tx.vc/r/3CUbs/
301 Moved Permanently 134 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /r/3CUbs/ HTTP/1.1
Host: tx.vc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 26 Jan 2023 17:04:46 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://tx.vc:443/r/3CUbs/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11314
Expires: Thu, 26 Jan 2023 20:13:21 GMT
Date: Thu, 26 Jan 2023 17:04:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4273
Expires: Thu, 26 Jan 2023 18:16:00 GMT
Date: Thu, 26 Jan 2023 17:04:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 16:42:55 GMT
content-type: application/json
age: 1312
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14435
Expires: Thu, 26 Jan 2023 21:05:22 GMT
Date: Thu, 26 Jan 2023 17:04:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7owTNAPLJXVV6EmGunWVhDaox4bgXN0jmzxTNEDMkLkVuWcNlEjJrG9uv3bGvKsrRvQfYQC7QVc=
x-amz-request-id: 16F8AGQMVD6K7ZHD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 16:20:11 GMT
age: 2676
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 17:04:47 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3da2bf90a6f787823903be0141d293e3
d3f811cd04134eed97c9feb23862b34fb5f05841
82913537346aed89ad5f8b49e64a40272d4add5b5c2dca24ade378cb728b3e0d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100185
Date: Thu, 26 Jan 2023 17:04:47 GMT
Etag: "63d19708-1d7"
Expires: Fri, 27 Jan 2023 20:54:32 GMT
Last-Modified: Wed, 25 Jan 2023 20:54:32 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: X_reU6uU5DtQiwZZ6wM69YnbMtxXkt59nB9ocdYpNbMQWwnrlE4bRA==
tx.vc/r/3CUbs/
301 Moved Permanently 228 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5b3c72abb9401b329cf25ded085bbfec
81f700a2cdadcb25d400098858f2c79228b606e5
68a8bdf478d01848849cd2cf5319ae1917119ee1c413c92ff8f1d4f3bc5f028b
GET /r/3CUbs/ HTTP/1.1
Host: tx.vc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Thu, 26 Jan 2023 17:04:47 GMT
content-type: text/html; charset=iso-8859-1
content-length: 228
location: http://tx.vc/r/3CUbs
server: Apache
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 16:41:40 GMT
age: 1387
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
tx.vc/r/3CUbs
301 Moved Permanently 134 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /r/3CUbs HTTP/1.1
Host: tx.vc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 26 Jan 2023 17:04:47 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://tx.vc:443/r/3CUbs
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c398b6b39d11d25b8ae9bc5cd94a1c98
640aa8c399ced71d0c2a9f5a90fbaf091b01d642
a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17359
Expires: Thu, 26 Jan 2023 21:54:06 GMT
Date: Thu, 26 Jan 2023 17:04:47 GMT
Connection: keep-alive
tx.vc/r/3CUbs
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/3CUbs HTTP/1.1
Host: tx.vc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Thu, 26 Jan 2023 17:04:47 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
server: Apache
x-frame-options: tx.vc
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CP8bRpEvgZNn8K0XRJv+7g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kDsPS8I5p+hDgQarERocnvb/PlQ=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ba2c6308c5855287659d15d7eae7871
5093803bea93f51070eee1377d89c46a41a968ea
e69a1d7e6860f94addf451339a52798127ff9705f021ba83a2f2c96856f370e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E69A1D7E6860F94ADDF451339A52798127FF9705F021BA83A2F2C96856F370E1"
Last-Modified: Wed, 25 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Thu, 26 Jan 2023 23:04:10 GMT
Date: Thu, 26 Jan 2023 17:04:48 GMT
Connection: keep-alive
www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
200 OK 10 kB URL HTTP/1.1 www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (581)
Hash 95a2f0fe384ff411a7999462d70691e2
12797c1127f2934809d1bae14f633c7b769301ba
50166c6a71f38e3d56caf0610a077a7957517330b836676ae47187775d8d86a6
GET /lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937 HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: DENY
Vary: Accept-Encoding, Cookie, Accept-Language
Content-Language: en-gb
X-Content-Type-Options: nosniff
Set-Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; Path=/
visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; expires=Thu, 26 Jan 2023 20:04:48 GMT; Max-Age=10800; Path=/
da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; Path=/
csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; expires=Thu, 25 Jan 2024 17:04:48 GMT; Max-Age=31449600; Path=/; SameSite=Lax
sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4; expires=Thu, 09 Feb 2023 17:04:48 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax
