUjfGd0%2BEfAe1uEv%2BlSfozzAYss%2BMt%2FMjOpHojkGqKxIpOYU6LHNUGWeDT6BvKU%2FqXkvKocTEbUP4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77197309e97bb506-OSL
alt-svc: h2=":443"; ma=60
propeller-tracking.com/fv.js?t=90679
200 OK 29 kB URL HTTP/2 propeller-tracking.com/fv.js?t=90679
IP
Hash 0e8ac741ad9ba0cd9ad370e55052e732
c7d62707709dc544e585e8ff14feaaee05407543
a8e51b449dd6fe9da72f5f5624dc3dadf176cf0e662364d41a61578ccd678214
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:57:28 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 3bfeab1003363ecc8a5d90810939f31c
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp2/coin.mp3
206 Partial Content 22 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/coin.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/coin.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 22067
Connection: keep-alive
Last-Modified: Fri, 06 Aug 2021 19:34:24 GMT
ETag: "5633-5c8e91f7aab0d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-22066/22067
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5LFgAJw%2FVfdkWL6%2FbTHbPtaYc0ePSbaw%2Fd8if699aWIM0Vj1zUECUAGBAmwhtkBer4c3pksbX477IOKl8RCLDFXerRQ1W4NJrBNmMbC9MI4sDemcwfQaLoIJmTD6rEFc2Vr05SPCG00%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730a0d9bb51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/alert.mp3
206 Partial Content 8.8 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/alert.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/alert.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 8802
Connection: keep-alive
Last-Modified: Fri, 06 Aug 2021 19:34:21 GMT
ETag: "2262-5c8e91f489e8b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-8801/8802
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7fz7se2T7xEdBsr7GV4aPnrcErF0s%2F373KguMhE8T2xOA7H4wsgXl5SjsFewrKpdXT1zgp7RJ7XcE95CUZex1MQSFrsYNImIRUsCrsTa8%2Bxla9qGclQyMwvmsQf5aupf9OJdQELtvrg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730a0c51b50b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/coin.mp3
206 Partial Content 22 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/coin.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/coin.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 22067
Connection: keep-alive
Last-Modified: Fri, 06 Aug 2021 19:34:24 GMT
ETag: "5633-5c8e91f7aab0d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Content-Range: bytes 0-22066/22067
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qAEQ0fkL%2B%2FBuLavTBvwNvFJg58TznPY9kkARheUnzMvckXxNFe041neGjIZVkdJMI5lCN%2F4iLBBVfjqb2RknLOgSTUYUPr6TUXr25TFbVOAGZGTQR0NoSu8yyA0Mv0uoTjRyTqPt820%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730a9b60b51b-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
670501afa3bb667817ee-24c106882da8d4393b1faf82472afa82.ssl.cf5.rackcdn.com/assets/images/foxtail-blue.png
200 OK 446 B URL HTTP/1.1 670501afa3bb667817ee-24c106882da8d4393b1faf82472afa82.ssl.cf5.rackcdn.com/assets/images/foxtail-blue.png
IP
File type PNG image data, 40 x 40, 8-bit colormap, non-interlaced\012- data
Hash f761e602db6145ebaf2e0d30f0d3a78d
c70bb6bd181170532bf9e89b809fc6132920503c
37f02ad34f8925573f5d0174e84af316d40439e158f169676d9a20008a4e8528
GET /assets/images/foxtail-blue.png HTTP/1.1
Host: 670501afa3bb667817ee-24c106882da8d4393b1faf82472afa82.ssl.cf5.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 10 Jul 2019 16:34:21 GMT
ETag: f761e602db6145ebaf2e0d30f0d3a78d
X-Trans-Id: tx570f4c8e21034b449976a-0063144b60iad3
Origin: https://mycloud.rackspace.com
Content-Length: 446
Accept-Ranges: bytes
X-Timestamp: 1562776460.11389
Content-Type: image/png
Cache-Control: public, max-age=184784
Expires: Thu, 01 Dec 2022 10:17:12 GMT
Date: Tue, 29 Nov 2022 06:57:28 GMT
Connection: keep-alive
slotbusterscasino.com/ca/aweber/lp2/alert.mp3
