wnlife.xyz/css/styles.css
54.228.73.57 168 B URL wnlife.xyz/css/styles.css
IP 54.228.73.57:0
Hash 01813511ade112ed254985c362354a02
bf25a00c1f0078fe8e375a04adbde1c6842ddad7
19086bf5fd95c5c570d4aa133091bf4facd00d1deab49e7ba90f3aad922754f3
GET /css/styles.css HTTP/1.1
Host: wnlife.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnlife.xyz/Oxzpb
Cookie: dhash=Oxzpb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 04 Dec 2023 03:33:19 GMT
content-type: text/css
content-length: 168
last-modified: Tue, 07 Nov 2023 13:58:06 GMT
etag: "654a426e-a8"
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
151.101.193.229 30 kB URL cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP 151.101.193.229:0
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wnlife.xyz
DNT: 1
Connection: keep-alive
Referer: https://wnlife.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 03:33:19 GMT
age: 22775613
x-served-by: cache-fra-eddf8230072-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js
151.101.193.229 25 kB URL cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js
IP 151.101.193.229:0
File type ASCII text, with very long lines (65299)
Hash d2b0d31f74e62440ea1a557f126d0c64
5c8f6cb983397deb65673b961a8657cfd6113ad9
c4b2394a30fa0e4a23c6b308541353e20872a6fd765ed8fb70e6b402029deb00
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wnlife.xyz
DNT: 1
Connection: keep-alive
Referer: https://wnlife.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"13a70-XI9suYM5fetlZzuWGoZXz9YROtk"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 03:33:19 GMT
age: 22148334
x-served-by: cache-fra-eddf8230122-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24684
X-Firefox-Spdy: h2
1win-cdn.com/font/SFNSText-latin.f09aa5229.woff2
172.64.206.3200 OK 44 kB URL GET HTTP/2 1win-cdn.com/font/SFNSText-latin.f09aa5229.woff2
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 43512, version 1.0\012- data
Hash 426f20bb65ea80d35f3f2a999d5d7d1e
85f211a450f26d7f0822d718fc61085a506fa455
06e02d3d2d01bb2c88786b0a2dd2d692f6659c0159ec4754f7db49c12e03b0d6
GET /font/SFNSText-latin.f09aa5229.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wctks.xyz/
Origin: https://1wctks.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: application/octet-stream
content-length: 43512
last-modified: Sat, 02 Dec 2023 08:56:57 GMT
etag: "656af159-a9f8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jIGbvTHndL%2FuANU4dH4IOIh4M%2BCT3MmY5J0WmPUTWlig4ta37P4iI03qRKYb%2BqBPsPw9lI%2B%2F%2BL%2BbyMaH6n9EwqXjB61U8z6OFvICiVhymGa8Ghn54U4iQZH%2BeoV%2FYs8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccbbbe23691-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/font/SFNSDisplay-latin.50a4eaff3.woff2
172.64.206.3200 OK 33 kB URL GET HTTP/2 1win-cdn.com/font/SFNSDisplay-latin.50a4eaff3.woff2
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 33064, version 1.0\012- data
Hash de175cbf569bb3ccf1f761c845cbd896
8d93663b858bae157ba5fc40e1400177104d71bd
df3772666587111462634070c47969ad9687bbf80d0694bb2e6c33be39434d68
GET /font/SFNSDisplay-latin.50a4eaff3.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wctks.xyz/
Origin: https://1wctks.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: application/octet-stream
content-length: 33064
last-modified: Sat, 02 Dec 2023 08:56:57 GMT
etag: "656af159-8128"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dsemqmQDmYkxLHD9p2rFpdK7cR4pU6oDWQqwg1vhsRGfXaKSLCFkrZeJ2YzWgQY%2F5PrsPX1fyHvlaS2OOxUB7et2DbsHUIMC%2FTKX65CszLMDwICJ%2BZm84PU%2B1%2FTk4Mg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccbbbe03691-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1wctks.xyz/affiliate:link_visit?visit_domain=1wctks.xyz&sub_ids=undefined
190.115.24.78200 OK 15 B URL GET HTTP/2 1wctks.xyz/affiliate:link_visit?visit_domain=1wctks.xyz&sub_ids=undefined
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
GET /affiliate:link_visit?visit_domain=1wctks.xyz&sub_ids=undefined HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
DNT: 1
Connection: keep-alive
Cookie: visit_domain=1wctks.xyz
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: undefined
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg"
set-cookie: core-sticky=http://10.233.108.99:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
X-Firefox-Spdy: h2
1win-cdn.com/js/desktop.1c594a6ac.js
172.64.206.3200 OK 35 kB URL GET HTTP/3 1win-cdn.com/js/desktop.1c594a6ac.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash a5ba0a0a5bbd90fa3fe85f4438f24a86
5f63977552c97919678d8b15bef2ec5a0d78ee66
7bbda2d67b46fbd3456168d68d4c66982a7e952986753987e8c12ec1e9a1a41e
GET /js/desktop.1c594a6ac.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Dec 2023 08:25:01 GMT
etag: W/"6569985d-1f7e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 241168
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=atqK2yzNwNeaLj5joVLZ%2FJBMoJx3ZYpy31OHy5FncHRJ5YXjvI40wv4pM5F8YQdDc1yBcD%2BApKoQxtdX0%2BJSr43Jhqbq4X%2FJDHd7h3cKDQrpXMsn8Q2lk9XO%2BFLqn%2Fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcce0ced63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wctks.xyz/affiliate:cdp_link_visit?track=onb_rnd1_br_test
190.115.24.78200 OK 15 B URL GET HTTP/2 1wctks.xyz/affiliate:cdp_link_visit?track=onb_rnd1_br_test
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
GET /affiliate:cdp_link_visit?track=onb_rnd1_br_test HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Cookie: visit_domain=1wctks.xyz; core-sticky=http://10.233.108.99:80; 1w_lang=en; 1w_locale=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: undefined
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg"
x-powered-by: Express
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
X-Firefox-Spdy: h2
1win-cdn.com/js/40271.884630170.js
172.64.206.3200 OK 12 kB URL GET HTTP/3 1win-cdn.com/js/40271.884630170.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (52220), with no line terminators
Hash aa95d4eb3ce8e6fea3df953e7acb4636
a126356302f55175547f2b466b7f17f49331e115
21a8c80d7a348f547694bb8b3ae6bc841a7677048469b21ef9771ce64f1ca571
GET /js/40271.884630170.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-cbfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 314890
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0y4X4BpLMIgx%2FvxtdNwDBotVVZ59PTKy7luBJNmH0zbrgjzap0D%2BrCNESfQhjMGDrBYTbV3L8JT75MWd7PRIhz3OF4FZJPXhKlQpazLabrt6Pbnm7Dv7kd5ZHEa2GvY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcce0ce963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wctks.xyz/casino?trid=onb_rnd1_br_test
190.115.24.78200 OK 125 kB URL User Request GET HTTP/2 1wctks.xyz/casino?trid=onb_rnd1_br_test
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type gzip compressed data, from Unix\012- data
Size 125 kB (125198 bytes)
Hash b46171765a4a5dff6775753aec42cf31
11cad4b84198a448c088f7caed18c1145987b025
4942f59d531c6b6783f38f4ac26bd7739266f4cb406396a57639a53d406f8460
GET /casino?trid=onb_rnd1_br_test HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnlife.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: text/html; charset=utf-8
x-request-id: W1LPXbvXQPd0GxV3
vary: Origin
access-control-allow-origin: *
x-match-domain: 1wctks.xyz
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
142.250.74.168200 OK 90 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
IP 142.250.74.168:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (49902)
Hash 950d6d8e0c95a3eb82a7381c24a594f4
e03fdb08f0ea39f4dd8f5200aa895f28728631c7
bb5cfa23bab45c36e7840f23e79441c7d84cb3574966b1bc08e3ede3e38c9bbe
GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:33:22 GMT
expires: Mon, 04 Dec 2023 03:33:22 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89738
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1win-cdn.com/css/desktop.d0a0f5bb5.css
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/css/desktop.d0a0f5bb5.css
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 62484184ae360dc98326e0bae1a00ba6
b525e8bf3389651e6194f774375941cce6edc625
6d163d753b60bdafdd79275fb6e265f2d02270f0a5c12d6be16a34de45c0546c
GET /css/desktop.d0a0f5bb5.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: text/css
last-modified: Fri, 01 Dec 2023 08:25:01 GMT
etag: W/"6569985d-11d0e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 241168
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l3aGJKfFVQz7Pau90JRb%2FCn%2BqOk%2BlRaZmH6q%2B9gpmj6CRt9xiSHnIYH%2FNTJOGOqBDotkBx5AmLHVLRx5HDjYYthY9dSfCi7UM7Ba2jsShw%2BiLfiu74PtX3y4Hk4UqmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccd7ca563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/present-with-light.bd57fb068-151.png
172.64.206.3200 OK 6.7 kB URL GET HTTP/3 1win-cdn.com/img/present-with-light.bd57fb068-151.png
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 151 x 161, 8-bit colormap, non-interlaced\012- data
Hash 6e2f4fff39b3a495fecefe5fee863c51
d358f1c8d7fe7298feea325c7ea6d145a3634026
4800fa860802fd0e46629776201afccd5adc1bf6b8b5a45a5e7c46d8d3b2a690
GET /img/present-with-light.bd57fb068-151.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/png
content-length: 6732
last-modified: Wed, 08 Nov 2023 09:58:17 GMT
etag: "654b5bb9-1a4c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2222938
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3OfMehlItBVPZi5X4bzF0DpxHKaNCBMkuYyyl7xPGruYidNopRHmCJ58UZmt%2BY3R%2BH3xIcdt46wI4rftVCry0p1w03YjD83l4qBSba364LUSy3%2FMuPEpdJ%2FLY7firOk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df1e63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/44877.14b2a46a7.css
172.64.206.3200 OK 4.5 kB URL GET HTTP/3 1win-cdn.com/css/44877.14b2a46a7.css
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (19592)
Hash 1040fd8def14d4f39996c51ba1edecf1
c92b4e3d239fb743e838c42fda4ee1104cb86375
e224b5867a502b2fb80a81b48b65517cac7d6d9785ee5dd830157831d18f7d8e
GET /css/44877.14b2a46a7.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: text/css
last-modified: Mon, 27 Nov 2023 14:39:57 GMT
etag: W/"6564aa3d-4cb8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 564446
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QvQzZ%2F6kYIIy9sNzrUm7SEY2LH%2FAZhRnn2ZK4PF4r2LCzJZ4JCOKbzhSb2zgxfWg34uIdUmYQP7ehs1xa%2F4C%2FAth2zcxaQvDFAIdJUe%2FSIzBcBmVly6uj9Hoq74d%2F14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcce0ceb63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/index.03ceb2545.js
172.64.206.3200 OK 86 kB URL GET HTTP/2 1win-cdn.com/js/index.03ceb2545.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Unicode text, UTF-8 text, with very long lines (65469), with no line terminators
Hash 8ced6209fe634b442d29f321010ddce3
c744a7d4d03a823d2d438274e9254f4c44682988
89d28e9606d50aae3286d2b3c818fe5fc143b3ccb527cba88e8a5d7a14b7a3b1
GET /js/index.03ceb2545.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 02 Dec 2023 08:56:57 GMT
etag: W/"656af159-2cdc5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 153105
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIoGr5KYlTrTkDTVsYeXYLq99%2FU6Cv8TFQJ0ws0dhZjSBYGsqQTu0TMx1RSmYwOyS5PUfusNYJHoNolo6Cwy%2FCe14uXwed%2F6wXmr%2F5ndx4%2FayYLW76i0ayC0p7VWCmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccbdacf657a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/img/pwa_android_en.b229a444a-690.png
172.64.206.3200 OK 38 kB URL GET HTTP/3 1win-cdn.com/img/pwa_android_en.b229a444a-690.png
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 690 x 450, 8-bit colormap, non-interlaced\012- data
Hash 8b6daeaca5784288934eb5c3dbc3401d
2df52222cb03510733d5f5c616278143e7f93f2d
53ee238e1169d7940016da0159e72a214403576447cf1b8cb384942a6200d191
GET /img/pwa_android_en.b229a444a-690.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/png
content-length: 37637
last-modified: Tue, 14 Nov 2023 09:10:21 GMT
etag: "6553397d-9305"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1630605
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cXX6Qc0tpvrSluMFC%2F%2B%2FsmFMrIAFq1nU%2FB7P%2BNpFKvEnMK7kNRS8jTWIT%2FYj%2BIAa2RgTYrxH%2FfubHPFjIbF%2FnmxDKe2QEEhgG9%2B9SCbvHIcZjrxSNO1QArE4fD4Y3VM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd31fb463b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_img.cad2d5cb5-1320.webp
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/img/500_i18_img.cad2d5cb5-1320.webp
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1312c2c31e69ae16717161d0b63e862e
1ea1ac50dccf074db7972fd01030d27764c647be
17e3ddf96f54278719c3951bdf7fd750f03eef6fa8f7e257b47bf04a7915fb81
GET /img/500_i18_img.cad2d5cb5-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/webp
content-length: 25094
last-modified: Sat, 02 Dec 2023 08:56:57 GMT
etag: "656af159-6206"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 3170
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YEqG0%2FJjourRqFkjbmhgA39oOf5lZ9Wx5x0mYaNnTPOXDPNXAk419%2FKQz37ruIDGH2IKu6fBqFicxVcRqZpkWYymj9DL3562Qb1yMlBrErTsjRNgIQyaw6n5DqViLXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd598c863b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_bg.0e037ee17-1320.webp
172.64.206.3200 OK 40 kB URL GET HTTP/3 1win-cdn.com/img/500_i18_bg.0e037ee17-1320.webp
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 14de8fd7c8de24bb9f6f89ddd3c2d480
9635193c712dafa2c58339dee09588880a96a980
633593c73a175eabb2a5716a04aa84b1b49fc8e4ac4687b07509db36350076b7
GET /img/500_i18_bg.0e037ee17-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/webp
content-length: 39614
last-modified: Sat, 02 Dec 2023 08:56:57 GMT
etag: "656af159-9abe"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 3170
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k8nO8Dv8BCHcbigKO4jUx9h58wnA7s7NsvbdC3FfDitSrzXz%2FyW5VuOSLV%2BghrtwqmBFxl99UOGhreGycR0t%2BHKfmDzGx2DmR8B3kICJwfDo%2B0HxZCcyEzlBH%2Bd4BLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd598c663b5-LHR
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
142.250.74.168200 OK 83 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash cbd1349f3a58c10ad53b5172cd04428e
118ef9afac58d446d32f8c54e9775b9c5769240e
d8e3d842ff0dd6303f480e17cc5af2bd1884f54c18d01414f05397f94963a590
GET /gtag/js?id=G-548949LWLW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:33:23 GMT
expires: Mon, 04 Dec 2023 03:33:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82620
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/softswiss/43f818f7-906a-4a42-82d1-195e7ed05712.jpg@avif
172.64.206.3200 OK 1.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/softswiss/43f818f7-906a-4a42-82d1-195e7ed05712.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash e8423018b4866fc0b46099556ad0ac23
47344ea92fca2a0d618242969adf8048d5a1b1c6
c508b783b3b3b55eb6c4ac1abf32076082cf1328afe84fc1a72ccfa65d871c53
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/softswiss/43f818f7-906a-4a42-82d1-195e7ed05712.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/avif
content-length: 1924
cache-control: public, max-age=31536000
content-disposition: inline; filename="43f818f7-906a-4a42-82d1-195e7ed05712.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0MjZiNGY3LTFhMGNiIg"
expires: Thu, 07 Dec 2023 09:40:55 GMT
x-request-id: lPuNcaAmf6-brm8Nu06oH
x-cache-status: HIT
cf-cache-status: HIT
age: 321060
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PMI9izQFPAt8OUkUeeEpbVs%2FqB%2BbBErV2d6YNAkrI2iXdarErM8A%2FnvzAmeLIVIAmaNmYNPU7DKA3IGWi%2BgD5AtP2l42MQ8t4zW7Po9eavzzsxNGbzgzNWgLbrL39dncNMhOyH0ZDw4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd7f9c863b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@avif
172.64.206.3200 OK 2.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash dc662a050f07bc7de11230393ef9f85a
0d790886660edcdf7464a9583096b834292627ef
406c5cee12759c77042a02b175057bc5732beb859f787fd533c8dc5cebbafd89
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/avif
content-length: 2367
cache-control: public, max-age=31536000
content-disposition: inline; filename="7a0588e7-8240-497e-b41d-22e512bdb23e.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0NWEwNmY0LTQwNjc0Ig"
expires: Tue, 05 Dec 2023 12:07:41 GMT
x-request-id: LeyEW7EG5PTgt_3iTDftO
x-cache-status: MISS
cf-cache-status: HIT
age: 487542
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T1dZn5nsVj3qf6p15FlLBG2JDzqkn5g2V%2BbXYjcZLKGKOAtHvVBGf91Wyb9Ld0o%2BGaHvGeJVgdMTg%2FkVOuuNeliLvfJJ3ZF3fcVBe4VPaKmMyKgIiFnVdbNzFLIyt9henv3%2FI4s3VxA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd809c963b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@avif
172.64.206.3200 OK 2.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash e037c3ea650f0e003a6d42b4cb3110c5
5d63f974e3e1dc7f92d3428825a4033f98727210
307fb7bc046afcbb130decee67c8040baaf3cf5542e36a2390ef8e6d029dd88c
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/avif
content-length: 1983
cache-control: public, max-age=31536000
content-disposition: inline; filename="d5875264-72eb-4341-8f26-a2f885a2851d.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0NDY0NTY5LTE2MjkwIg"
expires: Wed, 06 Dec 2023 03:04:24 GMT
x-request-id: TJi9s1rMbv_NhDpJtctFu
x-cache-status: HIT
cf-cache-status: HIT
age: 415250
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vtk0qQRGaGmEK6dz%2BSPItwOGaw%2Bm8FDxF2v%2Fx3eoU2llJprNYcO%2BLaGKMqyZ8DmEk6G9w8dLesd3HM%2BMX5kc1QsT4AhTdcmTWHftymAvyLAfbNRUM0oSAdaRDTeW%2F3kY%2FULjdvaSo3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd819d063b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@avif
172.64.206.3200 OK 2.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f336f39fa8f83ea74212009439f4d3ab
71588257529c5f457a375adb5e4e148f216e3159
41bbeb1af98bd9300da9fa71e75b51ed3f8468a7346fcd3be7c163ba1fc9a20d
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/avif
content-length: 2510
cache-control: public, max-age=31536000
content-disposition: inline; filename="9dd18146-c273-48b4-ab55-70c3042a3f64.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzOTM2OTU5LTJhM2VmIg"
expires: Wed, 06 Dec 2023 13:15:24 GMT
x-request-id: rX45m_jv-RcqLLRIV4nRB
x-cache-status: HIT
cf-cache-status: HIT
age: 397079
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=efb1%2FwhS1V3rs71dqehey7NqMwyE6PeDmjnUWrBlQ2W2T1yrOnlCrc%2F%2FsXrCx4CVznuMIqoZCe2hAld%2Bo88wh8p3Dv%2FqsqgID53Q72%2BBD2BS6e4LtFR%2FqWz47wIXfkwr7Fp2KtNCKVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd819d263b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/softswiss/f7cbae0d-9722-4748-b68c-643da215507f.png@avif
172.64.206.3200 OK 3.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/softswiss/f7cbae0d-9722-4748-b68c-643da215507f.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d899f7bd3b0a1df10b13349d25596ff6
619a3110aa86a59f68cdcb16c83253997b73cbc3
b69a4a556b0a2c913bbd6f38087aa506a2d65179e0829ffc6cf28fa0f4266163
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/softswiss/f7cbae0d-9722-4748-b68c-643da215507f.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/avif
content-length: 3151
cache-control: public, max-age=31536000
content-disposition: inline; filename="f7cbae0d-9722-4748-b68c-643da215507f.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0ZTRhNGRkLTUwYzI2Ig"
expires: Wed, 06 Dec 2023 18:28:36 GMT
x-request-id: tq5igx9mpjfccmKuOJ1yT
x-cache-status: MISS
cf-cache-status: HIT
age: 378185
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kMcB7GiFIoCNex8PPWKswaKrWzxbfT%2BVdCqzUzjTdKhMg7NWZNNl95LKrFeoOwDM2jQrQt8Vjmtrr%2BrlWLLz1i3Pq6V0gyhQ0JYDhYW1H2N9%2FjghWwtwIA%2BsmS64u06lvjr9e7tZlzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd819d363b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/4ee0313d-df56-4596-86d1-cd2d844c8574.jpg@avif
172.64.206.3200 OK 2.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/4ee0313d-df56-4596-86d1-cd2d844c8574.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 84b1e76a5af9aa45fbcc190e3782a2fa
423e40d3f246c2aea2346073dc2093809d1fced1
ff1dd3b3c0f8c45a59c004e31906d1f336828297c8fbdaec0fb5c14ee8d35ad4
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/4ee0313d-df56-4596-86d1-cd2d844c8574.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/avif
content-length: 2467
cache-control: public, max-age=31536000
content-disposition: inline; filename="4ee0313d-df56-4596-86d1-cd2d844c8574.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzNDk2ZjJlLTIzOGUxIg"
expires: Mon, 11 Dec 2023 03:33:23 GMT
x-request-id: rcQUHtYcKj2lGYmjCD__t
x-cache-status: MISS
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1WsLvW7kzfB%2FznngzsyZoXw460CIIcIetn2Yz7F6a8Q8XBGlBZhms7XVEYNofGONM2qlBSBe55K98AhZki5o4O2SlVG5FZfVNXujM2P38N7LSn95FsacmJ6rZ0iA7X3p8Zinlkxu%2FHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd809cb63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/fca52d7c-a7c6-416b-aa99-1994a642515c.png@avif
172.64.206.3200 OK 9.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/fca52d7c-a7c6-416b-aa99-1994a642515c.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash bc7fed4987e5f3a2f43c419e66e66920
48b4f2cfabc8008ae360cd0534ed9c183d0dc1f1
b5bfdc019bdc91dc45af138d61e0b4587654ae73c5908214d408516fdb16cefa
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/fca52d7c-a7c6-416b-aa99-1994a642515c.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 9033
cache-control: public, max-age=31536000
content-disposition: inline; filename="fca52d7c-a7c6-416b-aa99-1994a642515c.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1Njg3MjczLTdjNGUzIg"
expires: Thu, 07 Dec 2023 11:31:47 GMT
x-request-id: J5ljzDuX2hdMle-QYo7Ow
x-cache-status: HIT
cf-cache-status: HIT
age: 313430
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jAlT96l4bIT7JZAzR09nbRERYKXfjAIB4nBmHCUi8uGLg6Tw6cWdfqfTMNE7lHzL0M4jbmuwJxnOEs81PxDDzMCoaydulAMTxt3v%2FWe8%2BFK7JbGqbvrNREHqX7yO1zE9KC5HYo1OYG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde0ce963b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/virtual%20generation.eb4d59dbd.svg
172.64.206.3200 OK 445 kB URL GET HTTP/3 1win-cdn.com/img/virtual%20generation.eb4d59dbd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1132)
Size 445 kB (444707 bytes)
Hash d0aaa865c68dfb6eeb2194b501cf5a25
2af1f89d073157c969c720ccafb5abb34835f502
7cc16afb061884d3f86297268429e1ad3e63f085d853db3df844ee3b7ad46c68
GET /img/virtual%20generation.eb4d59dbd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1669"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pBBrx5Ax17ZoGOxZ6d0x0KpYhklOmzkA%2B0hakyIsc7DZrQugr2dtKREJWX3hV4r5VNBaS34WVAQxo%2BbLwNSChwiEez%2FiB8qOd0VoxE3HyKOD8yx7EI%2F%2BUhC5EvJmAGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc1bee63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/worldmatch.9f3d40aa7.svg
172.64.206.3200 OK 185 kB URL GET HTTP/3 1win-cdn.com/img/worldmatch.9f3d40aa7.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Size 185 kB (185097 bytes)
Hash 4db3b9de108d4a5702b9ffea8b4accaf
339ef61dc689391e77e4ef4a686771ab23ee4c06
3669fe893c54a92f9958036e7f2aa29af2864df366dd3426575563dfe06f58e7
GET /img/worldmatch.9f3d40aa7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-20a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4t%2BwvGFvyPPxSzel6WC7kxpJGBbCDdyFuekuIGp1iACXWKSE%2FtfHEHVt0zv1HWEEAQlQt78%2B6jpP%2BuYLvIuAdOZSMRHCUjup9Viw%2FeK2296zDmWLLYBNprytvT77jwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc2bf463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/thunderkick.6962312e1.svg
172.64.206.3200 OK 5.2 kB URL GET HTTP/3 1win-cdn.com/img/thunderkick.6962312e1.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (514)
Hash 69dc290ffee10804abf46c9f3e3cec1a
40efcfac46db5455794cce6e4b2a0f798245e3a8
5814774311e73cf6c4dcbfc13bee155b42978afeb00c42dd26337dcc2668a189
GET /img/thunderkick.6962312e1.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CI%2Bae8hUvp8TlUm%2BvfyF275JoC6LhL9ecUYclgMlIHr7hODc4D9vQ%2FCXZs42sc3XoguvxblN35S7N0deankjelO9G6NagxoJgYSl%2B62Wc%2FsGqJMSxVFEUfcbJ0iMuNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbfbd663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/turbo%20games.0a45ae56b.svg
172.64.206.3200 OK 6.0 kB URL GET HTTP/3 1win-cdn.com/img/turbo%20games.0a45ae56b.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (736)
Hash 305e1b3c6dc545232bb5ac0c01539ef5
7f34efadc68fcc787edde99c9c3ee77720258b6b
67dfc792f5dcdd024832cc16917bd305ba2f78c72712e0193b88be487478a691
GET /img/turbo%20games.0a45ae56b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085629
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZZnRocPEOuPRMoglCfwYE0iG70B2cZtsyBlsc45pw9oeZKcgBfD5jjTFrwgLYvJWeha9y%2FJ6ZjQRxKJsP1VHPoOGjKHAuhOHzCuDzmgETh%2FZynXNDwj1%2FxRuOXXCWX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc0bd963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spribe.7ce760055.svg
172.64.206.3200 OK 6.2 kB URL GET HTTP/3 1win-cdn.com/img/spribe.7ce760055.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (945)
Hash 9adffaba4ee163cd816332c6574620a6
a78b5523f423b9e81154743dd4ad64237fc4c39e
7b3c4ad552209a75974fe27df45ef9ab157d6124ebfe2d7380fcfabf44dbf7e0
GET /img/spribe.7ce760055.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-6a8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QecUnfgVu4%2FDKznjCyqXmjk1j%2B1d3kybty3UzhtCzNWZAU2VgoChKSAwZminqXLUG8T16sBzVMw5YAdx3y7cKaO%2FQdqMdYjaNGHMsTh7r%2BrVq3PZrucS%2FCNELikvDWU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbebcf63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/yggdrasil.a6bc350dc.svg
172.64.206.3200 OK 7.5 kB URL GET HTTP/3 1win-cdn.com/img/yggdrasil.a6bc350dc.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4298)
Hash 3f81e1990f953503141f68ec529d53ae
f165d18bd893cc53aee2b4d98f40728ed0deee63
821d6515ad76109df4f090b0b301e69b4943b4e73b272c1cda324ac049c007b8
GET /img/yggdrasil.a6bc350dc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1697"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=woWY0HP6zHIOOHPZqzYBRqJbhQrqHvSu%2FlLjyWsd0KnmqxfRGgFEPVUTD4i%2BuL%2BA8FlHht0NhiMWKNBIlXnv1y2sO2Bcp4EMFJYx0BD%2Blf8ipeLsNnnZ7cOI0TMxTmk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc2bf863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/zeus%20play.534e0839f.svg
172.64.206.3200 OK 6.3 kB URL GET HTTP/3 1win-cdn.com/img/zeus%20play.534e0839f.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (391)
Hash bc2a4e6d4adc4698f0f653f50020a23a
28ffdd0c2775497b10a7bd3e7b5abb72daf82595
d66988ad3aa35b11e1806229019629ca892047c59a81113ae2b56fb0958f598f
GET /img/zeus%20play.534e0839f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-40c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=awLgb4ejxWDpNCovy5VDr9SzHC4CUmHdBLVfqaD0MoKXeKQhP0myEnq7FbfXcOr%2FmzNwQWU89zAVR%2BvfYCsLKznzFkygjv2eEz3Lf9%2BAWYpkp7Vnf8OU9I2T1Yb7tI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc2bfc63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/onlyplay.1c7a3c455.svg
172.64.206.3200 OK 4.3 kB URL GET HTTP/3 1win-cdn.com/img/onlyplay.1c7a3c455.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (396)
Hash 135b33d894408918923ca04a59346ff3
129ad24b39c141c4e6be288472b39d4cf63aa8b6
8923ff58c70e5290dbb7fea7ac1dc51414d290deb10485ea1c988394e8685642
GET /img/onlyplay.1c7a3c455.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-6ad"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9AlcnX2Rrq%2Buf45gqIoF8fmgFa6%2Fat4vBbEK4ZnjEiV77whBVej3wG1v05UJeV2%2Fy%2BviP9kkFnUmXXW9axg7uPdPMuIfDfQwotRqhjseaFYgBlAipw%2F1q6ghKNkMVk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b5e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/igrosoft.69f8e3ca4.svg
172.64.206.3200 OK 5.0 kB URL GET HTTP/3 1win-cdn.com/img/igrosoft.69f8e3ca4.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (724)
Hash 4f29ab9936febce1e3af681edb3cba35
0233d4a772e34560aa1af59917c1f824a140c02c
4069328dbf572a02f895f19e811daf223f02149cca82b1564157568994525a85
GET /img/igrosoft.69f8e3ca4.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-500"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YGDL%2FcY66eQmfkv%2FbOuM4pdFopVcRt00%2BsZmUKZtChxbCq5NDDfhT%2BNfniOA2kzeZJ1nB6m8iFftLnsPtOBb%2FP%2F%2BtBZRjNz85QytXTWe0e2dXHUcVkS0Xq79%2FZbw1ow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdadb3c63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/tvbet.fea6d0222.svg
172.64.206.3200 OK 8.3 kB URL GET HTTP/3 1win-cdn.com/img/tvbet.fea6d0222.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (887)
Hash c771ecc4f2ce79192056ff048be2f90c
d4554dd1cd8e4f604cbb30b33baae9e8a5bbe776
515b7cf05bce6d60aaa8d342b198350a289a3822f358cde2715078899f8aa8ee
