otnetsk.com/?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290
302 Found 240 B URL HTTP/1.1 otnetsk.com/?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8f33482f2633b1546cb848f36ee980cb
5a2a07205fde0c8135caf46765de67bd15e38ab0
e5709de1156a9a58393d8654bfb172aef2cdebdfd142cd8c524ebc0f0e456de8
GET /?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290 HTTP/1.1
Host: otnetsk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sun, 27 Nov 2022 19:50:44 GMT
content-type: text/html; charset=utf-8
content-length: 240
cache-control: private
location: https://otnetsk.com/?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290&ckmguid=cb63f416-e0b7-49dc-8dca-d6fe86f24f21
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3838
Expires: Sun, 27 Nov 2022 20:54:42 GMT
Date: Sun, 27 Nov 2022 19:50:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3008
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:44 GMT
Last-Modified: Sun, 27 Nov 2022 19:00:36 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Sun, 27 Nov 2022 21:39:31 GMT
Date: Sun, 27 Nov 2022 19:50:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 19:19:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1880
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MA9At/ZjMiciRLohDP61HC2xTDOxq/ncRxbj9kWAtmi1WTjAncUsILR0AeAkaiqOtOfN8VV+BrM=
x-amz-request-id: Q59VE7S5ZQSAX7C3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 19:41:46 GMT
age: 538
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:50:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 19:08:54 GMT
cache-control: public,max-age=3600
age: 2511
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1751
Cache-Control: max-age=135918
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:45 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:36:03 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 2b65def47a18f8801abfbaef668c5e6a
0fe7521a33d40d884f6420cb2f5e72fa8b15338e
2ec2089283c0d4f02091d9635266491d1f5a73ed33629e79cde1cd09bf8a9e98
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:50:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 01 Dec 2022 17:21:09 GMT
ETag: "0fe7521a33d40d884f6420cb2f5e72fa8b15338e"
Last-Modified: Sun, 27 Nov 2022 17:21:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770d6503da770b41-OSL
otnetsk.com/?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290&ckmguid=cb63f416-e0b7-49dc-8dca-d6fe86f24f21
302 Found 287 B URL HTTP/1.1 otnetsk.com/?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290&ckmguid=cb63f416-e0b7-49dc-8dca-d6fe86f24f21
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash c640f255d009079ef24666e7b660a568
b9ae22aaefa9a66321ce673092d6d93a8c83f21f
dae08c4fba24c0af0ef043e4f90b3c2d7aeed61adf8c791142ddb25ceb5b57ab
GET /?a=360&c=7&s1=&s2=6383bf83a33e600001f4c290&ckmguid=cb63f416-e0b7-49dc-8dca-d6fe86f24f21 HTTP/1.1
Host: otnetsk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 287
Content-Type: text/html; charset=utf-8
Date: Sun, 27 Nov 2022 19:50:45 GMT
Location: https://www.freespinswizard.com/lp209?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=Zy1Yy8qLyXZ6ZmCl+54Vq9DafVpnFvN1d8p3IJqfIhCWywq4BK4EAQ==; domain=.otnetsk.com; path=/; HttpOnly
trk=QCnk9SSxnpl6ZmCl+54Vq9DafVpnFvN1d8p3IJqfIhCWywq4BK4EAQ==; domain=.otnetsk.com; expires=Wed, 27-Nov-2024 19:50:45 GMT; path=/; HttpOnly
c4=Zy1Yy8qLyXaxIMqcSjJFC98b99Z/VYisKC1sgFpzgs0=; domain=.otnetsk.com; expires=Tue, 27-Dec-2022 19:50:45 GMT; path=/; HttpOnly
Connection: close
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: B4fyIpkc8viLkM6hjuFkFA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JMtgYflA1Y1+t1WOwAbok25oIhg=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4f221590df4f7ca92d41bad23d80010
6915815951976a6ea9c0dcc65d18a55029bb7787
790c90f0ea6f733284d04e773448d16fe8a325c2db63b83a72fb042d8e1a31df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "790C90F0EA6F733284D04E773448D16FE8A325C2DB63B83A72FB042D8E1A31DF"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16543
Expires: Mon, 28 Nov 2022 00:26:29 GMT
Date: Sun, 27 Nov 2022 19:50:46 GMT
Connection: keep-alive
www.freespinswizard.com/lp209?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
301 Moved Permanently 0 B URL HTTP/1.1 www.freespinswizard.com/lp209?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lp209?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Location: /lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
