www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
301 Moved Permanently 178 B URL HTTP/1.1 www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 28 Nov 2022 04:03:24 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6563
Expires: Mon, 28 Nov 2022 05:52:48 GMT
Date: Mon, 28 Nov 2022 04:03:25 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3330
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Last-Modified: Mon, 28 Nov 2022 03:07:55 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 03:19:31 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2634
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9228
Expires: Mon, 28 Nov 2022 06:37:13 GMT
Date: Mon, 28 Nov 2022 04:03:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RrbG4zuI/0TOuLG1vzNy2bzEWnCGludbbKpGAnqQwsiyhzhQnIAPlu/s4PWImC2LqvlrUAjtDnk=
x-amz-request-id: 7C73XB1FR51QSSFV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 03:44:53 GMT
age: 1112
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 04:03:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4f221590df4f7ca92d41bad23d80010
6915815951976a6ea9c0dcc65d18a55029bb7787
790c90f0ea6f733284d04e773448d16fe8a325c2db63b83a72fb042d8e1a31df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "790C90F0EA6F733284D04E773448D16FE8A325C2DB63B83A72FB042D8E1A31DF"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=408
Expires: Mon, 28 Nov 2022 04:10:13 GMT
Date: Mon, 28 Nov 2022 04:03:25 GMT
Connection: keep-alive
www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
200 OK 7.4 kB URL HTTP/1.1 www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (554), with CRLF, LF line terminators
Hash 27ee289c52ee97c221de5e8f6a304c0c
fc9689bac8f987b4240f9b3a9c4b35467029e90f
aa735e3e4a7c943c80164c3cc98d6175dd3039494eb3899461343550d09e9c97
GET /lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: DENY
Vary: Accept-Encoding, Cookie, Accept-Language
Content-Language: en-gb
X-Content-Type-Options: nosniff
Set-Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; Path=/
visitor_key=347754b02b385250b4573964236294c710f50013; expires=Mon, 28 Nov 2022 07:03:25 GMT; Max-Age=10800; Path=/
da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; Path=/
csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; expires=Mon, 27 Nov 2023 04:03:25 GMT; Max-Age=31449600; Path=/; SameSite=Lax
sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl; expires=Mon, 12 Dec 2022 04:03:25 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax
Content-Encoding: gzip
www.freespinswizard.com/static/common-static/css/main/template-01-page.css?v=24
200 OK 3.1 kB URL HTTP/1.1 www.freespinswizard.com/static/common-static/css/main/template-01-page.css?v=24
IP
File type assembler source, ASCII text
Hash c4b990b66e7d49efe1fda85d2619be00
4b36610f6f1319bbfc8fda1690cd915eddeaefc4
8e26d150130b9544803d439d7d78944ee1d3902291e67da9fcef85481b3ef3b4
GET /static/common-static/css/main/template-01-page.css?v=24 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: text/css
Last-Modified: Wed, 09 Nov 2022 15:28:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash c621d4c62f1b73d7db42f083617dc8db
1a78ba537afba7aea6308288c5c41c90de74b3ba
d7b3c5b2e9ea4ad8e5c33649a912d471545651f643b62238beb7d33188146322
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5024
Cache-Control: max-age=150324
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Etag: "6383c7a1-118"
Expires: Tue, 29 Nov 2022 21:48:49 GMT
Last-Modified: Sun, 27 Nov 2022 20:25:05 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
200 OK 1.1 kB URL HTTP/1.1 www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
IP
File type assembler source, ASCII text
Hash 2bd3131d4bffbc730f2732509ca1599d
5716b8b4393c57d0cd0a51899fb51bcbb624aebd
f8789289c978c5391cc93130824c77678f2a2df83f11a21a607258d94a84daab
GET /static/common-static/css/main/ppc-footer.css?v=24 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: text/css
Last-Modified: Tue, 21 Jun 2022 10:05:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5323
Cache-Control: max-age=102403
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:30:08 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash c621d4c62f1b73d7db42f083617dc8db
1a78ba537afba7aea6308288c5c41c90de74b3ba
d7b3c5b2e9ea4ad8e5c33649a912d471545651f643b62238beb7d33188146322
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5024
Cache-Control: max-age=150324
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Etag: "6383c7a1-118"
Expires: Tue, 29 Nov 2022 21:48:49 GMT