GET /img/tvbet.fea6d0222.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-24ca"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qbB7iZmsfRSkUzZ1f1teYpcq4LamXQYVucnHyWmj8JDI6jMG93vy0zkGy%2FutHePnFOFaU%2B9bctItBfY1voCfgdrKsne1LHrnyFHL7UpY0e%2F2A4GEcNLSeEqdPEFl8Bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc0bdc63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/truelab.ec113fba7.svg
172.64.206.3200 OK 8.5 kB URL GET HTTP/3 1win-cdn.com/img/truelab.ec113fba7.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (638)
Hash 26df3679f187e7966c64460fdc1bcb23
4886b04fe9a7d482ece567d2141f25091d22a8ee
f3c310391b07902edaa1e3832eaeffebdbca4f78c752702c474668ced230b73f
GET /img/truelab.ec113fba7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-7b0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085629
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k7aYJUlcTu2Kr3lt%2FJzS9%2B2bG3TLvQ6ua%2BmNl1RDD0G6s83XCvsrfdORkp%2Fg7SCYwsj86%2Bpj70k1cAdpz138GaO9ATob3a7j8j4VRphb6sGBc3AwevyCNYOf44qJ4S8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbfbd863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/vibragaming.4aef6c164.svg
172.64.206.3200 OK 10 kB URL GET HTTP/3 1win-cdn.com/img/vibragaming.4aef6c164.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (541)
Hash a1b8f89cd3c39bdc3a7b874a7b1a5513
cae7bb5af9562fefdff1bd73fcd9eeb13d0e1db5
b1b5f0191c479be9f621ec66032dc97fe9472d3bc4f7a443ab9a6097fbf2aed3
GET /img/vibragaming.4aef6c164.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-62e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085629
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jXiZE6KEbaTblOJHQYuSLC%2BkvJXMbvSzUYUm2U1YDmM2y87OtvAlcR0boD2e6y8I2PGvC5CfFcCwNbZn%2B798fY%2FnreL6lzYdLoYUqLFUnAN8PGCcjXBU7vCGcuCDIdg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc1be863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/wazdan.1cf2cebcc.svg
172.64.206.3200 OK 8.7 kB URL GET HTTP/3 1win-cdn.com/img/wazdan.1cf2cebcc.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (526)
Hash e10bdb79a3900795db98e8fee4944926
357adf158ae4e36a4b46bfc5f7c673b55c668dbc
f076595d898ca419b16868d132a0fab1de906f9d52087277901fac725d0e7636
GET /img/wazdan.1cf2cebcc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-7bd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ga%2B5NqJr5d0zNaL%2FeUp9upToNISVdnmmJJN2hSiz6IPRkDL0BKSckxy6gXydfig0qJcc5OElEIpKz5gW3n7Vt4gVuyh%2BuiJBWDQWxoFjsUH3QdzYI4lRSm4fqlmsD54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc1bf163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/max%20win%20gaming.00fa88483.svg
172.64.206.3200 OK 8.6 kB URL GET HTTP/3 1win-cdn.com/img/max%20win%20gaming.00fa88483.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6a6b783bff3e42f9cc7e82b590ac60d0
594d90d8ed0221ae8e728df4f4cdc00411100152
d3075fbfd26f4da9ea3a27c76bd2bf89f2eca736ee242e2892e96f131c1fe65d
GET /img/max%20win%20gaming.00fa88483.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-2fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xTIdNFHPBrN0iB%2Bz%2B7oEk5bEJG0h7XnfBL7ChLtk5xQXPBdpyNCpyacqFrb0xq5nk8myVri4V3EZ3eUZ0gwCyrOW4ZCr%2Fufwlkxa4pxlvohTpI8OgyRb6gAVK%2F%2FMvmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb4e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/iron%20dog%20studios.bdf700654.svg
172.64.206.3200 OK 203 kB URL GET HTTP/3 1win-cdn.com/img/iron%20dog%20studios.bdf700654.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2233)
Size 203 kB (202945 bytes)
Hash b002f96a069f34ccc5fc279e59b406fe
2f899abdfd2042971ad81e2a4de87594565c0971
c3aff3a52b14a596ca246cd3c637478f6783559568f33f68fb0b2c8299429ac3
GET /img/iron%20dog%20studios.bdf700654.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-3dc4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FvS%2B%2BkgF8Fwu5IJ5FXrkG7dwpmYFqcfOgBju6elst4GLrVxLvGQanjBrb8GnW5eTz0mkqDlmZx1mJNooiSZkQJu0W8BQDQ7m4u5gu74VSSiiiXKC%2FR%2FNW91LZU3H%2BSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdadb4163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/100hp/9adfccdd-a30b-44b2-8635-a10dc1e52e20.png@avif
172.64.206.3200 OK 5.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/100hp/9adfccdd-a30b-44b2-8635-a10dc1e52e20.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 96ea178271b7b82fc1fc2c58dfbac32d
48f4d3c6578ea9259a005b8ce58fdf503da88f65
14df8b4c40c407297bd9fbb0dd0b1d2162ab1018dff98250801dd631d2ecae0d
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/100hp/9adfccdd-a30b-44b2-8635-a10dc1e52e20.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5196
cache-control: public, max-age=31536000
content-disposition: inline; filename="9adfccdd-a30b-44b2-8635-a10dc1e52e20.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NWQwODM5LTIwYzhkIg"
expires: Tue, 05 Dec 2023 19:43:32 GMT
x-request-id: EHcR0i3So-SKS4pqrzlSK
x-cache-status: MISS
cf-cache-status: HIT
age: 460186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SnlyPU5YEnmpVjOISCVrPKnXkrPkVgDTJUxlUP%2Fdqpz%2BhJE33%2FMeAXbTYFVAoTbpRCjUR6bphXa1uXSXMJeDHLTsq8GQ1z6chYsjptG1SdrIr0Xp4bzLP1Tg4pFKRWKhIJbzZei4Dn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdead3d63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/leap.f4cfad944.svg
172.64.206.3200 OK 6.0 kB URL GET HTTP/3 1win-cdn.com/img/leap.f4cfad944.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (575)
Hash 44e4b792850c7a16f0d9b049ceea2330
9f41e26f1ad89850de0f553941dee857fdaad23e
a235a39ae7e02e50b1b90bc051985a525d5eb2f1394859e2538a69659d5c98e6
GET /img/leap.f4cfad944.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-99d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=taMB83mpHKveETCHuFu4u0ytPqq2E9lmin%2FkimJSet%2FJlOJ%2FRJVgXe%2F%2FoeWLDcNM44yK319l9hn%2FwXha3a%2FwogBQDKw0FXPGpl3HDXJGg6QmJWfcV7h33IautlEaDAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaeb4663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/revolver.25aaacada.svg
172.64.206.3200 OK 73 kB URL GET HTTP/3 1win-cdn.com/img/revolver.25aaacada.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8e663aed07dfe306c50651fc35383c89
49f67632f59343d6ddbba2664c29ec768808a7fb
58225d07bcff537e25e4ce860139adb6c9cfae461335b0b1fe59fab88d402e52
GET /img/revolver.25aaacada.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-f28"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 427356
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UKsa5WdcuyCo5jc9pTRRDbxFW2Es9QjcvTRWnSqtZBNMf4udBUHyTfGfx1T%2BTc%2BHDhL0Zgksc4HWb%2BPtTmEG%2BfWSCGmxIRLKx39kfjz1hXxJnKLD9VXaJGce%2FM8WcSo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb3b7763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/b45a683e-3020-477a-aa59-5555479ed71b.jpg@avif
172.64.206.3200 OK 3.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/b45a683e-3020-477a-aa59-5555479ed71b.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1fd94da109d8742d4de7e1c65ef0df28
b6aa910fe3b6d275bfb153a0ddff65ed543bcf29
422b7049635f400468f5f1710e03bebfe8dea0066393d176c9567a74f4403d31
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/b45a683e-3020-477a-aa59-5555479ed71b.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 3567
cache-control: public, max-age=31536000
content-disposition: inline; filename="b45a683e-3020-477a-aa59-5555479ed71b.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MGM2YjNhLTc0Mzci"
expires: Tue, 05 Dec 2023 00:54:42 GMT
x-request-id: jAeECwSGeQ9nlRElGkYks
x-cache-status: HIT
cf-cache-status: HIT
age: 515662
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VeSmcHUQjb661Wri2cZYplqOEiqim8YNiLDF2YImsW30OxNF%2F5bix9YEG6%2FDTUt%2FJqfPRabjBzxkXHK0flMJ9FpTb5TK1y6VZbDrKtBzA%2BK7T29bu3PYKF4g1OcddVB2J%2B3q1efOcsk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdead4163b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/378b4642-a40a-4bba-a9c9-29399ce6bcb0.png@avif
172.64.206.3200 OK 7.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/378b4642-a40a-4bba-a9c9-29399ce6bcb0.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f686b7fd13a148b4aac166ef45812e1e
940648af2b3afd47fee4aa98eb61bae9bd776310
829c456763ff41fc29a95e92766742edb0141ce3e04aeea839703e0bd040437f
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/378b4642-a40a-4bba-a9c9-29399ce6bcb0.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 7474
cache-control: public, max-age=31536000
content-disposition: inline; filename="378b4642-a40a-4bba-a9c9-29399ce6bcb0.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNWZlNzE2LTVkYjIxIg"
expires: Tue, 05 Dec 2023 21:36:33 GMT
x-request-id: RYHKss1oJB0Dl3U0HORBx
x-cache-status: MISS
cf-cache-status: HIT
age: 423914
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BLzGEVmU%2FxrWYZ7JI4G5a5kwVAUy%2FKejgmofRaCTlZfzHu1%2B67WAxYcbMXq9q9cGJ0%2FCQQ%2F7G%2FVVNaiH%2BLiHahy6nIREyTyVky8kElzED7cNBFo4G7KYJBawPwz7tGCqpoEu2etnLvI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdefd6a63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/mascot%20gaming.21cafbe70.svg
172.64.206.3200 OK 8.0 kB URL GET HTTP/3 1win-cdn.com/img/mascot%20gaming.21cafbe70.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (937)
Hash 112f569d0bc357cf0c8aa08eb743ce43
2edc092cd1a2d493786d317a883ca32cc6f971fc
bb817944e0dd8fa12b9a66d9c66d397a89de64cae984e693f13425c5a0d8da46
GET /img/mascot%20gaming.21cafbe70.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-144f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rwcEbKPvJUWHIUpyW1rfbgucuK20QNX0WPDFze1QHkAwOlucy%2B3wcNW9fRROM%2B9s%2BIbjwgpb01daf7KfVFsU4xgRk2J7kKR233bx1POVSGnp6%2FgD1KVljoglb%2FYqzqY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb4d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evolution%20gaming.acb5f3085.svg
172.64.206.3200 OK 5.6 kB URL GET HTTP/3 1win-cdn.com/img/evolution%20gaming.acb5f3085.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash bf4c0582c619ccb89ac8b36d1383d8ef
6e9b067c1c32c7f1a2ef0c4cf207b1d2bec9b953
1af991bbe9547c9f9b2aed90530527683eedc7f29809aca9c6a23dcbc321d441
GET /img/evolution%20gaming.acb5f3085.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-9da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tO2QF8C03HiS%2Fr7SHPN%2BRCwn7snGR6gwG2M2rLzas%2B5%2FVkJxeDoJ8vbjN1FtA%2BuyoBv8c9J5fj%2BPUt3Hlm3ALkhsoUM9OFzqJhlAH637Q7E2HaNLGtHr3AUdPB5aeJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab1a63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/4theplayer.f89265cdd.svg
172.64.206.3200 OK 7.5 kB URL GET HTTP/3 1win-cdn.com/img/4theplayer.f89265cdd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1928)
Hash 93224597cf0882f492740ac24aec25b0
c48c4c577e8bc315d85adab6463c313b45b4e08d
e23dfcd253a492e477ffe06df78c36e7e7ab07fd8d2a603f7f9d87ebb7d067c9
GET /img/4theplayer.f89265cdd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vjfptO7%2Fam%2Futxyn3OjuvLezIgOQxW31qnynH2Z2esNUVwa1P0FT5hO8G25yGLAlb4qrzhkOs%2F9b4vzMO1zIT6z0GY%2BZISpLojeerWlLb2sRvijUGPNosikqEHntJ5w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/1e8d545a-81d1-4a0e-86ee-a9ed8438b040.jpg@avif
172.64.206.3200 OK 8.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/1e8d545a-81d1-4a0e-86ee-a9ed8438b040.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8d758ffe991e690b3493aa0f5135313b
b298cb93e15bcea532b361b47e1fc0999981ee2a
6a949b5a337aead929f6a6538392765770379d984013ebbe048b6dd2a8287c5e
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/1e8d545a-81d1-4a0e-86ee-a9ed8438b040.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 8160
cache-control: public, max-age=31536000
content-disposition: inline; filename="1e8d545a-81d1-4a0e-86ee-a9ed8438b040.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0ZTcxY2UxLTI0MGZjIg"
expires: Mon, 04 Dec 2023 09:31:34 GMT
x-request-id: FFWFFSsyvrMIMv59uID8V
x-cache-status: MISS
cf-cache-status: HIT
age: 577272
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yTPoQrLBPIm6Qbw3Ew8Ks9zxIZqkfQfpV2zz6wMIK%2F%2B2jRgNQA1bDzUTst%2F7KYL7h%2BV2ewOY84s1fiNNnv5BRvZbUGQOht7SSLiMeBjc4DLEIxnThw0Hrbkq%2B4HN6MSlLng%2F74DywY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdefd7363b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/087c53bc-4fce-4440-9f60-bef9675a5193.png@avif
172.64.206.3200 OK 6.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/087c53bc-4fce-4440-9f60-bef9675a5193.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 7cbdd36fea2ec86b821877d268f51b94
156cb29519eb64df1284f76a17c01f295b53280a
22add92644ba70ca8f19c72c1b6ea7c134a6a4013d0a09f14f911d1918fefb2c
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/087c53bc-4fce-4440-9f60-bef9675a5193.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 6009
cache-control: public, max-age=31536000
content-disposition: inline; filename="087c53bc-4fce-4440-9f60-bef9675a5193.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NTRhZTVlLTY4MmFjIg"
expires: Thu, 07 Dec 2023 10:08:31 GMT
x-request-id: sA_2EpmyThH2j-JJLvZGb
x-cache-status: HIT
cf-cache-status: HIT
age: 314506
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lJHxKJgX%2FbSzv0K6uvSPJBAj466Ygb6zvCgGTyr9uhL4uExwX2MG4Qe%2B9I3oXpGPCURlfLebj9cBkV%2F%2F5qbukI1jds20tDuEUv2KVIOD2IOdUF5sTGvYqO4W%2BFEvbfYbOrgWZmTvD00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf1d8463b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/vivogaming.436af0a9f.svg
172.64.206.3200 OK 32 kB URL GET HTTP/3 1win-cdn.com/img/vivogaming.436af0a9f.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (61871)
Hash 70c2bbe1a5ed8af496fae56d272b053a
f2c6c04689b7c4123d86229f2929b199ed399851
838796fcbc2d6f7bd235db697a4138551cba6a4e822e1a44d4aa6a8c0be054e2
GET /img/vivogaming.436af0a9f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-f236"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Efg4P5T5HX%2FwmQn7Kn8VCB41niVCmZL55bhmi%2BLZtRCuuBP7LE2MOKlt6GnY0BwBsXdIaDZP6Nqvksom%2FRCa7uZyw%2FGScKKgHI0MQAbUint33PSRi3l328mdfO47Htg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc1bf063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/57460.2ea30a73c.js
172.64.206.3200 OK 13 kB URL GET HTTP/3 1win-cdn.com/js/57460.2ea30a73c.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (438), with no line terminators
Hash 3940ad901c872d13b3f221d5d1753c90
d9543432f353b875d90ba22a0fe5d7edf3870d12
ffea5f4a3b9b89527a8eaa3be89086ffcb058b987b84dd614f314ec461a7b601
GET /js/57460.2ea30a73c.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-1b6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xN9RQWK4GYfxDPy2QCoJqt35NS9TjodRuwgB3waHkMHEZErYUD%2BFrZc50u4Scg4BvVyugp1W7kpv1Me1%2FqRFesgcRNlRB2PsA3Sdmeny7mlvjd2%2BHC8JqV8xkZHIzFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1x2%20multiplayer.00302c7de.svg
172.64.206.3200 OK 16 kB URL GET HTTP/3 1win-cdn.com/img/1x2%20multiplayer.00302c7de.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (598)
Hash 37c21d7c6d38ffea22ee0fb9e0635882
43b4911b0110753b951b25601b317d845632fdbc
042121d3213451af3a1ccf670bdbb674544c824455c6a30de69179bc780410e0
GET /img/1x2%20multiplayer.00302c7de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-9fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085638
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gG1fPbIV7mbAXO1NKku%2Fc2vUpSy9aMEaH%2Fu43pkJ1vg5YJDVMjsu3QbGc982cVu6RNSFW1VrWe9ED%2BViBj8YJ%2BwGvfx7n6y1CsvjL%2BWbK%2B%2FDGPOrorlETga6ZTAFjS4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd91a4e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/20420.a8a37ffbc.js
172.64.206.3200 OK 13 kB URL GET HTTP/3 1win-cdn.com/js/20420.a8a37ffbc.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (573), with no line terminators
Hash f5d89fb15e17f73b8c6bf23ec49acf32
451fa7acd3e8f232c6d8e5a9e2685226771fbb41
a763f290f9b6982825ca91925709d7ba82ca508514f91786fa29c44b4afa763a
GET /js/20420.a8a37ffbc.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-23d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6MXiF8DwKhkCSIB6vbMiidM8zhDIIV8AVUAvg%2Bv%2B%2FJgaGDrYHV8Tz6IgYvN%2FnoEdkGXS5%2B9oBngJJ4PEDNOf5pwxjG0QaU3NSZHXF3igAkFZhxruwuJqvT5eJvKmZM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd97a8963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/rubyplay.b4553f39e.svg
172.64.206.3200 OK 7.7 kB URL GET HTTP/3 1win-cdn.com/img/rubyplay.b4553f39e.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (928)
Hash 69680c6fbb3e9c1866a18ef69941e53b
54433c16936ad4f5e78965f8d1131598c83a4ad3
d49a2dc21164a4859ff8dc325d96b7bd21627cde27223aa8e6efc484326f7978
GET /img/rubyplay.b4553f39e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1d85"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E2YPpqhOAQTcIoYRDajQsBz%2FHj70nGWO7hr1IvmsyAprVRpNarjZ980guCCfOceoAfBWGtUhZEmq9LFJ65e%2FD3%2FKGDfoAUTH7%2BgLQPpEslh%2B8i4Efh1csif6d%2FizNCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb4b7e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/kalamba.6e06f7faa.svg
172.64.206.3200 OK 8.7 kB URL GET HTTP/3 1win-cdn.com/img/kalamba.6e06f7faa.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1257)
Hash f52cf033e3c9cd5b8c385bba6e45e80b
e9b34830ce54b623eaf07a54d3497c3ca250ccc8
cec712f71d4dbccef3faf40e93d1e56ae5e302601d542963c2c07c9f4ebcf473
GET /img/kalamba.6e06f7faa.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-a9c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2u5dG3OrmdkFY%2F7WE80T5iEPkQAc53JyHFhR7wNo20oRrKAMocZjSXvAMzsIlvx9aMTZWtQkXC8Dznw2D60cZjKh9FkuTIF9AI7PBkrbD3vDp3bzJaaU%2FOXXu%2F1c6S4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdadb4563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cool%20games.019d15340.svg
172.64.206.3200 OK 10 kB URL GET HTTP/3 1win-cdn.com/img/cool%20games.019d15340.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (519)
Hash 183394d65156cc3b49a51ca4d7a0e600
8b1e957e76a464ea7e7acf425b587da146d805a9
edf816fe66e357c18d131d4a5e059cbfe057ed5c951c63ac20d2eb022f380893
GET /img/cool%20games.019d15340.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-e13"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 261385
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z0e1LJ%2BwdjDHm2nBFXVhl7HvcsgCOXRJINYxfdnHSJgDI8TO021PQgA3rsnXKaEGXP7DpDDBlN%2FPimcETZKFf56d0V%2F85wCwiVQyV18qA3QCgxfmebMxC17z5l8VN1A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda2ad463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/78449.d46c5a3ff.js
172.64.206.3200 OK 9.0 kB URL GET HTTP/3 1win-cdn.com/js/78449.d46c5a3ff.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (786), with no line terminators
Hash c9e05b247ec4862225558c72b113350d
7708f2815c38e06b3f5ed4e9c6c98622b69e3f4a
ba979bcf79cb56027207dfba2cb71ac9b41ad1f38b55a0977f72091dddaa6486
GET /js/78449.d46c5a3ff.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-312"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fyjOYgegxdT4u3%2Bet0qT56ykltnt8YrdzIwmgeVDs7jhLkWdOE%2FW6u6x%2Bto5dJoos30DxLu%2FVLe5Um4qQwTvZGTcf92FO8YypR26unmQtIuA55G%2BYuLMjH2LMGRZUu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd8da3163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/infingames/c_ee8956af3cce322f47e21c8fe29476c1.png
172.64.206.3200 OK 80 kB URL GET HTTP/3 1win-cdn.com/casino-images/infingames/c_ee8956af3cce322f47e21c8fe29476c1.png
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 200 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash e29dcbbfeac844140ca14b7fe93d7a93
7cb74f671eaa0d7be02acd313a6d0d20b9004f23
9a4651da1193341f35fa8529a40292fb03fc99d7064612ae4173fdf450e1db1c
GET /casino-images/infingames/c_ee8956af3cce322f47e21c8fe29476c1.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/png
content-length: 79506
etag: "61cae699-13692"
last-modified: Tue, 28 Dec 2021 10:27:37 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 1534710
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RbMCsBCuc0K3qBUlS49UOO%2FPFgjWkMB6upLfn7jNpRQmX9szn1AfupL0nFXct59KTm%2FDXEcoQbsz%2BloxZCcxD3cjOtjfE3%2FqJx8MFMCc%2Bj6frlyVqfhThqH%2F91EIxJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db363b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/belatra.1e7508387.svg
172.64.206.3200 OK 11 kB URL GET HTTP/3 1win-cdn.com/img/belatra.1e7508387.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4345)
Hash 47dc256a5dca8bc48380ad551e5e909f
36b81b97223440dd0b7792204bdcf428aedc3a90
1d6d218ca11051bc23eb88ef1b6191aeb81a5fa0c2e32e8237566ead675a3468
GET /img/belatra.1e7508387.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-13fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oXN9FO9NqcRk8qcJbJpCVEsnM46OEmr74JzTuFbe6bF2IEjMpQJyfKbUEwlZLCon3WqqXFxTRkw6o54EtR4s6jeWMNaTTqRZE%2FmUU%2Bugt%2BJc2p%2FK%2BF8%2BqUqypXsk%2FY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd96a8063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-casino.e0372c0fb.js
172.64.206.3200 OK 42 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-casino.e0372c0fb.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash caf103b3719cd36e18dd18439deac2fe
b2e498d23c374abbc8ccd46f2ca03cb2bb2f41a3
4b280d2612a827e6604aef233c91cfd79b359a47065c728a350d0646c5c8a68c
GET /js/icons-pack-casino.e0372c0fb.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-164f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309595
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i9mjLFOzmsYHjbG57pj2GLiwewMNslGE4pwUgz0IZl9RK4zK6UuBRRPUdl1b2wpXpEqe0Uq9clIWFn0sIY8YI30I7w7%2FLXUqAUU8q4r4O24Nig1JCI2s0Da8IAd0MjI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd8aa1b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betsoft.cc500155f.svg
172.64.206.3200 OK 9.8 kB URL GET HTTP/3 1win-cdn.com/img/betsoft.cc500155f.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (836)
Hash 8a569685d3a3be388085f602bcbb152a
fbe33b59860af63f122a4095ccc7c19363bb827b
65155f234330a5328621a09b475968c647a5f4ba56977e0d7eb67297783994e2
GET /img/betsoft.cc500155f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1286"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pF6%2Fet9LW%2FQdDuAaqN2kwtnsprePznVAOSe22jwZUbN8HR%2F6Lw99rAzNlxT%2FUibmYdqOMYHdL9t1AsQT3va0sCcdr8TboKjrIgr0v1dblilCbzdra0wpV5NgvUOG6sA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd97a8e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/quickspin.d9067a98a.svg
172.64.206.3200 OK 51 kB URL GET HTTP/3 1win-cdn.com/img/quickspin.d9067a98a.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (599)
Hash dbdf56e7cc86a8b3a6015b7922079ef4
b7e4c0e3150a6c917269b7ee44d530aab0aeea62
4f70eb70d7c293aa781dba608df93ccfa806a5907925b0951ebbbd8d70715868
GET /img/quickspin.d9067a98a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-954"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RXJclmiTI0JkleUj74h5Z0mbsthWwEJEdMOTa2U4YZRQBi8bwDu6D5GM7JcStdJ3bVzlk8IVZ%2BeRfxLurWgYXixDU7rU29IT%2BxJ0ACcXRX2TcAmgpH6VdIX47%2Bkfcdw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb2b6d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betsolutions.5d0a153ca.svg
172.64.206.3200 OK 6.5 kB URL GET HTTP/3 1win-cdn.com/img/betsolutions.5d0a153ca.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1238)
Hash 8f8ddbc4a117c8e2c33b39e231dbf99c
67b133156b4aa1a4ef8e3125e34632a17d3e672f
7a027c5c201927f5cbcf962ae0e857a3e8ef44ef14b08c1f0746e1cea8bc709c
GET /img/betsolutions.5d0a153ca.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-61d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 519253
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K1DhQ08PeNna3ThM3%2F5SGI2Mxt06dI4JSaF2xdMENnQgI0%2BvqaSHoOsGiiDIzIJI0xYer8e8jR1fRjrBjmiBnMKHvIVbsAlvwA%2FYXFRQMJxAM9Rja4VWPuDqIKEzC3w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd97a9063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/salsa.8d18d113d.svg
172.64.206.3200 OK 9.7 kB URL GET HTTP/3 1win-cdn.com/img/salsa.8d18d113d.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (473)
Hash 44a2227f162f79565449975ebc76e44f
6e7f617ad022bdebe00f86cb63a54cee07dd4d55
35b35bed5002101193ce520a6c0b15264bcc8ed420db1ef7c297f17f57e3fe70
GET /img/salsa.8d18d113d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1187"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tpx98kLM2zrynw%2FpeDemrkEr3xPoOklU6PfMCS1X%2FoBAzqL6K4SLRoJeF75RnIPD3%2FHeLEv5NAOQs%2F4LkTzuyXcFUHsyeICGPsabS7gAlTQxqYj2TuwYkzA%2BAJH4%2BmQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb4b7f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bet2tech.41863da88.svg
172.64.206.3200 OK 18 kB URL GET HTTP/3 1win-cdn.com/img/bet2tech.41863da88.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash ff8a405191671dc3cd5b5be18b600021
25207e1113019d907133bc9ac188dfb855fa4cd3
9b150371758ada78e0ec2cb4e3916309b8a49c3ca22c4acbadfe95373efffc7e
GET /img/bet2tech.41863da88.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-71f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eLQM0x%2BWfDOWvBYi0GRia7mq2eZ6e2Ug4LH%2BgkrrunpX%2FKb8Yswsp7dyJU3LyeHEl9m4uASKioh2YfjP6goLxheW1OrwUFsM5rsPEsOZe3eM5AqfTDeI%2FO0lTpFyo9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd96a8263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/boomerang.413a98511.svg
172.64.206.3200 OK 21 kB URL GET HTTP/3 1win-cdn.com/img/boomerang.413a98511.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5938)
Hash d37b7a09c29c7e0179175433f4b9cff7
9c24e32b7e570cd294ee7400d7b6b96348a6a8f9
e9eaf42baf55a608a7663e6f63812bd1faf020d3d75d6c12ddec5ea4b945e53a
GET /img/boomerang.413a98511.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-8c38"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aw4v6cf6yMyN2hz30sbqp2VDw6ypw8GLVUj6BS1T7vXQSp%2FohvAFwNMp3r1EYNjTsf8Rso4rx%2F6tgJnmj4MV7PKGRhuIXmlDggDvBpNs1BOQLkRs%2FaCj6glIA6gZgRM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd9cab263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1win.9b8574150.svg
172.64.206.3200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/1win.9b8574150.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (691)
Hash 855024dfe0a19a27b9961735cf9620a8
9c7ab30c9ba553f42bde01ef76a337cfd0e7dc1e
0eb8a9eff2e19fc0dc9e09f0d9016df8a1e30ac6b172b58ae81cbdcdee2eacbc
GET /img/1win.9b8574150.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-643"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085638
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h2cpq64PC0ioLgWWkvgezx4oI62wPXUxrKSnHt8zWhcH4BBvNfhOV3d9U20R9iHlu6LRNzdHMxRpgKHM0TRHwAXUL%2FRYguTbH%2FDczfHM0XevvBhWJ8JlcKpXEv7FDDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd91a4a63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/6d6160bb-3358-4beb-890f-1e33741e6ff7.png@avif
172.64.206.3200 OK 9.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/6d6160bb-3358-4beb-890f-1e33741e6ff7.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 2fde60caa740850589194657583dc063
0d441263f9641eba371777a7eee6cfb6ec708c2f
77528812dd6861234a5792191e40bbbade3c42b51f02daf0037c28c249283870
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/6d6160bb-3358-4beb-890f-1e33741e6ff7.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 9822
cache-control: public, max-age=31536000
content-disposition: inline; filename="6d6160bb-3358-4beb-890f-1e33741e6ff7.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjI2MTNhLTY4OTdjIg"
expires: Fri, 08 Dec 2023 13:28:53 GMT
x-request-id: rny8zwH0b5_j-R4aKhIl_
x-cache-status: HIT
cf-cache-status: HIT
age: 221827
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yCG9Wl1BoZJ31QVEm%2FY1xjII%2Ft%2F4VE7UOuwWva3ifgAD3hIt1D2NWmiyXO4cS6YH7txmqt4%2FvxcRs%2Ffuio1r2Cbj5j8fDtuWp2K%2B9DCg2W9A%2FAJd1RJBDNVhpw1dKkjAojPZgRCG5%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7dbe63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/play'n%20go.b092db97b.svg
172.64.206.3200 OK 118 kB URL GET HTTP/3 1win-cdn.com/img/play'n%20go.b092db97b.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3197)
Size 118 kB (118218 bytes)
Hash b20212bd5beea6a9d96708a736b53eb1
14bab99ddd0568df45f77f62e15328a1a4794996
5f8a7aff7499fe29d148f4aed064a0b4a67caf3e8813e99bdf30d248a92a0208
GET /img/play'n%20go.b092db97b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1acc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ICjRMWKlj4StVODYWbdpRe%2F1RKXnMdB1T9dQs0ZbVCPB4%2BCxcH3N0VMhYrGz5mIIc0g%2BL07kLVBJjMiKJqfTVdo9Y5gbOQTZKMFJoG2oCUUlwW2DZRhI8bQNLJcUDSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/4_squad.jpg@avif
172.64.206.3200 OK 6.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/4_squad.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1cc8868026c84f31361819b3d54fef26
7ffa3cbcf8f9d613b440d0878f1ec29d045d3b07
76f7e4100ff12933e47875f681eba1da0d6753c256eef4ae19cd7cfbbe78dc55
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/4_squad.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 6719
cache-control: public, max-age=31536000
content-disposition: inline; filename="4_squad.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzYzY4MmIwLTI3ZmFmIg"
expires: Fri, 08 Dec 2023 12:22:35 GMT