X-Frame-Options: DENY
Vary: Accept-Language, Cookie
Content-Language: en-gb
X-Content-Type-Options: nosniff
Set-Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; Path=/
visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; expires=Sun, 27 Nov 2022 22:50:46 GMT; Max-Age=10800; Path=/
da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; Path=/
sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; expires=Sun, 11 Dec 2022 19:50:46 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax
www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
200 OK 7.4 kB URL HTTP/1.1 www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (554), with CRLF, LF line terminators
Hash e910e73468b07d1f77157c7bca2266bb
9fcfd68d05dd5f53a29603cd0fc6233409db6dbc
5b78a48a3f8eef2387c33229d3a2718c9711c74ac4ab284febafa3b45858cf3d
GET /lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: DENY
Vary: Accept-Encoding, Cookie, Accept-Language
Content-Language: en-gb
X-Content-Type-Options: nosniff
Set-Cookie: da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; Path=/
csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry; expires=Sun, 26 Nov 2023 19:50:46 GMT; Max-Age=31449600; Path=/; SameSite=Lax
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5386
Cache-Control: max-age=132025
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:31:11 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
www.freespinswizard.com/static/common-static/css/main/template-01-page.css?v=24
200 OK 3.1 kB URL HTTP/1.1 www.freespinswizard.com/static/common-static/css/main/template-01-page.css?v=24
IP
File type assembler source, ASCII text
Hash c4b990b66e7d49efe1fda85d2619be00
4b36610f6f1319bbfc8fda1690cd915eddeaefc4
8e26d150130b9544803d439d7d78944ee1d3902291e67da9fcef85481b3ef3b4
GET /static/common-static/css/main/template-01-page.css?v=24 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: text/css
Last-Modified: Wed, 09 Nov 2022 15:28:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash ebed87c2caeb00f3daca76b91f1d5856
0b524def376f7bf90143e8c002fbbdc776d4b457
9d50a898f0edaf6c38ef9827dcfc72de00b8afd71fde693644c3e7424f6efaa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3262
Cache-Control: max-age=91723
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63827623-118"
Expires: Mon, 28 Nov 2022 21:19:29 GMT
Last-Modified: Sat, 26 Nov 2022 20:25:07 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash ebed87c2caeb00f3daca76b91f1d5856
0b524def376f7bf90143e8c002fbbdc776d4b457
9d50a898f0edaf6c38ef9827dcfc72de00b8afd71fde693644c3e7424f6efaa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3262
Cache-Control: max-age=91723
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63827623-118"
Expires: Mon, 28 Nov 2022 21:19:29 GMT
Last-Modified: Sat, 26 Nov 2022 20:25:07 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:50:46 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 423955
expires: Fri, 17 Nov 2023 19:50:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=prmTzip5zTSZY1j6X1knRhMGEeBoGE7y1IAnkA1wRcjxJ3Gj2Kv4Av5Zui%2B1SIa%2FzzBN0S%2BqZ2ZrGXzVUGQgHWXNJI7YpDvmCp7pTPqory7Ohp3T0edGKROvnSn5XVNSYUVwxNBW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 770d650c6d03b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.freespinswizard.com/static/js/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/1.1 www.freespinswizard.com/static/js/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 2d495f5054edf410ef67b9fe39614157
f5048eecb20bffb83bf13f272d2b6599d2ed1a89
97ada30dad98a4983f45c054190b82147114acf4145f843c1c9ee9cd3123f698
Analyzer Verdict Alert fortinet Phishing
GET /static/js/jquery-3.3.1.min.js HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 23 Oct 2020 17:50:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
200 OK 1.1 kB URL HTTP/1.1 www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
IP
File type assembler source, ASCII text
Hash 2bd3131d4bffbc730f2732509ca1599d
5716b8b4393c57d0cd0a51899fb51bcbb624aebd
f8789289c978c5391cc93130824c77678f2a2df83f11a21a607258d94a84daab
GET /static/common-static/css/main/ppc-footer.css?v=24 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: text/css
