casinomanwinning.com/au/aweber/lp4/images/CA.png
188.114.96.1200 OK 791 B URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/CA.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 50 x 40, 8-bit colormap, non-interlaced\012- data
Hash d6e276a0216279a5e6ed6ea3583598ce
c6fa45c097325f23865622f48a5b2b7fa23ce504
029d2390b0d9b4362f0d05184f666e13f23242ea96f471cf595ac9a37ca531e3
GET /au/aweber/lp4/images/CA.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 791
last-modified: Thu, 29 Jul 2021 16:15:58 GMT
etag: "6102d43e-317"
expires: Sun, 31 Dec 2023 08:43:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 131692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yxHtBowrhBZSqYje%2FfumFRo6behSrVDTxXLIHlW3ueqrA3R%2FmDpWjj5lfO553t3UQ%2FQQ7jgHxsPQsISeH3Yb9ZOdf76ivPA7D%2Fkr93N5FESkVOy9f4gIHbP7%2F7rY3gsipsvVQbZYTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699822ede56a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/slot-start.png
188.114.96.1200 OK 26 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/slot-start.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 505136e8cd9273c4c021fcd128a5930e
c03168068ea00290499502b424e0d675e873d6cb
dcb1933fb72b31568b3bb0e41e8a18ae04af5c3e50d1d63a3be7f4f86eb0397b
GET /au/aweber/lp4/images/slot-start.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 26144
last-modified: Thu, 29 Jul 2021 16:15:43 GMT
etag: "6102d42f-6620"
expires: Sun, 31 Dec 2023 08:43:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 131692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m88edTf%2FsNJZuVQNCsZO%2FpiP0bN9b1X6%2BeSc0zjzO3H%2FJFoBQf0WAfmNMugnQ6PZMXNK00t1W2idKfAuKkWtg%2FBlZgWk8DC9wmdFUKHe1fJRDBbJHpllDMUf2N%2Bq1GHTk%2BQ0BVcsCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee156a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/slot-spin.gif
188.114.96.1200 OK 88 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/slot-spin.gif
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /au/aweber/lp4/images/slot-spin.gif HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/gif
content-length: 87599
last-modified: Thu, 29 Jul 2021 16:16:08 GMT
etag: "6102d448-1562f"
expires: Tue, 26 Dec 2023 21:51:06 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 516410
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a7OcumqpC56pVy6XnSFtj1j2pdW0FCPOo85i0aO1vftFnT3ywsSmdahOduOElIWRls%2FBmG9aDJsbjCixMpSTtY%2Fa2Xy21O%2F29QiaMFYSTcW373GsI3WzpW%2BFgwEHQFfAbr7wQ3Gpog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee356a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/slot-result-1.png
188.114.96.1200 OK 20 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/slot-result-1.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 9e294699a5e44eae1fa11f56be812825
e6ed17668abfe8c78983e504b0b03583fced343c
70f040dc111e1c2e153959bcf8484dd72cd06d4c41619cf18525e03acec687e0
GET /au/aweber/lp4/images/slot-result-1.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 20059
last-modified: Thu, 29 Jul 2021 16:15:56 GMT
etag: "6102d43c-4e5b"
expires: Mon, 25 Dec 2023 00:00:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 681473
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=urR0QLDcPJUGA3o6fmRg4MrqMTEYvinEFx%2BXLCrNEDYx3sFgVtzIfc6AKAPlyArGRkQWrPU7xofrgJlreXXr1xcWporN0ANTPTu318XO7LT5lrRJ9bMNzNIFr%2FPANASyAwUwhBzgGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee456a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/slot-result-2.png
188.114.96.1200 OK 27 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/slot-result-2.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash ad75288fbb44c2cc60575758fc08abea
4cb39e6873cf7e04473d7e612a49f27a580d9b24