Last-Modified: Sun, 27 Nov 2022 20:25:05 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 04:03:25 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 453514
expires: Sat, 18 Nov 2023 04:03:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mhd77FsnuXY%2F6Md0nbqq3bb529J82uXEQmNiIMd8LJvnNKEgvCMlENJo7aRvhSywpxyjpni0zIX9%2BahA31bCQw0SMxa7l3E83TZBVwW0f%2BK187JZ6kkDb7neZWhVQoZwiFBsg4Fb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 771036b5ef25b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 263fd6d40218c2b0a2945fa12db8b4e5
db616a4c91fea68c1badef3644d17c033a467dd1
9a5d043d20760ae47a125e8585da97dcaf49405321e810c12e93336f55c95a97
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6341
Cache-Control: max-age=121747
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Etag: "638352db-117"
Expires: Tue, 29 Nov 2022 13:52:32 GMT
Last-Modified: Sun, 27 Nov 2022 12:06:51 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
www.freespinswizard.com/static/js/custom.js?v=24
200 OK 926 B URL HTTP/1.1 www.freespinswizard.com/static/js/custom.js?v=24
IP
Hash a712be49f55b9de162f2d8fd992af49b
ef0d07082f772dcd523878a4f24bc8b769affd67
00d86e8eb5c558945beabfb7a4fee49e6ae97784596786dcc49449af5465b32c
Analyzer Verdict Alert fortinet Phishing
GET /static/js/custom.js?v=24 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: application/x-javascript
Last-Modified: Tue, 25 Oct 2022 13:12:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5050
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Last-Modified: Mon, 28 Nov 2022 02:39:16 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
IP
File type ASCII text, with very long lines (20831)
Hash 368c425fc94c424e1688caadefbed981
13d24c22c199ef6668d758434819f44307a65094
ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 04:03:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 990041
expires: Sat, 18 Nov 2023 04:03:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RW2Oh%2F168HpEayo9e%2FmPwqZGdqNg0w%2BujFDqTBlcaXvTw22faBajkWy1kLCzDDZgYR7Tn7deEJsJeW%2FnMgyMC4H3r9NTBPYy89%2B%2BMLML89qu5JIPrSYrMzry03LwulWxR65TZ5dH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 771036b61964fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 03:11:12 GMT
cache-control: public,max-age=3600
age: 3133
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6168
Cache-Control: max-age=110775
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:49:40 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.freespinswizard.com/static/js/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/1.1 www.freespinswizard.com/static/js/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 2d495f5054edf410ef67b9fe39614157
f5048eecb20bffb83bf13f272d2b6599d2ed1a89
97ada30dad98a4983f45c054190b82147114acf4145f843c1c9ee9cd3123f698
Analyzer Verdict Alert fortinet Phishing
GET /static/js/jquery-3.3.1.min.js HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 23 Oct 2020 17:50:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5050
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Last-Modified: Mon, 28 Nov 2022 02:39:16 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=OPT-TNF9KVB
200 OK 47 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-TNF9KVB
IP
File type ASCII text, with very long lines (1921)
Hash 7da0ffe33fa29715bf5e0359178ef597
8d4e99bda90f95653946f4bdb234cdf6a34ac470
0b14df9566d9394d42bf205c1772b75f6f843c79c0999faef831fa00d5fd96d7
GET /optimize.js?id=OPT-TNF9KVB HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 04:03:25 GMT
expires: Mon, 28 Nov 2022 04:03:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46856
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
200 OK 16 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (57791)
Hash a06303450e2cb9894369d66c51d0c8bb
96d82e50479e7861ea69c5afb261efbdd7c8d1cd
77f161bbcdb51c85d5872f8cc753a7779c076df5bf6d3b87b76b9a6a2b5eeacb
GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 04:03:25 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 04/09/2022 02:51:51
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a287da6534c533fa7d9fa0c60c33cc60
cdn-cache: HIT
cf-cache-status: HIT
age: 139935
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 771036b63e42b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.freespinswizard.com/static/common-static/img/da-landing-page/DA-LeadForm-BtnArrow.svg
200 OK 349 B URL HTTP/1.1 www.freespinswizard.com/static/common-static/img/da-landing-page/DA-LeadForm-BtnArrow.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (349), with no line terminators
Hash 2992a83946a571d4e54d0be2b60c2a96
1661240249e46e288ff55c2ba0d5bcbd604cbdbc