Last-Modified: Tue, 21 Jun 2022 10:05:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5386
Cache-Control: max-age=132025
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:31:11 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
IP
File type ASCII text, with very long lines (20831)
Hash 368c425fc94c424e1688caadefbed981
13d24c22c199ef6668d758434819f44307a65094
ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:50:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 960482
expires: Fri, 17 Nov 2023 19:50:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tfV3rHCuL0tsne%2FFY6Xf3HVUViD6KBu2wOUNdxBPkaMg97kzTatC%2B%2FeOgyl466WMnAZZHJPm97%2BmJeWi131j7%2Fr2PNMM4HX9PVnpGKhWFVtSlbCs5F8LHQP7%2BPX78A1KmsdiJhlD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 770d650c7cbfb518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
200 OK 25 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash f78cd57b6081f104175b3e94246662c4
6b10237d9c4f13a6f98670719da8d5dfe945657c
2f9cc76b1e4efa2d785e058c5079e5b948cfb77d97893912037ac7a9e065388e
GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:50:46 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 08/15/2022 13:52:49
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f7733ec5f88b024c17e361a98b757e28
cdn-cache: HIT
cf-cache-status: HIT
age: 221720
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 770d650c5cde1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.freespinswizard.com/static/js/custom.js?v=24
200 OK 926 B URL HTTP/1.1 www.freespinswizard.com/static/js/custom.js?v=24
IP
Hash a712be49f55b9de162f2d8fd992af49b
ef0d07082f772dcd523878a4f24bc8b769affd67
00d86e8eb5c558945beabfb7a4fee49e6ae97784596786dcc49449af5465b32c
Analyzer Verdict Alert fortinet Phishing
GET /static/js/custom.js?v=24 HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/x-javascript
Last-Modified: Tue, 25 Oct 2022 13:12:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash ebed87c2caeb00f3daca76b91f1d5856
0b524def376f7bf90143e8c002fbbdc776d4b457
9d50a898f0edaf6c38ef9827dcfc72de00b8afd71fde693644c3e7424f6efaa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3262
Cache-Control: max-age=91723
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63827623-118"
Expires: Mon, 28 Nov 2022 21:19:29 GMT
Last-Modified: Sat, 26 Nov 2022 20:25:07 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
www.googleoptimize.com/optimize.js?id=OPT-TNF9KVB
200 OK 47 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-TNF9KVB
IP
File type ASCII text, with very long lines (1921)
Hash 64f71515f65df9338ceabb643a2b0e00
68a10b57d951ee5d98d9c35101f1989cc0df1637
53fd1ee5f166cc6e7000bd7f9e9d779d481d372040a3b529e49b994cddd05eb8
GET /optimize.js?id=OPT-TNF9KVB HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 19:50:46 GMT
expires: Sun, 27 Nov 2022 19:50:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46854
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.freespinswizard.com/static/common-static/img/da-landing-page/DA-LeadForm-BtnArrow.svg
200 OK 349 B URL HTTP/1.1 www.freespinswizard.com/static/common-static/img/da-landing-page/DA-LeadForm-BtnArrow.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (349), with no line terminators
Hash 2992a83946a571d4e54d0be2b60c2a96
1661240249e46e288ff55c2ba0d5bcbd604cbdbc
bddff42a343959a964f561429d593e8ebf13a03047c8a166b17b7f65beec466f
Analyzer Verdict Alert fortinet Phishing
GET /static/common-static/img/da-landing-page/DA-LeadForm-BtnArrow.svg HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/lp209/?utm_click_id=9209995&channel=offertonic&network=offertonic&publisher=360&sub_pub=&var6=756&var7=4&var8=7
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: image/svg+xml
Content-Length: 349
Last-Modified: Wed, 09 Nov 2022 15:28:29 GMT
Connection: keep-alive
ETag: "636bc71d-15d"
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
use.fontawesome.com/releases/v5.6.3/css/all.css
200 OK 12 kB URL HTTP/2 use.fontawesome.com/releases/v5.6.3/css/all.css
IP
File type ASCII text, with very long lines (53592), with no line terminators
Hash 74583c6e3546faca8f48d7b3a6d9d627
52fee98409a25dab8fc536a2b679672af8015a3d
29d28d1905d3c1276e0d2fd16fdf3ad1e14cecf3e40cb143bcaddd62249abc03
GET /releases/v5.6.3/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:50:46 GMT
content-type: text/css
