Evidence ev_01m66ayhfpedcmdhzwaxhg4ysn: Lunaloots access
This page shows one reading behind the statements on Lunaloots's page: what CasinoGuard captured, when and from where, how, and the files kept as proof, each with its SHA-256 so anyone can check it is unchanged.
- Evidence: ev_01m66ayhfpedcmdhzwaxhg4ysn
- Topic: Access
- Source: lunaloots.io, as CasinoGuard's own visit found it (observed)
- Scope: Italy (IT)
- Captured: 2026-10-30 12:00 UTC
- Result: read, the first version of what the source states
- Read by:
famagousta-access@1
Crawl
- Crawl: 01m66ax16geavnhn12fghm7sex (done)
- Requested: 2026-10-30 12:00 UTC
- Started: 2026-10-30 12:00 UTC
- Finished: 2026-10-30 12:00 UTC
- Collected with:
[email protected] running famagousta-access@1 - Looked from: Italy (IT) · Desktop · lunaloots.io · language en
- Proxy: pool
it-residential(Residential, IT) - Exit network: not recorded (where the casino saw the visit come from)
View 1: access
- Asked for: https://lunaloots.io
- Landed on: https://lu9al00ts.xyz/en
- Redirects: https://lunaloots.io → https://lunaloots.io/ (307) → https://lu9al00ts.xyz/ (302) → https://lu9al00ts.xyz/en (200)
- HTTP status: 200
- Captured: 2026-10-30 12:00 UTC
- Steps: open https://lunaloots.io (as a visitor typing the address: no path, nothing clicked); follow https://lunaloots.io → https://lunaloots.io/ → https://lu9al00ts.xyz/ → https://lu9al00ts.xyz/en (every redirect, the server's and the page's own)
Screenshot of what it read:
| File | Size | SHA-256 |
|---|---|---|
| Screenshot of what it read | 195.3 KB | 6c6941d5f3261e19baa4fdf7b4ad328b600e9ccab3240da9c0ec70044544c4d7 |
| Web archive (WACZ) | 8.9 MB | 4822a83e07d76b613187ec5369cd01930321b45d777392aba2a6188919a141c4 |
What it read
The reading as the worker sent it:
{
"result": "redirected",
"block_kind": null,
"final_host": "lu9al00ts.xyz",
"http_status": 200
}
How to check it
- The web archive is what the browser received during the crawl: every response with its request, and each view as rendered, listed as a page of its own (a crawl's views share one archive). Download it and open it in ReplayWeb.page to browse each page as it was.
- Each file's SHA-256 is that of the file when it was received; recompute it to check the file is unchanged.
- Cookies, logins and tokens are left out of every file, and so is the proxy's credential.
- The Markdown version and plain-text version of this page say the same.