Content-Encoding: gzip
www.freespinsloopy.com/static/fsl_assets/css/new_offers_page.css?v=24
200 OK 3.2 kB URL HTTP/1.1 www.freespinsloopy.com/static/fsl_assets/css/new_offers_page.css?v=24
IP
File type assembler source, ASCII text
Hash 0f58134f56656e280976b30bfb402a57
068a92328847ba7cfc32513313dc77b33afa8128
8a5f01f57db76df0662147414622cef8d923d3ba0f6af84d1a1bf087df855159
Analyzer Verdict Alert fortinet Phishing
GET /static/fsl_assets/css/new_offers_page.css?v=24 HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: text/css
Last-Modified: Tue, 28 Jun 2022 09:37:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
www.freespinsloopy.com/static/fsl_assets/css/footer.css?v=24
200 OK 1.1 kB URL HTTP/1.1 www.freespinsloopy.com/static/fsl_assets/css/footer.css?v=24
IP
File type assembler source, ASCII text
Hash 85bdfe0084079f25c2ad7bdecb1b9382
4ffd1ada668300190cf18e71fce0efbf56f5b904
256f986bf50bb872979a06952c466132d87cdca47530ba92c74d201dd51bf2ca
Analyzer Verdict Alert fortinet Phishing
GET /static/fsl_assets/css/footer.css?v=24 HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: text/css
Last-Modified: Thu, 14 Jan 2021 15:34:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
IP
File type ASCII text, with very long lines (20831)
Hash 368c425fc94c424e1688caadefbed981
13d24c22c199ef6668d758434819f44307a65094
ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinsloopy.com
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 17:04:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 478139
expires: Tue, 16 Jan 2024 17:04:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=917fZHoYOql8EY90KaQcLKjRqwB73YrzepKFo1jg0jYA%2F992n0ylUvnZpz5lv9cddxEIJqDQEAqTP7bF8NmNqx6wOGFiazB0WtjN4wglz3WfadN7PgiN5HDksiNUlO07bEdVKBf2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78fad4718bc31c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.freespinsloopy.com/static/js/custom.js?v=24
200 OK 926 B URL HTTP/1.1 www.freespinsloopy.com/static/js/custom.js?v=24
IP
Hash a712be49f55b9de162f2d8fd992af49b
ef0d07082f772dcd523878a4f24bc8b769affd67
00d86e8eb5c558945beabfb7a4fee49e6ae97784596786dcc49449af5465b32c
Analyzer Verdict Alert fortinet Phishing
GET /static/js/custom.js?v=24 HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: application/x-javascript
Last-Modified: Tue, 25 Oct 2022 13:12:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash a473e335d5a75a94188d2aab086e752e
3f7b53b2360bc19046105106744b8967b9c7633c
504beb5f50f59260821af07aea342f78370a3ff79f0e9d5c1876f618886e076b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1641
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:48 GMT
Last-Modified: Thu, 26 Jan 2023 16:37:27 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a473e335d5a75a94188d2aab086e752e
3f7b53b2360bc19046105106744b8967b9c7633c
504beb5f50f59260821af07aea342f78370a3ff79f0e9d5c1876f618886e076b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:48 GMT
Last-Modified: Thu, 26 Jan 2023 15:46:16 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
200 OK 1.3 kB URL HTTP/1.1 www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
IP
File type assembler source, ASCII text
Hash d3afb7ddffbe799f16fe68eda2878879
7f13b51b8dbc3a7d182a523a06b1ef3ec05b943c
6fe18b8339389f7abef617049e89525f0760e7391deeab55361f633fa482c6b3
Analyzer Verdict Alert fortinet Phishing
GET /static/fsl_assets/css/ticker-strip.css?v=24 HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: text/css
Last-Modified: Thu, 18 Feb 2021 14:34:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
www.freespinsloopy.com/static/css/star-rating-svg.css
200 OK 272 B URL HTTP/1.1 www.freespinsloopy.com/static/css/star-rating-svg.css
IP
File type ASCII text, with very long lines (487), with no line terminators
Hash 35e70490396b03528922aef96a7b6158
5c83e732b4159905c7ddae10bbed46374661a0e6
d796f1a85491909b73d77bc3509835503dbf70a9d49f05cede2d7653aaab47a7
GET /static/css/star-rating-svg.css HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Oct 2020 15:55:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 065a8a0e315417e52649420d58023260
6502650c8f1497ce088fffbbf27f0dba4cb071e4
94a3f4df58187fd8003a9fe07408c0ad75f0eaf2b29f9d161233673b7e4fef99
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4511
Cache-Control: max-age=159438
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:48 GMT
Etag: "63d26cdf-117"
Expires: Sat, 28 Jan 2023 13:22:06 GMT
Last-Modified: Thu, 26 Jan 2023 12:06:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
www.freespinsloopy.com/static/js/jquery.star-rating-svg.js