x-amz-id-2: pjTeMppmmKy2yfey9y7j18UIFw9WbwapUPIJ+IMkYcimIyPOQltBVapR0pw2QLVKR1ItkRwNm34=
x-amz-request-id: 34H6GRS22N6D0AJ4
last-modified: Wed, 30 Jun 2021 15:44:33 GMT
etag: W/"dc93d584e41f8417f6b7163320d34329"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 81581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W3cxixBuraVCWzlRsnLsDLLBYgjSEMOSG8foqeh5vb6r5uaU0qozk6KRggAMkHQrnMWwItXUkfNAzUMIaaPhTkwEEWxAYZPNvbh1Owc4p%2BTsTS2cbmHT%2Bq4NM8ZkoJoO%2F6AJ9Q%2FW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770d650cdfa07773-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WVHQS4Z
200 OK 66 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WVHQS4Z
IP
File type ASCII text, with very long lines (11349)
Hash d99784ae72536866d72af063dc5f39f0
ba636a0a8089d6bafe522ef5adbedb0200b9e9df
31d34a041f8e9c166177c65ccb308759113b61ec8dcd5dfffb88a4d707557110
GET /gtm.js?id=GTM-WVHQS4Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 19:50:46 GMT
expires: Sun, 27 Nov 2022 19:50:46 GMT
cache-control: private, max-age=900
last-modified: Sun, 27 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65662
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.freespinswizard.com/static/fonts/Saira_Condensed-Bold.ttf
200 OK 83 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/Saira_Condensed-Bold.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 23 names, Microsoft, language 0x409, Copyright 2020 The Saira Project Authors (https://github.com/Omnibus-Type/Saira)Saira CondensedB\012- data
Hash f2ee186352d83de03ebdd14e2bfde111
5be00adae48016a60ba62c6ed5c8600d62bbc1f4
213c88f20da7e3ae2e260caff91f9a03bc472dc5734e1bafc65b171bad93a2cc
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Saira_Condensed-Bold.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/octet-stream
Content-Length: 82752
Last-Modified: Tue, 12 Apr 2022 14:58:28 GMT
Connection: keep-alive
ETag: "62559394-14340"
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinswizard.com/static/fonts/Saira-Regular.ttf
200 OK 83 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/Saira-Regular.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 21 names, Microsoft, language 0x409, Copyright 2020 The Saira Project Authors (https://github.com/Omnibus-Type/Saira)SairaRegular1.10\012- data
Hash aafce3f55bd00b45f3abebf796485a77
e35430a80a686547343ca221c0997aa1044e67bd
324e18decc80951cfbed08ed230cc3dc47aea321fdb17b95df956498b0440306
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Saira-Regular.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/octet-stream
Content-Length: 82764
Last-Modified: Tue, 12 Apr 2022 14:58:28 GMT
Connection: keep-alive
ETag: "62559394-1434c"
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinswizard.com/static/fonts/Saira-Bold.ttf
200 OK 82 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/Saira-Bold.ttf
IP
File type TrueType Font data, 16 tables, 1st "GDEF", 21 names, Microsoft, language 0x409, Copyright 2020 The Saira Project Authors (https://github.com/Omnibus-Type/Saira)SairaBold1.101;O\012- data
Hash 7d6843ecee0081d84050cc37a01a23d5
752202ac9e530618abb235fedbb52dafe9350fb1
5784c7eab4e5c2d4bb1d7ae1f9df6a7007955143e2ff9776e72aee7e269ec4de
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Saira-Bold.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/octet-stream
Content-Length: 82516
Last-Modified: Tue, 12 Apr 2022 14:58:28 GMT
Connection: keep-alive
ETag: "62559394-14254"
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-3.png
200 OK 2.7 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-3.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e44b353425db67b3cddc26e47812621a
16193d327c73e97db9a017885671825771ce21f4
db45a160123af488518bddf29b35e1fa7e487b670e97fcebc57b8099dede5b58
GET /qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-3.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655811024Footer-3.webp"
content-type: image/webp
etag: "e44b353425db67b3cddc26e47812621a"
last-modified: Tue, 21 Jun 2022 12:36:37 GMT
date: Sun, 27 Nov 2022 19:50:46 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=3;cpu=1;start=2022-11-27T19:50:46.761Z;desc=hit,rtt;dur=18
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 2660
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811023Footer-2.png