bddff42a343959a964f561429d593e8ebf13a03047c8a166b17b7f65beec466f
Analyzer Verdict Alert fortinet Phishing
GET /static/common-static/img/da-landing-page/DA-LeadForm-BtnArrow.svg HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9214037&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: image/svg+xml
Content-Length: 349
Last-Modified: Wed, 09 Nov 2022 15:28:29 GMT
Connection: keep-alive
ETag: "636bc71d-15d"
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
200 OK 25 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash 575581320d328dc02865a573b43bad27
db3c0095a0f95e97bb98cde348283721fbfe3f33
07d878234cc520064796f212c52909490ec29de695c6eb79a769e9c48bf53735
GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 04:03:25 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 08/15/2022 13:52:49
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f7733ec5f88b024c17e361a98b757e28
cdn-cache: HIT
cf-cache-status: HIT
age: 251279
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 771036b60e38b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WVHQS4Z
200 OK 66 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WVHQS4Z
IP
File type ASCII text, with very long lines (11349)
Hash e4393a31accecab06f31e2fd77f37bfa
da713016da4140ca458e944484d4922ec3f7731b
05faea22db10414240137cb71fbecf52930ef1246f0d76d108b752d17712be20
GET /gtm.js?id=GTM-WVHQS4Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 04:03:25 GMT
expires: Mon, 28 Nov 2022 04:03:25 GMT
cache-control: private, max-age=900
last-modified: Mon, 28 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65664
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.6.3/css/all.css
200 OK 94 kB URL HTTP/2 use.fontawesome.com/releases/v5.6.3/css/all.css
IP
File type ASCII text, with very long lines (53592), with no line terminators
Hash 032bbe897aef8baf15c654cf6c2b1430
31cadb1d3d48232d61c3b637d572031b7d2e7459
907c26b4fe37fd57253ff9a2d7aee598240da238c06e1c112b0a0132d244010a
GET /releases/v5.6.3/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 04:03:25 GMT
content-type: text/css
x-amz-id-2: pjTeMppmmKy2yfey9y7j18UIFw9WbwapUPIJ+IMkYcimIyPOQltBVapR0pw2QLVKR1ItkRwNm34=
x-amz-request-id: 34H6GRS22N6D0AJ4
last-modified: Wed, 30 Jun 2021 15:44:33 GMT
etag: W/"dc93d584e41f8417f6b7163320d34329"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 111140
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hgvhZ2HQdX5OOrRJmIaLmoj%2Bqvv9%2BdpZeWEfjzU9oUw2j8xoifC2qpyf9QZRgml2f50vKAxv%2Fzt1yFnMHFmFITIL6XHb9ZT3Zw27Xa%2F5FXyTDKjvIz3JiflA8dmf5%2BDK191bVWj0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771036b64c157765-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.freespinswizard.com/static/fonts/Saira-Regular.ttf
200 OK 83 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/Saira-Regular.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 21 names, Microsoft, language 0x409, Copyright 2020 The Saira Project Authors (https://github.com/Omnibus-Type/Saira)SairaRegular1.10\012- data
Hash aafce3f55bd00b45f3abebf796485a77
e35430a80a686547343ca221c0997aa1044e67bd
324e18decc80951cfbed08ed230cc3dc47aea321fdb17b95df956498b0440306
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Saira-Regular.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: application/octet-stream
Content-Length: 82764
Last-Modified: Tue, 12 Apr 2022 14:58:28 GMT
Connection: keep-alive
ETag: "62559394-1434c"
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinswizard.com/static/fonts/Saira-Bold.ttf
200 OK 82 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/Saira-Bold.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 21 names, Microsoft, language 0x409, Copyright 2020 The Saira Project Authors (https://github.com/Omnibus-Type/Saira)SairaBold1.101;O\012- data
Hash 7d6843ecee0081d84050cc37a01a23d5
752202ac9e530618abb235fedbb52dafe9350fb1
5784c7eab4e5c2d4bb1d7ae1f9df6a7007955143e2ff9776e72aee7e269ec4de
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Saira-Bold.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:25 GMT
Content-Type: application/octet-stream
Content-Length: 82516
Last-Modified: Tue, 12 Apr 2022 14:58:28 GMT
Connection: keep-alive
ETag: "62559394-14254"
Expires: Tue, 28 Nov 2023 04:03:25 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811023Footer-2.png
200 OK 1.0 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811023Footer-2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5816fe93626b1c59310fedf9ec5362b9
0799a722d493f08c8bf06d8e149a2830488259aa
ad009db269ca098a64572fdc67038e022480ea4808d30f4ec4aa821f36954cb2