200 OK 3.9 kB URL HTTP/1.1 www.freespinsloopy.com/static/js/jquery.star-rating-svg.js
IP
File type ASCII text, with very long lines (661)
Hash 7bb300a2dbfed0ea4daaea7e47bd0c2c
d1cb2c5fb8692971359012a5167387554555a1c8
cee510b5f80fc1f4d6b275820a91551019098d2430688e7fd29f305dba32bf73
Analyzer Verdict Alert fortinet Phishing
GET /static/js/jquery.star-rating-svg.js HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 28 Oct 2020 15:55:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
www.freespinsloopy.com/static/js/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/1.1 www.freespinsloopy.com/static/js/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 2d495f5054edf410ef67b9fe39614157
f5048eecb20bffb83bf13f272d2b6599d2ed1a89
97ada30dad98a4983f45c054190b82147114acf4145f843c1c9ee9cd3123f698
Analyzer Verdict Alert fortinet Phishing
GET /static/js/jquery-3.3.1.min.js HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:48 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 23 Oct 2020 17:50:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Fri, 26 Jan 2024 17:04:48 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
www.googleoptimize.com/optimize.js?id=OPT-KLGLFBZ
200 OK 44 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-KLGLFBZ
IP
File type ASCII text, with very long lines (1759)
Hash 9ea8c32e0972fd7f103b035c69d9e7cd
0a76250f932e5c4f5b61b6ed5c035a0b2cfe18a4
2dd3aed7dad75e81e5dc08fd703961b8ce34edc936756ade82dd0735d13b685a
GET /optimize.js?id=OPT-KLGLFBZ HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 17:04:48 GMT
expires: Thu, 26 Jan 2023 17:04:48 GMT
cache-control: private, max-age=900
last-modified: Thu, 26 Jan 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44347
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a473e335d5a75a94188d2aab086e752e
3f7b53b2360bc19046105106744b8967b9c7633c
504beb5f50f59260821af07aea342f78370a3ff79f0e9d5c1876f618886e076b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:48 GMT
Last-Modified: Thu, 26 Jan 2023 15:46:16 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 065a8a0e315417e52649420d58023260
6502650c8f1497ce088fffbbf27f0dba4cb071e4
94a3f4df58187fd8003a9fe07408c0ad75f0eaf2b29f9d161233673b7e4fef99
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4512
Cache-Control: max-age=159438
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:49 GMT
Etag: "63d26cdf-117"
Expires: Sat, 28 Jan 2023 13:22:07 GMT
Last-Modified: Thu, 26 Jan 2023 12:06:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/05/14/16209891261612097818MIRROR_BINGO_2.png
200 OK 14 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/05/14/16209891261612097818MIRROR_BINGO_2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a89d87a7e15400df842858215f4b4b37
fe9609984457e9b674eac83bfc417737b81e5913
d1a7d2f833f4579264b48b2d28b64f6dc90e5b7bce24ef3c10f375372baf562e
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/05/14/16209891261612097818MIRROR_BINGO_2.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="16209891261612097818MIRROR_BINGO_2.webp"
content-type: image/webp
etag: "a89d87a7e15400df842858215f4b4b37"
last-modified: Tue, 10 May 2022 10:20:25 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=1;start=2023-01-26T17:04:49.026Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 14370
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/08/10/1660128061FABULOUS_BINGO.png
200 OK 11 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/08/10/1660128061FABULOUS_BINGO.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2551a94f7b4fdf4b0b7dda93a7bfa8d3
3e72a679af9784ea5a8473333a9d94a54e6eed17
cb9c4a412ead1919d3fd5cc9713788928f940e25155611e6a1856df5d11b31d6
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/08/10/1660128061FABULOUS_BINGO.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1660128061FABULOUS_BINGO.webp"
content-type: image/webp
etag: "2551a94f7b4fdf4b0b7dda93a7bfa8d3"
last-modified: Wed, 10 Aug 2022 10:47:58 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=6;cpu=1;start=2023-01-26T17:04:49.026Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 11274
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/10/12/1665577263SING_BINGO.png
200 OK 11 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/10/12/1665577263SING_BINGO.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6e3f56ab9c1ad2f326f65b24c5741980
b78055a51fb502f4be8d4d73db6d7d5e1eca5eea
603fe3177e5cfb91ba25da1ead2e8c40d9ae20d673d1eb9c066a04b144cb1e7c
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/10/12/1665577263SING_BINGO.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1665577263SING_BINGO.webp"