200 OK 1.0 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811023Footer-2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5816fe93626b1c59310fedf9ec5362b9
0799a722d493f08c8bf06d8e149a2830488259aa
ad009db269ca098a64572fdc67038e022480ea4808d30f4ec4aa821f36954cb2
GET /qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811023Footer-2.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655811023Footer-2.webp"
content-type: image/webp
etag: "5816fe93626b1c59310fedf9ec5362b9"
last-modified: Tue, 21 Jun 2022 12:36:37 GMT
date: Sun, 27 Nov 2022 19:50:46 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=1;start=2022-11-27T19:50:46.761Z;desc=hit,rtt;dur=18
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 1038
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/LandingPageContent/2022/11/18/1668781887FSW_Web-50FS_ND.png
200 OK 127 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/LandingPageContent/2022/11/18/1668781887FSW_Web-50FS_ND.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 127 kB (127276 bytes)
Hash e23a9654634e801f44b860636df762e1
508371828f06cbbe84823d62a26012e7a452f31f
e3d3cad8178cbee1358f5e2bb55fd4a6ae73aafbce9e2f1d4de62c51c293de60
GET /qih/image/upload/f_auto/v1/multisite/media/LandingPageContent/2022/11/18/1668781887FSW_Web-50FS_ND.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1668781887FSW_Web-50FS_ND.webp"
content-type: image/webp
etag: "e23a9654634e801f44b860636df762e1"
last-modified: Fri, 18 Nov 2022 15:01:12 GMT
date: Sun, 27 Nov 2022 19:50:46 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=3;cpu=1;start=2022-11-27T19:50:46.760Z;desc=hit,rtt;dur=18
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 127276
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994133Logo-Light.png
200 OK 3.7 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994133Logo-Light.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c24fb6f19a78bc4b2ab04721a944bf32
e6043d68fdd2dab34d46efff6571b1a8b519bfc0
6c9ad0abe17f16276f54025a953952814245c81ca6a10e60b0eb41f473ffc205
GET /qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994133Logo-Light.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="1655994133Logo-Light.webp"
content-type: image/webp
etag: "c24fb6f19a78bc4b2ab04721a944bf32"
last-modified: Thu, 28 Jul 2022 09:35:54 GMT
date: Sun, 27 Nov 2022 19:50:46 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=1;start=2022-11-27T19:50:46.774Z;desc=hit,rtt;dur=17
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 3660
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-1.png
200 OK 2.4 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ba96735b2488a1e2ad08fd40946241e
de8981227dc90f98d3779d5d02ef5bbf3859efd7
f25459c13a4d2d1358e0762bf93b75e37223dc88d7b6d6fa7056bc822acf102b
GET /qih/image/upload/f_auto/v1/multisite/media/ComplianceLogo/2022/06/21/1655811024Footer-1.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655811024Footer-1.webp"
content-type: image/webp
etag: "0ba96735b2488a1e2ad08fd40946241e"
last-modified: Tue, 21 Jun 2022 12:36:37 GMT
date: Sun, 27 Nov 2022 19:50:46 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=20;cpu=1;start=2022-11-27T19:50:46.761Z;desc=hit,rtt;dur=18
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 2434
X-Firefox-Spdy: h2
res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994137Favicon.ico
200 OK 3.3 kB URL HTTP/2 res.cloudinary.com/qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994137Favicon.ico
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 092300726bc25c7ad3fd706abafbb809
188cceb75c863da6281997dd63aaed2d572597e7
06044e529ef8868c2ee265160fea9819b1f057b7b8a79ee389e4696b28736f5f
GET /qih/image/upload/f_auto/v1/multisite/media/SiteInfo/2022/06/23/1655994137Favicon.ico HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="1655994137Favicon.webp"
content-type: image/webp
etag: "092300726bc25c7ad3fd706abafbb809"
last-modified: Thu, 23 Jun 2022 14:22:22 GMT
date: Sun, 27 Nov 2022 19:50:46 GMT
vary: Accept,User-Agent
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=0;start=2022-11-27T19:50:46.809Z;desc=hit,rtt;dur=12
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 3286
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1def611ed1604b222e2c1b4e5b4dbbb3
efab3f910adb2498ed4aa794df938959e861b0f1
e455592a25ecac760d03d4ca2ff3ec5a74332ff8e4d9d38384390a20d3e959f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6082