9f6fb99bd75d5cbc91ca328778620775ffedbd8572d04e16cfd32fae52aca3b7
GET /au/aweber/lp4/images/slot-result-2.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 26719
last-modified: Thu, 29 Jul 2021 16:15:56 GMT
etag: "6102d43c-685f"
expires: Fri, 22 Dec 2023 03:51:10 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 926807
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NxA817Th88tGYQ2Kx0jL9BsjQr2%2FCTcNGCCzWF1JuSI2fLN%2Bu%2Bte472bUURkm32%2BHzjqt9hFbbQd8uUybCfN%2FWy%2F7fZRPkl3x0atyUNw71BYyOIs5oRjBXD428YVeVLI7f8xekteFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee556a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/slot-win.png
188.114.96.1200 OK 14 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/slot-win.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash e44b8ccb1f094f7ab91e121c062b9d8b
7518c98361735271c17a0e204a5f54744b1dd4be
a8b500964a73f03d1b9b394f3704757c67c95492c6895d933c1347f0e2629b98
GET /au/aweber/lp4/images/slot-win.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 13517
last-modified: Thu, 29 Jul 2021 16:15:45 GMT
etag: "6102d431-34cd"
expires: Mon, 25 Dec 2023 00:00:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 681473
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=64XInIMJ51hhZCw5vKzWo3jpn06Er9Ipv4rs3QQ9dgkAfNdA176nfe3LLNHE6IpU%2FFDsN8nMddAJrPJfM4CU61%2FyKWbz7XtHZKcfYmTOgvgWT37emSbcLlXFFD%2FYI0pbLjvGNVuRsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee656a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/red-arrow-left.png
188.114.96.1200 OK 913 B URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/red-arrow-left.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 130f4f22757530332ef944489bdb5aa5
cc007456d005e17183fc1cae19384bd9981da721
773a87f14e23870383294b8ecdef50e9c3c2f6bd0f025f58b9a18a86ab7da2cc
GET /au/aweber/lp4/images/red-arrow-left.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 913
last-modified: Thu, 29 Jul 2021 16:16:11 GMT
etag: "6102d44b-391"
expires: Sun, 31 Dec 2023 08:43:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 131692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zLEHPJmh7MkX6ZLjtEJMWGdmmqV1cdWZbO54lcQyxX2x1GOKhdiL9UaZaH3XsvFXzPQeGugHDWY0GOgC5tPqIrdBkKT0w0amteFbNhG%2BXGAghYDChLofZHpAk301bY3ZfpRsdzCfVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee856a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/images/red-arrow-right.png
188.114.96.1200 OK 916 B URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/red-arrow-right.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 8cb7b80e85b72706fa368f13e40e6baf
08612867d514b3bf31e9f93390722963362064e1
721d5ad469a842631c8a8b4aca7b69a01efcad127397f1bef2c4cea3f197f93c
GET /au/aweber/lp4/images/red-arrow-right.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 916
last-modified: Thu, 29 Jul 2021 16:15:45 GMT
etag: "6102d431-394"
expires: Sun, 31 Dec 2023 08:43:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 131692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=finf4pCRF6p6Q%2FgQhgQxdLXqzGTX9g%2BnjE1a6wAZ%2FKY0NwMrym1d2sWVAbC5K5em0Xbc1W7SnbB8JcGKmQ%2F9HhoDl3ktfC7GPGRytWN1LSkfU0Y6o0AxchAg%2Bc1v3Wk2fQx%2FEegSVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823ee956a4-OSL
alt-svc: h3=":443"; ma=86400
dishesha.net/zone?&pub=0&zone_id=4463442&is_mobile=false&domain=casinomanwinning.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.250200 OK 0 B URL POST HTTP/2 dishesha.net/zone?&pub=0&zone_id=4463442&is_mobile=false&domain=casinomanwinning.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.250:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectdishesha.net
Fingerprint17:96:65:F2:8C:A4:AC:71:34:A3:44:15:29:C8:26:D2:43:75:F5:57