x-request-id: MnU3C6cy_1mbtDsY5Ipd-
x-cache-status: HIT
cf-cache-status: HIT
age: 222824
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yLN%2FPnOMrfcprzrBF4U9tXpKhL7K6pj35hGx8LezNLASg%2FLxEVbCCqqaOdQK2qwjkGfEWD4eR09pZyK9aazOVsnji5CojT02w9W43ekBFZMOwqnBPPisZ8UXK5oV32hc%2B0HQZViyRWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf8dc263b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/131a17e7-169f-4ce8-83fa-297a7a134aae.jpg@avif
172.64.206.3200 OK 6.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/131a17e7-169f-4ce8-83fa-297a7a134aae.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 9e43f87e2615820323b0e797d34635b2
2ca4f5b64dbb960d54d380c3c620564fb63738fd
55eaa9d7aadd5614220e95eaba1cbe8f9a8203160f9cba6cdc2a6f578fac1606
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/131a17e7-169f-4ce8-83fa-297a7a134aae.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 6295
cache-control: public, max-age=31536000
content-disposition: inline; filename="131a17e7-169f-4ce8-83fa-297a7a134aae.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NTYyMzE4LTFjOTU2Ig"
expires: Thu, 07 Dec 2023 14:16:33 GMT
x-request-id: wLND4dL-30UJHaIoGhgfC
x-cache-status: HIT
cf-cache-status: HIT
age: 303065
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zqqOEy516Wj8zckwIh1VwLzFzdl%2FH79uE0NXpJh5INXvM0dYNOPO1BnqBaHNyfpSdcMHzKLqmIyZoAj86uQLrTksHf47lrSyET8z3fT3Jw8vg3BB%2FxtsE1j%2F3bJw%2FPLyf3i7ezk%2BNpo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf8dc563b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/19b7a2c4-5069-4cdc-bce6-82952b782b2f.jpg@avif
172.64.206.3200 OK 7.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/19b7a2c4-5069-4cdc-bce6-82952b782b2f.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash ff6dbc044806bbd2f4ce7556beed79a3
8b25625a6b6d85b92c21e4bd91ea87505768f763
e73ae8ee3fd7b29b9813f4d92c789417d3e99ad80ad45738640a5e4955061e68
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/19b7a2c4-5069-4cdc-bce6-82952b782b2f.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 6971
cache-control: public, max-age=31536000
content-disposition: inline; filename="19b7a2c4-5069-4cdc-bce6-82952b782b2f.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNGQ1ODc5LTFlZDYwIg"
expires: Wed, 06 Dec 2023 19:37:04 GMT
x-request-id: s286CTjcmyuBMB-U6ZrQQ
x-cache-status: HIT
cf-cache-status: HIT
age: 369821
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CKxJQtKvOX10N0GE2Xl%2BmxGR3KU74HQgjwynmR1x2uiwcEh%2BFYxKIpxX%2Bv%2B83mlw1fwM1p37hNjWUIyRwPVqrdE056hBBOqMDWsmHQXJj9pmgU0cuo7m6A5mATP9nbJUfMgwXdqwkJI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0ae8863b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/infingames/c_993f07995200cdc102fecd0cc2d60fe3.jpg
172.64.206.3200 OK 17 kB URL GET HTTP/3 1win-cdn.com/casino-images/infingames/c_993f07995200cdc102fecd0cc2d60fe3.jpg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 170x135, components 3\012- data
Hash c8b88b8c1d6d8eddf983d50059e1e95b
0d59eb9b914b57a20b1d78deb212c2dddfe7b320
bc8bc188b6a00584c28d06e74ad031d090276e92e3d2abe8544f5632cbbbf8cf
GET /casino-images/infingames/c_993f07995200cdc102fecd0cc2d60fe3.jpg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/jpeg
content-length: 16563
etag: "5f84457e-40b3"
last-modified: Mon, 12 Oct 2020 12:01:02 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 1978475
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kNw%2BSw5Sox3TPN%2FSn8Vn17FB9m3Q4zs%2FMdMGn%2BCphTSQvkoU%2FGwyMcln0boXQEPckjZAkIFENjiEScu4SOprrrcCfHocnXnzos1X6me8q5BrTxxvlNH6d9cGuXnNu48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0ae8963b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif
172.64.206.3200 OK 6.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 970eb30eb4b7dbfb4e6b8ffd28076b7d
6a0f8512e3df00e5a94559fb30c0a53c5ff2dfb3
f8cc82596f9e85c7926e3ed1823e8f9deda4f8ef6d2958cde527946e26910931
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 6673
cache-control: public, max-age=31536000
content-disposition: inline; filename="2fd6d9d1-bb10-49cc-902f-28ef851837dd.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzZWM4NWNlLTI4YTY3Ig"
expires: Sun, 10 Dec 2023 00:26:13 GMT
x-request-id: q_EQHPWT66R4bs4OqGrd2
x-cache-status: HIT
cf-cache-status: HIT
age: 77602
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zB44371j5%2BsxFJK1BrzC%2FRXTgILSY6CbP2C0WBaQ%2F0Elwq8Adch6lNeFDuYt1TwUQ9LAQSEbnuyRpkLxJWzjb9U1Rl9K58JcNJolhV32lqtDrvViH4NkxQveBsxGYq1XtnB4rAoGnnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0ae8a63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/b294bb3f-b48b-40ff-8497-75af71b4a831.jpg@avif
172.64.206.3200 OK 7.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/b294bb3f-b48b-40ff-8497-75af71b4a831.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d2fedc188b25feb0215bac0a9fbd4247
b97fecdfa520395869f4ead8f1ff4fab4f12048b
a12831a96aec603514542b2d49713e3f6c07f2e0c69c2b82507d0e690a7fd1b8
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/b294bb3f-b48b-40ff-8497-75af71b4a831.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 7039
cache-control: public, max-age=31536000
content-disposition: inline; filename="b294bb3f-b48b-40ff-8497-75af71b4a831.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzMjFkNjA4LTIxM2MyIg"
expires: Thu, 07 Dec 2023 14:31:43 GMT
x-request-id: qdi9Gh3JC4EY53msxVonG
x-cache-status: HIT
cf-cache-status: HIT
age: 306102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J64ECJ3kk9Am0LpmsUsp3kZen7%2Fxu%2FjEz1WajUsfUGuCwXiF%2FA3SiD7sg%2Bb93GpY8njgB3aW17NwhR9StPtpbK7OmzmPdqoTn8m%2FETvxTNcDFyr80FwJMSj%2BuZBNiJw3lCiSjpk8q9A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0ae8d63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/liw.134f23084.svg
172.64.206.3200 OK 6.1 kB URL GET HTTP/3 1win-cdn.com/img/liw.134f23084.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (5339)
Hash b7fe543a417b91c0697240ae76d37b3e
f173d8ca021a3820b2df1eb9b6f786cacb0c3c51
89f394eb110944f08a0133512a40c930a34fe93ecbdeac4449dfa540d268992e
GET /img/liw.134f23084.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-1e9e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 243310
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xt1Oe1joG67MSBuPrwC%2BX6W%2BO7JLj3KOIkMk33S7sDQpVeGMjQpJXfeGH9nzfnU1BcInC5Byc0LTcxtaH9H87uuaRtIE1bqA4DyZJFmp0aJqJdQwmY6DNsYD4vcheok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaeb4863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/f5443fcf-87b4-493b-b17e-755593edb94b.jpg@avif
172.64.206.3200 OK 2.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/f5443fcf-87b4-493b-b17e-755593edb94b.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 5c2306d8719547e50060f9912fb2ea5c
f313f8233ee9064b5c0d4dbf0f77f637b42e754a
ab82ab953d2837589f8073c42b7e30d572182b1e4641e10e7e0e22d462b90b92
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/f5443fcf-87b4-493b-b17e-755593edb94b.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2334
cache-control: public, max-age=31536000
content-disposition: inline; filename="f5443fcf-87b4-493b-b17e-755593edb94b.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzODlkZDFlLTE4ODlhIg"
expires: Thu, 07 Dec 2023 19:06:37 GMT
x-request-id: oPspDEFN-N0WTCoEgZNyI
x-cache-status: HIT
cf-cache-status: HIT
age: 289608
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FS5BAHUsDmLW0suu8wwew2hKkge05p%2B9%2BYwBcqwz0qO2Atp%2BfkRZxRsit0s6nKOJyPdXFiPfosPn5ckORJp5ORvcAzwiDEvQxZ7aCCIx2yi%2F91VOYGd2wnSzh0pGvQWJLnCoPlK%2BVQk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0de9763b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/6274f5e0-39e9-4354-a802-8fdd5cf8dada.jpg@avif
172.64.206.3200 OK 3.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/6274f5e0-39e9-4354-a802-8fdd5cf8dada.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 7c7db60875853bd35794ab627ff08860
8be08719be572b572ce8c03c3639fec484521575
eac17501246ddfc41b9ddd539d7816481c11a8bed00ed17a14c9b05004bdf722
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/6274f5e0-39e9-4354-a802-8fdd5cf8dada.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 3244
cache-control: public, max-age=31536000
content-disposition: inline; filename="6274f5e0-39e9-4354-a802-8fdd5cf8dada.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzOGEwODliLTEyNzczIg"
expires: Fri, 08 Dec 2023 15:34:13 GMT
x-request-id: M7kAL5jTSP8X7T3Yww4sB
x-cache-status: HIT
cf-cache-status: HIT
age: 214155
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u6JOjohinEE7clH%2F4%2FNfGK6ZwC9OqxHbbpNhCMchnin9VbG%2FmyVR9s86I9DtJsjxq2adbWfQ98OrZnFrR6%2BXP8H3i0dJ35g8temPqOGE0FjGBS5TzE2n2Wer4JRglMpz8UUhWoC4Pso%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0de9963b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/680220c5-4965-4d10-87ff-e2736ffb003c.jpg@avif
172.64.206.3200 OK 2.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/680220c5-4965-4d10-87ff-e2736ffb003c.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8ff6c6bdff037b8d39e3ccd92299d1dd
82c1952abaee1cb1f59173f3acca6360a6d3695d
59c8516cc5895102ab36393b9830ba165edbfe25285f987ccab8e98818173530
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/680220c5-4965-4d10-87ff-e2736ffb003c.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2715
cache-control: public, max-age=31536000
content-disposition: inline; filename="680220c5-4965-4d10-87ff-e2736ffb003c.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0Y2E0MGUwLTFmZmNjIg"
expires: Mon, 11 Dec 2023 03:29:49 GMT
x-request-id: 6rHjvXzSRaRaSnzou8ktQ
x-cache-status: HIT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kpc3NppRZCnzTXT9uGjMLOy9QFuXcRO1iPurW436WBoXlKYXjVmtviyLSfZ6yCDTrl3wwsZo9RKS%2Fpy0xhbp%2BM7WCjnb3U9co81Mx6sQX33WloM1xkZzK7cRVMfNHMf5KQOEDEufO0o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce12ec063b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1x2gaming.00302c7de.svg
172.64.206.3200 OK 118 kB URL GET HTTP/3 1win-cdn.com/img/1x2gaming.00302c7de.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (598)
Size 118 kB (118489 bytes)
Hash 37c21d7c6d38ffea22ee0fb9e0635882
43b4911b0110753b951b25601b317d845632fdbc
042121d3213451af3a1ccf670bdbb674544c824455c6a30de69179bc780410e0
GET /img/1x2gaming.00302c7de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-9fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 515670
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JxfIDiUZbjmQgSS9HmCcvIHH53V78YeT%2F60WfhznG%2BzM1d9cGoJX0Y9UTPNw2pU%2B5RNn0q44E3EduQUNiSvT6ZnjuKaXsi81llXbboqu7Hd9ptA0b8taHXBU6MODQkc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a4f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/965c7705-da6b-4036-89a1-71d72c533487.png@avif
172.64.206.3200 OK 2.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/965c7705-da6b-4036-89a1-71d72c533487.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash efc3113fb458bda3bb8fba549e318da0
343c5bbd4579f265945008fabb1232e0e679926e
692434d438732898fc4faf91599db0cbd6a580ef748718e28bdc2b95c00835e8
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/965c7705-da6b-4036-89a1-71d72c533487.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2568
cache-control: public, max-age=31536000
content-disposition: inline; filename="965c7705-da6b-4036-89a1-71d72c533487.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzOGEwNjE0LTNkZjVkIg"
expires: Wed, 06 Dec 2023 21:29:29 GMT
x-request-id: vNwJwXCSY4QlCOMGY3hUq
x-cache-status: MISS
cf-cache-status: HIT
age: 367436
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C5t9tKPoExMHaAtK3KDHj%2FqeP9nIT9PLnXPTGXfreTqAbfeGQdpJOJwe%2BMhASHbibVKg%2BFEHPswkQZiObl9EEetpJy2NVcRPV8xoHkQ%2FF0OpTYAM0qoVpQDuDgW5az%2BwEQWkeTVN04w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce12ec663b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_1286661e1105d26756d13a51a2a16a0e.png@avif
172.64.206.3200 OK 4.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_1286661e1105d26756d13a51a2a16a0e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash e4536d912333ceb9af5cf1cb99358bae
6d1bc277d964a72bf25d61dcfb297479ccfad401
7711a0a9a7d98e8a1a262e6067a8882f7287f2183b431e668f81fb65bb252e49
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_1286661e1105d26756d13a51a2a16a0e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 4441
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_1286661e1105d26756d13a51a2a16a0e.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYwZGVlOGVkLTEwMWQ4Ig"
expires: Tue, 05 Dec 2023 00:50:56 GMT
x-request-id: WJ2jKNbPZZy5OgAp-sWAw
x-cache-status: HIT
cf-cache-status: HIT
age: 501905
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=axLLPi1WZS5rdEb1NZpsBCaxZRcIChva2G%2FDyXvHR8o3lxJTbb5US%2FA0z03E3hKANXUfqSf5UKxgM2SmlI%2BNtyoEE74aiwh1bHj3Hg1Ij7bA1cb2qOwWOkT9EOoW%2FaW7TepHndk6v98%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce12ec763b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/d715f542-6f02-4159-b18f-07fdf587eed0.jpg@avif
172.64.206.3200 OK 2.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/d715f542-6f02-4159-b18f-07fdf587eed0.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash db39d18d2835657b4d3a786d746ebe09
169c14cab1c4eb17f49a8a49c701077f8da97daa
1282e9c651523271ee2d7d9418e4bfb9ab0b457b86a5dd1ccb1176c449e38114
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/d715f542-6f02-4159-b18f-07fdf587eed0.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2272
cache-control: public, max-age=31536000
content-disposition: inline; filename="d715f542-6f02-4159-b18f-07fdf587eed0.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzOGEwNTBkLWRlMDIi"
expires: Thu, 07 Dec 2023 09:50:54 GMT
x-request-id: inho2zG-gt4AnpEAhYHkw
x-cache-status: HIT
cf-cache-status: HIT
age: 320644
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V0jXuk%2FMC7EvY61aFLHzMnbSNZd8ko8PO6ytWqvWYyuy7RcZwUxErhZJuHF9hiDdi0XhieLEP6EU4kemzCGP7b2aRnEFLhplquc5rRfQ9Q%2B8zzEqO1m8vIBgnH3p9fnj3htpWrrbP5c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce12ec563b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_2a57b099cb9c1ca8d1f0b2bfc36740ba.png@avif
172.64.206.3200 OK 3.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_2a57b099cb9c1ca8d1f0b2bfc36740ba.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f359076b089c1bff4a2372c4836781e3
c17c7f1d875ee04e6afe68879da007bdca3ece5a
97a3f26a79ef6926c153e486dbca707d5098035413f7c1d779e0216e8340a122
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_2a57b099cb9c1ca8d1f0b2bfc36740ba.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 3789
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_2a57b099cb9c1ca8d1f0b2bfc36740ba.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYxZjk4MzcxLTE1OGFkIg"
expires: Fri, 08 Dec 2023 09:18:23 GMT
x-request-id: OdTvuPb4Ot7cLupwK_QE6
x-cache-status: HIT
cf-cache-status: HIT
age: 237956
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MdigYINxtB9bMzSqfOJI4EZA%2Fsy54NPMzSQj3az1ynb4d3DfFas6r%2FqTv6EtDjwYrfbUL7sBvjyluZM6wupoAhrwGD0LXsGi1hTwGQYcioLq%2Fq5SXESbaMgUWbIbKB8xDlcAxEs%2BSSM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce12ec963b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_9c556941f010a88bc0dfa393f5474845.jpg@avif
172.64.206.3200 OK 3.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_9c556941f010a88bc0dfa393f5474845.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d2e0edbd28da1830125313fa8b25df24
b745028524eeb1fb79837a485119709d28a61db6
841451fc7c17bffa8420c5052b5ed0c250ef42dfd9a45e76eecb9c54abec0146
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_9c556941f010a88bc0dfa393f5474845.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 3011
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_9c556941f010a88bc0dfa393f5474845.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYxYjBlYjFkLTExZDg4Ig"
expires: Thu, 07 Dec 2023 04:01:07 GMT
x-request-id: Em7nqfXG_oNLmL9gsV-sR
x-cache-status: MISS
cf-cache-status: HIT
age: 328714
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=30RG5HdAQH%2FTsRezm5XAyOjIQ%2FRroMD%2FAY3BoOdSit3SRbhYuRj1K6aEZq81JXg83RJitPIc7EapDhWM1Dc%2BjJF6OjsdklPls4PLYI6viBVpepum5uRy2beCOnAsdYglXnrssFDGHN0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce13eca63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_db5eccbbc523197f83c1f3b926c30c3d.png@avif
172.64.206.3200 OK 4.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_db5eccbbc523197f83c1f3b926c30c3d.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 9d89334459b9237abff4f6922b67fc3c
a973c73fd0ef17447fd25852aa408e56aa8dff48
ca887bdfc3f9296c086442513ff9c1d1bb0478c7f50afdabf668c4acf76e56e5
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_db5eccbbc523197f83c1f3b926c30c3d.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 4822
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_db5eccbbc523197f83c1f3b926c30c3d.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYwZGVlNjRhLTExZTAxIg"
expires: Thu, 07 Dec 2023 07:15:08 GMT
x-request-id: jYKdar0a1JWmQ1lB6Z_vh
x-cache-status: HIT
cf-cache-status: HIT
age: 328714
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s0RLT0hZIsbHNJujN4IX3QA7D8bdaYM2BbQ%2BPvzclEd1phOn5poIRZJs%2Bs5lBhOLHB%2Bkh2RixnJrLRa0tVcdcq5hoPRT3650s9xTcQPjX1LcN2ReIvh9e090kCFOE45DANi5AaHzXRQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce13ecb63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_5f6937a13eddc0f125d9f0513b54d2c2.png@avif
172.64.206.3200 OK 4.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_5f6937a13eddc0f125d9f0513b54d2c2.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash fa29f21daf4442f032229c4ab14e0f44
e3edc070ab0c0eb5bd7a7d938fd5d9f99adcbdc9
c81b2dc715d05993e7041e0a72749b168ff431f7009f1c3e7d6f2c311c33bea8
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_5f6937a13eddc0f125d9f0513b54d2c2.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 4510
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_5f6937a13eddc0f125d9f0513b54d2c2.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYwZGVlNzA4LTExOGNlIg"
expires: Sun, 10 Dec 2023 06:20:27 GMT
x-request-id: Mw_MRHjpWgNGQmkbO8kOk
x-cache-status: MISS
cf-cache-status: HIT
age: 69297
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GD4XLUohgXj6OpEkYpRDYR3UGgRHcJ%2F0wFmer1Cq8sOa5BJjKTgGqvPQFnitrEISf2EeQNykiROmEoEbU0b8dAUHaDfB58MBSkZqvA6w3EPx2xl%2FZXpB7pGxy%2BUoJB0C1rz7FdwY9dk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce13ecc63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_740498057374ec54e8b9905a077e278e.png@avif
172.64.206.3200 OK 3.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_740498057374ec54e8b9905a077e278e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash c111dfe65bc5ed85c79364b820b09685
f7b7800c1ae93c4bf4dcca43eafc8b000b069f65
4f72719d41fe9f38660391f65bf47074bd0a381f70dc4a31ca520fbc9839ba3a
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/habanero/c_740498057374ec54e8b9905a077e278e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 3512
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_740498057374ec54e8b9905a077e278e.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYxODhmZTNhLTE0OTQyIg"
expires: Wed, 06 Dec 2023 04:06:23 GMT
x-request-id: c0AlTurCM2CCQyN-0iBV7
x-cache-status: HIT
cf-cache-status: HIT
age: 413937
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OEvf8BFmvpe5Iq%2FOibAfLvrxui0HngVX6BcJI%2B2G5xewthAv%2B9cOcMuQzsaQ5KLVG6I6LrsxcL%2FaOH5jUfIxgGdESFXUBdeSI3D5yhOU2n0Py5DoivP6THNvcCPfJ3%2BwVeoTR5NuSkc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce13ed463b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_roulette.jpg@avif
172.64.206.3200 OK 2.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_roulette.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 3c674a622015c54034a1de446a0cd370
701f6214d05451f739f9c67fa67297fbdf8db7a2
29defa44869560dd60dbd56d15c36d403634d358840cfce617b0da8866dfd488
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_roulette.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2517
cache-control: public, max-age=31536000
content-disposition: inline; filename="lightning_roulette.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjVmODQ0ZWFmLTQ5MzQi"
expires: Wed, 06 Dec 2023 23:06:53 GMT
x-request-id: Z8ici1kb3A5FmJvMe8vY3
x-cache-status: HIT
cf-cache-status: HIT
age: 328714
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=va1qxOfwPsqrrLYXKl0K4c3RAHaLRleAs6Tm7rf%2BMjDirPcGoDuFKCz1NMxAnkw5%2BmedkD1a%2BbwDxOH3TTvnSHwtwf0lhFWY1OiztqqNGiEbmaDB3hQ0uvhyVAK6llbnN4UaRGZ1qTI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce19f2563b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/9f965713-5c9e-4465-9034-095ff279e898.png@avif
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/9f965713-5c9e-4465-9034-095ff279e898.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f36a30e9ff13c625d3a0a42aa71aebbb
5f204b81821ad1c33382d3126c49680e0bde5c4f
65e171af7b8ecf07cd82118c10b17ba8a8e5b551e216d9260eea7d807320f009
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/9f965713-5c9e-4465-9034-095ff279e898.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2178
cache-control: public, max-age=31536000
content-disposition: inline; filename="9f965713-5c9e-4465-9034-095ff279e898.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0MmYzZjMxLTYzN2MxIg"
expires: Fri, 08 Dec 2023 11:55:07 GMT
x-request-id: GiaqasXGrV7YLDbTQpExl
x-cache-status: HIT
cf-cache-status: HIT
age: 229098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0afnS5L7B8heMVHQE4CSeeF3EIZ8s3Th3U2c5FzGyAwIeY2hnswAyGQdrbpNWvHWwu5zN9ARHn5oQPeBoyl8BQ29PDpMi%2FRhOC37t%2FJyh4Mfv45tGZPYrdlNlTJo78V8dh%2FqrXlsJ5U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce19f2663b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/2a269ae3-ca76-4628-a639-5ceefbe1490a.jpg@avif
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/2a269ae3-ca76-4628-a639-5ceefbe1490a.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 0f0bedd2ed062da882dca537bae81ff0
d17685b903d8cc979d10299e2d7b7490f04dc734
b16c1b7f8d25438fdd027e44017c1077bcbdc77ea1dd8c6a0b5cb11e8b7b51a0
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/2a269ae3-ca76-4628-a639-5ceefbe1490a.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2152
cache-control: public, max-age=31536000
content-disposition: inline; filename="2a269ae3-ca76-4628-a639-5ceefbe1490a.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0NjM0ZjBhLTFlZWU2Ig"
expires: Mon, 04 Dec 2023 15:50:28 GMT
x-request-id: GJKB8hFUjgwOGNJ57zg1-
x-cache-status: HIT
cf-cache-status: HIT
age: 557984
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rgD6DfxAucAhmiVnk1rX9f8jYNNRGwDylo%2F%2B73NZKYP0XIAOfmMzRgoR5Y6s2khtMPh9JnlYhEPBVMZrXPudFqiQWdHlg30N7YZpFOwdwXneqbSRveiJrgRxwNa4eSIhlLkEQTK7fbk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce19f2763b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/f821c1aa-ae51-466d-a37c-e308adb836e0.jpg@avif
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/f821c1aa-ae51-466d-a37c-e308adb836e0.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 187678f0fed633b647c9aa8e4a19bfed
8628723687316dad6e7f26dd0dbaef061926b4c7
a09a4861597f5ca814088746c31652d7517219d669936cd192ca811a072ab025
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/f821c1aa-ae51-466d-a37c-e308adb836e0.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2235
cache-control: public, max-age=31536000
content-disposition: inline; filename="f821c1aa-ae51-466d-a37c-e308adb836e0.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzMGM4NTNjLTE4MjIxIg"
expires: Sun, 10 Dec 2023 21:02:54 GMT
x-request-id: 9KGoYo6hddqR7BHhZtFls
x-cache-status: MISS
cf-cache-status: HIT
age: 23431
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yk1exr70Wspg27xxNq5YfQK%2FmSrIIfojyK1ZSafCyTv1eMTHvfZlH2zNVuLvpseaDJXleHp%2F5mWxZ%2FMQr0zGEAE5asz029p3p3H0u4nVqFSfVPSbnbCOXeplnVN%2B624Eb6ByLqAb5Ns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce19f2863b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/netent.95417a961.svg
172.64.206.3200 OK 2.5 kB URL GET HTTP/3 1win-cdn.com/img/netent.95417a961.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 2d03397e9bbe65a3ef67997397e022e9
fb0b1910223c4d535ea354aab603f5c7dd510f9b
910725778b07399cfa75db8e0dbc96ed8d81afe272664135740a54d5ac805d8d
GET /img/netent.95417a961.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-3f7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qxsBUsPUgQO72UCMG9Y9yoVU9ISs2lzQdOqyqAG%2BZx9y5B%2BpRphtqgdL9DVwaKubFO4oMbMKLOHw8iI1Luv1aTdMG%2BEDG96J5RAcoDPKU1gymUyIYvVLZ8eO2VW9MxE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb5363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/39594288-1093-4cc2-8a22-ab093b6414ff.jpg@avif
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/39594288-1093-4cc2-8a22-ab093b6414ff.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash ae9b097c8a3ea83b82509ba918acc8af
62d95346cc6e66ccd80fcba90fc952265700a0fd
53aea1e8281c3d61f5e2cf5e7d53b81c9cdd35cb10988be0a17cc78d4ce57242
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/39594288-1093-4cc2-8a22-ab093b6414ff.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2173
cache-control: public, max-age=31536000
content-disposition: inline; filename="39594288-1093-4cc2-8a22-ab093b6414ff.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0M2QyNTU5LTIwYjZmIg"
expires: Wed, 06 Dec 2023 15:42:50 GMT
x-request-id: xMDGz2wThpNQYMvJrlU5T
x-cache-status: HIT
cf-cache-status: HIT
age: 386646
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EAlgmT2ovHgGvp%2B1EtpAmThs0IjnOCSRsT7w0HyNs3eRWUgldG%2F2FvfZUH0N2ymO0cRwy8FOPc63LG%2FnQwix0T9pabHqvpOYUIC2CD7ur%2FobgQB7GtA8uql4pzefDhBATUVfvjPQeCQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce19f2a63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/thunderspin.2d11ae63d.svg
172.64.206.3200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/img/thunderspin.2d11ae63d.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (614)
Hash abcd9bc63397d42620551b6104b722e7
7f0e749f242977a8714881fe47cbb241b4b5403a
25dde4ee94ccff0f7ffc1218f8324a7706a1a727c15142f4f979263545652e45
GET /img/thunderspin.2d11ae63d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-9d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085629
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=im1ZJUGCbwpYEDhOFLRpzjskCrbsb8fEBkR0xOIhtc0UK20h0HBHtNWquLJw%2BWZldMgnc2y4EfrTiOjDaVz2Q%2FLFuoQkgheHM%2BpKu8zjfNkOFVVke1RxBs4Br5L%2F9O8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbfbd763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/pragmatic/a61b4985-576e-425e-8f93-9a67452bcc1e.png@avif
172.64.206.3200 OK 3.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/pragmatic/a61b4985-576e-425e-8f93-9a67452bcc1e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 9616c064d5eb28bd0d8885e4b87d9d90
4b11cbd2f25b50f8987bb5518e5abc5a042e8829
17a4a8e6a2383f6ede4973b4e48fbe797317f61a7e2e11242894eb570cd72707
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/pragmatic/a61b4985-576e-425e-8f93-9a67452bcc1e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:32 GMT
content-type: image/avif
content-length: 2966
cache-control: public, max-age=31536000
content-disposition: inline; filename="a61b4985-576e-425e-8f93-9a67452bcc1e.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzNjI2MDk1LTZjYjFmIg"
expires: Sun, 10 Dec 2023 06:23:39 GMT
x-request-id: Lluq3tTIXskEC3nCfLscN
x-cache-status: MISS
cf-cache-status: HIT
age: 74327
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bwn7DBawJb99dCOuWSTs25knC34g9xTgGKjvYhDMUbb0zn258YJ%2B6kM%2BtsLw9pRAWZ6sc9yzGj1Sa%2BqsTUMyabF%2FlfQ44pYJEyQFRi8jQgVwFTI4bIBPjSPsClo6VWe6zoiEgp4iZTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fd0b3c9163b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/infingames/0375cb62-b001-486f-9a20-7110ed385a6c.jpg@avif
172.64.206.3 2.5 kB URL imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/infingames/0375cb62-b001-486f-9a20-7110ed385a6c.jpg@avif
IP 172.64.206.3:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash abc37898c303bb283541bca75a460cd1
fb862043f9e3941950d134123b36044e7c573cd4
60f7e6b2e39dd036aa667f9afe8f16e947ed1db2a6da49e6b10fc80229bbdd0a
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/infingames/0375cb62-b001-486f-9a20-7110ed385a6c.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:38 GMT
content-type: image/avif
content-length: 2464
cache-control: public, max-age=31536000
content-disposition: inline; filename="0375cb62-b001-486f-9a20-7110ed385a6c.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY1MGQ5MDE0LTE5Nzg3Ig"
expires: Tue, 05 Dec 2023 18:22:52 GMT
x-request-id: QZc26D_y1WPrLIQ2-Xc-a
x-cache-status: HIT