Cache-Control: max-age=103538
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63829946-1d7"
Expires: Tue, 29 Nov 2022 00:36:24 GMT
Last-Modified: Sat, 26 Nov 2022 22:55:02 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash a86795b5e3a4bec49f3693adbef3bde3
1d86b26b581771fde6c7760799f24e8e66475381
064772fbbaaa05139e1b48bdf81476fe5864d01f9c0edcf62e6d709bcc87a43d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2206
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Last-Modified: Sun, 27 Nov 2022 19:14:00 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: raaO4y1CWRoogxJIWdUVxCvRJGyG8NuxU7SuiMeW+xUEu7kec/ZaXotip9UKm6sBamP3YdICU7emsAPXgdVOtg==
content-length: 27340
x-fb-trip-id: 1904183273
date: Sun, 27 Nov 2022 19:50:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1def611ed1604b222e2c1b4e5b4dbbb3
efab3f910adb2498ed4aa794df938959e861b0f1
e455592a25ecac760d03d4ca2ff3ec5a74332ff8e4d9d38384390a20d3e959f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6082
Cache-Control: max-age=103538
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:50:46 GMT
Etag: "63829946-1d7"
Expires: Tue, 29 Nov 2022 00:36:24 GMT
Last-Modified: Sat, 26 Nov 2022 22:55:02 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.freespinswizard.com/static/fonts/RobotoCondensed-Light.ttf
200 OK 168 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/RobotoCondensed-Light.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto Condensed LightRegularVersion 2.137; 2017R\012- data
Size 168 kB (167568 bytes)
Hash 885e5558c90864ddb72ad486f36470cc
b65ec310689040b32a54e62269e8b83e3c40f89e
e4787def35e6d46bb0bef6f6086cceddfc357476858b0e77b3587f6faebe666d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/RobotoCondensed-Light.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry; _gcl_au=1.1.2084609424.1669578646
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/octet-stream
Content-Length: 167568
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-28e90"
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
www.freespinswizard.com/static/fonts/RobotoCondensed-Bold.ttf
200 OK 169 kB URL HTTP/1.1 www.freespinswizard.com/static/fonts/RobotoCondensed-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedBoldRoboto Condensed BoldVersion \012- data
Size 169 kB (169352 bytes)
Hash cbd4e701269338259ee0b39a0b768167
97289a9d7448164e46ea8b3107a24ac1807f6c0e
d1ab7a9092d779eb7eb97f3f7d4563c857e86572fb829c42f2972a8e232ec67d
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/RobotoCondensed-Bold.ttf HTTP/1.1
Host: www.freespinswizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/static/common-static/css/main/ppc-footer.css?v=24
Cookie: session_key=e953dvqnn1nc43grozqeebvakox4kk0o; visitor_key=05eba1ad13732109287b7ba224a8c89796b9c472; da_cookies="{'query_dict': {'value': \"{'utm_click_id': '9209995'\054 'channel': 'offertonic'\054 'network': 'offertonic'\054 'publisher': '360'\054 'sub_pub': ''\054 'var6': '756'\054 'var7': '4'\054 'var8': '7'}\"\054 'expiry': '2022-11-27 19:50:46'}\054 'network': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}\054 'utm_click_id': {'value': '9209995'\054 'expiry': '2022-11-27 19:50:46'}\054 'publisher': {'value': '360'\054 'expiry': '2022-11-27 19:50:46'}\054 'channel': {'value': 'offertonic'\054 'expiry': '2022-11-27 19:50:46'}}"; sessionid=e953dvqnn1nc43grozqeebvakox4kk0o; csrftoken=lwZ82k9Lc6Et3VtmStCVtCHc3OEIatE6jm9dFhzBxRBEdEW0wpQWdYzb4Y9QImry; _gcl_au=1.1.2084609424.1669578646
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:46 GMT
Content-Type: application/octet-stream
Content-Length: 169352
Last-Modified: Mon, 21 Dec 2020 10:32:53 GMT
Connection: keep-alive
ETag: "5fe079d5-29588"
Expires: Mon, 27 Nov 2023 19:50:46 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3881
Expires: Sun, 27 Nov 2022 20:55:28 GMT
Date: Sun, 27 Nov 2022 19:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3881
Expires: Sun, 27 Nov 2022 20:55:28 GMT
Date: Sun, 27 Nov 2022 19:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3881
Expires: Sun, 27 Nov 2022 20:55:28 GMT
Date: Sun, 27 Nov 2022 19:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3881
Expires: Sun, 27 Nov 2022 20:55:28 GMT
Date: Sun, 27 Nov 2022 19:50:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K2eKLQhrsCdd4ASsfEibRuZAYW4CpPTlO3fZs7xdoKrw1HBxfTGkEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