ValiditySat, 11 Nov 2023 05:09:53 GMT - Fri, 09 Feb 2024 05:09:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4463442&is_mobile=false&domain=casinomanwinning.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: dishesha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:57 GMT
content-length: 0
x-trace-id: fd86d3d2518d6d54a4b27b7e72fb67fb
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
casinomanwinning.com/au/aweber/lp4/images/arrow.png
188.114.96.1200 OK 168 B URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/images/arrow.png
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 73d1df0363a7baacf1e60797df2d6e33
10795450f4aa1a2e3499a13a9135fe5d77bbdb87
75b5e0cdab12a3f715f38d7d1d5a7bdbcdd5f96e3f6a293841152ce47d4249cb
GET /au/aweber/lp4/images/arrow.png HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: image/png
content-length: 168
last-modified: Thu, 29 Jul 2021 16:15:49 GMT
etag: "6102d435-a8"
expires: Sun, 31 Dec 2023 08:43:06 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 131691
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Dtg8w7YPt1Y1UZI5uSNJ7f1EnpjRv%2FbsgBP4LhitI8%2FLyUnhIg33LXi4xOl%2FzWNIaHc6vRoZmZfQNZmX0rcdCeB3oeKk78XSAiUwmPCE7Ed40w9%2B4S2vXZzUa%2BbSajwmMH1K2ZVAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6998488e856a4-OSL
alt-svc: h3=":443"; ma=86400
my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
139.45.195.8200 OK 697 B URL GET HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847
IP 139.45.195.8:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
Hash 1d1522de413d0b27a43e7be4efeb0405
58c52eec6da93a26b374308e6189b8af139624f7
d9b7a5a22d87f08fbcb41ab49b3494cf35afa659a2b143800bfab1c62b07b193
GET /p.js?f=sync&lr=1&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
casinomanwinning.com/au/aweber/lp4/js/jquery.min.js
188.114.96.1200 OK 35 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/js/jquery.min.js
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type ASCII text, with very long lines (32063)
Hash 723e11a50995eef960d59451910e2cb4
76e617c6f9bad2602bdea1c20d50ba7c89a55097
ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41
GET /au/aweber/lp4/js/jquery.min.js HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: application/javascript
last-modified: Thu, 29 Jul 2021 16:16:09 GMT
etag: W/"6102d449-17b4b"
expires: Mon, 25 Dec 2023 00:00:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 681473
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r7zuRGGE1v5LVg81SROrrcE4%2FOe%2Bv38dFNBvkpdDC9fxfSBRStdjqtHBcBfWTBtRkS9m4HyDF3Bo79RsqW4CcTokWhhvESSc45yHjzNSUGgYwtlnM%2BvJFazK%2BpnMI6jGnGFm3fG9ZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699823eeb56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unphionetor.com/vctx?t=90679
139.45.197.236204 No Content 0 B URL GET HTTP/2 unphionetor.com/vctx?t=90679
IP 139.45.197.236:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /vctx?t=90679 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=90679
139.45.197.236204 No Content 0 B URL GET HTTP/2 unphionetor.com/vctx?t=90679
IP 139.45.197.236:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /vctx?t=90679 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=93925
139.45.197.236204 No Content 0 B URL GET HTTP/2 unphionetor.com/vctx?t=93925
IP 139.45.197.236:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /vctx?t=93925 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=https%3A%2F%2Fcasinomanwinning.com%2Fau%2Faweber%2Flp4%2Findex.html
139.45.195.8200 OK 43 B URL GET HTTP/2 my.rtmark.net/img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=https%3A%2F%2Fcasinomanwinning.com%2Fau%2Faweber%2Flp4%2Findex.html