content-type: image/webp
etag: "6e3f56ab9c1ad2f326f65b24c5741980"
last-modified: Wed, 12 Oct 2022 15:06:44 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=21;cpu=1;start=2023-01-26T17:04:49.026Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 10720
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/11/03/1667486465MAGIC_RED.png
200 OK 5.1 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/11/03/1667486465MAGIC_RED.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45199d1036a60af39b047a316e393d8e
c93f4a226544df2786de87c339d629772484db5c
918f7883fb1ec703639d7998444c75f71baff6f152210d0ddc652ae77673d478
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/11/03/1667486465MAGIC_RED.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1667486465MAGIC_RED.webp"
content-type: image/webp
etag: "45199d1036a60af39b047a316e393d8e"
last-modified: Tue, 08 Nov 2022 11:59:59 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=19;cpu=0;start=2023-01-26T17:04:49.032Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 5078
X-Firefox-Spdy: h2
www.freespinsloopy.com/static/fsl_assets/img/Logo.svg
200 OK 3.4 kB URL HTTP/1.1 www.freespinsloopy.com/static/fsl_assets/img/Logo.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3393), with no line terminators
Hash 25f62e36d4d31efab9176e20c75539f3
6e66f202d3872f0f1de2e8bd51c7943b9fdf2219
a7cd88c88e48e32943e0844e91dcf1fd97a946ceb3cad833eed7352248ace03f
Analyzer Verdict Alert fortinet Phishing
GET /static/fsl_assets/img/Logo.svg HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: image/svg+xml
Content-Length: 3393
Last-Modified: Thu, 14 Jan 2021 14:53:29 GMT
Connection: keep-alive
ETag: "60005ae9-d41"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.googletagmanager.com/gtm.js?id=GTM-5PMZWMJ
200 OK 50 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5PMZWMJ
IP
File type ASCII text, with very long lines (7016)
Hash 9d6af9b5dbd6dbc982f6ca3619dac009
58ec86ac24957c3b776546c5efc46932aa81ee09
fc7f671126c191118c0ef92ef215e67c0b87aaf9622b850ebebf71eb92382545
GET /gtm.js?id=GTM-5PMZWMJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 17:04:49 GMT
expires: Thu, 26 Jan 2023 17:04:49 GMT
cache-control: private, max-age=900
last-modified: Thu, 26 Jan 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 50109
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.freespinsloopy.com/static/fonts/JosefinSans-Regular.ttf
200 OK 58 kB URL HTTP/1.1 www.freespinsloopy.com/static/fonts/JosefinSans-Regular.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 18 names, Microsoft, language 0x409, Copyright 2010 The Josefin Sans Project Authors (https://github.com/ThomasJockin/JosefinSansFont\012- data
Hash 6762afeccd02d16a80409b78fb85251c
1320915dbd19243be53f5458f1b6f2881efc7e67
31ed94e56b1225f07307210cc2ea46e2209b71fe284423f6929f9cdab124e86d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/JosefinSans-Regular.ttf HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: application/octet-stream
Content-Length: 58548
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-e4b4"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinsloopy.com/static/fonts/Roboto-Light.ttf
200 OK 170 kB URL HTTP/1.1 www.freespinsloopy.com/static/fonts/Roboto-Light.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh\012- data
Size 170 kB (170012 bytes)
Hash 88823c2015ffd5fa89d567e17297a137
92cc3b6f9440193c12fd02ed690e434d685a9cc8
db02096a91c20ab62d459001a1059bc8d78caa35d637dc91494c4440815a6ac1
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Roboto-Light.ttf HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: application/octet-stream
Content-Length: 170012
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-2981c"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinsloopy.com/static/fonts/JosefinSans-Bold.ttf
200 OK 58 kB URL HTTP/1.1 www.freespinsloopy.com/static/fonts/JosefinSans-Bold.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 18 names, Microsoft, language 0x409, Copyright 2010 The Josefin Sans Project Authors (https://github.com/ThomasJockin/JosefinSansFont\012- data
Hash 9ac2a60828c8f6e627f4f628899398f0
b1b440257fcb021f25f1e845b3091e41189695c4
607a55db524faad26263089be4c1a7085072cf2ccf34b3546610288b418a0381
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/JosefinSans-Bold.ttf HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: application/octet-stream
Content-Length: 58416
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-e430"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinsloopy.com/static/fonts/Roboto-Bold.ttf