age: 79713
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: fc238ea9-0169-47fc-b92e-f12b3ee27c72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b433YGtOoAMFexg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d362-2f97c67a2e5f05b6746cf858;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:12:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: oMrdB0NUGe5CqTY7eFd3u8xaSy9TyDdOrf1awBikFJzm3jWreD2irQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 12:30:20 GMT
age: 26427
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 33d3ca17-7878-4897-a634-5f626a64e820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJ40OEOqIAMFaOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380a1b4-040288d571fc10b96d893fa4;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 11:06:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f_U8KSYET6kaKAPbEV7sHW0tO6JGijsqUvghniwzFCRd2YGQjVlFoA==
via: 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 10:16:35 GMT
age: 34452
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 05:54:16 GMT
age: 50191
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
age: 79713
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y0ofyT6UcPjB8mfRR1VMjHSTW64Qb_EQ0rrjsOdbby1CG-xMIFJMPw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:49:19 GMT
age: 79288
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb0ce5bcc83f8548143c8f32414db6ba
6d392cbfc66186d0d502b151446a3e0d4eb8992c
e01a2c61da8fbb5060c68b0cf9d6ccef255cc47b8452ee24af03d54c64d6f026
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E01A2C61DA8FBB5060C68B0CF9D6CCEF255CC47B8452EE24AF03D54C64D6F026"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21530
Expires: Mon, 28 Nov 2022 01:49:37 GMT
Date: Sun, 27 Nov 2022 19:50:47 GMT
Connection: keep-alive
www.slotswise.com/api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO
301 MOVED PERMANENTLY 0 B URL HTTP/1.1 www.slotswise.com/api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO HTTP/1.1
Host: www.slotswise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 MOVED PERMANENTLY
Server: nginx
Date: Sun, 27 Nov 2022 19:50:47 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Language, Cookie
X-Frame-Options: SAMEORIGIN
Location: https://www.slotswise.com/api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO
Content-Language: en-gb
Access-Control-Allow-Origin: slotswise.com
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 18:41:08 GMT
expires: Sun, 27 Nov 2022 20:41:08 GMT
cache-control: public, max-age=7200
age: 4179
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.slotswise.com/api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO
200 OK 0 B URL HTTP/1.1 www.slotswise.com/api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/ga-hit/e953dvqnn1nc43grozqeebvakox4kk0o/?url=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&user_agent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&referrer=&ip_addr=undefined&visitor_id=05eba1ad13732109287b7ba224a8c89796b9c472&geo=NO HTTP/1.1
Host: www.slotswise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:50:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept, Accept-Language, Cookie
X-Frame-Options: SAMEORIGIN
Content-Language: en-gb
Allow: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: slotswise.com
s2.adform.net/banners/scripts/st/trackpoint-async.js
200 OK 32 kB URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP
Hash c7657228c2ab32d6a9b2a460e3b03dfe
da1b7807448738beabc19c6e052378d91ddde9de
a75b7b56c27fb74d61a425739ebdae798c252dd0faa3ef545ae3ded13dc8e246
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:50:47 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 05 Oct 2022 12:23:24 GMT
x-rgw-object-type: Normal
etag: W/"4cb8e818a3c8dda5fd80d6d9a55d958d"
x-amz-request-id: tx000005a5a6561e003d79a-0063765fcb-329373d4-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.clarity.ms/tag/bd8dnjw3bx
200 OK 57 kB URL HTTP/2 www.clarity.ms/tag/bd8dnjw3bx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash f3614d1befdf86133085f367b562dfcb
5553b26e5a790b4e343fa2fdae5f559d4a13d403
5ee4190fde21a1a3d5eed61147c17b518d23fb5fe9321d0c7c8b167b1b8e08c3
GET /tag/bd8dnjw3bx HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=ebada570d7a843e5b7d42059ee3c9194.20221127.20231127; expires=Mon, 27 Nov 2023 19:50:47 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