IP 139.45.195.8:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=74d44051bdf63891ec9a8cba30e46aed2367a03bc7dd2aa700e02f28bbdd2847&ttl=&rurl=https%3A%2F%2Fcasinomanwinning.com%2Fau%2Faweber%2Flp4%2Findex.html HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=db43ff4e21fe4c1e9b806ac023548843; expires=Sun, 01 Dec 2024 21:17:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
casinomanwinning.com/au/aweber/lp4/sounds/spin.mp3
188.114.96.1206 Partial Content 51 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/sounds/spin.mp3
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
GET /au/aweber/lp4/sounds/spin.mp3 HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 21:17:58 GMT
content-type: audio/mpeg
content-length: 51290
last-modified: Thu, 29 Jul 2021 16:16:14 GMT
etag: "6102d44e-c85a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
content-range: bytes 0-51289/51290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pt6IsgQ1y1U%2BUiPBNFUEjcLBiuQx6UP%2FH2LLrtHoC%2B15fRAu5r0HMzaXskq1CnXl7kioj25z2BDJxvx20L%2B0UgBxV4xCr3cYnfhoUATstvC%2B2SUuPwhLwpNwsNB9lpkDQppJSJTD%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f69985698756a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/sounds/alert.mp3
188.114.96.1206 Partial Content 8.8 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/sounds/alert.mp3
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /au/aweber/lp4/sounds/alert.mp3 HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 21:17:58 GMT
content-type: audio/mpeg
content-length: 8802
last-modified: Thu, 29 Jul 2021 16:16:16 GMT
etag: "6102d450-2262"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
content-range: bytes 0-8801/8802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g9VBajuSPbByAUQbzVnjneOzBzLMP84jk8HHaymBjKdKt3fp4vR8lxJXLXgGsGT1h4o2UvME4JG2h%2B4PGswitYoowuIYfQMoDS7WuZMKnrZHlG%2B9lk%2BgPT8PFJF%2FofFGeGl2p4A63w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f69985698556a4-OSL
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/sounds/win.mp3
188.114.96.1206 Partial Content 22 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/sounds/win.mp3
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /au/aweber/lp4/sounds/win.mp3 HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 21:17:58 GMT
content-type: audio/mpeg
content-length: 22067
last-modified: Thu, 29 Jul 2021 16:16:14 GMT
etag: "6102d44e-5633"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
content-range: bytes 0-22066/22067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qh0NW%2BA0Sz1q6yo4MiV6FsAYX5YZDnjByJP1xAiZFZMh8aCep%2Bh1aBZeYDMLmE10UStoSVS%2FIGDJ%2BXaoVrWDydrcpQpn82A9%2BUqdJhQ5y9DRWstMhhNl6g5Js0gz4wUnwqPSYIwo2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f69985698656a4-OSL
alt-svc: h3=":443"; ma=86400
unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
139.45.197.236204 No Content 0 B URL POST HTTP/2 unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
IP 139.45.197.236:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /vbl?t=90679&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=93925&bid=undefined&aid=undefined
139.45.197.236204 No Content 0 B URL POST HTTP/2 unphionetor.com/vbl?t=93925&bid=undefined&aid=undefined
IP 139.45.197.236:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /vbl?t=93925&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
139.45.197.236204 No Content 0 B URL POST HTTP/2 unphionetor.com/vbl?t=90679&bid=undefined&aid=undefined
IP 139.45.197.236:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /vbl?t=90679&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://casinomanwinning.com
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 02 Dec 2023 21:17:58 GMT