GET /qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811023Footer-2.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655811023Footer-2.webp"
content-type: image/webp
etag: "5816fe93626b1c59310fedf9ec5362b9"
last-modified: Tue, 21 Jun 2022 12:36:37 GMT
date: Mon, 28 Nov 2022 04:03:26 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;cpu=0;start=2022-11-28T04:03:26.042Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 1038
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/LandingPageContent/2022/11/18/1668781887FSW_Web-50FS_ND.png
200 OK 127 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/LandingPageContent/2022/11/18/1668781887FSW_Web-50FS_ND.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 127 kB (127276 bytes)
Hash e23a9654634e801f44b860636df762e1
508371828f06cbbe84823d62a26012e7a452f31f
e3d3cad8178cbee1358f5e2bb55fd4a6ae73aafbce9e2f1d4de62c51c293de60
GET /qih/image/upload/f_auto/v1/multisite/media/LandingPageContent/2022/11/18/1668781887FSW_Web-50FS_ND.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1668781887FSW_Web-50FS_ND.webp"
content-type: image/webp
etag: "e23a9654634e801f44b860636df762e1"
last-modified: Fri, 18 Nov 2022 15:01:12 GMT
date: Mon, 28 Nov 2022 04:03:26 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=1;start=2022-11-28T04:03:26.040Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 127276
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994133Logo-Light.png
200 OK 3.7 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994133Logo-Light.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c24fb6f19a78bc4b2ab04721a944bf32
e6043d68fdd2dab34d46efff6571b1a8b519bfc0
6c9ad0abe17f16276f54025a953952814245c81ca6a10e60b0eb41f473ffc205
GET /qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994133Logo-Light.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655994133Logo-Light.webp"
content-type: image/webp
etag: "c24fb6f19a78bc4b2ab04721a944bf32"
last-modified: Thu, 28 Jul 2022 09:35:54 GMT
date: Mon, 28 Nov 2022 04:03:26 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=0;start=2022-11-28T04:03:26.042Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 3660
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-3.png
200 OK 2.7 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-3.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e44b353425db67b3cddc26e47812621a
16193d327c73e97db9a017885671825771ce21f4
db45a160123af488518bddf29b35e1fa7e487b670e97fcebc57b8099dede5b58
GET /qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-3.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655811024Footer-3.webp"
content-type: image/webp
etag: "e44b353425db67b3cddc26e47812621a"
last-modified: Tue, 21 Jun 2022 12:36:37 GMT
date: Mon, 28 Nov 2022 04:03:26 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;cpu=0;start=2022-11-28T04:03:26.043Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 2660
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-1.png
200 OK 2.4 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ba96735b2488a1e2ad08fd40946241e
de8981227dc90f98d3779d5d02ef5bbf3859efd7
f25459c13a4d2d1358e0762bf93b75e37223dc88d7b6d6fa7056bc822acf102b
GET /qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-1.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655811024Footer-1.webp"
content-type: image/webp
etag: "0ba96735b2488a1e2ad08fd40946241e"
last-modified: Tue, 21 Jun 2022 12:36:37 GMT
date: Mon, 28 Nov 2022 04:03:26 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;cpu=0;start=2022-11-28T04:03:26.043Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 2434
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994137Favicon.ico
200 OK 3.3 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994137Favicon.ico
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 092300726bc25c7ad3fd706abafbb809
188cceb75c863da6281997dd63aaed2d572597e7
06044e529ef8868c2ee265160fea9819b1f057b7b8a79ee389e4696b28736f5f
GET /qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994137Favicon.ico HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655994137Favicon.webp"
content-type: image/webp
etag: "092300726bc25c7ad3fd706abafbb809"
last-modified: Thu, 23 Jun 2022 14:22:22 GMT
date: Mon, 28 Nov 2022 04:03:26 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=6;cpu=0;start=2022-11-28T04:03:26.076Z;desc=hit,rtt;dur=7
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 3286
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BpnTAuLGWG8+NUve/Fs+Xg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9hDY+nn6L7m33+nFaOzGyGVXszI=