x-cache: CONFIG_NOCACHE
x-azure-ref: 0l7+DYwAAAACYZH3XXEMYT4EKepsE0Z5LT1NMMjMxMDUwMjA0MDI3ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Sun, 27 Nov 2022 19:50:46 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1401579643207562&ev=PageView&dl=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&rl=&if=false&ts=1669578647101&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669578647100.1761743881&it=1669578646524&coo=false&rqm=GET
200 OK 86 kB URL HTTP/2 www.facebook.com/tr/?id=1401579643207562&ev=PageView&dl=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&rl=&if=false&ts=1669578647101&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669578647100.1761743881&it=1669578646524&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Hash 30b6a379c6e24829ef0e3625ef64a076
e4a8eca8f11221e0d7e6ff4c6135fe5d7c3d88ad
92e27ef41b1ca9a36063e4ff2ea887c89ae3790e936bb7fadf21efb9aa83fa1a
GET /tr/?id=1401579643207562&ev=PageView&dl=https%3A%2F%2Fwww.freespinswizard.com%2Flp209%2F%3Futm_click_id%3D9209995%26channel%3Doffertonic%26network%3Doffertonic%26publisher%3D360%26sub_pub%3D%26var6%3D756%26var7%3D4%26var8%3D7&rl=&if=false&ts=1669578647101&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669578647100.1761743881&it=1669578646524&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 27 Nov 2022 19:50:47 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&RedC=c.clarity.ms&MXFR=3B4E20A7F906672C0F5832CEFD066995
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3B4E20A7F906672C0F5832CEFD066995; domain=.clarity.ms; expires=Fri, 22-Dec-2023 19:50:47 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 27 Nov 2022 19:50:47 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&RedC=c.clarity.ms&MXFR=3B4E20A7F906672C0F5832CEFD066995
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&RedC=c.clarity.ms&MXFR=3B4E20A7F906672C0F5832CEFD066995
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&RedC=c.clarity.ms&MXFR=3B4E20A7F906672C0F5832CEFD066995 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&MUID=06CD2E9BE88168823C633CF2E97469CB
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=06CD2E9BE88168823C633CF2E97469CB; domain=c.bing.com; expires=Fri, 22-Dec-2023 19:50:47 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F2A774F019954760AC1B0274558E6FA8 Ref B: OSL30EDGE0113 Ref C: 2022-11-27T19:50:47Z
date: Sun, 27 Nov 2022 19:50:47 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&MUID=06CD2E9BE88168823C633CF2E97469CB
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&MUID=06CD2E9BE88168823C633CF2E97469CB
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=6C314A7015E542A8BC62C670CAFBD0EF&MUID=06CD2E9BE88168823C633CF2E97469CB HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.freespinswizard.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 27-Nov-2022 20:00:47 GMT; path=/; SameSite=None; Secure;
date: Sun, 27 Nov 2022 19:50:47 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 22542
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.freespinswizard.com
access-control-allow-credentials: true
date: Sun, 27 Nov 2022 19:50:47 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 433875a1b1fef34e45f2d8ac344c07e3
f2129466436cbbdd58abe42a47fb7af19eba58e6
ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
content-type: image/jpeg
age: 79719
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
track.adform.net/serving/scripts/trackpoint/async/
301 Moved Permanently 0 B URL HTTP/2 track.adform.net/serving/scripts/trackpoint/async/
IP
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 27 Nov 2022 19:50:46 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freespinswizard.com
Connection: keep-alive
Referer: https://www.freespinswizard.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:50:46 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 04/09/2022 02:51:51
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a287da6534c533fa7d9fa0c60c33cc60
cdn-cache: HIT
cf-cache-status: HIT
age: 110376
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 770d650c6d051c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
44.196.31.84
104.18.10.207
93.184.220.29
37.157.5.72
31.13.72.12
18.197.71.232
23.36.77.32