200 OK 170 kB URL HTTP/1.1 www.freespinsloopy.com/static/fonts/Roboto-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size 170 kB (170348 bytes)
Hash e07df86cef2e721115583d61d1fb68a6
3dd713113ff2d79b94d2df343e2e28fa8e7279cf
c9cc991deb5d27f267830a19f2301eb164d9e61ec08669c1a1a291c5620ff40a
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Roboto-Bold.ttf HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: application/octet-stream
Content-Length: 170348
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-2996c"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinsloopy.com/static/fonts/RobotoCondensed-Light.ttf
200 OK 168 kB URL HTTP/1.1 www.freespinsloopy.com/static/fonts/RobotoCondensed-Light.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto Condensed LightRegularVersion 2.137; 2017R\012- data
Size 168 kB (167568 bytes)
Hash 885e5558c90864ddb72ad486f36470cc
b65ec310689040b32a54e62269e8b83e3c40f89e
e4787def35e6d46bb0bef6f6086cceddfc357476858b0e77b3587f6faebe666d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/RobotoCondensed-Light.ttf HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: application/octet-stream
Content-Length: 167568
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-28e90"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/03/31/1617171886POKERSTARS-CASINO.png
200 OK 3.8 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/03/31/1617171886POKERSTARS-CASINO.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 602638d9c42c780b37033b330f390fa5
e8fac790801f179ada7f60cac029c67943e808fb
7d80f01fa2c60e5c7c712ab49a1aeefb24831a96dc69513e4f8da000465bb0a9
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/03/31/1617171886POKERSTARS-CASINO.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1617171886POKERSTARS-CASINO.webp"
content-type: image/webp
etag: "602638d9c42c780b37033b330f390fa5"
last-modified: Tue, 10 May 2022 10:22:52 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=153;cpu=0;start=2023-01-26T17:04:49.037Z;desc=miss,rtt;dur=14,cloudinary;dur=58;start=2023-01-26T17:04:49.084Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 3750
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/03/31/1617173890BONUS-BOSS.png
200 OK 4.3 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/03/31/1617173890BONUS-BOSS.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9422908728e9f9aa2f4713c9045ec687
84117a5dd1d33a06454c087ae1627339f75498f5
a7d122f591f6a55c449151a27df1651e8737a0cfaf1599cc9b941ce92ca4f28f
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/03/31/1617173890BONUS-BOSS.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1617173890BONUS-BOSS.webp"
content-type: image/webp
etag: "9422908728e9f9aa2f4713c9045ec687"
last-modified: Tue, 10 May 2022 10:22:52 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=170;cpu=0;start=2023-01-26T17:04:49.038Z;desc=miss,rtt;dur=14,cloudinary;dur=64;start=2023-01-26T17:04:49.086Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 4276
X-Firefox-Spdy: h2
www.freespinsloopy.com/static/fsl_assets/img/Background.png
200 OK 221 kB URL HTTP/1.1 www.freespinsloopy.com/static/fsl_assets/img/Background.png
IP
File type PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced\012- data
Size 221 kB (221136 bytes)
Hash 89edddc7f6c38ba260efdcf842d51e3c
a9b437cd2124082174d8ce708374fd5fa472aa99
24a1c51c927ab068a2bd58676a460114b4587d6bf4e27b38b815f28dcd3226f2
GET /static/fsl_assets/img/Background.png HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/new_offers_page.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: image/png
Content-Length: 221136
Last-Modified: Thu, 14 Jan 2021 14:53:29 GMT
Connection: keep-alive
ETag: "60005ae9-35fd0"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/04/29/1651222331WILD-WEST-WINS.png
200 OK 13 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/04/29/1651222331WILD-WEST-WINS.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c07e9d64df9661679e7da1da6ef430a
33742243206eab074d159bd39346b335ce9cf052
8cf32a07f0bda07ece35d5632befd2eb222e3f7a93276940fe154817d8964c7d
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/04/29/1651222331WILD-WEST-WINS.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1651222331WILD-WEST-WINS.webp"
content-type: image/webp
etag: "1c07e9d64df9661679e7da1da6ef430a"
last-modified: Tue, 10 May 2022 10:20:25 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=206;cpu=1;start=2023-01-26T17:04:49.026Z;desc=miss,rtt;dur=15,cloudinary;dur=92;start=2023-01-26T17:04:49.073Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 12992