ocsp.digicert.com/
200 OK 471 B IP
Hash 80423577bb8ca66350f796c228ae9152
39a9a538873e91016bec486f0a39a8f5decf276c
b97b4d704efc28d3c9e1839cc5d08b9663f3f56654d42124e0ec19377a1a9084
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2745
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:26 GMT
Last-Modified: Mon, 28 Nov 2022 03:17:41 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 4dc8061e012690f41cc8e3b60e976494
6e3f3e9a22bf7348c5ecb244cceec16cfcd86cf5
b74d15f2e5d547246f74a267925085cd15fac8a259b0a91029b189c8f24b1b6d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5244
Cache-Control: max-age=148348
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:26 GMT
Etag: "6383bf0e-1d7"
Expires: Tue, 29 Nov 2022 21:15:54 GMT
Last-Modified: Sun, 27 Nov 2022 19:48:30 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: svTvGy0xw/kdw6hSGVCtRXAB2EeiQnD4whq/UXz046M8TFFIpWGyQ2XtrmYXlVEotQ20ckIn7eexR87WmSMePQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Mon, 28 Nov 2022 04:03:26 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 80423577bb8ca66350f796c228ae9152
39a9a538873e91016bec486f0a39a8f5decf276c
b97b4d704efc28d3c9e1839cc5d08b9663f3f56654d42124e0ec19377a1a9084
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2745
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:03:26 GMT
Last-Modified: Mon, 28 Nov 2022 03:17:41 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.freespinswizard.com/static/fonts/RobotoCondensed-Bold.ttf
200 OK 169 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/RobotoCondensed-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedBoldRoboto Condensed BoldVersion \012- data
Size 169 kB (169352 bytes)
Hash cbd4e701269338259ee0b39a0b768167
97289a9d7448164e46ea8b3107a24ac1807f6c0e
d1ab7a9092d779eb7eb97f3f7d4563c857e86572fb829c42f2972a8e232ec67d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/RobotoCondensed-Bold.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl; _gcl_au=1.1.863675541.1669608206
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:26 GMT
Content-Type: application/octet-stream
Content-Length: 169352
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-29588"
Expires: Tue, 28 Nov 2023 04:03:26 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinswizard.com/static/fonts/RobotoCondensed-Light.ttf
200 OK 168 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/RobotoCondensed-Light.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto Condensed LightRegularVersion 2.137; 2017R\012- data
Size 168 kB (167568 bytes)
Hash 885e5558c90864ddb72ad486f36470cc
b65ec310689040b32a54e62269e8b83e3c40f89e
e4787def35e6d46bb0bef6f6086cceddfc357476858b0e77b3587f6faebe666d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/RobotoCondensed-Light.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=nspvxescolxbr5qfw0ou411qppjn0kbl; visitor_key=347754b02b385250b4573964236294c710f50013; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9214037'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-28 04:03:25'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}\054 'utm_click_id': {'value': '9214037'\054 'expiry': '2022-11-28 04:03:25'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-28 04:03:25'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-28 04:03:25'}}"; csrftoken=Owy4UX4ANniIqZohu4w9v8l7PBfzQilRKwEJOzYHdgzh6YwXLd85WkoWt6Hdo0iu; sessionid=nspvxescolxbr5qfw0ou411qppjn0kbl; _gcl_au=1.1.863675541.1669608206
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:26 GMT
Content-Type: application/octet-stream
Content-Length: 167568
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-28e90"
Expires: Tue, 28 Nov 2023 04:03:26 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 650eaa433be20553a8292aa8e5d44a65
d49d4d504ef40346a7d6dec5066f69ed0f05feb0
bb911ffdc0a7b61611a473f704305bba087aaab4a764bac11240a7b0878a9405
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB911FFDC0A7B61611A473F704305BBA087AAAB4A764BAC11240A7B0878A9405"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21428
Expires: Mon, 28 Nov 2022 10:00:34 GMT
Date: Mon, 28 Nov 2022 04:03:26 GMT
Connection: keep-alive
www.slotswise.com/api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO
301 MOVED PERMANENTLY 0 B URL HTTP/1.1 www.slotswise.com/api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO HTTP/1.1
Host: www.slotswise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 MOVED PERMANENTLY
Server: nginx
Date: Mon, 28 Nov 2022 04:03:26 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Language, Cookie
X-Frame-Options: SAMEORIGIN