access-control-allow-origin: https://casinomanwinning.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dishesha.net/pfe/current/micro.tag.min.js?z=4463442&sw=/sw-check-permissions-3ed8f.js
139.45.197.250200 OK 27 kB URL GET HTTP/2 dishesha.net/pfe/current/micro.tag.min.js?z=4463442&sw=/sw-check-permissions-3ed8f.js
IP 139.45.197.250:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectdishesha.net
Fingerprint17:96:65:F2:8C:A4:AC:71:34:A3:44:15:29:C8:26:D2:43:75:F5:57
ValiditySat, 11 Nov 2023 05:09:53 GMT - Fri, 09 Feb 2024 05:09:52 GMT
File type ASCII text, with very long lines (27007), with no line terminators
Hash 5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba
GET /pfe/current/micro.tag.min.js?z=4463442&sw=/sw-check-permissions-3ed8f.js HTTP/1.1
Host: dishesha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 13:38:02 GMT
etag: W/"65649bba-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=90679
139.45.197.240200 OK 5.2 kB URL GET HTTP/2 propeller-tracking.com/fv.js?t=90679
IP 139.45.197.240:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectpropeller-tracking.com
Fingerprint70:5D:CE:14:58:86:F4:ED:D1:17:13:90:74:C7:60:E7:CF:F3:90:9F
ValidityThu, 02 Nov 2023 20:01:09 GMT - Wed, 31 Jan 2024 20:01:08 GMT
File type ASCII text, with very long lines (5331), with no line terminators
Hash 061bf31ab8394112d1dffdd5ec872c2a
f87a9877e0b08b1ddcc15351cee29a4d8ba34315
b24829831c07c3a35bc35c242324c3ee90c151e4e53de8e28f579e4161819414
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
casinomanwinning.com/sw-check-permissions-3ed8f.js
188.114.96.1200 OK 566 B URL GET HTTP/3 casinomanwinning.com/sw-check-permissions-3ed8f.js
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type ASCII text, with very long lines (605), with no line terminators
Hash 8fe1de52972917e15e67f5a5ee3cc2a2
eac525b2344445d94f46ec08c5559c6355384848
15a75bc2fa4a909c3e63949fb3895c310b44cbab5c00064f3f7eebbae7adfc3c
GET /sw-check-permissions-3ed8f.js HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:58 GMT
content-type: application/javascript
last-modified: Fri, 20 Aug 2021 17:48:25 GMT
etag: W/"611feae9-236"
expires: Mon, 25 Dec 2023 00:00:07 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 681471
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=69h3nkuUTik8pYzi9O1M6wL8MtjLPPhUFEnDc5HJFxYvxLak3HeQfTV3q8afiNUj9OLFE6fSdwav6XTn37Ii0HoOM6koBWwUEGpY3EigkZog4NJJFVtOeck08lhn3gJxffkq7mDGpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f69989bd7456a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/css/style.css
188.114.96.1200 OK 13 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/css/style.css
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
Hash 538445a521226e69b9c4231a52ad5e79
113653898486204b16bef699f7202ecbd6439e84
572ba0a7a98f61e3633c7bd3e7108dde51a8053accc6163abedf4302aebf774c
GET /au/aweber/lp4/css/style.css HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 16:15:40 GMT
etag: W/"6102d42c-33a6"
expires: Mon, 25 Dec 2023 00:00:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 681473
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eCXf38EHX%2FkWRUgaovqc9bY6lWp0S%2B2B5WQdMmz7OGmPCiV8oLSdrsohJOVirvZ%2B7owCtEgpE%2FB3RdHA4l2sEWbv1rmSSMHgrKRxqGQPni%2Bg8roqGiZifqILB6CwQM3yA3Kfk3Oxdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699822ed956a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
propeller-tracking.com/fv.js?t=90679
139.45.197.240200 OK 5.2 kB URL GET HTTP/2 propeller-tracking.com/fv.js?t=90679
IP 139.45.197.240:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectpropeller-tracking.com
Fingerprint70:5D:CE:14:58:86:F4:ED:D1:17:13:90:74:C7:60:E7:CF:F3:90:9F