cf-cache-status: HIT
age: 462457
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gyznrCRel6YaLJqJ8magtV5P7EzOEmpTCHr8CcjpmGvegMojrhwMWki1NloPPd0Tr4YI8ONH3XD0eNpt7YHCHnKNGH4BAenbuLQjXUQIR178OeqMxwvSYUIVTVB%2F7fGNvFkoYkA7mg8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fd30eec263b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/relax/14513fd8-47ec-4846-8ba3-179baee91029.jpg@avif
172.64.206.3 2.8 kB URL imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/relax/14513fd8-47ec-4846-8ba3-179baee91029.jpg@avif
IP 172.64.206.3:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 501ede4e54d02b6c2b102a71570d72e9
85b7a9b0ef44a410ffb5d9f8cfc5851c53045307
341e4bc610a4cb31b94111d104b04c5e6b41ec4030c074f665fe40d1c5f3b6be
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/relax/14513fd8-47ec-4846-8ba3-179baee91029.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:41 GMT
content-type: image/avif
content-length: 2760
cache-control: public, max-age=31536000
content-disposition: inline; filename="14513fd8-47ec-4846-8ba3-179baee91029.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY1NGE1N2M5LTIxNjNkIg"
expires: Fri, 08 Dec 2023 13:13:58 GMT
x-request-id: bxJfFdWvW4Pm_VIeFJVxF
x-cache-status: HIT
cf-cache-status: HIT
age: 224383
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HIJig6J8iXVH3wZMlsl3nlFhXn5pCVKoXLSumBuMemI%2FAU0iMhxSBA6cSSfT0N%2BqKqzsOHgZ%2FuYKKbt2qGl08RW9ZAYcQYVHr815PFAxn%2Fu9WeEUqxW9dj3iJXO%2Fnj7rAy5t%2FvbNlns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fd43980863b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spearhead.27c37f3dd.svg
172.64.206.3200 OK 231 kB URL GET HTTP/3 1win-cdn.com/img/spearhead.27c37f3dd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (310)
Size 231 kB (230846 bytes)
Hash 3a4d5733f6ae3cfb8d430892bcb273cf
7b51402b9152fb2f9a6e6f42109f33952f898cb3
37e371fd8005ef4f70cb69b0423199bb73719f60b619fb7cfe0a0962a4321a9f
GET /img/spearhead.27c37f3dd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-4aa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WPWpdabtXZw3iVzPjDrYwczhU%2BsU5oJ40M5oLe5c5UwqGyqFtkWWYt2EzxIUQCc65ciM0%2FI4kLRWvSExQn%2BdSaohJIrlcFm2IlFtE4yDIcKLMzilRGJ3Tnxvpfgjt3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb8ba863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
static-adm.1win-cdn.com/banner-files/9yYmJ2Tur3tt3XYtW2oVI8DGGkHjXl6mIxs4CN1HVley9FHORmApqK--Ba_jqSnNCnVpU7quGzIx6y3udjY5UnKYhEgasG11otA1.png
172.64.206.3 8.3 kB URL static-adm.1win-cdn.com/banner-files/9yYmJ2Tur3tt3XYtW2oVI8DGGkHjXl6mIxs4CN1HVley9FHORmApqK--Ba_jqSnNCnVpU7quGzIx6y3udjY5UnKYhEgasG11otA1.png
IP 172.64.206.3:0
File type PNG image data, 1508 x 488, 8-bit colormap, non-interlaced\012- data
Hash b7de3691fd1c1a6d6b09078011ffea54
b779cc6b081d228b5982d908fa4121bf89564bcb
8727bf47f35343854ef0783ad29be93c5ee9a73df60956ed43e3c60164bea567
GET /banner-files/9yYmJ2Tur3tt3XYtW2oVI8DGGkHjXl6mIxs4CN1HVley9FHORmApqK--Ba_jqSnNCnVpU7quGzIx6y3udjY5UnKYhEgasG11otA1.png HTTP/1.1
Host: static-adm.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:42 GMT
content-type: image/png
content-length: 8313
last-modified: Sat, 29 Apr 2023 04:10:32 GMT
etag: "644c98b8-2079"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CPKJL%2Fmk6BUXSsyHh%2FvXTS4PedVCTO09znBzruT55M%2FpDWidXnUw5UqhkDsL5ra1wW8h2R%2BxTA9coLVb5E0sChItRvlUWs%2Faa%2BAuazKk03zV4%2BfPLi9tROaRSpc27z9fWVBpRwAC545Lfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fd497aeb63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/62692.744dfada0.js
172.64.206.3200 OK 847 B URL GET HTTP/3 1win-cdn.com/js/62692.744dfada0.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (881), with no line terminators
Hash 2396c8bca3aec16d12512850881beeaa
f5e1ff1163ce9250fb0aae5e5ae0f7b53fa92bf1
dec438624d1ac734c43c52b607f839c13cef99ab7bd4f172d32c97e81630ff18
GET /js/62692.744dfada0.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-34f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MLoIS8LDLAzPPdLojoij5rBaUIm%2Fr1gD0ZeV4%2BwUzobJ150AzaDSYQ2atmBcmxO6xuipvceBAFNgspz%2BSODN5CXxy8fPKnvuZofOiV2MRWJuL4uv10Owyr6LILvt8Y0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df1963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/boldplay.70a46bd71.svg
172.64.206.3200 OK 4.7 kB URL GET HTTP/3 1win-cdn.com/img/boldplay.70a46bd71.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4715), with no line terminators
Hash b9145dace81bbcbef7d60609e72c9c63
c182aef9dae96fe22563e38cf8ad0bd5cfb9f588
8efe8d59068c4a443da7fca222bf01d3a94a01db7c7ace4463c434ff0aa93235
GET /img/boldplay.70a46bd71.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-123c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9h9H9rgwxWLfuRYVk0ryg8IxlK%2FBYBp7kvNd1wWrrtRrGSbQ%2F1vc85LK%2BltlYKxUlXNyMjOMpLGpcTUyrRHd0nj9kV8BPWCkDX9tRUEJxDJkK%2B4SuvqrN2RVhXcgko4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd9baae63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fazi.19d7f4b72.svg
172.64.206.3200 OK 645 B URL GET HTTP/3 1win-cdn.com/img/fazi.19d7f4b72.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (696), with no line terminators
Hash c2948d97afb6d8e1cf8e7b50b62a9272
a1607553e252407e35addae9b48c1cedfeebd048
309347ec479f691cb02b9aaac9c06aea9cbefa075c591a35b0651e8928e64792
GET /img/fazi.19d7f4b72.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-285"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 421521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ss3EgQKnwQuslM9kK3B55vcuKuEcuVwC8Gh1eJ5RrckMAcSVBrlhkhlgsM61vEncncSV3acqxNz%2FCh024W7DtQGje4ndG3GtVlL8APJCXJmhCNg%2BUxd8KHjdJ0mIL3s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab2263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gameart.7beff0d18.svg
172.64.206.3200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/gameart.7beff0d18.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2688), with no line terminators
Hash 0316280cc350cb02b448e29142cbc493
16182a01de1fe9f3918bdfff51002844776c1b08
be85aab3a3bd01ae6471157366d278a01d650882cccaa670c8d5472eda92a073
GET /img/gameart.7beff0d18.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-a30"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wWBRagk8bxTsrTGgnIMCHLYCyM07Yk89gSlJB2Tokf71DgEijrpxf3rpk9GDQQjUCfwYgEW2e6TyxHZLG%2FxRfcD7TWuS7Qtnn7b%2B0i3h5uQNL8zCMmkpL%2Bauoh%2FSUOk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab2463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bf%20games.7559aed26.svg
172.64.206.3200 OK 5.0 kB URL GET HTTP/3 1win-cdn.com/img/bf%20games.7559aed26.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5165), with no line terminators
Hash b94bb2811096b861bfbf8fbcd4de9149
17418a385bb399e79588ba1f6d3ee661c40197c5
c1f44795037017c6bfdb6b4e563a6c9323468cc8df433cfd871784dcf55472f1
GET /img/bf%20games.7559aed26.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1382"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gFkYib1qZLjtcdVIFVjzSFVshSzHedg8Tg%2FGh38CpmJ4rMPBu5iNbmKZ%2FyKnO%2Fl%2BnjGhzDQk%2Bj2s8o5YRLaursSPBsvDNBCMErAoarWYb0tZd%2FQxtLAKIM4f2F6Z3lQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd97a9263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/big%20time%20gaming.e2bd46001.svg
172.64.206.3200 OK 5.6 kB URL GET HTTP/3 1win-cdn.com/img/big%20time%20gaming.e2bd46001.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5645), with no line terminators
Hash 736482b909f3d90f4b87845b06343f95
05501f25bbd97642449a87b6113fbb3a2cf36f41
68f08269f37245370fb3122fa2c76f755644e1a9cce3e1abb1cda283aff2de62
GET /img/big%20time%20gaming.e2bd46001.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-15e9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 513592
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fab6wdPP73fclvNByT%2FAkWW1YhfeREqi4KlGX6wqiYV6qRbsXNyQJAVuMRnLyJE8AV5kPtxsBNQtNqVgVxrN4PI%2B7PacgIx4zggxdFVPtgvWJMknUOs1DyCvJtOekdA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd98a9763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spinomenal.e0cf93b3a.svg
172.64.206.3200 OK 2.3 kB URL GET HTTP/3 1win-cdn.com/img/spinomenal.e0cf93b3a.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2314), with no line terminators
Hash cccb25968af8377b09aaabb6aac79736
84938c2eeb2043bd681550b012601b0b0a2395b0
59b22e2b3007555e659e3a56f1c622f3635e7e0a7f284ce7b9a56dfe5fde9e9d
GET /img/spinomenal.e0cf93b3a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-8d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 338422
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8rBNBWB1EuNU5RQs5oJP9t5EqDaGtEBcvX7fXA1fFl3ErGfaBEyqbGU1KJ2N5LOs9el8pYXzstA9Yf7YrwDmoNKc3b7tHwOhThQ4AB4dgEji23l1pVN6Z4RuhVWw0Is%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbdbcd63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/chunk-vendors.938878614.js
172.64.206.3200 OK 220 kB URL GET HTTP/2 1win-cdn.com/js/chunk-vendors.938878614.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 220 kB (219646 bytes)
Hash 5262e1fa83792c06cc6fdea7016cff5f
2028782168be7d43eacf979318c0c042f761d9e0
ac069e1a69001599cd5966f5e0a679441f33c40e1056142ace48e1be094a8d7c
GET /js/chunk-vendors.938878614.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-359fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 314890
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4aTk2K1FkdVUD5vZa%2FAVbjUAFIIss7z8WeBWKMTG6307ruFLA9OcCHbLMQzE0IxnGEfhS0WlnCULvZfJhqTYFy2WfWMr6oLsfInYB4LbtN4f4ZWrGIza1jtdQl8xqOo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccbdad0657a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/css/index.bdcc4e5e5.css
172.64.206.3200 OK 6.5 kB URL GET HTTP/2 1win-cdn.com/css/index.bdcc4e5e5.css
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (6467), with no line terminators
Hash b17f343ab7229a65780b5aafdd820a83
2e4939d385ede3407fdb8390a97b7f811a0939c9
69eed09cab01f9bbfa1895b14d4c1f95037c02e08b466f0378ecf229618102f6
GET /css/index.bdcc4e5e5.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: text/css
last-modified: Mon, 27 Nov 2023 13:28:33 GMT
etag: W/"65649981-193b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 568695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aiXzaP4zGBYVz7fvgBz3tGJF26ul3M7P0sdSNwi%2FY5bq%2B1q31iLOM1JABjV7l084gQ%2FA8%2BcVF6hqkUYV2Z6JUc%2BrVuVUFx%2BO3KBUwo3ziP7lXz0HfaZyqb%2BIothCLYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccbcace657a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/img/elbet.701d0b0cd.svg
172.64.206.3200 OK 11 kB URL GET HTTP/3 1win-cdn.com/img/elbet.701d0b0cd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10694)
Hash bd34c45017a4b3fe3d0813abbe16f113
2177a96200b95aa21ece71bfcbeadd200904c279
2ac83316161088868fcb56ac9812110d94b73567efab5e25b7387089d1ba7624
GET /img/elbet.701d0b0cd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-2a4d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vRn7M2LreCneHpSx9rkZZeFJyjJ4VDY0IRRCXW8CwK6PFWo6XEJIJ0ffwT1ec7zpy00Duxb9uo7To5ivQaIlLnpKI0eGhnSEkGxAZsTyiR6Qtc%2FDv2O4VWJWxIpLnqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda5af563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/red%20tiger.157f419e2.svg
172.64.206.3200 OK 15 kB URL GET HTTP/3 1win-cdn.com/img/red%20tiger.157f419e2.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (13158)
Hash f0a8d4ae6c95b6d6b2b0bbbaa62aad9d
9ea188283d324f5c87a802c14ec3386167e7e2a8
4572ee67d26acf1ccb35decf47651e67464a7dc0a438d79c721b9ba739f14d2e
GET /img/red%20tiger.157f419e2.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-3990"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 329777
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bctJz9SGcyTsJVAfV5UkeIev3f%2FfUglnHXlLgZjAQmmWHMRLOkA7pYX%2BLC7kwERNZjuHH%2BbT1owHBLP3YNyLUObVvuAtZvbFUDDAjqH5YTmxHqA33m0ifG9TIG3DUyI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb2b6e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/24698.f5655defd.js
172.64.206.3200 OK 109 kB URL GET HTTP/3 1win-cdn.com/js/24698.f5655defd.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 109 kB (109448 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/24698.f5655defd.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-1ab88"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309522
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3PmO%2FK19H7u56a84XczLu8ODmrGWhJDsbZhdPBfYqi2hccXBqVCwdXk8d6C%2Bzk%2BR8yQd5wvma9fIczzgejzWKlV%2FGqw3o%2FqgwOelPNi3FHECn2Rkc0SNoAsYODq8leQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd07e7e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/common/banners/all-v2?lang=en&type=desktop&bannersType=casino&localeId=1
172.64.206.3200 OK 15 kB URL GET HTTP/3 1win-cdn.com/common/banners/all-v2?lang=en&type=desktop&bannersType=casino&localeId=1
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /common/banners/all-v2?lang=en&type=desktop&bannersType=casino&localeId=1 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1wctks.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=3600, stale-while-revalidate=300
etag: W/"632b-0UPRflxAZN1EI28V15bhcPba+Ms"
vary: Origin
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kZ3OKEx2Q8Nd8oTlTvlbHlVa3X38mzqFqRRFa%2BDFFcldw9qIau7CNvbI44YNIuqeHs8u%2FlUKqfxNo%2FrYR3pa9K5wuTv5AEqwoagYjTlo3JzFWJERYXIcM8Crg9X%2F5Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8300fcd35fd963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/caleta.b1dc71f69.svg
172.64.206.3200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/caleta.b1dc71f69.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1327), with no line terminators
Hash bbba19a0f7e2c3b02a8ca7d7c833eb63
5dd340d9cc4c395174865b155829f3054fb29275
96061a9a0bc3a990d16e91b8c52ca6436dfde7223b3e9741bee8a772f4559ccd
GET /img/caleta.b1dc71f69.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-518"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R0NZSgXxFflK8Ryar87UUm8Cctxbl5%2BZfay1q7Nh2ZhS6wyfyuqFViHnc4atAj1WjRg5CXpjvjFTMjFCMYb0LLvBeYxbkoBV26xv8z1s7bChp6GSjRzgj53L9utQT6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd9cab463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/95536.7ee8eb049.js
172.64.206.3200 OK 28 kB URL GET HTTP/3 1win-cdn.com/js/95536.7ee8eb049.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (27899), with no line terminators
Hash 37336e7910ccb0138266bc07c3047759
3db590db9228039fffba90e227ec1f09209ba911
a43777b9681bf355acd6676a15366715e98cba55ca0746df7e5241a2f5f4f21f
GET /js/95536.7ee8eb049.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-6cfb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309590
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lbPQW%2BWWXSacTqTcsLacw7kccXGLgX5QDQkPP0QOOimELY6HuOGji5Xg02O2l7kT57CS%2FyKDITpHwH%2BJ0hiLczFum6iwteCV62x9u4D1XwNbWb115k%2Fmjt6ABFJ961k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd07e7763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif
172.64.206.3200 OK 5.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 76a502c1036d076e2317739f0cc878d8
480303b6e1e68b1d04e998d9bcd26224429db376
e377abb67003f9b87b6c67e87b9814b99bb3c1de68f286546d9af4e6d6377351
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5302
cache-control: public, max-age=31536000
content-disposition: inline; filename="5b4ab347-f37c-44e4-93e6-2c1c0efa069e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTc5LTJiMmQxIg"
expires: Sat, 09 Dec 2023 23:09:40 GMT
x-request-id: QBQ3q8Si-VaXYUHsM6txV
x-cache-status: HIT
cf-cache-status: HIT
age: 77601
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6gz2FTrpNPO%2FtwbcAJUXfrbDnpheJNVm0ozGL0sxYXFWCBvegENg5yG4szLSTcJprFCTfxa4Cgb4mdK0u6QFLLX9P5OP9JVMZoVarYsyGFWK1USbSuCSfbx%2BTpC%2BBQaMqD8yNVUn3i0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde3d0863b5-LHR
alt-svc: h3=":443"; ma=86400
1wctks.xyz/firebase/8.1.1/firebase-messaging.js
190.115.24.78200 OK 41 kB URL GET HTTP/2 1wctks.xyz/firebase/8.1.1/firebase-messaging.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type ASCII text, with very long lines (40719)
Hash 450e8b32262706d42cfdd438c49208f5
31c7e4aac1d1303c1e83a0b591abc3501e278668
58a372bb9d424111a2e73c427edb10db91c0f05e8f323f046d20f5cf8fd6f30f
GET /firebase/8.1.1/firebase-messaging.js HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Cookie: visit_domain=1wctks.xyz; core-sticky=http://10.233.108.99:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI4ZTBmYzcyOC0zN2ZjLTRiNmQtODJiYS1mOWZhYjdkZWU4MzAlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAxNjYwODA4MDIwJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTcwMTY2MDgwODEwMCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCU3RA==; AMP_MKTG_494cccfe21=JTdCJTIycmVmZXJyZXIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRndubGlmZS54eXolMkYlMjIlMkMlMjJyZWZlcnJpbmdfZG9tYWluJTIyJTNBJTIyd25saWZlLnh5eiUyMiU3RA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript
last-modified: Sat, 02 Dec 2023 08:56:58 GMT
etag: W/"656af15a-9f25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/img/bgaming.ae3573ff9.svg
172.64.206.3200 OK 4.0 kB URL GET HTTP/3 1win-cdn.com/img/bgaming.ae3573ff9.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4045), with no line terminators
Hash f2081caf12b5dad178e766a8bd906e19
5ffdd19030dd7868b979fa8c19243e62b70eabb8
ac0b648f44a2ab64ba3f4e7517ebbe6ba9ff28082268f67b9afebc0d8d38e884
GET /img/bgaming.ae3573ff9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-f9d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 432546
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=00t04Yr51JeinAYkguqIzrACISD5S7hsjGTehAolkOmVKgNDwolaMs23%2Fh8WQStAkADlModvdh9VFUpvxwSqxdKzUAVUtxqWnxRYTVipKDbJSl7dtW%2BbxbWYk7zHjbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd97a9563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/reelplay.06dc7f4c0.svg
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/img/reelplay.06dc7f4c0.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b322085b94eec118c20d5acba9ea8465
616f9440231bd629e6d2b6aea1d1baac51386151
542c8ac685d4bf37c20fe8c1b758db347c1300495f467ee0cf4d335239c42b26
GET /img/reelplay.06dc7f4c0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-60b9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fmMSFACKwYNPiu%2F9VdQT5Vjy0xQCP5JPJKlHQ%2BQr%2Fok5slEAR%2F9lwvsFoOzb7M5lSpe6h%2B0TvTMHnkefEczfQZJf4Ty2A6lhmXufUNlgUUbEQOCrX0Slt8k21P9oFT8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb2b6f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spadegaming.8dc1e9a8e.svg
172.64.206.3200 OK 3.8 kB URL GET HTTP/3 1win-cdn.com/img/spadegaming.8dc1e9a8e.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3852), with no line terminators
Hash 747a1c4577c4f0216b3c2312e11b1950
c38313a9fb030d29f16ed7bbc1dab939a874aff5
e6e69bc9af907311e8e0d47d368dc74a985349748dc05803b4717e4aa8a3f6c1
GET /img/spadegaming.8dc1e9a8e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-edd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rrrr7ATi0W5bWjn8mdlyJ30EDfYF5xN9dVCjCiAireuWIKmDR3yJO0%2BVjBTM19yiFmaAgSz%2Bnpd2%2BuYSMFOLuiOue70XAHuM5kxOKihFhvqlvD0yV80zng%2BdKsv8gS0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb7b9763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/71620.c557f4c53.css
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/css/71620.c557f4c53.css
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (25340)
Hash e5aa2cff0082b2b3aacfadfcc8a296e0
f1c8439c78689fd351482f64f6d01c2b88c2de44
4313663b5773b4157a470e5337d51804f40b01784fec2a73d15cb55ba65be866
GET /css/71620.c557f4c53.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: text/css
last-modified: Wed, 22 Nov 2023 14:04:09 GMT
etag: W/"655e0a59-632c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 997954
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eW1twKrWJC61Y6KQAKnpEi9vNGhKFIMHQKAH%2FtNKa5%2B3eGsmC%2BIT%2F%2F8MOSHaHn8MEG16BQUfy0GzL21Z82nXE2bNA2nQy66wUN9Sw6UvDKFSoFIBNFSWcCD4mXsu7SY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd08e7f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/barbara%20bang.790acb7dc.svg
172.64.206.3200 OK 27 kB URL GET HTTP/3 1win-cdn.com/img/barbara%20bang.790acb7dc.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1431)
Hash 287d95b42ce0b42532a5c8caff190779
6d6b4d0d17c558215c719336d124ba53a7118083
739c17db57dc727e751e65cf1d4aed12fb371a1e40060a3b22c92e630219e945
GET /img/barbara%20bang.790acb7dc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-68da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dobHChcXqrbgaRwjdA4QXVrkS8zyTRXKXMMl%2BgeUjmV%2BGiRBH5xgj9IlEiwpYGxLPdB1SLog2FhxZRqcbryP%2FHdLn8bZvZ%2BBEVEXv%2BKTipHMFGwtvWctJL6FCPt1Hds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd95a7363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betgames.f9572e26f.svg
172.64.206.3200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/img/betgames.f9572e26f.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3152), with no line terminators
Hash 22c1b0dd1e37b9c443eda963fe76d96e
7cdb9b3ec3c095dd657c2bc18489b00fc8f5f7fd
058002db89099b878d2fceffc78b9bdc47a5c5e990ebab7af3d1a9bac806a4f6
GET /img/betgames.f9572e26f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-beb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 519253
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FsD544Cl%2BEs819BK25pQqFmJobt7UsWUW23YRxcua8jyhOGjIGm4Ft5tm3YY0CINK4m%2BXEJXFt43eguc6LVzW0bVJ8LEEYHJVgCsbLqczTSBjq2Mq%2F%2BeOClreYbgYPk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd96a8663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/elk.c0f58697d.svg
172.64.206.3200 OK 983 B URL GET HTTP/3 1win-cdn.com/img/elk.c0f58697d.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1007), with no line terminators
Hash 58995520e7430cd69b54d08c244aacc1
3db7918420563842879038fd5b4ba2050458ddeb
5110cb34328fe32430f0ef1a8a85709a1245aa2df8d876656a6dd74c8ed5accb
GET /img/elk.c0f58697d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-3d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 519252
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2BeafACdCvwv5LF6Vqqj%2B8ioKAFC%2FNgxBdJwdNmW9fenxE2UjWzmN48mmwbdIgBWEC9DBwilLzRyrlezQEEaQK%2FQC5LtoqrEm1IbXViUwDoshbLbBKFCopZ9%2BHuo0mM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda7b0463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/5%20men%20gaming.097954de8.svg
172.64.206.3200 OK 3.5 kB URL GET HTTP/3 1win-cdn.com/img/5%20men%20gaming.097954de8.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3512), with no line terminators
Hash 0d8d5ad9a6aa74686d61568450fcf69e
4446edda593f44d86ef726d9a4df51abe1c8ec4d
e5bae8fddd4377f01d342b54c7ea610683b1ed071bd215b3d66f8c97e83f7f66
GET /img/5%20men%20gaming.097954de8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-d88"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGqzEyfDGcdTXpcJz8vbOl1ze1iR2UG2T0ebva6mGcdn3gDd3hB7V6eQigNh849DNgYvSYorIifQSmfO1xRsOFf7sDlg8HIdYGD4J%2F4qdrwF6QodvTCPAZGdLbPXi6U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evolution.acb5f3085.svg
172.64.206.3200 OK 2.5 kB URL GET HTTP/3 1win-cdn.com/img/evolution.acb5f3085.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2640), with no line terminators
Hash a27852d0f8f77af9c6a274605b932984
415500832c34ac475d87411fa799dead414701b4
c162d16756ed886b03e4195178b00ea6d54baa3e71ce40f0dd46f3ebb3643e39
GET /img/evolution.acb5f3085.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-9da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xkUnsKQrAmDrmx3MHdxAl8bNjF3l2rzXO5acEWlJ0YmBACHTjuQjnoWcDa8mQOD0SnRrvb4F4rqk5rMtucIA9dGChaTbvFaqLIVBEhARicsi2AxNbR26t4Gz9PMIUk4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda9b1363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fugaso.1a40d61ad.svg
172.64.206.3200 OK 2.4 kB URL GET HTTP/3 1win-cdn.com/img/fugaso.1a40d61ad.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2426), with no line terminators
Hash fbe83afa72fe7a858d1fcd467a7e3acb
5dc85aabeac449d7287662a7b6ffe2936e447b84
21f646343e711bc51884ff1699ff6dc11de867dd10a58fee0ad946c197d46cc0
GET /img/fugaso.1a40d61ad.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-951"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6iHrFioJ8F9WqRMUQDxck09aTS8EGfStThqTOuqPLckxvMzm6JAkLioY%2FckiWBVhkz0d3EPcWMdHNQ5a5ZSJRBvyHdCWAYnMVDRp5ts7KYkgNLKKaVVwRH3taJS9umE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab2363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/mancala%20gaming.441ae5f23.svg
172.64.206.3200 OK 3.2 kB URL GET HTTP/3 1win-cdn.com/img/mancala%20gaming.441ae5f23.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3303), with no line terminators
Hash fecafa12f578f5ced554ed31aba5c852
7e1f6f044c0508f11d1c5a58a41c3d1423bd7069
77c790b43104ff72a4363c886ef16e2716f2de4bd9b8a870b1228aec39924fe7
GET /img/mancala%20gaming.441ae5f23.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-c90"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pRRX%2BLrHaCori0fwbLE7Cn5Rfl%2Be%2FWInHvj1WBvFXiWXJ14NTbzvhchevXZO%2B0NaGExsQ7kQNeqcozTCodorN2fznmB6yzXgeaMYkS4713Of26zgIff5cPIPf61RIJ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb4b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/7e940a4a-e73b-47e2-9b81-4bd86a081bfb.jpg@avif
172.64.206.3200 OK 2.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/7e940a4a-e73b-47e2-9b81-4bd86a081bfb.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 4bcd639f404aeecf21fbedbe5af2c9c6
fea23686acd7842780e744d9830411e3366fb2e0
8388f13cb35f5a32054cf2d152d12ecdaacda349c2e606ebbe9182e7f229d2e4
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/7e940a4a-e73b-47e2-9b81-4bd86a081bfb.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:29 GMT
content-type: image/avif
content-length: 2044
cache-control: public, max-age=31536000
content-disposition: inline; filename="7e940a4a-e73b-47e2-9b81-4bd86a081bfb.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjYzODlmZmY2LTI0NmY1Ig"
expires: Mon, 04 Dec 2023 15:14:39 GMT
x-request-id: YotmUlVUhM54pEkduTWFR
x-cache-status: HIT
cf-cache-status: HIT
age: 562178
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tPHAvxcCgjxYVT2Pn%2BBTHUHsO0eYd87tvXWLppm2uZRH%2B3VrkchKusX5UZntNPleM1Nuv3LGk2M0fszzrIIEdf2%2BDCNKEHvmYMMobh7OJsgTSuwK68byB0pEBEi8mXtWA8JQJv0r5Tw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcf88b6663b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/oryx.ddc50c514.svg
172.64.206.3200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/oryx.ddc50c514.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1407), with no line terminators
Hash be6fe09456c38389975b47be1d6e664c
aa63088e5bb8604d301bf747e760f3fbb47cca9d
f8822aadbf4cdec8d633d4b6e8e4928dde87a143cf57d6d9f018ffe50809f1b7
GET /img/oryx.ddc50c514.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-557"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Et5%2FAZ5rgQNRzhvd2S21dsKzQUo%2FKq%2BAJI27WrGeXMrBLwGa%2BOCK7DyFbFhPM3X6zEMLGtzf0U3Q2XQ48V1zfD5XFazaqJAJgETrECU0idAX2fwQHvDXB1LYxsEt3J4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b5f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/smartsoft.d8a4b520d.svg
172.64.206.3200 OK 299 kB URL GET HTTP/3 1win-cdn.com/img/smartsoft.d8a4b520d.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (31788)
Size 299 kB (298969 bytes)
Hash 6bec0d360a5db76d67f9da29d3d4d206
614068b8909c0fdf885888290e5c0d62cff35951
df436f88f7f3b8bca45c6f8717853ca32849bb220297851fca614a4d574e6eda
GET /img/smartsoft.d8a4b520d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-48fd9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZ9vqgcpMCeoa7TxEk%2FdcLlJgk962IrL8dk1m0fJSjWKZPBaWWNLUvRDFUCpP%2FMzd1LIVnZl1rVY4k54JYLOtRanhl80Qb6HRMIuwDJ%2FDZvxmf5AAyY2iRRWa5JxLhs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb5b8f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@avif
172.64.206.3200 OK 5.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8b9dae655791a2c093c33da8a8f41277
c564561f1f54aa7ce97a26a5c0d869fd05ba59da
179311580e45d0faa648f3673f12b5cb2235d2a367c4864febdc818f3a5d27fe
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5759
cache-control: public, max-age=31536000
content-disposition: inline; filename="9dd18146-c273-48b4-ab55-70c3042a3f64.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTU5LTJhM2VmIg"
expires: Tue, 05 Dec 2023 04:20:34 GMT
x-request-id: NMZgt0FqyOuiZRcV6ewnk
x-cache-status: HIT
cf-cache-status: HIT
age: 512433
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aiznr2sZ%2Bx7%2BWF4%2BaFwXEsWFS8YAcPoPPEnMV7MHKvdJ%2FLGNkhFyzHE%2FRthob9bjw8azwOK1%2B2i3SfT5p1W%2FqeQ5xAaXiVXcytaUfLuQWh2O1o4prYzTC5JYkYg1Pokg2ofVweECYks%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde4d0f63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2bafc63e-0026-4a52-9acb-a25b7d4bd6e1.png@avif