206 Partial Content 8.8 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/alert.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/alert.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 8802
Connection: keep-alive
Last-Modified: Fri, 06 Aug 2021 19:34:21 GMT
ETag: "2262-5c8e91f489e8b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Content-Range: bytes 0-8801/8802
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGnhybx%2FeaDH7BcKxZLQsq45LW2OOuhaXN%2BC1oL8se01oDI2tFT0LiMTjShtPxlUfcpwfsKM7jEiiQzo3Q%2Fish2ZU8h51uzIXxatGVCz6na0MGuMVWMvnGRaqvGI2uNjfd8mSTxfsJI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730a0c671c02-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 06:11:13 GMT
cache-control: public,max-age=3600
age: 2775
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
slotbusterscasino.com/ca/aweber/lp2/spin-sound.m4a
404 Not Found 283 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/spin-sound.m4a
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c94f3a9d0f3cbab493bf5a259b56e4bc
ca93015902ac8faa5bf74b90e2801110efa67e3e
0d96f9a360cac908073c7d1f305588ef16312acb7f0368ed5d65430a84a5a65f
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/spin-sound.m4a HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 404 Not Found
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R7EUhVxV9LTCaXRkwEuaiS992dGmiZaX2Y7teKWCyC8QJjrCW1sYQztUqNGIMGBjemVT1tTOytjvoQsW776LRm%2FUbbF6U9fjM0m7BGy7Kp%2BDitVR%2FsGL3ppqEtcmOSLqsCrsV4PLyiU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730aaa2db506-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/sounds/alert.mp3
206 Partial Content 8.8 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/sounds/alert.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/sounds/alert.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 8802
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:49:51 GMT
ETag: "2262-5c8443719ba6f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-8801/8802
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xP5gTv1C%2FsMqUDFWmUiwFpIXoGcmICWLB5fgzcq1mOjFv5OvZAas4KeiMYlFD5YPk%2FxisnuSCkiQm7nSIV7jFW6AbC9Jbk%2FLZAx9u4LWk7KKRlPPCddcRsr9Ds70SR9Il5tOxugd5vg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730abe37b51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/sound.m4a
404 Not Found 283 B URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/sound.m4a
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c94f3a9d0f3cbab493bf5a259b56e4bc
ca93015902ac8faa5bf74b90e2801110efa67e3e
0d96f9a360cac908073c7d1f305588ef16312acb7f0368ed5d65430a84a5a65f
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/sound.m4a HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 404 Not Found
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GLKmFwMBEAa7zNyrrj2RwU6bXxOe%2B6AVR%2FFQt1tULneGESzvJu2JEr9KhvCu%2FE13Q3GcO75iAnr78j530V1HpF9ShuoHjfEBFLEIY64efwYg21x%2Ftet2KUGOlPt8bJzU7HqU0dS0%2FO0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730abe34b51d-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/sounds/win.mp3
206 Partial Content 22 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/sounds/win.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/sounds/win.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 22067
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:49:51 GMT
ETag: "5633-5c84437198b8f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-22066/22067
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QVflQrv3MjB96N%2BnA4w%2Bl%2B7Z5MQTxm3%2FpWhMpQ1kghpwSiQn%2BTMd73AP7oRpA58vMCJeJKy2hU%2FjTrcA1pnRG54GuOzXAP1NX3518nISlb1K79qjkjC5wUIzqbZE1WWvQJE2SJQkcSI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730accddb50b-OSL
alt-svc: h2=":443"; ma=60
slotbusterscasino.com/ca/aweber/lp2/sounds/spin.mp3
206 Partial Content 51 kB URL HTTP/1.1 slotbusterscasino.com/ca/aweber/lp2/sounds/spin.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
Analyzer Verdict Alert fortinet Phishing