ValidityThu, 02 Nov 2023 20:01:09 GMT - Wed, 31 Jan 2024 20:01:08 GMT
File type ASCII text, with very long lines (5331), with no line terminators
Hash 061bf31ab8394112d1dffdd5ec872c2a
f87a9877e0b08b1ddcc15351cee29a4d8ba34315
b24829831c07c3a35bc35c242324c3ee90c151e4e53de8e28f579e4161819414
GET /fv.js?t=90679 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
188.114.96.1200 OK 22 kB URL User Request GET HTTP/2 casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 3d67a4d46d45beb9a2d7295e93da2254
5b181f77b5410678dc74520cad4f717f0cc8f602
6834c57326ce37d5e8d9ca4593ec10999c2f05e33f508e6e269e775d1606bfe6
GET /au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58 HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/html
last-modified: Wed, 21 Dec 2022 14:25:51 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=weHwiiRgFWVRUAQpBXTkHbTGdEp44tHzJs%2FIaaGd9k0%2FFrys2jFvlkqR0Qe6Ln0m1bw0faLRk9dDCu7dTCDQKh9c5GJ70q4wuCA41Y7ocIVCzwv3yUMPXP8%2BcNd%2F5CNvyEpgvjJCkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6997d2aa256c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
casinomanwinning.com/favicon.ico
188.114.96.1404 Not Found 153 B URL GET HTTP/3 casinomanwinning.com/favicon.ico
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e
GET /favicon.ico HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 02 Dec 2023 21:17:59 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6LqEnfnfeBF1IMwg0n6HunoFkKnimC2ubDPq6Az5lEuErq%2FPK38wQIBkRCLDMQC239VkmOf1WPIaWZaMBIvJQFem3uZmYvijHICLZh6VGdIruvgjZP%2BKxVQpyhr3rdu4l5tatqa3wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f69987db8a56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
casinomanwinning.com/au/aweber/lp4/css/form.css
188.114.96.1200 OK 1.1 kB URL GET HTTP/3 casinomanwinning.com/au/aweber/lp4/css/form.css
IP 188.114.96.1:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerGoogle Trust Services LLC
Subjectcasinomanwinning.com
Fingerprint3A:9D:B3:3A:71:A5:29:7F:C3:D7:6B:F6:BC:9D:AB:8D:02:55:1D:F1
ValidityTue, 07 Nov 2023 22:22:10 GMT - Mon, 05 Feb 2024 22:22:09 GMT
File type ASCII text, with very long lines (1196), with no line terminators
Hash 08185ebf7a1be2db6a97c89631721a9d
2f9f2067f899bea2a8cd92e44beae3706aec01ae
7384d3a708b5e1437501c2d64dc4aefb1b463140479db36870a975d2ae4efb8c
GET /au/aweber/lp4/css/form.css HTTP/1.1
Host: casinomanwinning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 16:15:40 GMT
etag: W/"6102d42c-434"
expires: Sun, 31 Dec 2023 08:43:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 131692
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U3Cd1wO2GiwkSVsz1UsX7PmBTwuBCvUTKjuAM0bViMq3P6im9K4HtbA3H27Q9m178n5bV1yecp5m%2F1KEGRrDGTDDxdDzI7jeZcrnPKGojJSmYo80DqNjoGqgBxK1MuLiBmhrgoJJgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f699822eda56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
propeller-tracking.com/fv.js?t=93925
139.45.197.240200 OK 5.2 kB URL GET HTTP/2 propeller-tracking.com/fv.js?t=93925
IP 139.45.197.240:443
Requested by https://casinomanwinning.com/au/aweber/lp4/index.html?cid=wluru8fncl0hgt2t2dokrb58
Certificate IssuerLet's Encrypt
Subjectpropeller-tracking.com
Fingerprint70:5D:CE:14:58:86:F4:ED:D1:17:13:90:74:C7:60:E7:CF:F3:90:9F
ValidityThu, 02 Nov 2023 20:01:09 GMT - Wed, 31 Jan 2024 20:01:08 GMT
File type ASCII text, with very long lines (5331), with no line terminators
Hash 061bf31ab8394112d1dffdd5ec872c2a
f87a9877e0b08b1ddcc15351cee29a4d8ba34315
b24829831c07c3a35bc35c242324c3ee90c151e4e53de8e28f579e4161819414
GET /fv.js?t=93925 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casinomanwinning.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 21:17:57 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2