172.64.206.3200 OK 8.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2bafc63e-0026-4a52-9acb-a25b7d4bd6e1.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 81d7f15d8149994eb8b2d3359331233a
1395dccaf368e9b2a5a24a778219f7818b758bb1
8f0604941d9029acf924af415e8a44bf68ce3e0c0b80fc92d23d50a73dc39cbd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2bafc63e-0026-4a52-9acb-a25b7d4bd6e1.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 8179
cache-control: public, max-age=31536000
content-disposition: inline; filename="2bafc63e-0026-4a52-9acb-a25b7d4bd6e1.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MDcwMGYzLTMyYWVkIg"
expires: Wed, 06 Dec 2023 05:39:31 GMT
x-request-id: Y492r6IJGFtpmgLHZzvb2
x-cache-status: MISS
cf-cache-status: HIT
age: 424431
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fNNSD%2FmUZ1Bxk2W5hCX8%2Fn9RHgnBffzHDxfZicPNqSnEVJLfbd5Eq3Tj6HV2VvRZHwawucIgeQl%2FNnFbhEOfxDCPm%2ByHkPkowYcpzDTUojlYwNPbL59aX5ISL59zjEGhcbvzUsMrCxQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde9d3763b5-LHR
alt-svc: h3=":443"; ma=86400
54.228.73.57200 OK 3.6 kB URL User Request GET HTTP/2 IP 54.228.73.57:443
Certificate IssuerLet's Encrypt
Subjectwnlife.xyz
Fingerprint25:A0:D6:CD:2B:C7:96:B4:94:BA:D3:6B:8C:C9:AA:7D:B8:0C:36:1D
ValidityTue, 07 Nov 2023 13:00:47 GMT - Mon, 05 Feb 2024 13:00:46 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3785), with no line terminators
Hash 07a3c1e115bf9cb9a13a0c4a8854a219
0cf9c4c6fb37649ab3550b5b4e215e82ec273d8d
5cf1c0f364f67ec479a733f72f5136782e18116f76a3f270d9bb01943d27e969
GET /Oxzpb HTTP/1.1
Host: wnlife.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 04 Dec 2023 03:33:19 GMT
content-type: text/html; charset=UTF-8
set-cookie: dhash=Oxzpb; expires=Tue, 05-Dec-2023 03:33:19 GMT; Max-Age=86400; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/img/free-money-link-image.4433e4971-120.png
172.64.206.3200 OK 6.3 kB URL GET HTTP/3 1win-cdn.com/img/free-money-link-image.4433e4971-120.png
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 120 x 97, 8-bit colormap, non-interlaced\012- data
Hash 8c77c77c33189721a876fefeadf5ca83
0b197aa9e55fe824b28e55b9e0591f8631b6c3c8
b2a4295182c1f7c9619a4d2f842be12f4cbc6c4bb8d2ea607f06ff3bc4099486
GET /img/free-money-link-image.4433e4971-120.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: image/png
content-length: 6292
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: "6541044b-1894"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2838209
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yCS37Ma8DVFTGmzw07pczvUqT9IMjMQ6ngJFAY2wOkff7LVyZR0g8Oa60gSU7Rid1CoyheOhrY7HPQ0a1Kbh%2BxklTmdiAusjbb9zOmR%2BdRzSOKKihI5uRN0OUkgishw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd2bf8e63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/slotmill.c42ddd447.svg
172.64.206.3200 OK 13 kB URL GET HTTP/3 1win-cdn.com/img/slotmill.c42ddd447.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10345)
Hash 39d48e4b982998cd10417bd09dcc0afc
541c60c508d7777db2cd0e49c18cf32219532dd8
3e18df680be6da9246c3675408ec0e7e107891281a863ab9b6377832b44ee48f
GET /img/slotmill.c42ddd447.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-3313"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=meFdDIQSWBS%2BNWYYKm6xk8zDm%2FCrxB0gNqMDvVquikBhPpYS2cSx6ScshqsIhlEOtUqMyGihI8tRtzepMFI46eQF6JWO4f2QcnZ%2FiCFEYi9Gr7O72yHQYXOchjl72TE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb5b8e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spinmatic.f74cf69af.svg
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/spinmatic.f74cf69af.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2198), with no line terminators
Hash 12c6733c47b71d93b36447dcb999d080
f6440015ef35215d9009b4f08340145df1f7d9e1
fb365d3e4d36a26db4aae3e00690d0b35f5289b5e80c371ed687b7239be22f07
GET /img/spinmatic.f74cf69af.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 08:42:25 GMT
etag: W/"6565a7f1-86d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 496096
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h3YuNieO1rw2zrV4uAdOKeeRIjxq%2FmJ3avplsxWYIT4ffaI%2FKHemFPrxhSdMvsSbHcItTj2u0Ycczr8rZhkfp8SzavbdTFmSSJsIekxHzpSHp3MNICEhTsF6%2B28e908%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbcbc463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/495c85a9-01d2-44c1-9bdd-c81faab551d4.jpg@avif
172.64.206.3200 OK 7.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/495c85a9-01d2-44c1-9bdd-c81faab551d4.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 7bc1eb9bdb6b6038f92c398818894d16
0e691756dc24b5beb62a1dc9d3e664753ea33a7e
21b458b348f88bb985c095d5e883cf47ef64b7ad7ce168ed23516288875cde3c
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/495c85a9-01d2-44c1-9bdd-c81faab551d4.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 7233
cache-control: public, max-age=31536000
content-disposition: inline; filename="495c85a9-01d2-44c1-9bdd-c81faab551d4.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1Njg2MTYyLTEwOWM0Ig"
expires: Thu, 07 Dec 2023 10:18:13 GMT
x-request-id: 7D-j7_NcslPT8R3Yt8QuR
x-cache-status: HIT
cf-cache-status: HIT
age: 320664
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sbabatZRhg%2F0rxnWbdcacMHCSgCKfXniQYCT%2FdnzdUG2iHrtj4TrnnyFxwfSQ6aMnk2Lr2vCMMFrpHBLWzIcwnE6vn1vkQnZeXCTcvvwOqOJs3IrP0ysaFvVzxVPV6ItcbeZu2skWIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db463b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/57652.d90029273.js
172.64.206.3200 OK 647 B URL GET HTTP/3 1win-cdn.com/js/57652.d90029273.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (667), with no line terminators
Hash 53d580c5f29a2a838b6595fa6ff0f0a3
ab60adb7207a806d271778effe677ed01dc144b0
d09039f573818646e722fef48f6f9d999dc7382548877a5699e9b45be29ec6dc
GET /js/57652.d90029273.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-287"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tFJ6%2Bs2vA%2BKffnYIgDvTimBxglbnx177dmdHTFvMdO4I6TWJ9Bjue5e9rD4LoBFM%2FqLLutgfKfQswrI2k5Qwms23aUYP79JpvaxkXI0hfU95R%2BzPqQDGB5gGW3QrlTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd22f4063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/90511.c15f000e0.js
172.64.206.3200 OK 637 B URL GET HTTP/3 1win-cdn.com/js/90511.c15f000e0.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (655), with no line terminators
Hash a148eff943a30bc50c489b0cf73349ca
757f5c140878aca4fd1e3c8936e54f6abe59f95f
ce9597252bbb61b1a89d84ac59a501e64985510009e7521964cdbf9933e32c09
GET /js/90511.c15f000e0.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-27d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309596
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oqqJQIDiHVRA5CZXfBuDtdmliDDk6yyHi3QpNP0who49JNiT3APNTCT7z0GiEtr6S6tEOyak2aJI7ZwEZlEVrV30fFZwxsdTgAqFeJFNm%2BO89ll3S1%2Flc4iMjgtR5KQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd22f4163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/1279.c6967365e.js
172.64.206.3200 OK 911 B URL GET HTTP/3 1win-cdn.com/js/1279.c6967365e.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (929), with no line terminators
Hash 3a0fd7772f5d3cd77c17b49876743f78
3eb84478f6c0ac3009e81576caf8fa6ddf4e2c5a
5d5a4e691e8df7115cff0e7b2b76131b7b633ce30509dc61fdf36c9ab36989a6
GET /js/1279.c6967365e.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-38f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJtmwNLm5T1VG8aM0LAlYLrPaG58wGXa3TsJH2Q8NMQo%2BgRrqyeJWbXH4zHoMNHoZzueSnMBImW3ayCCVZTyLDmjjYOU1LCXYzi3hUh5CH8EKgsG1nl%2BPj3k4iJK5Rw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd2bf8d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif
172.64.206.3200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8d5d3c8e4c5ced87df63ebb3c1e9639f
5b4b41da7186518d4bd92fafa8083df5d947a9f2
a6765bfbb58120c85a6bb35e390fa22d5b56f747ada1731ea7c32d101473f8b9
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 7921
cache-control: public, max-age=31536000
content-disposition: inline; filename="3223fafb-6b1b-46ba-bb4e-d667854eb8e8.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NGIzZjM1LTMwNzIxIg"
expires: Wed, 06 Dec 2023 00:44:55 GMT
x-request-id: hD1HebCP55CFY_vYIp6BP
x-cache-status: HIT
cf-cache-status: HIT
age: 430047
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HHc9W56L8rgk7DELOt%2FREMf88gsLiDSgxI9vl7By3rc4FtFzbMTslJMyMZ%2FV%2FDSeqpGS4Sb6o4XE%2BMJxWXnHQtyechllDLbSOTYpGK%2B3%2FRPsPNfgJBCrjIcZ5mM16OMyLwcoc0InfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7dbd63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/55494.e089e6a17.js
172.64.206.3200 OK 22 kB URL GET HTTP/3 1win-cdn.com/js/55494.e089e6a17.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (22075), with no line terminators
Hash 203a5f7f1a7fb4284cdf340037548ad4
80769360c0fa71c51b0005101f6a1257b772af2e
7203bc10988660171b821732683e2ba90510dfeb4e17a3347c61ab7ea80004bc
GET /js/55494.e089e6a17.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-563b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 311765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nM%2BO5o8LDO%2FH7NeiHhrKyO7wUNHz3xR5OS7EECjh5Gt6TYvxtGLG0CWT1Bw5WQmDSi2ZsQkLE48VWMxy5AJ%2BTwfwc6biBsQiW0HgpLDggijsMjGmA785rnLdxEWweaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd07e7d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/amusnet%20interactive.428b45c71.svg
172.64.206.3200 OK 672 B URL GET HTTP/3 1win-cdn.com/img/amusnet%20interactive.428b45c71.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (702), with no line terminators
Hash dd800d25fd1fc6956949e43d9997d38d
d2e3ced7d4ad91488dc8dde871b6651a01153f4a
8a010ef18c9d5777be9dbf363882bb9eadb3ded464fa63f0dd133e10a1bfef1b
GET /img/amusnet%20interactive.428b45c71.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-2a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 519254
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rctl%2B0BzZv04EdSgxSMpKyWC8EDgT%2Flp8%2FJsSFrvx44iNPBLogfdwlR8D8X%2F30zRaYEbICe%2BJoMZWIoxVOI%2F3JXmeDN%2FrFHSpnbztWYxVlmAnFPlAdSJVR4t%2FSldaGk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd93a6263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/ezugi.a9c66babd.svg
172.64.206.3200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/ezugi.a9c66babd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1463), with no line terminators
Hash 329b99ccd51d8cd3e1a5c8a1b83a84eb
ad907259ddfcffb089829ad24a4411ff1cd4b1c0
96e851dca3bca1d7d99061ec91cab28bd2c037ce8732e80a4ed601e86c0e67c4
GET /img/ezugi.a9c66babd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-59f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085633
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cnEa313fxE9yjziJbFuB7pMBl%2BuKAQCje5hyJwTfyCEJPTSEBvtSeKsw1CS0V6rtXwfTGtGIiTrNmcoPCWU2i2W0hndUnv8DB0uYxUh29bqrVhgqnDuUVpCuo3OsghE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab1d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/91635.ab2c049f1.js
172.64.206.3200 OK 748 B URL GET HTTP/3 1win-cdn.com/js/91635.ab2c049f1.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (766), with no line terminators
Hash 74c5864ef446bbb00f9e7e1b39eff8f9
04696352def160b6c3536b2b11c4351f02f49780
348cacf24053c417315aaf1dd971cf88c758964beeb37725c7f683b90bb5e7d2
GET /js/91635.ab2c049f1.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-2ec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yAATb4eYqnYUuhmtDhLv0hpvMG3pwuC2J8r9AzX2bALQ221VMZfJFYuI0tUvMCw1l%2F6op4%2FipaU7JmSQ0S00aiqdN14A9SfS%2BXi9b8rwB5lrAQCLE0fti9rYQ8Q7oM8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df1a63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/9d349bf5-f150-40d9-a638-ad8697789901.png@avif
172.64.206.3200 OK 8.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/9d349bf5-f150-40d9-a638-ad8697789901.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash e0a4c9f526eb64bddd55d6a8eab86c24
f6377e572a8f0733dd09dc5d47302416a717ad6a
fa9542993c2a4e12b5f3b565fc0b5694bc791345d860749e9b75fff8fe877200
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/9d349bf5-f150-40d9-a638-ad8697789901.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 8368
cache-control: public, max-age=31536000
content-disposition: inline; filename="9d349bf5-f150-40d9-a638-ad8697789901.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjI2NjIwLTczMjUzIg"
expires: Mon, 04 Dec 2023 06:32:01 GMT
x-request-id: GbmgsyeZJ4t_TI718Uxyv
x-cache-status: HIT
cf-cache-status: HIT
age: 580232
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fkb3fqp2H7WZ04mWjJ%2BPsQP2EZG%2FyLPGduSD2kRBHCKvZYs%2BsLDYxjsRP4uds8qGCY%2FPnqY%2BqQ1r1YcKgzsqXKrn1X6FF8vOOzD9IjqjBCma0rlEahS4QjW9aEQ8eOyc5xCyMMIWmJk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf1d8863b5-LHR
alt-svc: h3=":443"; ma=86400
1wctks.xyz/img/logo/main/1win-normal.svg
190.115.24.78200 OK 4.6 kB URL GET HTTP/2 1wctks.xyz/img/logo/main/1win-normal.svg
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4865), with no line terminators
Hash 6a657a7851fa92f791304f1cdb123e9a
ae2def67a366ffe67578bf82e3c47b4f1966e784
8443e4838f78a5ad2efa628846e3337e1cec32b94cfce323eb25f2e97989a02f
GET /img/logo/main/1win-normal.svg HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: image/svg+xml
last-modified: Sat, 02 Dec 2023 08:56:58 GMT
etag: W/"656af15a-1221"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
1wctks.xyz/firebase/8.1.1/firebase-app.js
190.115.24.78200 OK 20 kB URL GET HTTP/2 1wctks.xyz/firebase/8.1.1/firebase-app.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type ASCII text, with very long lines (19927)
Hash 5b9dcee25dd464bbf914b48e05e770c7
3f4e99ad6ce1fb6eb6be51dbd50ffab375eb0533
01a87f9f8138f66274cfedb855c0bfbe1529600a65ed26b0c863533e1e94abce
GET /firebase/8.1.1/firebase-app.js HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Cookie: visit_domain=1wctks.xyz; core-sticky=http://10.233.108.99:80; 1w_lang=en; 1w_locale=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript
last-modified: Sat, 02 Dec 2023 08:56:58 GMT
etag: W/"656af15a-4ded"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/js/86359.d4aeec9c5.js
172.64.206.3200 OK 634 B URL GET HTTP/3 1win-cdn.com/js/86359.d4aeec9c5.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (654), with no line terminators
Hash 33a83c5ac34b557d3037a52c8dead1fe
6bd3202d3720d8c86a84a63f1975b5d53d044ef9
7eb34e53490cdfe14b7d40ae44b2bf4e92d10e204114c1bf5352f6a66c587b8b
GET /js/86359.d4aeec9c5.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-27a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BIylGSR46br0cu3S6ridLU6DdT7hAPHFGuNXgKy0CqEDqEUpb4ySs3949mFYD86Ku2kZur7Qvu5ZsjOpedU%2BBa1hemx2ezcki9Rkwyor468B3N75KH0VPMcklNKFbVo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df2063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/hacksaw.5f0e80ecd.svg
172.64.206.3200 OK 841 B URL GET HTTP/3 1win-cdn.com/img/hacksaw.5f0e80ecd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (892), with no line terminators
Hash 3371207f99abc98b9fb8ae8e13877c7c
82efe0611bab5262b245fbc98522a20bb2fc6529
ca3477693ffb8842144691591c6344d96dd368cb41b51aaf5e9e40ece7338831
GET /img/hacksaw.5f0e80ecd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mss1WrXgNpt%2FhZYBAQHTUH2X1XBTAwTDz38WUmiYdMj5ljtgrCIQf%2FHaP47BSLkWAZRgg5vdXkaEaHpx%2BBMunP3jxV4dEbO22zH1v8yD8nKwa6oLe%2FCmhK08wG4X2es%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdacb3963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/pragmatic.2e7a96b71.svg
172.64.206.3200 OK 2.4 kB URL GET HTTP/3 1win-cdn.com/img/pragmatic.2e7a96b71.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2440), with no line terminators
Hash 0318d08339acfa9fb15b1f56bb22b145
caa87d78a9c14af0beeb66733294652e6b1627b8
24fe7388e4f3fc5ddea45e6369a02683ca4ecbe85d5e18c8f67d47a69709cea9
GET /img/pragmatic.2e7a96b71.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-953"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 353651
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L58Ud1nStpPueOqWCoGy583Ptz6JR4jLnXnbNBRg7oWHL7%2BtB%2BTEI1zpaalImNsO%2FcmusKmciDxaLgxFewMea5uaDeHyHKaqRXCBuv7xvda8RvGCUEs4%2B8%2BPxbabGhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6a63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/66512.d20d76110.js
172.64.206.3200 OK 759 B URL GET HTTP/3 1win-cdn.com/js/66512.d20d76110.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (777), with no line terminators
Hash cb6fca85eef64397cba0320543b40d92
8832706404854e9b78dda970c87d17a0629016bd
7bf26beea8948e6afad264491eb02a264a252fb30c6a620c178a27b2a1477a65
GET /js/66512.d20d76110.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-2f7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IHhRI9Y%2Fskg546k0NINW89CJ3hhNml%2BF028YXzUJ0%2BgYh6mMGgCfFzspjGfwbXFPbwc%2BvoN2oUswVGcKHLUyWpYFkh7HytVKArQvkiC6ZLJVxJI2YX0JWEZ6Ztzv7A0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd22f4263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/atmosfera.32402e33f.svg
172.64.206.3200 OK 9.0 kB URL GET HTTP/3 1win-cdn.com/img/atmosfera.32402e33f.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (9038), with no line terminators
Hash 3ba4610ae40c2d70390afaa7cba36721
01eeff20113a096675d71c018a7f109c8e53da28
815ee6469c0e9ab67b094e7e529109be7cd887973cfa0d784ac1638e9e5b5637
GET /img/atmosfera.32402e33f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-230d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NVUfhFsqoFx3DFu%2FYCIRCCGW7I8GiujsgKnlbfAny7Jlp8sn9X8BzkcTnLo%2BEDf4yq2a1bkcNkHlrM9tU0JtRLCETa1lUo7yYiLx8r%2Fb6Z6aVAkC%2Fuirny7N9iJhwuk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd94a6e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/451e0f9d-5ca2-41c5-bbef-525920020640.png@avif
172.64.206.3200 OK 4.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/451e0f9d-5ca2-41c5-bbef-525920020640.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash abfb9f398894b75fc0ba70e20e22ff1a
bd9d444d7bce265a448eb566d606c73c4d1e1187
c910261bd2f86c26c12e83e736e1e8aef9be92df9cd0ddc8c63b100de44102da
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/451e0f9d-5ca2-41c5-bbef-525920020640.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 4729
cache-control: public, max-age=31536000
content-disposition: inline; filename="451e0f9d-5ca2-41c5-bbef-525920020640.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NTRiNjc1LTNjMGRiIg"
expires: Wed, 06 Dec 2023 12:14:46 GMT
x-request-id: iWyu9wFRXl7UyUhDa3glB
x-cache-status: HIT
cf-cache-status: HIT
age: 398016
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=stFbtPHELxQGfEss%2B%2Fp5fT9b2%2BggYS79GxVdE9USDDd085swxQBoyzAFkJ34UN3qmwvhGrsXQ9Yeojm6Z3R7enHXOmV4%2Fn9NSFf19cRH4GDldMeYssfldqVuP2Fuq9MZ5wuK2rUByyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde1cef63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamebeat.5649e97f9.svg
172.64.206.3200 OK 1.1 kB URL GET HTTP/3 1win-cdn.com/img/gamebeat.5649e97f9.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1228), with no line terminators
Hash f47237dc478a7b0d1ed4d2687cc13396
66ce5afa1722b78b22858e1ae057290f36a13c81
af0e90737145635ae2a9807d550dfc2bd2746cbc50f74b828a3aa4c0e9a8ca19
GET /img/gamebeat.5649e97f9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-472"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=On7Jno5vuLV5RI1UjzZxtxi%2B%2BVy8L0DCO0yvPpexU5LPalvf1J7SEoF2jhAfwuB0DDOz6roJIyvkcfhJiN5Ce%2Bi3zVd%2BYlLPq7BmJN55wVExZfM%2BlOWYVfljbG3ar7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab2563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/netgame.8e28ed366.svg
172.64.206.3200 OK 2.9 kB URL GET HTTP/3 1win-cdn.com/img/netgame.8e28ed366.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3049), with no line terminators
Hash f7a27f15353cbc6d80464cb321e6f7cd
8e9d03da3c5f00a3a228b545cb8759e837059323
c7829189320f0892562d94639b839e69ab98bc4148e5827a634127bcc2ba9740
GET /img/netgame.8e28ed366.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-b65"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 515663
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PekuthXJ30aB8NGblThOu2wqL1iR2%2FGasAqEArILO%2FXg0an4JnQw%2FSB0O8Qbb1z%2B%2FNLQ9FV1aI8FSbhf8GIP2fqpu6UxDc0HhE1kbFq6IpkWlHjt8Q6owQGfK5AMLds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb5463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_img.22f56ee2b-1508.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/500_i18_img.22f56ee2b-1508.png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/500_i18_img.22f56ee2b-1508.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/1play/9dd18146-c273-48b4-ab55-70c3042a3f64.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@avif
172.64.206.3200 OK 5.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 9fdace60a69e1b04300892859f93216d
9e2a91c060b63c90c79999bb6ba0d2dc03cc23d7
c1f9c9a3feef9cac775c9527f505df8b0b1378acda78e7241a5770facae70d0c
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5736
cache-control: public, max-age=31536000
content-disposition: inline; filename="7a0588e7-8240-497e-b41d-22e512bdb23e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NWEwNmY0LTQwNjc0Ig"
expires: Tue, 05 Dec 2023 23:28:11 GMT
x-request-id: thfseNhBAS0-kSii52Uzc
x-cache-status: MISS
cf-cache-status: HIT
age: 405477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VlcePppkijyWI2sV5n67BsaJ9o7HsDTlKFJkqjmmSq%2FeTMdO8A%2FDKofyC94LkvsOVfj9CxZrZIWSlNMbEEi0Nbe%2B6OCf01HiToKoWdudJf3PCWPoEFwnUNWG%2FMxOhjipG3tXxBJikfw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde9d3363b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/28097.1c8a248e2.css
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/css/28097.1c8a248e2.css
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (24651)
Hash cdb37432a11da24eb2d219a42ec1754a
9fedfcdb9301e66cc55a95afedcdf0277ec479ba
caf06205fb6e5e49672b637ff2488b9a7cd287efed1aec32db7beef9f0f0ba32
GET /css/28097.1c8a248e2.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 13:48:45 GMT
etag: W/"655cb53d-607b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085643
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IJIDrbyU22PnFEp5tl3El84rlgyMICIAbcMeCSsfwP4vXkZlXqxu0insBM%2BjvU%2Bc1n2V%2BVKxJsSIwkUMeTxo%2FPFo%2BoPmgQTQ4DGYFE3yAv4lgisCa2TmQTuy2zz8qUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd06e7363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/edict.ca67383de.svg
172.64.206.3200 OK 13 kB URL GET HTTP/3 1win-cdn.com/img/edict.ca67383de.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1895)
Hash 7794e14088c92dc44e186b65dfd0782b
f81ec0b93e38339b2e2f8f94d2f7c568b8943fff
c7f35f1baf838b1d2df12f6f0c9ec002d9fc4f57fcee414b74fad3cabb71864a
GET /img/edict.ca67383de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-3206"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lE0CqgS51Bsn5KN7CT7AhprlOMA8N8%2B9YRJwtJhWDBAUONqi%2Fr3ai6gJ6eB7ExaZF0p9y53S%2BteY%2FcypZbo4%2BToVyF3pX16fJOaibh1u8e8AFgea4cpxCs9kLKJPWCY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda4af263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playson.2ff1c7d85.svg
172.64.206.3200 OK 2.8 kB URL GET HTTP/3 1win-cdn.com/img/playson.2ff1c7d85.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2830), with no line terminators
Hash 241ae7d1512148f38162202a1838bcf7
7937917d26b57052c052b0cce94f5d1697c8caa7
a6bbee3377db6138a13bd0bd2bc21f778d1f5744a38653efe4acb48d8078367e
GET /img/playson.2ff1c7d85.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-ae5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lvVPPwBSIX7dfAA7HMtO7VtpNXZKyvAjGzLvZ%2Bk%2F%2BECf3SztExHcjFtn7MBzBu5BQd8SAyb8rhVeC0mKfXhIPqYBBdVxaBLf8ADccihduXTi5ej%2BkknQbt47ePBDTPk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/softswiss/a9052c9e-e101-4319-9c19-a749e186bfe1.jpg
172.64.206.3200 OK 71 kB URL GET HTTP/3 1win-cdn.com/casino-images/softswiss/a9052c9e-e101-4319-9c19-a749e186bfe1.jpg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x450, components 3\012- data
Hash da955e26484e683f446b773fa99c5da9
8edecba831f292ff2450d2a23b4657f30437465c
3e748f4e7d4031a77a3bfb77d49e82dadba08376d0ed800da330ec0f471814c4
GET /casino-images/softswiss/a9052c9e-e101-4319-9c19-a749e186bfe1.jpg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/jpeg
content-length: 71385
etag: "653b85f0-116d9"
last-modified: Fri, 27 Oct 2023 09:42:08 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 509034
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3lVSQ2CPVdh8bmOIBTeoaf9%2F54wfXMvB0cIln6mKOLPchsjRPMWGwys7MeiNqpKpnGu0RHDpGSPxDpaqg%2FS5AOFm5bKFjaYgMSWACP5B0rGNbPUotL7mkTPxGHZYbfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdead4063b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/48430.611129e47.js
172.64.206.3200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/js/48430.611129e47.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1192), with no line terminators
Hash 13ee598a8e47be5a3df2543dc3171f75
630992d944c63ecf139694eb2e3e5ac0047bd23d
602ae541f8651417c75bee8a5666440303481bf090e791bad62894339350c339
GET /js/48430.611129e47.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-496"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 249256
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MF7%2F5742fUAx6GG3xN1A1e4LIcbB2C2H1jYzSHvNFtWPMRi9FHguH6K2hYt1JxHbMIKPV1tpe8uICNuZ2EKzHcgTxgkD0mjNDbC%2FH7Fs2dy9q%2FV4Qf4sGAweOLPeUDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df2163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/31310.5ad3b93fa.js
172.64.206.3200 OK 528 B URL GET HTTP/3 1win-cdn.com/js/31310.5ad3b93fa.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (546), with no line terminators
Hash 819ea0d23f76434d7cf7bdad5c0dc71f
06f5a3c6cd80db3f5850633d2f868f55e7e92447
3fc29ff364ab40aadf6f25a1d6423b9d333cfecf786e3cfcc04175850357eedb
GET /js/31310.5ad3b93fa.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-210"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g7NnCIL9FYLqCOAW3GZTxqDRTUuxk0N5f4aeyNc6%2BtILG9cebANtYU01Y%2F%2FRnb6LFC3zSTYxeIrxNWHUwe1h7vRL5ppsqm8J27Shba9DNyCMsJzDDNEYZCm2%2FwhQ1mI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df2463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/upgaming.242b9e921.svg
172.64.206.3200 OK 4.8 kB URL GET HTTP/3 1win-cdn.com/img/upgaming.242b9e921.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4811), with no line terminators
Hash aeb4cc1caa82c4f55b3598ea0c7003fd
8c1eec585578ba1c3803b2d6b724d67cb8e3de25
236f3b8b8aad7f6ad5e23aa1eaf555fb7420d9dd6eb1df70e7957b1707554982
GET /img/upgaming.242b9e921.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-129c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 516441
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dby2jClpj2%2Boual3mLcnmD3d6GpdRG3O5mHz%2Bfo12GbwxKFFsxTLBuDlMuXIkO8CQEbznM%2FQ0MaNhJyIoXx1%2F28WTU0UOgXJ2pUYcjM3fi2Tlb3wKy5XV35zVlvnBMg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc0be163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/5122.1f38b426e.js
172.64.206.3200 OK 7.7 kB URL GET HTTP/3 1win-cdn.com/js/5122.1f38b426e.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7912), with no line terminators
Hash 008cab7b7d7be1ef3640a328bba1f1af
c0b08d4eba1c1c2003331383c5dcbbd7bbb51984
bcf35b54296d43284ffef26e1f66620987e873f53b8b754fa3445671ac44b219
GET /js/5122.1f38b426e.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-1e30"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 312591
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9YfcwpCvtpkwGhgrOkgHtmZHSM3gE1AMxQql7XBG%2F2RkbhgIfhODtY3mOjFShYk9i9sk1sl3Omj0VgK1o7c%2F9iOT2WPy5vwmor1YbeJjzMdiZGH0Asy4y0kKjKT4uqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd06e7663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/46665.874f409a0.js
172.64.206.3200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/js/46665.874f409a0.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1042), with no line terminators
Hash 530c1fc3208b67ba84edf563465386ad
d2ae074df39f95da703f5a582a2dadec59962e2c
82df31a277f44a4f8045b7081e23b00003dcadb0f695354354559aaff26a392a
GET /js/46665.874f409a0.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-3fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5JIAsF5zYXHsVxC%2FjuS8jtStLEOJroan9nIAr1wm9rnwN1DLS1TcL%2FwLKYHifVZ%2BoVBOJNjmO1r8xZSHiTJc6lBML%2Bri7Gx%2FtqQbWU7GhtIMARg0Yv2Dpi5ByfF787A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd8ea3463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/relax/4be76199-1066-44a5-bda8-28b502bebc88.png@avif
172.64.206.3200 OK 4.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/relax/4be76199-1066-44a5-bda8-28b502bebc88.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1666079636038cf4177b706f69d3c7f5