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/10/11/1665484498SLOTSBABY2.png
200 OK 12 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/10/11/1665484498SLOTSBABY2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8866baad8b1658a5f287bbcfd699b7de
7e6f3e273c712e048dd03efe1c8ed47fbd595cb0
d4078121220b82b5bc311f81642b25a6fb40e557cec1498e44ca6a0b0a1e623a
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2022/10/11/1665484498SLOTSBABY2.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1665484498SLOTSBABY2.webp"
content-type: image/webp
etag: "8866baad8b1658a5f287bbcfd699b7de"
last-modified: Tue, 18 Oct 2022 12:56:39 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=214;cpu=0;start=2023-01-26T17:04:49.032Z;desc=miss,rtt;dur=15,cloudinary;dur=116;start=2023-01-26T17:04:49.080Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 11620
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/10/06/1633527246BUTLERS-BINGO.png
200 OK 17 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/10/06/1633527246BUTLERS-BINGO.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b92bd49d2e421dca1a204911ea42b755
5c010f83078cadaef01a80d8558123840afc3351
60b295c97a180e8e2e28f9b4571d86838a652012f5cc303ede3b71f42569afea
GET /qih/image/upload/f_auto/v1/multisite/media/Merchants/2021/10/06/1633527246BUTLERS-BINGO.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1633527246BUTLERS-BINGO.webp"
content-type: image/webp
etag: "b92bd49d2e421dca1a204911ea42b755"
last-modified: Tue, 10 May 2022 10:20:25 GMT
date: Thu, 26 Jan 2023 17:04:49 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=201;cpu=0;start=2023-01-26T17:04:49.049Z;desc=miss,rtt;dur=12,cloudinary;dur=106;start=2023-01-26T17:04:49.095Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 16948
X-Firefox-Spdy: h2
www.freespinsloopy.com/static/fsl_assets/img/Favicon.png
200 OK 2.9 kB URL HTTP/1.1 www.freespinsloopy.com/static/fsl_assets/img/Favicon.png
IP
File type PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 73df78ada483893b293401407206815b
3f2944de0df80c46db27f469428958d1aee05775
2919e03be68fa62af82ff0910c6fc362428f00e443631d29036b13c2ce83ad32
GET /static/fsl_assets/img/Favicon.png HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/lp286/?lavi=BSC14829737&conversion_method=sms&conversion_campaign=6937&send_id=6937
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: image/png
Content-Length: 2903
Last-Modified: Thu, 14 Jan 2021 14:53:29 GMT
Connection: keep-alive
ETag: "60005ae9-b57"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Thu, 26 Jan 2023 19:41:23 GMT
Date: Thu, 26 Jan 2023 17:04:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Thu, 26 Jan 2023 19:41:23 GMT
Date: Thu, 26 Jan 2023 17:04:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Thu, 26 Jan 2023 19:41:23 GMT
Date: Thu, 26 Jan 2023 17:04:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f62e9b7bdca82d18c945851912d8fea8
a7ca44d337c43bc5c6145b26778661c71cc50484
5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:57:18 GMT
age: 68851
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.freespinsloopy.com/static/fonts/RobotoCondensed-Bold.ttf
200 OK 169 kB URL HTTP/1.1 www.freespinsloopy.com/static/fonts/RobotoCondensed-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedBoldRoboto Condensed BoldVersion \012- data
Size 169 kB (169352 bytes)
Hash cbd4e701269338259ee0b39a0b768167
97289a9d7448164e46ea8b3107a24ac1807f6c0e
d1ab7a9092d779eb7eb97f3f7d4563c857e86572fb829c42f2972a8e232ec67d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/RobotoCondensed-Bold.ttf HTTP/1.1
Host: www.freespinsloopy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/static/fsl_assets/css/ticker-strip.css?v=24
Cookie: session_key=1ugos75z1to0n34tb8hv5erzydpa8jt4; visitor_key=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb; da_cookies="{'query_dict': {'value': \"{'lavi': 'BSC14829737'\054 'conversion_method': 'sms'\054 'conversion_campaign': '6937'\054 'send_id': '6937'}\"\054 'expiry': '2023-01-26 17:04:48'}\054 'network': {'value': 'nonetwork'\054 'expiry': '2023-01-26 17:04:48'}\054 'channel': {'value': 'direct'\054 'expiry': '2023-01-26 17:04:48'}}"; csrftoken=3166NpRVSAluKjk4t9cmVpN01RLu5mHlcLAwjgLZY5OM0vHojVTSSo3A63mtX3Fv; sessionid=1ugos75z1to0n34tb8hv5erzydpa8jt4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: application/octet-stream
Content-Length: 169352
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-29588"
Expires: Fri, 26 Jan 2024 17:04:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41fd0074a6ce752b1271302feade4cee
6311d1365504f06cb7516606c56c502d553c9d16