Location: https://www.slotswise.com/api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO
Content-Language: en-gb
Access-Control-Allow-Origin: slotswise.com
www.slotswise.com/api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO
200 OK 0 B URL HTTP/1.1 www.slotswise.com/api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/ga-hit/nspvxescolxbr5qfw0ou411qppjn0kbl/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=347754b02b385250b4573964236294c710f50013&geo=NO HTTP/1.1
Host: www.slotswise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 04:03:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept, Accept-Language, Cookie
X-Frame-Options: SAMEORIGIN
Content-Language: en-gb
Allow: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: slotswise.com
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 02:41:08 GMT
expires: Mon, 28 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 4938
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=723184&ADFdivider=%7C&ord=893934836478&ADFtpmode=2&loc=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26p&Set1=en-US%7Cen-US%7C1280x1024%7C24
302 Found 604 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=723184&ADFdivider=%7C&ord=893934836478&ADFtpmode=2&loc=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26p&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
Hash 9f5eb2ae1dc459f87e6c4bfe0249ca97
e91d82885d6319a5e7b0bc1ef14569c579c9ef4e
0877f70da3f71060aa821f329c67f93e729daabe94d39676d0c3feaaaa5d01f8
GET /Serving/TrackPoint/?pm=723184&ADFdivider=%7C&ord=893934836478&ADFtpmode=2&loc=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26p&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 04:03:26 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=723184&ADFdivider=%7C&ord=893934836478&ADFtpmode=2&loc=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26p&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Wed, 28-Dec-2022 04:03:26 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.clarity.ms/tag/bd8dnjw3bx
200 OK 57 kB URL HTTP/2 www.clarity.ms/tag/bd8dnjw3bx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash f3614d1befdf86133085f367b562dfcb
5553b26e5a790b4e343fa2fdae5f559d4a13d403
5ee4190fde21a1a3d5eed61147c17b518d23fb5fe9321d0c7c8b167b1b8e08c3
GET /tag/bd8dnjw3bx HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=6ac0d661ad3a452db5e32c27b70893c5.20221128.20231128; expires=Tue, 28 Nov 2023 04:03:26 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2
x-cache: CONFIG_NOCACHE
x-azure-ref: 0DjOEYwAAAACryjsDipviTbWj0BGKenvhQU1TMDRFREdFMTgxMwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 28 Nov 2022 04:03:25 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1401579643207562&ev=PageView&dl=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&rl=&if=false&ts=1669608206285&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669608206283.1032708346&it=1669608205698&coo=false&rqm=GET
200 OK 86 kB URL HTTP/2 www.facebook.com/tr/?id=1401579643207562&ev=PageView&dl=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&rl=&if=false&ts=1669608206285&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669608206283.1032708346&it=1669608205698&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Hash 30b6a379c6e24829ef0e3625ef64a076
e4a8eca8f11221e0d7e6ff4c6135fe5d7c3d88ad
92e27ef41b1ca9a36063e4ff2ea887c89ae3790e936bb7fadf21efb9aa83fa1a
GET /tr/?id=1401579643207562&ev=PageView&dl=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9214037%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&rl=&if=false&ts=1669608206285&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669608206283.1032708346&it=1669608205698&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 28 Nov 2022 04:03:26 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&RedC=c.clarity.ms&MXFR=1EEB06BE2BED6A2910CA14D42FED641C
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=1EEB06BE2BED6A2910CA14D42FED641C; domain=.clarity.ms; expires=Sat, 23-Dec-2023 04:03:27 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Mon, 28 Nov 2022 04:03:26 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&RedC=c.clarity.ms&MXFR=1EEB06BE2BED6A2910CA14D42FED641C
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&RedC=c.clarity.ms&MXFR=1EEB06BE2BED6A2910CA14D42FED641C
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&RedC=c.clarity.ms&MXFR=1EEB06BE2BED6A2910CA14D42FED641C HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&MUID=3FFDB57D7DEC67302036A7177CBB661D