986eacb970b174e52f2747cc83e542bba006a614
ae4c13a992361a24ae2159f2b26713b98cc2bbbbafac6a28286feb87d8abd6a3
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/relax/4be76199-1066-44a5-bda8-28b502bebc88.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 4594
cache-control: public, max-age=31536000
content-disposition: inline; filename="4be76199-1066-44a5-bda8-28b502bebc88.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MzUxMzdmLWE5ODAi"
expires: Tue, 05 Dec 2023 01:27:47 GMT
x-request-id: T68XtSMbNzMQEGdoOuSm5
x-cache-status: HIT
cf-cache-status: HIT
age: 496106
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t6nnSc76ggg3no3rga2yrimfYPHsgcqZUevvH0hoYRhkoIv3Ra3JDIEzCfbn7%2BlrnWGBpQb7JiXG059SAgq5OrkZnzZcMjWPTH3F7LzGsysGgIrAYMN5kgnjSgUdbf1jqXnazVTkeUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7dac63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/a0002228-08a7-40a7-94cc-bbbc0fc2319e.png@avif
172.64.206.3200 OK 4.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/a0002228-08a7-40a7-94cc-bbbc0fc2319e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 0d67f52b8332f5a2c54eed50af4a7a53
9e574cad216721c275f1900e2f8df2d5a590bb0d
692d5548f0b8935aa2d9f7de33635533f2d36f3dd3df427dbb13ffd9e54da014
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/a0002228-08a7-40a7-94cc-bbbc0fc2319e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 4770
cache-control: public, max-age=31536000
content-disposition: inline; filename="a0002228-08a7-40a7-94cc-bbbc0fc2319e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MGQ1YTA4LTE1YzNmIg"
expires: Tue, 05 Dec 2023 02:16:33 GMT
x-request-id: shqDXz482yEhkfFT7eQUt
x-cache-status: HIT
cf-cache-status: HIT
age: 505066
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EdQkM4U6B3jSCVTAjojVHz43BeeKrO3sIUOycyVBOV7YSTsgQAHmvdkPsm%2BEb9IIEhgXEBh1NmBgn8tIvHYP9rhqnLOp8h3zhREDJzip0kGbfjV25ntXkD3jLr%2Fg6kFAaSJZzr8yEqY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db663b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/28097.6a615cdbe.js
172.64.206.3200 OK 9.3 kB URL GET HTTP/3 1win-cdn.com/js/28097.6a615cdbe.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (9623), with no line terminators
Hash 7f39eaabd9c094578c5b2e3d9c4c9008
f4d583cdf887fce9009649acd86c0f5b565fb72b
d754e5b04da3ad0e8b85a6169fda4028a99050cf3b21e4b7b65934371aafc1d1
GET /js/28097.6a615cdbe.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-245d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 314716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a5LqdpOFLBfmj3l7EAGzKZt3MCsXXbOdMYL%2BLWW8KlX8mu3zCpjRgv3StQ3XvB8BMo8G1cjIOeiFpbZn65GEMCgtEGjz%2B%2FNyyGPDt4sDZO6Rmzi1x%2FWv3tVRKxNmTB8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd06e7463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/29734.4dee2f2b3.js
172.64.206.3200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/js/29734.4dee2f2b3.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1653), with no line terminators
Hash b47b23fbee3694091f4f5701c175340d
28f4693c4d807dab19cfa578387d74c87aef7feb
ef66f6e09ab3c9721d948b8a29fe46fedd897ff75aa9cd0ff281f5dab2bb00d6
GET /js/29734.4dee2f2b3.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-649"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309605
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j1F%2FQuHDDa5s2t4OPhNHhuRC7G%2BtiHDZIOCAvuO5nGW%2FKICwg8TOYlYzHaUCrLAZ%2BCKOuj2JfXCynz99biKSvS2Iu6SREKBCemzX79Rkp%2FBB0RNodz8KSz1jBI7WEHM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df1d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/apollo%20play.610da8846.svg
172.64.206.3200 OK 5.5 kB URL GET HTTP/3 1win-cdn.com/img/apollo%20play.610da8846.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5598), with no line terminators
Hash 50314c7ffb9d11a02d2c58c66e124e29
3ebfb6e02132e3281c64e7866a621fc9ff43678e
c6073fd4fbb0239b24f30fc4d2e90e2d34060adb4854b0b3eb34e5c0e363346d
GET /img/apollo%20play.610da8846.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-158b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QVG1qxws19YARXn%2BUJneqgOln3D2iqFftIhX3TDBuF7wM3EPKw21tcFZJ0U%2B%2F%2BZpayWyc5UA3tvgWb1CEFTd%2FYygRMrPPQQEt6nSgW%2Bjm76Xq0qkZtIDkMP8t6NaKU0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd93a6763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/no%20limit%20city.5b7440267.svg
172.64.206.3200 OK 1.7 kB URL GET HTTP/3 1win-cdn.com/img/no%20limit%20city.5b7440267.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1747), with no line terminators
Hash b922d7644363785eac0ec67b0a31e5b5
aeb685310c81a6bbde2c3dc8c6e4bfcf59c77336
f5949bda30ca6a410fa6db0e60789cad60c32183d2f52b4888ab292910bd45bc
GET /img/no%20limit%20city.5b7440267.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-693"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wmV6jWYzwJYKl%2BpJTFnyE6l6AS%2BpCgJKOmZzUC0gh%2Fak9hE75%2BgxgtSB83D728xkInSEV%2FXGuDF64VfaJ5A6Fb4h8tT4d65rXRA4taaY4bEuKAmT6x09pQBBcz26DZI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb5563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/d8c068a7-ff11-4f10-9ad2-c49a04a8ea6d.png@avif
172.64.206.3200 OK 3.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/d8c068a7-ff11-4f10-9ad2-c49a04a8ea6d.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d416912f9e600594069cb5299c4c247e
c946c9b17a719c0d0cd7840a884fbf835c7dc6db
8ccdb70a7d4740ea6987fbfd237b8a35b6808938cafbdf2abcc8d8463e7e0944
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/d8c068a7-ff11-4f10-9ad2-c49a04a8ea6d.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 3641
cache-control: public, max-age=31536000
content-disposition: inline; filename="d8c068a7-ff11-4f10-9ad2-c49a04a8ea6d.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MDcxY2QzLTFhYmUxIg"
expires: Tue, 05 Dec 2023 00:23:18 GMT
x-request-id: Ho2MATOPJBo_OZhvE3Omo
x-cache-status: HIT
cf-cache-status: HIT
age: 512433
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lVT0KfbR4TW6kMEeiWFH4zEF074ggTe%2B1mUecPuoapr71LE6bXxzsE1rOa1n4FyjYwIR86FCPx2GG6ahz3ter5dbTOOB0o7ZZqspdtCw3SHkrJVRNwbckKnBFuD%2FgPb4B%2FhnqQIjs9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde4d1163b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/aviatrix/8ab05198-a44a-4b7c-b380-c5bc62f521e8.jpg@avif
172.64.206.3200 OK 4.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/aviatrix/8ab05198-a44a-4b7c-b380-c5bc62f521e8.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 819582ff361d98d8d27334c5954c7db2
54c98af476dfacfced86cd3bad4297dfd15b0f01
43fcd2c0ff9068f75139692ef5e658d10406be0816b7ea37831e911272a0175f
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/aviatrix/8ab05198-a44a-4b7c-b380-c5bc62f521e8.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 4877
cache-control: public, max-age=31536000
content-disposition: inline; filename="8ab05198-a44a-4b7c-b380-c5bc62f521e8.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0Njg5NmJhLTE0MTc1Ig"
expires: Wed, 06 Dec 2023 04:49:55 GMT
x-request-id: Izzi5Lq6S3DdCHxUVw7vc
x-cache-status: HIT
cf-cache-status: HIT
age: 403573
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aqaXur%2FeNdtVCIJr%2B3QjQGC06O6yzu%2B5%2B6Y%2BcCeVH37%2F0v%2FXDXyOpaxo5vIDxj7bcs8v25ZqrnlEbaR7MGw7LKSKHpbmqXUaTGgNACTIEN%2F7pc9OvkyHysSyt%2F2b5yuJz%2BXkeajYzsk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdead3e63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif
172.64.206.3200 OK 6.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1135961e3dd1057fc744a3de2d76c131
fcf9be70400cf7727cc841967609bfab980309f3
92315a4efaf32b20e2b64752e618aa317e3b97ab26b3bec9d171fe260ee15fdd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 6283
cache-control: public, max-age=31536000
content-disposition: inline; filename="728d6758-6f50-4b1b-8132-2430ff7e0aa6.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NzQ2ZGJmLWRhZDki"
expires: Fri, 08 Dec 2023 01:37:38 GMT
x-request-id: nwZ2Mge_utyDL78vSW-4c
x-cache-status: HIT
cf-cache-status: HIT
age: 250585
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01KzSQ8GPvxjhRpH7zr6SgQIyUgZDJUWCWAGxgS2okhlwgmL8UG9Dy44xmslfNvJhApaRFbrp62XMSozIAq7EHNMmkf7phQGrPX%2BnCjXENe4x1MJxhwmU62XihP65mwjm1SHW7cJqRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7dbc63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/91217.73609eb3b.js
172.64.206.3200 OK 828 B URL GET HTTP/3 1win-cdn.com/js/91217.73609eb3b.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (846), with no line terminators
Hash 873b0a1f00b7e367ac6843a8b9e80deb
b9333e21da514f326abf81822702b8897c39fb48
647917f9f3afebc3e96f7512bdfa2faf4e3b02948b908fedc205a18a5aa4c76c
GET /js/91217.73609eb3b.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-33c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309564
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tMNyeq7E%2BwzbJzXc%2FDjwFd2gohwz2cJc2tjpaZzMWKyH9Vjy4K1v%2FpTgWIJDEimrTU%2Fslgec%2FpIMekSE2zs%2FckRfjfaLks7UPmXyMm0apt3VKxNxkl3b3y6pSWeuWjg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df1763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cyberslots.988fdd12e.svg
172.64.206.3200 OK 2.3 kB URL GET HTTP/3 1win-cdn.com/img/cyberslots.988fdd12e.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2340), with no line terminators
Hash aeeace00abaabb5ae6a47e900873f09b
d6e4385ea3efcfbfba30b6f0a58ea08ec9a11a95
0c1fdd20cf809c07733b67a12eb0f3cdc88a57ebcbb2ba293a717b4b9b3865ab
GET /img/cyberslots.988fdd12e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-901"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oOEmkKk7E02kyiJ3kNqv8a4bE2zVADRKlstr7%2FYq2lKCtJk2JKAReRbdkF0QYrc%2FMAbID%2BIFyvwLVipEgPuEvFetoZvsHQ2Shkg4Shg%2BaaNvBLtiJXYysiccEH6YZHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda2ade63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/skywind.e705b3676.svg
172.64.206.3200 OK 5.7 kB URL GET HTTP/3 1win-cdn.com/img/skywind.e705b3676.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5911), with no line terminators
Hash f597bbfefe2fbb5be97f3ca9bedda7f1
50724171ed506f6e09a28f6a17d152e6838ffbd1
c0c670371ded99439cc4601ae86e83b3b514df3986e2a6866edacc7d21b128d6
GET /img/skywind.e705b3676.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-164a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 261385
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2BcaqUuybwi8Npj0lWM6riQyHWYH8jVT8npRKkBWGJ4BjaGMxZFUmThXstyS35h%2F0xCtEe2t1eILe7Ygix4kI3zQ6OAPSs3idxnLIF5WLHCDZcKVh3B2FxJIobWBNVc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb5b8c63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wctks.xyz/core-js/3.33.3/minified.js
190.115.24.78200 OK 244 kB URL GET HTTP/2 1wctks.xyz/core-js/3.33.3/minified.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
Size 244 kB (244105 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /core-js/3.33.3/minified.js HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: application/javascript
last-modified: Sat, 02 Dec 2023 08:56:58 GMT
etag: W/"656af15a-3b989"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
content-encoding: gzip
X-Firefox-Spdy: h2
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif
172.64.206.3200 OK 9.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash b969533d76140b5d61ba0b598faf9d92
0f1c02c6990f7be7bc314d7e1ebc72e1029904be
e094ef696c10eceaab121d964d2ace3e8893cc72c3f17d13a455905d4b38a633
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 9876
cache-control: public, max-age=31536000
content-disposition: inline; filename="aaf2d443-c77f-48d2-b319-c986f21359b9.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MDljNTQ5LTRmZWNiIg"
expires: Wed, 06 Dec 2023 23:06:57 GMT
x-request-id: 535BjYgpaOs5DVdE8d8vJ
x-cache-status: HIT
cf-cache-status: HIT
age: 334724
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYLLcf2F%2B5T8kJz8XcRQB34uO1Rnn8qJoEhYFDskWM3sQ4oNNp9mPmBi05LaZ60VhubhPybvr%2BBJ5l4qr2qC7LdMj9kWJ7%2BY8m9XDznabrn5bbBm8CDl0AaFV8fTKmGRx9de68uRkPI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db863b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/9cd28ada-c691-4bb4-81d3-40c87938d3dc.jpg@avif
172.64.206.3200 OK 2.1 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/9cd28ada-c691-4bb4-81d3-40c87938d3dc.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 836854baa29b609689f61eed45f8929d
35c932911a8dd7e25e608a984a8f452ad1b15f2b
777570b7c1cd576eb876ba00a8cacf534f412fa8a07d59f7be91ba4c6fe82a9f
GET /unsafe/casino_list_medium_1x/plain/https://1win-cdn.com/casino-images/fundist/9cd28ada-c691-4bb4-81d3-40c87938d3dc.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 2098
cache-control: public, max-age=31536000
content-disposition: inline; filename="9cd28ada-c691-4bb4-81d3-40c87938d3dc.avif"
etag: "dFAHbmbr3kN2-yNWIsKMb81COI6_DldF6rL5TVHURwI/RIjY0YWU3ZWI3LTEyYTEzIg"
expires: Tue, 05 Dec 2023 15:59:39 GMT
x-request-id: FttJTQA9X5S-AmXPJKe2R
x-cache-status: HIT
cf-cache-status: HIT
age: 472737
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2BhTCzf7MbGbquBXLlnM853QL6J1BMEicD%2F5H%2Fl6Xp1mOqYEtk4ctWW0qcoUlNeFNoA6A3uTrh0nwslv0mVKUuBZraGbY6KWLkl0s%2BM1fs53OBp9pxNpltW0nVvwZZJGejopF8RenAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce19f2963b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/7mojos%20live.cb6749a25.svg
172.64.206.3200 OK 6.6 kB URL GET HTTP/3 1win-cdn.com/img/7mojos%20live.cb6749a25.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6764), with no line terminators
Hash 63dcbe9ebaa3f238a8c0152142b06a03
cac36df8800a2f72b9b51f9eeffd74e82be4ae7e
c22e31035811334913ddbd32cfc1881c38c08fdd4d4b4c1c5362ecb6ee23a316
GET /img/7mojos%20live.cb6749a25.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-19ef"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GH3rI11M7AU9Bws3WlxcWW9MZhMfnMJ82ebeEdqpBr3k%2FHL46yfd5%2BQm91rXGJ5XZY3XZYR1EUt%2FaHDfU5w0dnquys%2BXMz8ry1D5DAfi3Ib41DkcDJleLIwKU%2FW6164%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cq9.5d5072e17.svg
172.64.206.3200 OK 4.6 kB URL GET HTTP/3 1win-cdn.com/img/cq9.5d5072e17.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4727), with no line terminators
Hash 47469c2cd9d79b1305e3e02f76d0dc24
d63ca4b97bbdd2533e5c1ac86bacd621a4150410
cbdced2050313c54915ec2417995b7de59675fffbbedf861202570a6e4ad5536
GET /img/cq9.5d5072e17.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-120b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085633
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7fEQx%2FDUl%2FIt7c5cUbVsLztNbrfre1Ds6r0TndWrV%2FqnmXAZapumrmYjgtS8zs7kb1mO8VFdeDcGFMyoJM%2BpxIgJI%2B9bv3E4xQPXZ3OQKh%2B%2BHOEFWlnoYDunIGGcTEs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda2ad663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playbro.9ed310f23.svg
172.64.206.3200 OK 4.8 kB URL GET HTTP/3 1win-cdn.com/img/playbro.9ed310f23.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4896), with no line terminators
Hash 221b773f0eb73aa28f7617e628f7fc2f
67e3b29f4a951351da5183dd7d6e083fbc991322
4ad7ef6a7e11897fa2b2830921fe86a3d878866c81c87d159f90732be0d30e9d
GET /img/playbro.9ed310f23.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-12e7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iCJNEwgCsIKtwuFej0tXUtJ3s2J2S9KinfUhpV8IL0jZecG648o6CAtxWaG%2BosVchvA4NRlcX8ekkjGWdv7QWO2gGrFJs6Dog2XsLrqhtXRsxAfI%2FCynReudr%2B%2BZRek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/silverback.297288e25.svg
172.64.206.3200 OK 42 kB URL GET HTTP/3 1win-cdn.com/img/silverback.297288e25.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (19015)
Hash 2910b9f6ba7f900a0246432d2777b217
86b09b58a3eb69c70f175e577cfefd4efe1dfa0c
b5274849cf17745568ee5854a736f1ca11cf874511dc6554884c6083155fdde2
GET /img/silverback.297288e25.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-a2dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gb%2BAECDNrc6CvfAr2MP4MqkSq52%2B2zfD1A3Prj9oQGjDfuCO7WQlax30fN%2F0ibUBiXFUOaF4YoshEFd3nxrD%2B8R5sU%2BRA9sDX61B98E42yAOBj6QupPJvX9KYVFb%2Biw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb4b8163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/100hp/b7fb6919-8350-45e6-9fe2-6c1b62e00771.jpg
172.64.206.3200 OK 197 kB URL GET HTTP/3 1win-cdn.com/casino-images/100hp/b7fb6919-8350-45e6-9fe2-6c1b62e00771.jpg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1750x1299, components 3\012- data
Size 197 kB (196850 bytes)
Hash 8cece0b502652cd9e484e96f1e94ae74
c266c4936aa0c00d86b8a5b0b231822b44e95005
b9da1d09a6fc3fce077c73e2effbc15b42cab1c3dec6f92f2ce3ab450fe145d3
GET /casino-images/100hp/b7fb6919-8350-45e6-9fe2-6c1b62e00771.jpg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/jpeg
content-length: 196850
etag: "655d0820-300f2"
last-modified: Tue, 21 Nov 2023 19:42:24 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 1065029
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=apBczNbC5iC2gPbc9pGEA32XusRJB7cReuQDAl12CEfK7Co8N8%2BS1VW%2FOzg2%2F3YKfeSWPx9jhnSjPcfd0aBczk2tiynhrcWJNQr6zsuBhSwThIac%2FnUuG3RLTSnPELI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdead3b63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/2196203d-3c09-4202-b06a-7bb67becbbbc.jpg@avif
172.64.206.3200 OK 5.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/2196203d-3c09-4202-b06a-7bb67becbbbc.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash bc6941e176526c4bc3cda10d14ff8913
c96896684d7e1c6cb1b68f9231ec7ec2e97ae50d
468fca4ef79c22c4906f5fa0c36f508b3e87e75f09082318c189a4ac1086bae8
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/2196203d-3c09-4202-b06a-7bb67becbbbc.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5761
cache-control: public, max-age=31536000
content-disposition: inline; filename="2196203d-3c09-4202-b06a-7bb67becbbbc.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzZjQ3OGExLTVmZDkyIg"
expires: Mon, 04 Dec 2023 06:43:30 GMT
x-request-id: Oyih01zroxJEip3bQKKGt
x-cache-status: HIT
cf-cache-status: HIT
age: 571200
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uX99wdW%2BKP%2Bp5%2BFvN6xIhjbcdvoY2l3CYt4q0hOxXCy2ayJBTQREz7SPFkPQlnLhP9O6cvqZ3s4oefIAJgRM5meC8xYcQMlb%2BLLxYAEi9UHbWKioFthU1vaukI1Y0j%2FvjJLvwRIWYbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdefd6c63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/electric%20elephant%20.dd56c804d.svg
172.64.206.3200 OK 5.2 kB URL GET HTTP/3 1win-cdn.com/img/electric%20elephant%20.dd56c804d.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5309), with no line terminators
Hash ee4b076249d3d52c42ca2f59e03cae25
d072a4002835fbd0279757a42bed97a398e7adf7
9eeb2fb4664558d20a84cd82fb347d73ef91975eb4a5c5ee274b16f3ebd9c495
GET /img/electric%20elephant%20.dd56c804d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-143b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 335680
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sv8Je6C%2Bi7HW54F8kI7tgE0m0te9i2xagG7tn%2BTNjykYM5Lr2a0SwrM3hbzIQ0YhXwisMsaKuZGyG7PiOslkRO9GsrDJDawOYh9dDUZ%2BFe45NLNwoivX2bV3D4115x8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda6b0063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/640edbab-2628-4904-a35c-39ff2866696e.png@avif
172.64.206.3200 OK 7.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/640edbab-2628-4904-a35c-39ff2866696e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d657067b6ff3c2cbdf5c91f6a6900d6c
2ee3a6fc835a01895b1cb47b4072b1519bf9aba8
06ab95b6a9165d75c88b1b3cb5e128948078d67eee94019465e90cb1ca3091fd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/640edbab-2628-4904-a35c-39ff2866696e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 7507
cache-control: public, max-age=31536000
content-disposition: inline; filename="640edbab-2628-4904-a35c-39ff2866696e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNDk3Y2EyLTJmYzIwIg"
expires: Wed, 06 Dec 2023 12:38:18 GMT
x-request-id: rZ2g6e6H7u8s3qYCo4dBc
x-cache-status: HIT
cf-cache-status: HIT
age: 399306
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FAwEYWBg8Z63l7%2BE9y1qxxbGeO7vWpz%2BknShJV6q82tR9iDylkD7fTfvbnXMnXxMbWv3BPXxdTCo2UpWjIDC%2F%2FmbPgtEQFJ%2FBt%2BWBA5SeN7NBg98czI1kSrI4PKHzu2NuJKD7wxzmAU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde9d3463b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/relax.1a68769f8.svg
172.64.206.3200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/relax.1a68769f8.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1472), with no line terminators
Hash d29d9c49a3e8be4842246e8b658651b1
71129bcf41f71edffe3fb4db0b4ff2faf37bd536
67d8edefc6b96e711c297519bc268d93c477cebc6a6cd0f912bb1567ee2a71eb
GET /img/relax.1a68769f8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-57f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hk4s7SF7bpB4T7%2Bo936j0%2FRGhx25kxDfBPg2e9%2BKlbOjqFAAx41CHnZwc%2Bw1AQSkLbiF3iNA6%2BRjVwJDdWYTxh2Vg5%2FYw73V9y1jWAuH9alTPO56F4HD%2B0LUR4LOsc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb2b7063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/endorphina/3a74cb93-c140-47e2-b2a7-6c79fe6141a1.png
172.64.206.3200 OK 185 kB URL GET HTTP/3 1win-cdn.com/casino-images/endorphina/3a74cb93-c140-47e2-b2a7-6c79fe6141a1.png
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 300 x 225, 8-bit/color RGBA, non-interlaced\012- data
Size 185 kB (184785 bytes)
Hash 43d8f93261efda219d9da29967040c2e
2fd0a5a607d9bf43f31f9bec9e1bc30f52c79cd3
2051dbb8fbd1c40a605829c17836bbb009296ba3dbc0ec5ba62ecdca11a2be09
GET /casino-images/endorphina/3a74cb93-c140-47e2-b2a7-6c79fe6141a1.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/png
content-length: 184785
etag: "6565d2bf-2d1d1"
last-modified: Tue, 28 Nov 2023 11:45:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 488597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MiX%2Bm8A2V%2BeFnuIhte1EzcnDqiIHeiTeW3ypCqZr1vp%2FwPkMMAgplLm7KB0j005emUhslMt5nlyGn0RqNeVuoq0H26%2FBXiVmxmS9h3tvZoR%2BDJwSeX45TZ%2BjsPKDqLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde1ced63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3b35e7dd-4b42-48d6-84d0-0d4dc022eda9.png@avif
172.64.206.3200 OK 9.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3b35e7dd-4b42-48d6-84d0-0d4dc022eda9.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash fcf0b9e08270d7f6afe72acceec8b7c6
9f2d9b9b9b670a196bdee43ff60acf56abceff67
e4f5fc2f1499c520540847e636aab0a1cb3823bd9354b5da27687c62a41edfa0
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3b35e7dd-4b42-48d6-84d0-0d4dc022eda9.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 9745
cache-control: public, max-age=31536000
content-disposition: inline; filename="3b35e7dd-4b42-48d6-84d0-0d4dc022eda9.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0OWMyZjVmLTczNGZiIg"
expires: Tue, 05 Dec 2023 21:50:06 GMT
x-request-id: GiMe6RKsLzXVUJaPmCriP
x-cache-status: HIT
cf-cache-status: HIT
age: 438639
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vngswG%2FISLw2Re0o6KI1ligBEfsM5XVBVXn3YlAYq66njtLa0%2FrpVhRKmd%2BCak3wRo%2BY%2BEEFnEyReCxgvgrKErZGwqlINeRuKddzCrUzmubiHGylQQ0ZMXP2ZSyM7D2f%2B4mTj9ZgQ3g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf1d8763b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1spin4win.bb21057a4.svg
172.64.206.3200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/img/1spin4win.bb21057a4.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1299), with no line terminators
Hash c7e582dcd4acb7d74e4065abbe28183e
d04183d1e1dc6665f54a667c7977b6c6a3672791
671ef5f707012d29c043164d157ca7028d371107dca629046657198f1f0173c8
GET /img/1spin4win.bb21057a4.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-4da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085638
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QycqzFwQC5AYSIpoeTD4nPXmovldpWHJ4MlCLqdfUEQVEM9zSdE17V4%2FjpBbETfOuARBKlpYoDmtDoKMYAbRgalXVjnKYHb4khLs9NnZNpJCoNF5v1dBvwrWI3nFDus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd8fa3f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/aviatrix.b5fd712c8.svg
172.64.206.3200 OK 14 kB URL GET HTTP/3 1win-cdn.com/img/aviatrix.b5fd712c8.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1612)
Hash c92109aa9c320cc21b175481d4219bac
624606f9179e2fe695a087e64df63ec4cedf912b
8892810b3c337925e0e2a61199d9fee94a589789225f916bc9aa6d0b6c76b438
GET /img/aviatrix.b5fd712c8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-34fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2Bicy6abD%2BhzQIoK992dwDIoRoHU7JOdga4ei14fk6GL%2BmQXijZT3YKBA17%2B6apebO%2Fg3pPDtG%2Bk0cqLxT9krN7echvtdPe5PEY7mN3QMC8NnSmPF2Fdk9JTzEwssiM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd94a7063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/games%20inc.64fb099a0.svg
172.64.206.3200 OK 695 B URL GET HTTP/3 1win-cdn.com/img/games%20inc.64fb099a0.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (713), with no line terminators
Hash 3d90ca2a78e19006ff1926510ed316d4
0becc591fcf773fa9e56396884dfd0f963a46e73
e7d7da9c1e3909de31009cba4f854e960403196039b489c7e42d4d6ad3acec0c
GET /img/games%20inc.64fb099a0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-2b7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a3dW6Kemx3AHv5sLSe7qvAuy64agXEXZH3gwRpRXLtZ2Ae4JA9pNrgr8oqs6th1y8MueX1AZPwpkvMk2niYaWk7BloaKxWHssRi%2F%2FrxI3Acis%2FoFSyzV1piw5RKgE6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab2763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/softswiss/04f67ecf-d744-4f0e-b33b-5fee6d24649e.jpg
172.64.206.3200 OK 115 kB URL GET HTTP/3 1win-cdn.com/casino-images/softswiss/04f67ecf-d744-4f0e-b33b-5fee6d24649e.jpg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x450, components 3\012- data
Size 115 kB (115257 bytes)
Hash dcfcf78d0b0f197a36de7f83cdbc6322
3587de4bdb73ef57e867cb6e3cf17dc88ba54291
573d99a1b0df973eadd099fb697e6b635816f6ccb9c46a1e15c8429ee66cc901
GET /casino-images/softswiss/04f67ecf-d744-4f0e-b33b-5fee6d24649e.jpg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/jpeg
content-length: 115257
etag: "64882b07-1c239"
last-modified: Tue, 13 Jun 2023 08:38:31 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 1811061
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u7ERDR8ZSzyQytaLt3n8LNz7GrDbCE0fp4POYTlRaxzsSUKVFfBfrCON%2Fyit%2Bi6TUqod1SAljMhcszJnW%2FwvHYmJbxOR6NqhkdpXnTtp2pWrsR0F2bzVx6wuLwz1LQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7dbf63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_bg.d251a9b83-1508.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/500_i18_bg.d251a9b83-1508.png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/500_i18_bg.d251a9b83-1508.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/onetouch.b026a50c5.svg
172.64.206.3200 OK 2.4 kB URL GET HTTP/3 1win-cdn.com/img/onetouch.b026a50c5.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2442), with no line terminators
Hash f04cb7d15621db8eda5af2216a4f824f
a0aa7231bfbe4ddc48be81716c3b31ba5c1702ec
de4ec671f76aa1afb93d074c5ea3b64d3d759cf404a142b359be0d9fccedb84e
GET /img/onetouch.b026a50c5.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-95a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dmT3%2BxlPSIGZp1TC9TDk5WFpfv7nb3IvWsPD2m5zf7Zjn9H1QMmGXW4EnNUtLhCsLKkfDJC1ZdAiRJwnWnhunTiU2I4d2dPKv%2B6xCS%2FJMxtWs9ywk%2FOVGx22MN50gc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b5d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/infingames/deb67824-e3c2-4afe-a1cb-aad3635e163a.jpg
172.64.206.3200 OK 50 kB URL GET HTTP/3 1win-cdn.com/casino-images/infingames/deb67824-e3c2-4afe-a1cb-aad3635e163a.jpg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x450, components 3\012- data
Hash 0d047b1b7e611309e903dacac2493825
6b70af1d0bce24fb9294847d8bd9fa63d9855ee6
6469fec5bda2178b3f54a144c8533cc48c2fdee48c006a4ff9da12fab85c4140
GET /casino-images/infingames/deb67824-e3c2-4afe-a1cb-aad3635e163a.jpg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/jpeg
content-length: 49509
etag: "65295281-c165"
last-modified: Fri, 13 Oct 2023 14:21:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 2850897
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ujUjCxLAHA40EXQRkGUkdLJEwIt3zsubzSyTBzPwX5K0jbZzxN9jsJJxpKn5jW6IF23x3eebHh79rgZc4ZJEAuow1JND9kfuw%2BchEd%2ByEtT%2FqPKG0N1lpiQlAAd7kOI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db763b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamomat.593230062.svg
172.64.206.3200 OK 643 B URL GET HTTP/3 1win-cdn.com/img/gamomat.593230062.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (678), with no line terminators
Hash bfaa3d42e6ab264b9080e74f867e85de
5026f5b14a42af9eaaf3d09468fa27728287cdae
9911098f481a732b6e8ae3ff8ce922ae03f087eba0d8359f1ad1a23b8a71e630