544c508899fe8855b0975a87cb0bf35663ab4ad0ec8fd057b3962d50cc001b8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7365
x-amzn-requestid: c2a8ae3d-47f8-415f-bf08-78dd12ede3d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwEUbIAMFnag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-38f72fec78120cf113c7a4f7;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rB4HXb1BDKiMZ5Xsb_U1UzBInPftuAryrVUhcE7v6C5qprrGRFooFg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:51:26 GMT
age: 69203
etag: "6311d1365504f06cb7516606c56c502d553c9d16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VATQ0SjZfM_btXwR4M5keLmd-EE6717EHEiXrF2zpHNrli93EhN6Rw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:48:42 GMT
age: 69367
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
200 OK 25 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (57791)
Hash 49914d2e4f936994f353ef308bd7b86d
70d8a1b2a285a85faac10d93fd470ba43717803e
275a6dee2a28fcd21dd03af9a40a81c7b9c633616ffc821c9999788589f737f6
GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinsloopy.com
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 17:04:48 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 01/05/2023 11:06:25
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1079
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 0e1095b56fdf2d01a70d3eec65038a7b
cdn-cache: HIT
cf-cache-status: HIT
age: 337061
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78fad471bf57fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7458f7a9b2070055df6f1d496794e43e
0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mjK4GJ3UCEuHk4XqmXdZCWHTVvJeX8Z2HFaem2GYzqfqlPSd_h6DfA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:33:59 GMT
age: 34250
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5d7d6-d259-4246-b28c-8e4355fbc747.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5d7d6-d259-4246-b28c-8e4355fbc747.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b242645f0cc22e3b12c132e6d03722ac
dec70f83182de58e03bfcb95fc240b7c33f20674
59a2d8c972d27598dfe38637197f90053186c4f68b80a5a90283cb11ddaf8a31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5d7d6-d259-4246-b28c-8e4355fbc747.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6609
x-amzn-requestid: 129067f4-c79b-493d-8863-2eb6c1565ee6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSZABF4IIAMFsig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d533-4908ab6e5c751213084de3c6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 07:07:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hUp-Y119Uly8FlGe1Wr8b-_pNoyg_iV-KaNaC7Fo44iN_sDU3BnCbA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:35:29 GMT
age: 34160
etag: "dec70f83182de58e03bfcb95fc240b7c33f20674"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5dce4da64d7b4d51000077ddcff7cbea
f83b0f03306cff5d25f20f95d0b5cc704cccb6ca
10f235c3233ccccb8a27540e7b4cf46c3dcde8c0cc4aabad5fbb833e2b4c532c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "10F235C3233CCCCB8A27540E7B4CF46C3DCDE8C0CC4AABAD5FBB833E2B4C532C"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12555
Expires: Thu, 26 Jan 2023 20:34:04 GMT
Date: Thu, 26 Jan 2023 17:04:49 GMT
Connection: keep-alive
www.slotswise.com/api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO
301 MOVED PERMANENTLY 0 B URL HTTP/1.1 www.slotswise.com/api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO HTTP/1.1
Host: www.slotswise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 MOVED PERMANENTLY
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Language, Cookie
X-Frame-Options: SAMEORIGIN
Location: https://www.slotswise.com/api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4/?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO
Content-Language: en-gb
Access-Control-Allow-Origin: slotswise.com
www.slotswise.com/api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4/?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO
200 OK 0 B URL HTTP/1.1 www.slotswise.com/api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4/?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/ga-hit/1ugos75z1to0n34tb8hv5erzydpa8jt4/?url=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=45d1cdaa93e5b1ff7a5ece6c4c68529c703df4cb&geo=NO HTTP/1.1
Host: www.slotswise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinsloopy.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 17:04:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept, Accept-Language, Cookie
X-Frame-Options: SAMEORIGIN
Content-Language: en-gb
Allow: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: slotswise.com