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=3FFDB57D7DEC67302036A7177CBB661D; domain=c.bing.com; expires=Sat, 23-Dec-2023 04:03:27 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B22EC5C86AB54514938AB704A43FDD21 Ref B: OSL30EDGE0412 Ref C: 2022-11-28T04:03:27Z
date: Mon, 28 Nov 2022 04:03:26 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&MUID=3FFDB57D7DEC67302036A7177CBB661D
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&MUID=3FFDB57D7DEC67302036A7177CBB661D
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=27275D51200C43FE8C421F1C58DE5654&MUID=3FFDB57D7DEC67302036A7177CBB661D HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 28-Nov-2022 04:13:27 GMT; path=/; SameSite=None; Secure;
date: Mon, 28 Nov 2022 04:03:26 GMT
content-length: 42
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4004
Expires: Mon, 28 Nov 2022 05:10:11 GMT
Date: Mon, 28 Nov 2022 04:03:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4004
Expires: Mon, 28 Nov 2022 05:10:11 GMT
Date: Mon, 28 Nov 2022 04:03:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4004
Expires: Mon, 28 Nov 2022 05:10:11 GMT
Date: Mon, 28 Nov 2022 04:03:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 005e5ba3c9588cf389a58195001b64e3
238a7439d887fb3aa7f1302eeb43fce62f08441a
d75dd5b6f57d9c9290725c5be76cc7d7a39682ca569bea18eceb9bdc13d444f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10813
x-amzn-requestid: 5a3c9584-1389-45ac-968d-0a2301f82eda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KG00oAMFpig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-6ffc3ff67f7f7e75399834e8;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3ggibSv4guzAQjW77yMg7HTp5JCBi1B9dxXi-Zy_-Vw0b6lP1PAGyQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:09 GMT
age: 22338
etag: "238a7439d887fb3aa7f1302eeb43fce62f08441a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 21701
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 21701
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d407d1a700a02f6422a0415be9648354
e9a69711e04e8028f11082285a405bafc61c5b20
dfc27a9aea46df1e218ee485296392c5a6c03756e91487f37212c69d4b30a418
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 24915481-2902-4776-b489-7741957424f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMozvEfioAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb4a-7846a98a5fb3d0786cb84130;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:07:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2YLb6Et3z5MS3x4qk32fUeOCzFeofTOiHbTH2dGaQbGe_e8yMedqqw==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 08:11:10 GMT
age: 71537
etag: "e9a69711e04e8028f11082285a405bafc61c5b20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f20d5c4b208740dd4c737b9d95c0e1d0
c843c5422499736a83a80c2b07475a8dbbb8860f
f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: up0DWugUp4S0jAtsA-KBRapBAHtcHCdTwWJock-y22fqyL6_YVFeqg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:09 GMT
age: 22338
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 577b69fd08ad8368ea5a94fe41476c1c
9442f111d329f721ddc55100cd246586d8204048
bdafc5068032dcf5e207cf2685a1b9350dbe8d990ba181520ff47889524532f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8517
x-amzn-requestid: 12456791-0e7f-45d7-97ae-d663c8fa841d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMozvHHLoAMFVqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb4a-54ed1ec101789247052c9ec8;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:07:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UzzTPZIBjoow9PK-oM9rfGh5HkrivyPDofbTXy-I-9e4_baQnyKVhQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 05:55:42 GMT
age: 79665
etag: "9442f111d329f721ddc55100cd246586d8204048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 22526
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.freespinswizard.com
access-control-allow-credentials: true
date: Mon, 28 Nov 2022 04:03:26 GMT
X-Firefox-Spdy: h2
track.adform.net/serving/scripts/trackpoint/async/
301 Moved Permanently 0 B URL HTTP/2 track.adform.net/serving/scripts/trackpoint/async/
IP
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 28 Nov 2022 04:03:26 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
200 OK 0 B URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 04:03:26 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 05 Oct 2022 12:23:24 GMT
x-rgw-object-type: Normal
etag: W/"4cb8e818a3c8dda5fd80d6d9a55d958d"
x-amz-request-id: tx000000f8a9ec5ed5188d3-0063766185-3293aae9-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
18.197.71.232
104.18.11.207
31.13.72.12
13.107.213.53
37.157.6.242
23.36.76.226
93.184.220.29