GET /img/gamomat.593230062.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9eXx62utyjOklLk1jXWDy0c4RW7MF4guDOprTs%2BogTAV1dmA9kkyQCvNM7LGZ2dxEfVy9gqpDg4fq58KcrFjBsfyBXVwu1pO2ah1NyI6CSd4FlAp0VXTYU2iFc%2F9hQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdabb2b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playtech.cecac3222.svg
172.64.206.3200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/playtech.cecac3222.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2595), with no line terminators
Hash 54cb545ad750e3e670cc7cfaed81c2d4
f808d9b539d13d64c4b405da4dca9b0db732b87e
2bcda89b73c859c34d62c330205d603cb247ae31b00e987f3c3bfaaa3ba2a64e
GET /img/playtech.cecac3222.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-a00"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 434298
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ikPz0dEoR4z4x0uxpZaFzg0V9Fj8egES3qUNhzkiRG2b4Vt5d7XO2cjQ5qCUQku3GbHAF2mZbGh3vPpWyOiQoCSFGXaE%2BQRjMgp2xeUEMdDJC2DveK7qwDLe0YZgu74%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/relax/c_0e2f5290de2c17f48fa6ccb3951b8241.png@avif
172.64.206.3200 OK 5.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/relax/c_0e2f5290de2c17f48fa6ccb3951b8241.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 5c4ad94e3ac6f3c1e4918b04fab8ffe3
f00e1da05ea005dae4cc0a0e1c59115ecb48de80
427dd60b3458231516b2207e58a753f330869c6f8cb5eb4d82f5b4c853e8c23a
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/relax/c_0e2f5290de2c17f48fa6ccb3951b8241.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5036
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_0e2f5290de2c17f48fa6ccb3951b8241.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYyNjE2YzM2LTJkYzIzIg"
expires: Wed, 06 Dec 2023 05:47:36 GMT
x-request-id: DSyXvdiIH28zAMb0zi6L-
x-cache-status: HIT
cf-cache-status: HIT
age: 403882
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=czJWwtMgwmCHPX1NYrrhKksYideZO21BPl9P%2BIU95W2MDGZkrDwNU3yTOKEVp6je2yZ%2BqViFQWlsmHLETdlWVT1kwVtfa4agTjih%2FUk4wVt%2FhPhrMOYjmpP7OZtBbmFYdIThEAfwzho%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdefd7063b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamzix.c753c377b.svg
172.64.206.3200 OK 3.9 kB URL GET HTTP/3 1win-cdn.com/img/gamzix.c753c377b.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4017), with no line terminators
Hash c9bdfac4b8a9fec4171e1e4eaada52d9
e0ecf83a680f3cb4750ca30306d444bf25e8a890
a9f4f158614d42eb732421ef41983f0cbfe1f29e95101bd315d0b3d238f1d21d
GET /img/gamzix.c753c377b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-f3b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3fy4iM8%2FR3znxWtA%2FC1a1lTj3UYGStFsz%2BtNz1w%2FZWHZmvj5HSIc%2FFv4yow1pu2SeTblcMnWaoTcuxNPkVKOjXlqNHs%2F1kdJkdVaYakxGseX3RoZdjl2CKZuCXOmgXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdabb2f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7fbf0d2d-460a-4ea2-9d2e-7a766b04496d.jpg@avif
172.64.206.3200 OK 9.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7fbf0d2d-460a-4ea2-9d2e-7a766b04496d.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash ea2659a3522653dc847cda34b94c02ab
02481f7efefb803964dd2030390ea1bbcbc7b89b
0a0a7a621f3c633fdc7128cca9431d06205daeb54522ad4453a6d43c388ea408
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/7fbf0d2d-460a-4ea2-9d2e-7a766b04496d.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 9345
cache-control: public, max-age=31536000
content-disposition: inline; filename="7fbf0d2d-460a-4ea2-9d2e-7a766b04496d.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzZWM4NDVlLTU1ZWQ2Ig"
expires: Wed, 06 Dec 2023 23:05:41 GMT
x-request-id: MJtTlNYBf73JkwvNE_aRy
x-cache-status: HIT
cf-cache-status: HIT
age: 337607
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DHunT8S79U9HCQIkmyMGc5PisUHvd43sjNLA011IeF9AYMHsmh5ofD1hsm%2B%2BiepTKSQuZBjhVnRvzzi1LECXvqxRakvbpWTo5kKwHrujmCdgA5Uk3xhhiE7a1gMTBmC45kfh8CP3rmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde9d3563b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/ad680c70-00ce-4a88-a716-68244dab6b8f.png@avif
172.64.206.3200 OK 10 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/ad680c70-00ce-4a88-a716-68244dab6b8f.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 7da8bfe897e1d4799c9ca01c2846b079
c0957fdad968f72a43dbd394c8c53e112d19bbc0
a208bef6ab26f2c0bd615d6cbd3eb3fdf899a5543e4b96aa440454c1f07a43d5
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/ad680c70-00ce-4a88-a716-68244dab6b8f.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 10177
cache-control: public, max-age=31536000
content-disposition: inline; filename="ad680c70-00ce-4a88-a716-68244dab6b8f.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjI2NjgxLTZlZGIyIg"
expires: Tue, 05 Dec 2023 13:43:26 GMT
x-request-id: YPbCyu40Ajx9OkHCQBZdI
x-cache-status: HIT
cf-cache-status: HIT
age: 481798
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Il%2BjhUyTURFYhTG%2Bmvk71VnvGK33vExyfltVzqjR6arZUpmk2zOY7jtUTMxukRsZh4BGSSEVAJuCd4KrECj4KvIhvtDf8g9nlVLOrTqtUv67skB4lEZLCR2l3MSwgWiwh%2Fe%2FP82lJ%2Fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf1d8963b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/fundist/7e940a4a-e73b-47e2-9b81-4bd86a081bfb.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/fundist/7e940a4a-e73b-47e2-9b81-4bd86a081bfb.jpg@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/fundist/7e940a4a-e73b-47e2-9b81-4bd86a081bfb.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1wctks.xyz/img/icons/favicon-16x16-darkmode.png
190.115.24.78200 OK 344 B URL GET HTTP/2 1wctks.xyz/img/icons/favicon-16x16-darkmode.png
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 55101f46ace081073c98f0d75229ae94
384e813b0f35437de99eb269c7d5c76479e20886
e380e9db272a2b59fabadab58a1d0a0ba51fbba121eec2920d4ab7b239b85a5f
GET /img/icons/favicon-16x16-darkmode.png HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Cookie: visit_domain=1wctks.xyz; core-sticky=http://10.233.108.99:80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/png
content-length: 344
last-modified: Sat, 02 Dec 2023 08:56:58 GMT
etag: "656af15a-158"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
accept-ranges: bytes
X-Firefox-Spdy: h2
1win-cdn.com/js/5977.e3e891b30.js
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/js/5977.e3e891b30.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (24996), with no line terminators
Hash 04ec1b8f18fe09e0060090df331558a6
3df99985d97206bae165ad5fc5957f78a595602b
9aba34327a41e55ac9e4c8f9e9680d7d940620a3575b9f041471a9bce1d03568
GET /js/5977.e3e891b30.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-61a4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309522
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v8CHyzLb9Z2uw2u1uwD6e3FgvuXh9F%2FzC%2B4XV9iFcom5gsaxAvJslGb%2BooMvB2NRFFJYDLQ2%2Fry5oPzqaUXLZmp6%2B46wMVwoLReeFJ5XCmBOmBOdgNrOGMNAwmYGKes%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd05e6f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/flags/en.svg
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/flags/en.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2329), with no line terminators
Hash 79e4258317717cae7d54221d403e28d4
85a14a9c6aa03cf4c9ec9e942a06e5987cb61d0a
0b0d98ecb898886bc24f0a6859a7a76034f960374c9914370e69d3ac7467a697
GET /img/flags/en.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/svg+xml
last-modified: Tue, 14 Nov 2023 09:10:21 GMT
etag: W/"6553397d-8ae"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1638806
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UhuxG5Q4bgRwa741c939motph7%2BEah5g0ki1qcMjAP6DlCXat1ebAnBqrgYWyHhLtKFjHrf4AWVA4d2golx4Zcx14V%2FGptSHXWFZSp3RSYoLajd1cCbwA2IqVjJzrZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df2563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/endorphina.20b721ba6.svg
172.64.206.3200 OK 7.1 kB URL GET HTTP/3 1win-cdn.com/img/endorphina.20b721ba6.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7173), with no line terminators
Hash a89aae2f962bcb01ecb8e3ddd113b797
706e09d5fa8312ec4cd3c7ca606ad19edca158d9
3a3f4f70b1c092a12634c8a8fbf3409fa001ee6d9a1eed7f0a3a5cfe5866dd6a
GET /img/endorphina.20b721ba6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1bc9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iveOz8%2Fp1%2Fv59rYNAbhvhifOlYS16A9KCEaTtK6qlvonzJLrtFMOYhLLZGy79T9vdA5p4Y7IqOLm1BCm4rnRoQLS5EHje6fFXR%2FSeSl6ZC0Xiews4mqv%2BnMV5KgVJSw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda8b0c63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/chunk-common.4b923c9a4.js
172.64.206.3200 OK 130 kB URL GET HTTP/2 1win-cdn.com/js/chunk-common.4b923c9a4.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 130 kB (129617 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/chunk-common.4b923c9a4.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:33:21 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-1fa51"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 314890
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dyw4Gq4reDX%2FDBMw9DmXgzsSgVGLyDtt3MG9TbGZ2Em3DNW2fBEwTQwMAxVQaLLQP9YVgOoPuTtQMitACZgJUnlvNO2WnNm%2FjWRzkpexMz0jUL60tziUxJjYgNRImUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccbbac1657a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/img/platipus.dd3b50ce6.svg
172.64.206.3200 OK 3.7 kB URL GET HTTP/3 1win-cdn.com/img/platipus.dd3b50ce6.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3788), with no line terminators
Hash 47208726d4dd191a03af9229fc538eb2
0ef7c3f6b3788794db7709213ecaee1b7558a5c2
b27442adef75a0afbde2ad9cacddd4d871e0a302390e6e860c59d627013b32f2
GET /img/platipus.dd3b50ce6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-e84"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y5la2MugS6QEhhizstb9zVGpEVDRzImxFme9gRFJN0bQvuIec9nmxLUn9wQylIWr5LwT%2B51BRIuK7DrPsG45MhcuA0355xBpUg7kzrjR9XznZ%2FH696CrICGaF4on%2FUo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/speed-and-cash.dffacd6c5.svg
172.64.206.3200 OK 24 kB URL GET HTTP/3 1win-cdn.com/img/speed-and-cash.dffacd6c5.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11315)
Hash 3c62bcde419e822cfa55d45a05fa112d
77631a7cbc25e1d4567b72cc5b8c4acb43c7eb38
feb59050cb394075bb3efee348121151a8a214d673e69b1a3b8021e85a46c5f0
GET /img/speed-and-cash.dffacd6c5.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-5bb7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 427524
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=srg7PdViwSXoYYzrpmhKiYrop13GVUzq1ts19EuS5Vp%2FMZQmNAkFMvZNIVJy2Nrthlr353B820rES1oUov4caD1BKwiT3M%2BRcl2a0jJsR%2FepCBeqJP9btlfaMsFdVOw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1ef2963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif
172.64.206.3200 OK 4.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d5f05284c21b7798248cd9fa99bfd299
bf9b3b55c3aa5508d51c2935e6494a6f91fb21b9
85a15ca1b3ad7e7569214ac1e02596a70b806eccd8ebf2b9fb079ca53986a0d4
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 4304
cache-control: public, max-age=31536000
content-disposition: inline; filename="576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTZmLTIwOWY5Ig"
expires: Tue, 05 Dec 2023 22:07:34 GMT
x-request-id: V-7-HMGFEPeeurTiFsrce
x-cache-status: HIT
cf-cache-status: HIT
age: 431170
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gxMAaggPcpE17XYZENIx60n%2FX7aCthjERG%2BKh8Yt1aBPu3wQEN0s0kQA69XOQXPLMiKzzQ%2BTQWdK5Gkn2tHtcRyqqVwYLnr2Fom6ELwCblerBXSFL5x7R5%2FWCb5jODIXH3pyNqivXTM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde4d1263b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/beter%20live.8751ff763.svg
172.64.206.3200 OK 14 kB URL GET HTTP/3 1win-cdn.com/img/beter%20live.8751ff763.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2983)
Hash b23f70a0c2fd2682149b4d004d91188b
517dcf9bb45c59a0a2c37905cbed75b800421c0a
7fd1374e1892e940097c85ddbea69a0ef6686cff1881dc89b93c6eee33d47c4e
GET /img/beter%20live.8751ff763.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-34d6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JqBPiDpvjuyvZUuoTBz6GohqUUFik7%2Bzx3u4BBchUlLZQ31K3N7iH5gAAgPP%2F2PfpodZ5BwxQ4bKEeO5vUGUSXuIQwJhnyZZJtEHxGgbd6TeN9UNeuHq1NEFpMKpqKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd96a8463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wctks.xyz/common/title?path=casino&lang=en
190.115.24.78200 OK 29 B URL GET HTTP/2 1wctks.xyz/common/title?path=casino&lang=en
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject1wctks.xyz
Fingerprint98:E0:44:CF:F7:BC:D8:AD:7F:C5:1D:66:36:D3:CF:04:FE:33:55:F9
ValidityMon, 09 Oct 2023 14:48:49 GMT - Sun, 07 Jan 2024 14:48:48 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 55d138477f5d21b2864ed51b2aa3b446
f493c01dcf90c45f2334b9ca47839ce0a014222b
456ce42d8f0a396a6549e0fc1e00649162a0391884d40a887f013a53f681f37b
GET /common/title?path=casino&lang=en HTTP/1.1
Host: 1wctks.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Cookie: visit_domain=1wctks.xyz; core-sticky=http://10.233.108.99:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI4ZTBmYzcyOC0zN2ZjLTRiNmQtODJiYS1mOWZhYjdkZWU4MzAlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAxNjYwODA4MDIwJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlN0Q=; AMP_MKTG_494cccfe21=JTdCJTIycmVmZXJyZXIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRndubGlmZS54eXolMkYlMjIlMkMlMjJyZWZlcnJpbmdfZG9tYWluJTIyJTNBJTIyd25saWZlLnh5eiUyMiU3RA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/json; charset=utf-8
content-length: 29
access-control-allow-origin: *
cache-control: public, max-age=3600, stale-while-revalidate=300
etag: "25-bM/5z02X/xOkKbh8eZCiJpcKcd0"
vary: Origin
x-frame-options: DENY, ALLOW-FROM 1win.run, ALLOW-FROM 1w.run
X-Firefox-Spdy: h2
1win-cdn.com/js/8726.232cb7938.js
172.64.206.3200 OK 664 B URL GET HTTP/3 1win-cdn.com/js/8726.232cb7938.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (682), with no line terminators
Hash 2e216c1b879ec285c8c32567174c9af4
e1e1af06fe2299d4a230eb5467395ef6bf3354cc
2e286b2372f85cadaa903f3189b912a18def9e9c561f6b4121af91682164cca2
GET /js/8726.232cb7938.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:23 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-298"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309598
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bo6Bu4%2BWPNvXZm02UadBkDDfj7rKY1tqK0fko7Ap09Ni2C9rrJSYXK6uq4XIGYTIZZvnUeFbYKDGfZfDvMy9DDaaMRW7kjwME%2BiZ3PGNhKXUShG6jXmQzqoZJWxu2iI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd2bf8b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/3%20oaks%20gaming.a6d146d58.svg
172.64.206.3200 OK 2.7 kB URL GET HTTP/3 1win-cdn.com/img/3%20oaks%20gaming.a6d146d58.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2746), with no line terminators
Hash 443b070227be618d0513c134be5b65f2
cea77f63f79f4a2406af9f75e29078e40c69f9e3
99766510c4cf78a018e87ef969b90f738755e653efa66e1b5f2f9e6ab7d41ed8
GET /img/3%20oaks%20gaming.a6d146d58.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-aa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 427357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ug0SH16ro3Yu8i6k8vfq960R16HOA%2FZqKoAZ3jsWgI815cqUcyB%2F%2BR9w4s1F8YaSStF9W5NVDgHx8zKHCPBpHRd%2BF9q52QuPjPfvUg7m5qMrEmMwrHImGhy36zjd7KE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5163b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/agt.893343a61.svg
172.64.206.3200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/img/agt.893343a61.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1232), with no line terminators
Hash 7ad74db93c568d4ee26b28bd127cda5a
4ab7df3219bc8e68824c09c8f758159829875274
0a4c193bc9415878d304a5fc14e1e45c5390cf8648bb3d0c8ee4827663107f2a
GET /img/agt.893343a61.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ygDVbNNvg%2B8XRTXWO6vRJccYLZ9CQS7SlwxdwbiJe93zMQPNFs2YA36Dm89zlNYjv1kzI7%2F6DKxLKcEPk6KqhwDTydv%2Fn%2BZ%2FbjNMCNj9fTg2jnF3p2R%2Fu3FupJ6rBko%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/ct%20interactive.74b20dbc3.svg
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/ct%20interactive.74b20dbc3.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2226), with no line terminators
Hash e709608dd45ff01d7f75d21bc3534e1e
d45bc1ea2a957ab8113ecf7da9564be00207c6d4
d3909007c8efcbb7e2d3fdabe0dde74063c3efcd76d989f83f6d128b89494b2f
GET /img/ct%20interactive.74b20dbc3.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085634
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ko5uBstBmdm5UK5QaUbJA8bZQG8Hj6pzKKrbiAHqthInpijE%2BuJminNwq%2Fa7fJvI%2BAJ%2Fw5U0am5Ej9zbNovhS6pF3TY8eTu1Z05dd6k5l%2BrHam4qoQ8795qgHuH%2B4Tc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcda2add63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@avif
172.64.206.3200 OK 4.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 73d325ad60a2430fcd411e79a8f26aa9
5058a979d78227cd7dc8dceea83d9db2d848b086
13e8865ac8b9156245cbe6ba3206e494b031120430d4aca019e0d14f9ec7d304
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/d5875264-72eb-4341-8f26-a2f885a2851d.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 4695
cache-control: public, max-age=31536000
content-disposition: inline; filename="d5875264-72eb-4341-8f26-a2f885a2851d.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NDY0NTY5LTE2MjkwIg"
expires: Thu, 07 Dec 2023 00:02:22 GMT
x-request-id: qih-Jenz_0p7XfFsvK9Kl
x-cache-status: HIT
cf-cache-status: HIT
age: 341843
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZvRX19aTT4rqv7JqMkDmDVvWrqzTkODPm1%2Bq8mwwF7WNQRXayZ5SLKVUFZfuonyDDLS4uoPHyLiY2nuGTzGCDFxPk3a3OvspiJt%2BTWl66rZkgyot4W1Rw4zBSPBdIxuhA69jLV2kdLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde3d0a63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/76f02797-969d-4f70-b08f-31f45fbc9170.png@avif
172.64.206.3200 OK 5.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/76f02797-969d-4f70-b08f-31f45fbc9170.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash bd2e1ee5fad18b3984bac6ccf9c5c891
22c495a83e9193249afebbe90042462b237b98a3
cade81b5976731fca2171428139598ee00ff85984fbbd90b29d826847ec9f3a3
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/76f02797-969d-4f70-b08f-31f45fbc9170.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 5516
cache-control: public, max-age=31536000
content-disposition: inline; filename="76f02797-969d-4f70-b08f-31f45fbc9170.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MmU4YjExLTMxYTcwIg"
expires: Sat, 09 Dec 2023 05:21:16 GMT
x-request-id: 2-l0n4iA3co2wfdTwqJ87
x-cache-status: HIT
cf-cache-status: HIT
age: 147461
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u5W7I8Bqx6DMD4jEhvui3EiQJWmJAw714wF2JAgXsKTgP%2FiUsVlhG21ypHqEtJKfnc24gdsDtox5bWCBocLLXTVy9kMdDp60jQ2n%2BPcLHIxubISV8pBmLXIJySoF%2FUq1AIYIBDqxT8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde1cf263b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/a61b4985-576e-425e-8f93-9a67452bcc1e.png@avif
172.64.206.3200 OK 8.1 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/a61b4985-576e-425e-8f93-9a67452bcc1e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 57969d890d6062e6307723cd5a6ff260
3019aa52b3563719089c7867f303bb51058e7b52
14c0c957515b7092413c6041de4da6a0568eed41a66565ebb4e5b2761960032d
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/a61b4985-576e-425e-8f93-9a67452bcc1e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 8086
cache-control: public, max-age=31536000
content-disposition: inline; filename="a61b4985-576e-425e-8f93-9a67452bcc1e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjI2MDk1LTZjYjFmIg"
expires: Mon, 04 Dec 2023 06:24:45 GMT
x-request-id: qBvgtrkrALxWPTFjfvAZV
x-cache-status: HIT
cf-cache-status: HIT
age: 580233
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIcRP8H7FLYWCF1hBbRLIFzJwXF8xtu4AvaLLsJhjvmbMqKpjlVSW1P%2FGxDRrddd04o1nOf9IYCT4Mv9SrE3DTvR1%2Fzix75ufLrUgCmGRHIyiatIqUo0%2BxVdSVFloDC83UFw2Ga7oM8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf1d8563b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/jetx.64787fc5c.svg
172.64.206.3200 OK 13 kB URL GET HTTP/3 1win-cdn.com/img/jetx.64787fc5c.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8774)
Hash 0046061bb77d38094cc0f71b7371d406
1fd7894d0117251f1eeec1a343b85532d7864a05
bac9b1ac206602f5369235b21d6373b9b6f7980ff55c4e851d8a40f00db4d0fa
GET /img/jetx.64787fc5c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-33f5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2850889
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5yM58%2B%2F9rS0huZvdqCgtAYtAnYworhXnjJ8z%2FnFNC%2BKgtC0HKD77Y1s%2BfMHbRrK%2BtO%2FzG2vsZerJZlOxSEV%2F8YsS3eKKRrEt7G94AM1%2BGCVWTcL7gHCv1sNfG8o%2B2K0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1ff3363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/amatic.1ad22f1f0.svg
172.64.206.3200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/amatic.1ad22f1f0.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1042), with no line terminators
Hash beaad3ec246cc02d25e05017a1e1739a
391c594a7f9ff5db52bfbd1c41e6577e6ac49dc7
184333dfcbe0cc2997b77991da69552dd91fe8d480186f8a8b76187e11e00a84
GET /img/amatic.1ad22f1f0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-400"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WcZT%2Bxm2QCR2%2BgDTWAFZr%2BnWiURQdfCkGXOad1TkEKL0S4p4kuWnEjZ2HeT%2BymhWDpHidqWr6U8fnj60XQwx8eclM4CMYNiQXfw4nrD2mT9KwH6s2ZKzXwZNai5OmJA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/booming.4b21630d8.svg
172.64.206.3200 OK 3.9 kB URL GET HTTP/3 1win-cdn.com/img/booming.4b21630d8.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3922), with no line terminators
Hash 1deedba785ed7846bb879ac5681429ef
f637eeb28efa4e2fc2c839c024a0b592ea1b60a9
da014348f02d964c192ebad79f7fb8d67220ee284adbb38e09bb1f2a97895ecc
GET /img/booming.4b21630d8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-f29"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lQ%2FnXG4G0qpyxXAlVRuB80aMY3maicNK0dQx6uwJUPs%2BLUE4rFh9QCqCXyQUVbB9NTTt5yTIBYmDgrtJbxAlYZw4%2FrGPopvLdyr0y1MH%2BcVaaXcZtHp0%2B2Z3DvEmXK8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd9cab363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gaming%20corps.5c3f3647c.svg
172.64.206.3200 OK 1.9 kB URL GET HTTP/3 1win-cdn.com/img/gaming%20corps.5c3f3647c.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1978), with no line terminators
Hash ddcf2a0ddef8449807db0b7419c39291
9757b762ac3efb096bd45b869ee4d06565a1e9c2
f03dab28c20b3b25823b4b64bbd27953a463c5e9bd7b5bcfa12930f6793fb1e4
GET /img/gaming%20corps.5c3f3647c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-790"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G6S7hIdAXm0f06bul4vCcPpXp7wUPgKlts38adQdJyz8YB0Wp6Lx1fkLnkE5Yd4IMpi4NvCL9sNQKmwMgh%2Bg1Hq3oRhwHy7HsogZvUUe6alxFrO7%2B3%2Fke0dvVcukAbE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdabb2963b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/c439f8af-6524-4977-94cb-29205dce55a7.png@avif
172.64.206.3200 OK 4.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/c439f8af-6524-4977-94cb-29205dce55a7.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 651259e3968dc908ac1947c3fbca4f3d
c71d93cfae5cf2647fdaf955d63549b8f36b248e
60501739577e3a2917c3ecb6f1c5f3023f79aa82436078a88a1809eb12c41f35
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/c439f8af-6524-4977-94cb-29205dce55a7.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 4772
cache-control: public, max-age=31536000
content-disposition: inline; filename="c439f8af-6524-4977-94cb-29205dce55a7.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzODlmNTIxLTU0ZDM0Ig"
expires: Wed, 06 Dec 2023 12:49:45 GMT
x-request-id: TrgPKB8pHnJ1jZMyCNfNP
x-cache-status: HIT
cf-cache-status: HIT
age: 396355
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B55kb9Z47OhgJCDLW7GPYlSRsjjQD63fJccrC6pA%2FtFVQlumWfNUPr0z8VKgy0SVfoce7SdZegQ64sbzAXbkrK2iZMB4M6M4Bb%2F%2BPLYHkXbVGziCaiLblMqKtbszLYjM2RBwms3Fg68%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdefd6e63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/33700.6c9135ff9.js
172.64.206.3200 OK 992 B URL GET HTTP/3 1win-cdn.com/js/33700.6c9135ff9.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1010), with no line terminators
Hash 7a56ca20c70147de869fb6f869c24757
8ba632a6c326ca6152d0c51a202527013eeb42f4
543572cbc25b63dbaf723d527cdb47a50c56655698f3eae1708b30e881429640
GET /js/33700.6c9135ff9.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-3e0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309592
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2BKnqMCzm51v6H6SUKyh9ewDj9f%2Bvlqt78iBFyAvvmtpRpLKTgpIWI4%2FSo4xYE8UIrn4MGUSd70iNEYHlUCJX0HFy8vYc0wHdcif8%2BSVmnCi0px6AwUYvuyvIq%2B%2Fgzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df2363b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif
172.64.206.3200 OK 5.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 0205590f4a9509c158018e329db4420c
b826e726040a213a2b78d7537de0ae2f9b41e13d
1ff87a32167939f79b46677dd94e9bbc6d5d68a12eb24792dc23da24d3d9018d
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 5220
cache-control: public, max-age=31536000
content-disposition: inline; filename="1da897ef-8952-4c44-b4a8-8da8e13393d0.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NDM2M2M3LTYyM2ZiIg"
expires: Fri, 08 Dec 2023 00:20:03 GMT
x-request-id: tQC2czIs_PBd5GWqHNV_r
x-cache-status: HIT
cf-cache-status: HIT
age: 245678
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BeRcu%2FEFzRJ%2FijItM7Dm2f7ddy4neGB5hF1U9zQpMpiT3bZ%2FsMDfRq7ISQpltohQjH%2F4W49DDcGq4uPkQnELIQfBBUJxYtfHqPJAEJUmLo%2FJEyzQnOeO95%2FCtG8DdDz%2FjCwzuO8ywYE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db963b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/bb9b5891-9f11-4276-b76d-ff58d1d917cb.png@avif
172.64.206.3200 OK 7.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/bb9b5891-9f11-4276-b76d-ff58d1d917cb.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash b8daec83515eb77862912d2eee4fe5b2
2b28d0660714b6446571739eb49a3fd93772b839
f768453cdfc286995b58d24c2a7a5e0b1b751dd6f6f0fa7136fc06597a03b618
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/bb9b5891-9f11-4276-b76d-ff58d1d917cb.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 7404
cache-control: public, max-age=31536000
content-disposition: inline; filename="bb9b5891-9f11-4276-b76d-ff58d1d917cb.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzODBjNjVkLTZiZGJiIg"
expires: Tue, 05 Dec 2023 23:10:30 GMT
x-request-id: 4zvN2_HJj6TJ0V9LI54Cm
x-cache-status: HIT
cf-cache-status: HIT
age: 438640
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ojg5ggOXqDkveJwQ%2FpPdt3YnYHOxpqaXEA%2FMW4zTJcuVmhXIpS0xpyz%2BaCNXhINspHJU3C2eZYc6Ygsd6gZdsqxXrcNQcoTCMrJQZZXKNytUeQu7UtLihK0Wk5OpZ0JEFaZ4IYuft7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7daf63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/fundist/500a67af-3ca8-4682-9fe5-bc4bea718b98.jpg
172.64.206.3200 OK 113 kB URL GET HTTP/3 1win-cdn.com/casino-images/fundist/500a67af-3ca8-4682-9fe5-bc4bea718b98.jpg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x450, components 3\012- data
Size 113 kB (113081 bytes)
Hash a9a923ec9a756cf096d4e26eaa689524
b24487cef637cd985861e3efe57b545bb6394aec
85ffdc8da7e587e51ab8035d8ec56607a4c8d923d703f682a778251bac6d3485
GET /casino-images/fundist/500a67af-3ca8-4682-9fe5-bc4bea718b98.jpg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/jpeg
content-length: 113081
etag: "638a0c59-1b9b9"
last-modified: Fri, 02 Dec 2022 14:31:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
cf-cache-status: HIT
age: 2927976
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bleraK9toIGQBRG8OfsjFn5mKIzACqcjzGoZ0C42a7nJNmPBVOIfL%2FBy20UiomApGleJG2nD0on9r%2FuhUUEVt0gaJsQ7bvwB5E5DC6bRKbiiitp%2F%2BLUyuXBJgutyuTs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce12ec163b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/goldenrace.4bb50c89d.svg
172.64.206.3200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/goldenrace.4bb50c89d.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2233), with no line terminators
Hash 273a325a862af8a6f05811ac5a7c7f29
936efb3df57c80b5ee35a1ebed295fe90ec13145
0e9220c87c66f8eec886bcb17e5beb3242f287ea3099ff14d81e49c41d2c4d32
GET /img/goldenrace.4bb50c89d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-88a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 329695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=25Uy%2B15C1nS1XNmyn%2F5cuFYh4L7iiCiXnzWoVhOxkr54n1mZv8655CZV1QKbt%2BzU%2FEU1%2B%2Fk0QeliAmh1y11FblBSnIO3%2Bh%2BKoZlkztxwm7Uaz2COlaXQjeDcvFd1m8M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdacb3763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pgsoft.fdb9d6567.svg