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 26 Jan 2023 15:46:59 GMT
expires: Thu, 26 Jan 2023 17:46:59 GMT
cache-control: public, max-age=7200
age: 4670
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 58bee798660dae739b64c6c857490fff
bcfe56f00b749385ca3d2ffb7a68c4a13c186317
800396e3a57e9ebd98a56f8ebab32c3bc576310632d9ece8b282e88c6d20d8f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2030
Cache-Control: max-age=110930
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:49 GMT
Etag: "63d1b915-1d7"
Expires: Fri, 27 Jan 2023 23:53:39 GMT
Last-Modified: Wed, 25 Jan 2023 23:19:49 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 9ba458c0d3060a442f3094daf58ec05d
fc35d487d0dd81e6855f1b02367b755609d9608d
17087257ea25c2232c025f338b9f3153d35c3d953cb382b7b6e01728a643bc0b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: UXlZBXh3EoDaMRwkzbj8twwiUKvC3670MfaEblXTVpXMghue3oMJs0k8HEmn+1xTnCdo2Smo2jP0a5/U9LYbDg==
priority: u=3,i
content-length: 27859
x-fb-trip-id: 1904183273
date: Thu, 26 Jan 2023 17:04:49 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 58bee798660dae739b64c6c857490fff
bcfe56f00b749385ca3d2ffb7a68c4a13c186317
800396e3a57e9ebd98a56f8ebab32c3bc576310632d9ece8b282e88c6d20d8f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2030
Cache-Control: max-age=110930
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 17:04:49 GMT
Etag: "63d1b915-1d7"
Expires: Fri, 27 Jan 2023 23:53:39 GMT
Last-Modified: Wed, 25 Jan 2023 23:19:49 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr/?id=149530806794884&ev=PageView&dl=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&rl=&if=false&ts=1674752690038&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674752690037.1411983957&it=1674752689807&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=149530806794884&ev=PageView&dl=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&rl=&if=false&ts=1674752690038&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674752690037.1411983957&it=1674752689807&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=149530806794884&ev=PageView&dl=https%3A%2F%2Fwww.freespinsloopy.com%2Flp286%2F%3Flavi%3DBSC14829737%26conversion_method%3Dsms%26conversion_campaign%3D6937%26send_id%3D6937&rl=&if=false&ts=1674752690038&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674752690037.1411983957&it=1674752689807&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 26 Jan 2023 17:04:50 GMT
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
IP
GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinsloopy.com
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 17:04:48 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 08/15/2022 13:52:49
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7b14f013b74c901701f67c7c5ff36682
cdn-cache: HIT
cf-cache-status: HIT
age: 463850
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78fad471bf54fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
loader.wisepops.com/get-loader.js?v=1&site=fnhFmehqbz
404 Not Found 0 B URL HTTP/2 loader.wisepops.com/get-loader.js?v=1&site=fnhFmehqbz
IP
GET /get-loader.js?v=1&site=fnhFmehqbz HTTP/1.1
Host: loader.wisepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 26 Jan 2023 17:04:49 GMT
content-type: text/javascript
vary: Accept-Encoding
x-cloud-trace-context: b3b5bf14d28a80e6635c241147dc5185
cache-control: private, max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WU1Uq3jslUPQVhVemC5eFMKQy7EIuil7PbrkhQ2fyG0avKfeqcZedJrGOICWaqqVDi%2BXWI6uLLhOKuPPAR8LbnRIOMEJOz1z1xrJrmN%2BD5BL3gVhyuMATzYOPr0P1cu8hy9aU50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fad4751ef4b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.6.3/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.6.3/css/all.css
IP
GET /releases/v5.6.3/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinsloopy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 17:04:48 GMT
content-type: text/css
x-amz-id-2: Tscxj6PR3ERbQI8/UWfcVefZEL+22GH6DuysCvi3BiaVmGoR2KDv8Td1pv1rYg0/AD2dphJKZ48=
x-amz-request-id: 653QNEBCHRG9J16X
last-modified: Wed, 30 Jun 2021 15:44:33 GMT
etag: W/"dc93d584e41f8417f6b7163320d34329"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1856557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6TOkykxjIO2UxdP654VcL1x3iCq9BIRAeohgeuSkM2N1oF63qV3ctA3jSUxdV7R7RLgSZW9O82qAjkv9%2Ft4NmxEEC77caPNvuumHmW%2BnDE%2FpqKfzG3o59LSBr%2BRQdaBeTXcHNUGB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fad471da8f23f4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
99.83.131.60
18.197.71.232
104.17.24.14
31.13.72.12
93.184.220.29
188.114.98.234
95.101.11.115