GET /ca/aweber/lp2/sounds/spin.mp3 HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html
HTTP/1.1 206 Partial Content
Date: Tue, 29 Nov 2022 06:57:28 GMT
Content-Type: audio/mpeg
Content-Length: 51290
Connection: keep-alive
Last-Modified: Thu, 29 Jul 2021 14:49:50 GMT
ETag: "c85a-5c844371092ae"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Content-Range: bytes 0-51289/51290
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Er%2FUbOCHwkQQnRqK7EftCm2IXhANDwn2QjOPp4oHnMg6JQSInpSrpnTLLE01Zpp21MJElTvWlykijgm9EHAUK%2F1x5yeT6MGTpBCxH%2FfYuBZUQ%2FJk%2Ba3mW0azMxzvhE6wlGta1SB3go0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7719730acb84b51b-OSL
alt-svc: h2=":443"; ma=60
unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=90679&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 29 Nov 2022 06:57:29 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: cda7360bdc728121686f31ecc754fb81
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
slotbusterscasino.com/favicon.ico
404 Not Found 234 B URL HTTP/1.1 slotbusterscasino.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 55fcd22ed967efd518aaa9f2b4337c53
99a4d34ee36a544e0ef2a94c40b03e85c952a30f
9c8794945b2b60106896b6efee212376433f522a28603ff34576a49f0250062e
GET /favicon.ico HTTP/1.1
Host: slotbusterscasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://slotbusterscasino.com/ca/aweber/lp2/index.html?cid=wf7s55ugr0bv0eqkimht4g1e&camp_id=5ceac543-972d-48f9-8bab-3bf7f5e25c50&campaign.name=Email%20Collection%20Canada%20Push%2024th%20August&lander.name=Aweber%20Lander%202&trafficsource.name=PropellerAds%20Pop&zone=&banner=&cep=fe-N1JfZzVrQx4qwDdcg2u6vJlE_9I_j9asz61nwWxwdmJg0ZmYWZRzZFR0q9USRbK6ia1cMAdOKvrH5fvnAuaFzwq5U3GmkMjKO4c860xnzxgr3G53eIQI-PYOL9JuliN4-wntY7H5pHR9GLMG_xcrsZaaYM3bXknvBlJ9aRFC8MYAZVzSrdH83qmWYYmk8VOkxvzMULlirdFbCg_llbyHyYiRE2b0d9Z3R1SNa2Dw1mf4YlT0mGUDsiw8BSl_cnp7AjaZ0mlbTpMdVn-oaHxLP_3AsZeq4FfW_a2E0jyWBGjuXsbCc5-4kSqkPjbBUnVhGdB6uSmUwX5IISjul2VJ3eGZN9M5sgc-VRVq_RlIvkypg__4_iE8hyDFNMG5k&lptoken=16a9694d704d68b941bb
HTTP/1.1 404 Not Found
Date: Tue, 29 Nov 2022 06:57:29 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=psD1Gby0bG4hhxZ%2BaSxs2Cg%2BEy%2BJS17vmrrjjNCeya5SpwQIWUM%2FAwZPeUwSw6168tAI12f0SK3%2ByHqYp%2FsUerzOmFk14662jp6v%2FCO1tbkfoSieogWhb%2F0MGNl%2BLCpdc%2FiRYy7dgoc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7719730c1f95b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2481
Cache-Control: max-age=96647
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:57:29 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 09:48:16 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp2%2Findex.html
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp2%2Findex.html
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=http%3A%2F%2Fslotbusterscasino.com%2Fca%2Faweber%2Flp2%2Findex.html HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:57:29 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0f2222f1abf54a91b9c8acd36ed2268d; expires=Wed, 29 Nov 2023 06:57:29 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7r0Al/uG3LM4Gslxf95QVw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /rRRXRFQ0w1mFiowrhFJv4soxAU=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8149
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8149
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8149
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8149
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:57:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 823e92f62ff7b3c2093828817d7f2866
c501de9eaa581a10b0b5fce40b54bb10f57f7c29
7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8921
x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnwFYToAMFoWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: awi49MMMlK51wHPbyBrBkL4N4g9lX3ea40LxyrYbYxe_FsfqelTcTQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:57:05 GMT
etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29"
content-type: image/jpeg
age: 32425
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9868f6d6-e29b-42b5-89c4-eec4771663b2.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9868f6d6-e29b-42b5-89c4-eec4771663b2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash faf3524970b0c3256eb5708f4ccf11ce
47295f2cf1b039c4b85cbe463d7893671a563989
ba0c2ce23eae865936caa7fb47dd1ef6346b8a7bc8340db700df6e2f5e27ec27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9868f6d6-e29b-42b5-89c4-eec4771663b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8402
x-amzn-requestid: d2d62f85-b6be-4394-9668-1d913e4120d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYeaGbgoAMFdCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d45c-2b6bfdcc72011cf01ddbd66b;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:07:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1il1ILDPBUseZWYjae_R0BQhpdyPTqqI0GycCljovgxjqhYezCwxCA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:18:26 GMT
age: 9544
etag: "47295f2cf1b039c4b85cbe463d7893671a563989"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:40:08 GMT
age: 83842
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5e2bc1651b37b8e0467c2a6cb860fb3
3348f081a3357490a704592d105d02e81886df89
751c601e075c9338335c05b0f430ba8065b4e97440e6630993afd943f302b253
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6037
x-amzn-requestid: eb17903e-1fd3-4a41-a6d1-8b671d890400
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPAJjFa3oAMFcLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382ad70-3db95fcd1aeb9c411c55d173;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 00:21:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mFiEmh1axlMNuIBb1YSzcciCdHzHGG7q0f3lQOuHJmjugWgdZKKiSg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 11:27:11 GMT
age: 70219
etag: "3348f081a3357490a704592d105d02e81886df89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 22:43:20 GMT
age: 29650
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg
200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 22e7d3e11e78242383e452adb9299016
035a1b4a2a7889787532ec2637d5c21e06daf672
990f18423bafc9cc3daaa1bd1290313b6cb3d3a391f642d01fd6797ad4fc9ca8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3004
x-amzn-requestid: 1e6e228a-fb73-4ed3-881b-6b0e5c8297c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrFRXoAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-45059338501b45d943d7e08c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rb-NFzuOBQEOMHfs7L68ZBeBH_JMqKYfJhxWs4eNYq35L8duYylQdg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:07:34 GMT
age: 17396
etag: "035a1b4a2a7889787532ec2637d5c21e06daf672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=2924
204 No Content 0 B URL HTTP/2 unphionetor.com/vbri?t=90679&bid=undefined&aid=undefined&tp=2924
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbri?t=90679&bid=undefined&aid=undefined&tp=2924 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://slotbusterscasino.com
Connection: keep-alive
Referer: http://slotbusterscasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 29 Nov 2022 06:57:30 GMT
access-control-allow-origin: http://slotbusterscasino.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 00287fbdfed791f24a86ea43eafdd742
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c6468532780686827e5b0a20deca0b3c
cc5281077a662bfb16595b4262337b5594503514
70e380565fb59b53f4c130d9e99c1e3822180036f2f568d29a127362957817d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70E380565FB59B53F4C130D9E99C1E3822180036F2F568D29A127362957817D5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19661
Expires: Tue, 29 Nov 2022 12:25:18 GMT
Date: Tue, 29 Nov 2022 06:57:37 GMT
Connection: keep-alive
172.67.134.39
139.45.195.8
23.38.200.213
104.21.6.14