172.64.206.3200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/pgsoft.fdb9d6567.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1509), with no line terminators
Hash 71eb5806fcdd473839d2654d03c3fd5e
76a63507f2c2a26ffc343182aaa5d3278197ab88
dcf4ddaaf54ac6541b02df2c9198fe4743b219ec65ec8caa67b999e6a07335dd
GET /img/pgsoft.fdb9d6567.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-5a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DdHfLnOE0as2o2SYRHokzPUaHqrF4m5EJ3iZkp0bt%2ByhD1lH48RkA0CnDMsZjh3%2F227vcEHtMU3REVzKJCqXwqiojZbbLg9E0bhzIq3flePg6OJDQVMd96LoXRYTl2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb1b6263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/28852.160372f87.js
172.64.206.3200 OK 906 B URL GET HTTP/3 1win-cdn.com/js/28852.160372f87.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (924), with no line terminators
Hash f97751384d582a6e650b35ebe9d32479
e545afff49a2a354c28392833508fd88ebaa4875
1df0101a9f183c7133c49e126c64e4820760e5ab7d99895d0ee7e6d514810b9b
GET /js/28852.160372f87.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-38a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309595
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OxddA7jpVKNXdPIM77Z4K%2BoRdfODLAdzWEyZJgHXSdnV9qeFKz2XkG9b9TL6EePqnJlMCp%2BnHCS44bDWJ%2BewiKg7RokHQktRrV5%2B4GDEtljuH0O3GtlRKE7CbGKT6ag%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1df2263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/46719.84d0ee868.js
172.64.206.3200 OK 527 B URL GET HTTP/3 1win-cdn.com/js/46719.84d0ee868.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (545), with no line terminators
Hash 8375a4110ec42498df870269f31e79db
d974e51c02dbdc175ffa8d4384b385ecce38e581
b63b4ea04779e05a75b5e69f026faa71ee3601834dc416ce230a65ef9171d861
GET /js/46719.84d0ee868.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-20f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rcIGpr6XjwhQlgxDkWKZvT1uSRgoEeoRcGvofdbmMswiIxxwcCfCoL1tM4%2BRkb6Smn5D0DbxLb3%2FUsN8wfq0FB83GgrS80jWuNXntAoeVQE2audM6F94QuHXnSUP2eY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd2af8663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/spinomenal/7a0588e7-8240-497e-b41d-22e512bdb23e.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/genii.367222bbe.svg
172.64.206.3200 OK 3.8 kB URL GET HTTP/3 1win-cdn.com/img/genii.367222bbe.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3840), with no line terminators
Hash 237593257bbdb3559e06330cf7e76c54
c3e1a90bb3397fff3428fdd71d2a4d7df74ea164
2b84c2a6e55531b52b615ebaba90cd7bb757fe1399e901927b4aba9f1718b097
GET /img/genii.367222bbe.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-ecd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IkCdPcfcBxgMCQBsptw3XX6AZbiwv4cRlDT%2BvnKwTP5tE0mX9oW8LsD81dvVxL%2BLrqRAw7tC42df2jLaRE8QmNETJ0Rk6yKAywJLGruM1o1gkIj9OcC%2B2cfp2o3wuvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdabb3063b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1win-normal.34748aac6.svg
172.64.206.3200 OK 4.6 kB URL GET HTTP/3 1win-cdn.com/img/1win-normal.34748aac6.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4865), with no line terminators
Hash 6a657a7851fa92f791304f1cdb123e9a
ae2def67a366ffe67578bf82e3c47b4f1966e784
8443e4838f78a5ad2efa628846e3337e1cec32b94cfce323eb25f2e97989a02f
GET /img/1win-normal.34748aac6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/svg+xml
last-modified: Fri, 01 Dec 2023 10:56:28 GMT
etag: W/"6569bbdc-1221"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 156583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k3eZdBTU43JAnIIf3ZZPts54uJ7Qcr47IZFj%2BUf3FeEOsINiscIYSkePWMIy9BA95%2F0TyT%2BD%2BEpprq%2BlsUR78HQQxxWP2VuWfHmDzdsl3%2BwGRyPGb2vcmhb5mFwCvq0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1ef2663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/88971.78a663d44.js
172.64.206.3200 OK 529 B URL GET HTTP/3 1win-cdn.com/js/88971.78a663d44.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (547), with no line terminators
Hash 747fc30343cbabbbcd8246b2a4598ccc
9bf22fb112b065a447c3dc013d3e513f7814566d
7970a6d096e6162d9b534b3160178c89ea5aa9c041f6adf5294be76148e09780
GET /js/88971.78a663d44.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-211"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309595
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GUhgwxJNd2M%2FCtfFwzckyepdhg1ktakF5DE%2BbiDyXYYmXE2HwB8jm2BILSF91jgixLV465C6U5scr%2B4ayTfCAk%2FKtpgSJlHWSq0h0IixZP37l1NaqxlVfm6HNBpgvuI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd2af8763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/35967.07f728900.js
172.64.206.3200 OK 958 B URL GET HTTP/3 1win-cdn.com/js/35967.07f728900.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (986), with no line terminators
Hash f101f5dc77f24d2d3912e2c93bc1edc4
49f1e57d6778aad6b5a46d2cfb37ca3211dc6374
ca67bce590a2a7f3283eb1c50196d936b87658532ef3ac5485ba1459ad1577f8
GET /js/35967.07f728900.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-3be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309605
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2Bm2IgSURMS3Tadp%2BolbJGjieSW3deJjSwVHaXnoI3UFvQLpX5AghWWQmFJP45Et5my9iIu9k467RvtUKoDt1A%2FrmOH1CAoU%2BV80ILjfesA2pt433YO10nP4jNC9sCI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd2bf8a63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/7634ad64-eafa-4701-897e-8cf42a96db7f.jpg@avif
172.64.206.3200 OK 5.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/7634ad64-eafa-4701-897e-8cf42a96db7f.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash c78a142d06c8abcd163d7890107ba62f
1761c220e0d554c940c1b0e380b87615047df059
6deb4284a9f8ea9fbf136b93a7cad9a419f773ccc3c2442cedc024d87019a40f
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/7634ad64-eafa-4701-897e-8cf42a96db7f.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 5708
cache-control: public, max-age=31536000
content-disposition: inline; filename="7634ad64-eafa-4701-897e-8cf42a96db7f.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MzhkNDMyLTFiYTA4Ig"
expires: Thu, 07 Dec 2023 08:36:01 GMT
x-request-id: Msddiqvc_WDeqQxyFQbrm
x-cache-status: HIT
cf-cache-status: HIT
age: 327198
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0u7AsvsdaHm8VPkjsh7RvKDuNFXlvhI3inIAFaiPXPjztWKc1u4GcCd9FtdfiBqbR2VuypvPYJC46gZnRsJLPJfoompIrOlyDWVfUIWc2026kv5jzMQCEKl9DRu%2BAI2B1s%2FMfgZSKEA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db163b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/font/SFMono-Heavy-numbers-currencies.a86f2ba4d.woff2
172.64.206.3200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/font/SFMono-Heavy-numbers-currencies.a86f2ba4d.woff2
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 3068, version 1.0\012- data
Hash 16180e033e4755b759ebc23d6ce97ce1
b519a80423ff214e0a8c3ba46e115d86bd229668
add1e33e697e4cd0dabdf17f27835b659c2455c3956e3ca5a462a83d9781851e
GET /font/SFMono-Heavy-numbers-currencies.a86f2ba4d.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1wctks.xyz
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: application/octet-stream
content-length: 3068
last-modified: Sat, 02 Dec 2023 08:56:57 GMT
etag: "656af159-bfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QmsgADrhSYQmt93JZcYVjsHayPKpILgDIOrZ68oJBVKSRWhlr5sJiPpwq%2BaVqExPcXgtLh2tNdUbg%2BJxWlVHPA35THRVr7uv5VBtSFHaqoyWMeuYpR9jm5l0uTl0NaE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0ae8e63b5-LHR
alt-svc: h3=":443"; ma=86400
1win.direct/v4/socket.io/?Language=en&xorigin=1wctks.xyz&EIO=4&transport=websocket
134.122.54.186101 Switching Protocols 0 B URL GET HTTP/1.1 1win.direct/v4/socket.io/?Language=en&xorigin=1wctks.xyz&EIO=4&transport=websocket
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v4/socket.io/?Language=en&xorigin=1wctks.xyz&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wctks.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oLZC2VoiRDv3/WgKfvpLsA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: aMqAnxa64dakeu5kf5oTK0b8WRI=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=cdaaf6cfac09af91; Path=/; HttpOnly
Upgrade: websocket
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/aa6aeeff-a9b1-4385-b23d-30ed547c5cf1.png@avif
172.64.206.3200 OK 7.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/aa6aeeff-a9b1-4385-b23d-30ed547c5cf1.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash a085f2a8ff4044276c09e1456a5d2196
a7eb7d71371dcac3169abd69b274b6b7f86a8425
a10746a6b9535267026a75f9e6bfe413342e11b13d8cd09ede672222f5b3192c
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/aa6aeeff-a9b1-4385-b23d-30ed547c5cf1.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/avif
content-length: 7817
cache-control: public, max-age=31536000
content-disposition: inline; filename="aa6aeeff-a9b1-4385-b23d-30ed547c5cf1.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MDcwNTkyLTdjZWRjIg"
expires: Thu, 07 Dec 2023 13:30:16 GMT
x-request-id: HLXhSDhH4CAENez_30QX4
x-cache-status: HIT
cf-cache-status: HIT
age: 309788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L1r%2B6FQ92a5B7HtLVajC6mGrYCM8lbdLlmzeL5qQ5om8YTwsu87tjSj2fvTIYC5QVFI7o9wuP9cnzbHvCH2x02hwHtS7odWCc1%2FtwpAwElxWt84vEIPyADyw1QeqMexPySaFOTR6N%2Bc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde9d3663b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/44877.b11f4a5f9.js
172.64.206.3200 OK 400 kB URL GET HTTP/3 1win-cdn.com/js/44877.b11f4a5f9.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 400 kB (400106 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/44877.b11f4a5f9.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 02 Dec 2023 08:56:58 GMT
etag: W/"656af15a-61aea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 153119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=89P7keKdKIeeTmy50eVLeUw2CJJO2vXM9nuAsz0KaVn3%2BDi7p3%2B6zWM2XJw%2B2aPeGxQ6b11jLMvnxv21m4g6%2FzKZ5BynXmRZY6IXqx7GkA461Dctj1SU9F%2BoPYsx0FA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcce0cec63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c8fd83d9-aaf4-411a-a659-a326b554e79e.png@avif
172.64.206.3200 OK 8.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c8fd83d9-aaf4-411a-a659-a326b554e79e.png@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash e27efb99644d103c2f2a09f1808988c6
280f386c4dfa577d4baa4703e4a49b58d473b2f1
e8d913c341c74ac8de1a714cfc85ebd263edae738787152417f6017f2b8c4a75
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c8fd83d9-aaf4-411a-a659-a326b554e79e.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 8024
cache-control: public, max-age=31536000
content-disposition: inline; filename="c8fd83d9-aaf4-411a-a659-a326b554e79e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjI2ZjA3LTY4YjZlIg"
expires: Wed, 06 Dec 2023 02:52:42 GMT
x-request-id: LYTpDKrAfEOwoYW_jPWeP
x-cache-status: HIT
cf-cache-status: HIT
age: 415460
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OTcKVNQvAKtfiHE6nn5mYa0k7P6ccpeBM6Em2mLyJNIlDp3mqMV0G%2BZ72HgHWZcugv2LTfquut2Ie7cJPlnuCox%2BgnK%2B%2BS7AfFsSw4w%2BXGxWYeITuL6PNOZeihanDxmaSxOhCzwcysg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db063b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/superlotto.0b2069aeb.svg
172.64.206.3200 OK 7.0 kB URL GET HTTP/3 1win-cdn.com/img/superlotto.0b2069aeb.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7086), with no line terminators
Hash 128046b1d7f6f312cc287763f0c22336
4d2984a448e97d8b6e5b34a4c9fd08dfceb6f4a1
8531767fbaba9dae9a2f659ba50799bef2f9f0c207105bd1010f5e0a12b84f89
GET /img/superlotto.0b2069aeb.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1b55"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pkPZXSKOo7wEi%2Fl6YVkKBZB%2BrAjGQK7JI46VSEeLz9nyCasMQ1UhwtfUlMbh%2Fdz1qImB1roBfw4GUFafo%2BBJuAJ81KdGPxHoxm9gj3urus3B3Z5JXZSBDo7%2F8KMltbE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdbfbd563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/55494.f01d51b83.css
172.64.206.3200 OK 14 kB URL GET HTTP/3 1win-cdn.com/css/55494.f01d51b83.css
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (14099)
Hash f69324b14e3cdf622e4ef6eb2a0ab86a
0cc30e3d91a245114ad96e95ceef8bbdc14f08af
b63a3ed0c2c9652a1bb7b2ba59fa5ddaa834d51808456d83e28cf45c59027021
GET /css/55494.f01d51b83.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-3743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1528360
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bFQIZj8yziY8cOoMbAeHtfNGgIu%2FzgxCHO6ZuumyrXdTQnqIyIAwcjlKJwp%2B2raE%2BB4FDvAvQzqs8799CKsdSl0fFz%2B7H6CaXXCJh%2FAy%2FFvFPT%2F%2Fsu3V0HB%2BpxRuBq8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd07e7a63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fantasma.8f4e2392c.svg
172.64.206.3200 OK 3.4 kB URL GET HTTP/3 1win-cdn.com/img/fantasma.8f4e2392c.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3439), with no line terminators
Hash 2b6e488681e5af743e430cce2f0c2187
5a3102291017d617e6346a59664b1ec7eece4423
f34079a7f0c56e9ef5af475418998e11aa38c64bf4900827c830263eb9e8ac11
GET /img/fantasma.8f4e2392c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-d34"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085633
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PJn9N0s5Zsycmoz%2BjVx%2FE%2BHJcIGxWBhUXUIst7e8ADMovND4oGP7aV21%2Bf%2FPwp%2BsSvKVt8oRjM6WbI%2BsBPwoPsTNO1nt35qBxVOUWIztCjFFvm%2Bv6kFgqPIKklnTRRo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab1e63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/e6dd9f4c-282a-4040-8fcc-256b4d959834.jpg@avif
172.64.206.3200 OK 8.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/e6dd9f4c-282a-4040-8fcc-256b4d959834.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash bb9decc2b4badd49ad52aa4c5490641f
34e841e7c61eaecc2bbea02426b3b24a23279eca
ec6a65fb8efc7d0a8b38eb2274531a3067ce3ee981dac9c06cb0a01f035f4ec8
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/e6dd9f4c-282a-4040-8fcc-256b4d959834.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 8386
cache-control: public, max-age=31536000
content-disposition: inline; filename="e6dd9f4c-282a-4040-8fcc-256b4d959834.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NWY0Y2IzLTIzZDY3Ig"
expires: Thu, 07 Dec 2023 12:13:23 GMT
x-request-id: vt-zITcmMTc6GZ7zyVZfA
x-cache-status: HIT
cf-cache-status: HIT
age: 310813
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FozHo6vPq23nV2i7E0QB02W154U49VxlVMkJrL79%2ByNelC%2BnT7OPrzfs5ddP1h90P8ju3YfR8bA7lUQSv5%2BQU4o%2Bd8Wd4ce2D8a%2B%2FAfI7H8DS%2BUD%2B8Hg8KenMH1yE0TUTYvSeldVGbs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7dba63b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/36373.17f191460.js
172.64.206.3200 OK 29 kB URL GET HTTP/3 1win-cdn.com/js/36373.17f191460.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (29147), with no line terminators
Hash 66d5bd3a73efa4c70217786786131786
927e02d67638b30f030b6103728b3373bf981939
e2c875680a5637309108302317540c06c1f1eb2894b605ee10e742f6c67e51a2
GET /js/36373.17f191460.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Dec 2023 08:25:01 GMT
etag: W/"6569985d-71db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 241167
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zPdTHybmY7rEK%2FuGYMZFrq6HjqG9v801OXCr8TrgyWhupl%2BQ1cmJsrHH1DiJEeXngzIwq19AIilwfPL4DhU1hYqxnhnneWuXnjWml7Ct%2BIAdtkRWRhHQlt7BbCIQLnA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fccdfce463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/7mojos%20slots.c8ad63b4f.svg
172.64.206.3200 OK 9.0 kB URL GET HTTP/3 1win-cdn.com/img/7mojos%20slots.c8ad63b4f.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (9119), with no line terminators
Hash ee7f334d83ac78ee94aa7cb499a7d252
acaf3f1ec2dd643c920f036bceed9922c4398d9a
eef20c5785f1ea1445bc5d54982011d999ae577a2d354eb7035465336ad1555b
GET /img/7mojos%20slots.c8ad63b4f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 09:48:31 GMT
etag: W/"65685a6f-233d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 322529
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ZaXGKuvGrdvK59JN4Gp5XgSoNHQQwFD0w%2Fs6jyPZw0nzDWOyySHo1ckW819E2VKh2SNzWPobl5hzmbuk2ircZges8VMlmjCpjiaYSme5x9k15NIWrDhf56DsAJGEWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd92a5c63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/13279.cfbda3616.js
172.64.206.3200 OK 10 kB URL GET HTTP/3 1win-cdn.com/js/13279.cfbda3616.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (10424), with no line terminators
Hash ef8231f7989b707bb4f52a9fdd7a33f8
277282613884035735405fda525cca036815ee7d
13a3537a69aa1260014ee844a7fdd245b5b4a89e7427525767da71d18d2cc60f
GET /js/13279.cfbda3616.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-28b8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 314872
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S7e3Ze%2BOPon4EES5UXwHecH5uI9k%2FKUHC5%2BEkPP%2Fq8HwUlHF7EJ9wWONte%2FjQC1M5udl7ncQDEDW8Rd71ICZYnoMDsljoSRRERk3kh6oxpTYC7pY7FFODkb0VCUvUdU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd06e7563b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/lucky-jet.f927485da.svg
172.64.206.3200 OK 4.0 kB URL GET HTTP/3 1win-cdn.com/img/lucky-jet.f927485da.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4016), with no line terminators
Hash 46387a9ff4a17ec246107df243120bfb
f662dcb3e5629d8b9dcd169f73e31f95309bda40
b3cffaeaa51fa3689ab70d930776d565a90ab7caaaace2f1cac5f67cfc13205f
GET /img/lucky-jet.f927485da.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-f8d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1907550
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e6vkP3Zb3NnfME%2FyWi3nHTdJTrinnAhpTMwt4%2B00loz4NWaZBNGnsOe8at6y1uUsR8sieqS0RCXBljwdXNGKpRFIrlXHT6UGMu3PSUl6KeD7LavZsrbO4%2BWQ15YA7e0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1ef2763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/retrogames.bb592a878.svg
172.64.206.3200 OK 7.3 kB URL GET HTTP/3 1win-cdn.com/img/retrogames.bb592a878.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7437), with no line terminators
Hash 58c68473b3dd3ae2f45e31560e366dbf
577748dead61e9aff6756db3bade90442cde170f
e4305fe1e258b0357e17b29825d8fcf96aa9e60f453118e4a69066eb2c955207
GET /img/retrogames.bb592a878.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-1cb4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 519249
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XIyLyrbnqzP3ql2%2BLZQcA%2FyS%2Baf%2BRZxkOD6ITXtlwGZ%2FenRLavGSiA3XfQC6rKVd52l9ez2NJLq7yHJu%2FCvEndrV6g9AXEw9j9XKegnpizgsodBuqFehbLgwvCDnDt0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdb3b7463b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/relax/0deaa1f8-0fe2-451e-bafd-d0cf14915ea9.png
172.64.206.3200 OK 442 kB URL GET HTTP/3 1win-cdn.com/casino-images/relax/0deaa1f8-0fe2-451e-bafd-d0cf14915ea9.png
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 600 x 450, 8-bit/color RGB, non-interlaced\012- data
Size 442 kB (442019 bytes)
Hash 7c297a7b693a06592b142d285c42ecd2
090c1892e98a2d9382ee0878345440245258f02d
aa9f93835d2a6c5bc9425fbac34fa7815f3fda227e643ee44d2d1e81d604d0f9
GET /casino-images/relax/0deaa1f8-0fe2-451e-bafd-d0cf14915ea9.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/png
content-length: 442019
etag: "6568a94d-6bea3"
last-modified: Thu, 30 Nov 2023 15:25:01 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 302616
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Da7Vgy0cTNOnsatdtvThcbeWF19I8fumnu9%2BPuEUBCiB961g%2FhiuP5ocvaArB8Ccrb3nu3pudgWn%2FrD%2BCtssA2%2BmTxgJYFTwltIeZQIQEzZW2C6w81JP17XkFR%2BtIf8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcde1cec63b5-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/softswiss/f7cbae0d-9722-4748-b68c-643da215507f.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/softswiss/f7cbae0d-9722-4748-b68c-643da215507f.png@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/softswiss/f7cbae0d-9722-4748-b68c-643da215507f.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/apparat.f7a706d8e.svg
172.64.206.3200 OK 387 B URL GET HTTP/3 1win-cdn.com/img/apparat.f7a706d8e.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (423), with no line terminators
Hash c263fae5892b9bdd3fa5e761a8aeb723
4646d9080fe51e04962c1f2dabf13119c6d71a41
2a333baf6e1f1e4d92fa73faae466563009d96e860c1423519b890b68153b70d
GET /img/apparat.f7a706d8e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-183"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G8mWkySppBzF01iqbtPvdE2ATSykOA1TsxCA4kMpW1N6PUJ%2F8dMi3KrzENjygSovtQ9MoE%2B0AsF3pxz4uZgv7ft65oWmu2Hy77Dr92hTr5HkkBZzwto8kZy4h0lG8RI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd93a6b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/softswiss/43f818f7-906a-4a42-82d1-195e7ed05712.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/softswiss/43f818f7-906a-4a42-82d1-195e7ed05712.jpg@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/softswiss/43f818f7-906a-4a42-82d1-195e7ed05712.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/evoplay.cfa676ca9.svg
172.64.206.3200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/evoplay.cfa676ca9.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2620), with no line terminators
Hash 7b4d8b1998ceae4f1e4defe0e5b322a9
b60d4fa2033a28349d7920647907368835ab514d
ba06d2a9476e9302fb1576b656f6c522ada52d31d30e9461649e874207ca18bb
GET /img/evoplay.cfa676ca9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-a24"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085633
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yFa1pedRlF%2FwUh4odvCvEKbun0dTuRCgmY7HII%2BnaBBFBYf3T5TnGhYiMo%2BBnZcisN74gHywQPKR8WHXBaN7ahORp%2BNUz50kXEN%2BJE2JyXjOfiwDOSU%2BQ3k8u4wQ86E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdaab1b63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/habanero.92654c79c.svg
172.64.206.3200 OK 3.6 kB URL GET HTTP/3 1win-cdn.com/img/habanero.92654c79c.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3653), with no line terminators
Hash 9d25ca67fcccda561c314873654994a8
0e5592059d8c6114a25d0affd4af7e50e44d36af
e43f0e0abd0ae12393dc2b91c459fdcf045669e63be099f9cb44cd37904bd761
GET /img/habanero.92654c79c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-de9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 417868
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u%2Brrjl6RxNIxx3g8zZWb%2FDdGYHdPRTLnZLVakvJIdt0xTmTCDXPHmOjiC77t7BRnI9p%2Bml%2Fyp5js1B%2B5%2FrxRXCDnO6ArJSJeO%2FXSFN5SMlSAMT5sT5BpK3oHO650cM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdacb3863b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/aviator-game-logo.2fb50dc03.svg
172.64.206.3200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/img/aviator-game-logo.2fb50dc03.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3077), with no line terminators
Hash ced188fd368f5c8439ebd4398c9c9315
3b04cd5dfecda2e4b27b203dba4a6cef1b7890ea
82811dea95287317cc83610df97a7bc61db4783bd43ef75c8131c497f7868ef6
GET /img/aviator-game-logo.2fb50dc03.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-bfa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2754169
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UKEa0tQyb8921pN7U3%2BiYEh3HTlwyKXfeRPqrxKN2RZR%2B8Y5QQUQKGYKesnadOSxjeE1cCRtS331%2BN3mtb8TrARkDospcvaO15s6Idsse5vDboFqTgNfDfwj5QY7eNI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd1ff2f63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/fundist/4ee0313d-df56-4596-86d1-cd2d844c8574.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/fundist/4ee0313d-df56-4596-86d1-cd2d844c8574.jpg@png
IP 0.0.0.0:0
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_medium_2x/plain/https://1win-cdn.com/casino-images/fundist/4ee0313d-df56-4596-86d1-cd2d844c8574.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/js/42028.4c2194376.js
172.64.206.3200 OK 618 B URL GET HTTP/3 1win-cdn.com/js/42028.4c2194376.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (636), with no line terminators
Hash fb0124c3fec86e25ab15a54b7b822670
5fe934c83efb17ca9fed23a87dff73a97e900cac
a67041901add648915a03e2d58b1c6ebbab150e1534812b70066de2a4a127f14
GET /js/42028.4c2194376.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-26a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 309593
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ckA4mvz1Rlp%2BV1xEKHA86K6OxOTPfqogqJeo5YpsFbJAbeb7ukDnIKmn2QZ1MlXaxSM0rJgeSTkJC8WZ1vMjuckiKxeBSsbqmg%2Fo5x4nStJEp2U8RciGpARWTukLffM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fce0ae8763b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/90206.1cb37ca3d.js
172.64.206.3200 OK 12 kB URL GET HTTP/3 1win-cdn.com/js/90206.1cb37ca3d.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/90206.1cb37ca3d.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-2d08"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 314886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KeRn6tyW%2FTDVpsmEMjcQDnRweZ3T%2B5vH1lyvpZ%2FnNJAFwxF8%2FboUmjfYBZ8g6%2B6dYN5kkXcW3MhSqX1dnjpYTxfI10Fm73JaeBmxvpsqA54WwG1jJSdLAgY6ufKtZEs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd05e6d63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/northernlights.45b12b0bd.svg
172.64.206.3200 OK 3.6 kB URL GET HTTP/3 1win-cdn.com/img/northernlights.45b12b0bd.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3706), with no line terminators
Hash 893a9ae8405d34b9b1d03ea24a26ef5f
e5773a899133b0c0e595c0f59f809418138283a6
33a6492cee38421f4652ad562e4f1cf95ed567bbfeec90208134277328971030
GET /img/northernlights.45b12b0bd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-df4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1085632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YIz1EsmbgWqGIvri5WMbl%2F6E7%2BtY5yLrjt%2B6HZUuz4rjbY3H9vL00NLoCdFixaIYTw0fULgKSPI%2FztksDVOrNVcygV%2BbVXPqVNOT8tN9ei0se%2BWZz3RuYjb682KJ2oQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdafb5663b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif
172.64.206.3200 OK 17 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 151bc0973a888c1c3abed902f5e7d9af
5e3e6c76c81b2891ce6d8001a6cd73b267e6bd66
e7ca152be70af106f7ab79894d653efb6cfe72050652b42883d3878f2783fccd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:25 GMT
content-type: image/avif
content-length: 16569
cache-control: public, max-age=31536000
content-disposition: inline; filename="0e2d11b9-786d-4e45-8265-542c38fc3575.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjNiNTQ5LTE5MzM1Ig"
expires: Wed, 06 Dec 2023 05:45:26 GMT
x-request-id: hluxxE3SKrPV25mtuxxP2
x-cache-status: HIT
cf-cache-status: HIT
age: 419997
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=prwDQTKJxRd1IrEeq9x4QwKPsF%2FUKLRk0Keta8Xkqa1aF0jaY7glthF1SMZMv7eYCQLM7agksN9VN9YzCWdyOZD2FMI8okLdSNiz2c3tWNM%2BtvOVE0NKuqi8zGPKJc1MNOW37IPmzYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdf7db563b5-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/71620.105f168ae.js
172.64.206.3200 OK 25 kB URL GET HTTP/3 1win-cdn.com/js/71620.105f168ae.js
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (25292), with no line terminators
Hash 80e990999f5e8612c63cfac7b104847a
64319e36f098ea6276678f6e53381cd55cb476ff
9d45263594bd87481bab153cb56b60da356a2eff007137a7a13d0f8fb4cd4085
GET /js/71620.105f168ae.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-62cc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 312591
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vx1xUrpy4UBpisZwcbbDNw5F0SoUC9oeSqrt9YOx5w6VnVannM%2FLyrRdnekplpYr28scdARO3t01kGILTtqZg%2FiNyeWIcHMelHjnbbSprfpYcSmdbtYqYPo2b0L9bKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcd08e8263b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/zillion.c0e3dd6f0.svg
172.64.206.3200 OK 684 B URL GET HTTP/3 1win-cdn.com/img/zillion.c0e3dd6f0.svg
IP 172.64.206.3:443
Requested by https://1wctks.xyz/casino?trid=onb_rnd1_br_test
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (702), with no line terminators
Hash d9e09ca4e933fc8dabb60c1335cb7cd6
37b3bb2ea200f88ae0f7c681547dfba6fcce1449
fb15bc779be9be33fbb41082ce8c6defe5cbeb6273b2a3cf620e40ef4416c177
GET /img/zillion.c0e3dd6f0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wctks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:33:24 GMT
content-type: image/svg+xml
last-modified: Fri, 01 Dec 2023 08:25:01 GMT
etag: W/"6569985d-2ac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 241157
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G2zC8J91vfaKdB0OArBQc0v7Ea8C8skbBQ%2BtEyCoMAOy2uWn5Q0GPE0G3aIkOcJeWun2xEptNMlYBjcWX9I1%2BnbjuMSGmtT565E6Yt3EodYTbGrqKAW4GCT9HX702k0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300fcdc3bfe63b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400