1win-cdn.com/font/SFNSDisplay-latin.50a4eaff3.woff2
172.64.143.26200 OK 33 kB URL GET HTTP/2 1win-cdn.com/font/SFNSDisplay-latin.50a4eaff3.woff2
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 33064, version 1.0\012- data
Hash de175cbf569bb3ccf1f761c845cbd896
8d93663b858bae157ba5fc40e1400177104d71bd
df3772666587111462634070c47969ad9687bbf80d0694bb2e6c33be39434d68
GET /font/SFNSDisplay-latin.50a4eaff3.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1w-astt.top/
Origin: https://1w-astt.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/octet-stream
content-length: 33064
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-8128"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n9e6ZqZeALuujqPsQQxQIamcqhdWUe6LsHGnjlWX608zhzcr8%2Fjw1E6TxYJeJcqz2skVoVpyN3HpbyY4xeatHYx2LGmTDce5nSdkmMdValipHi5c%2BQULt51nKcoD5dw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e515ffe7779-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/font/SFNSText-latin.f09aa5229.woff2
172.64.143.26200 OK 44 kB URL GET HTTP/2 1win-cdn.com/font/SFNSText-latin.f09aa5229.woff2
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 43512, version 1.0\012- data
Hash 426f20bb65ea80d35f3f2a999d5d7d1e
85f211a450f26d7f0822d718fc61085a506fa455
06e02d3d2d01bb2c88786b0a2dd2d692f6659c0159ec4754f7db49c12e03b0d6
GET /font/SFNSText-latin.f09aa5229.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1w-astt.top/
Origin: https://1w-astt.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/octet-stream
content-length: 43512
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-a9f8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4RUurUaMcKIn%2BZO%2FuwA3smKWfhXiQE0CAQREFdt7%2FWewWrnikfnN6ZPDIr6CUvpIrK4z8jQIZ1TgSwtH53%2BXdRa4AF%2FnIyfk8UkkfR4UKKzdRSFqNLXlA%2BkjsfM3Qns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e51c8b57779-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1w-astt.top/affiliate:link_visit?visit_domain=1w-astt.top&sub_ids=undefined
190.115.24.78200 OK 15 B URL GET HTTP/2 1w-astt.top/affiliate:link_visit?visit_domain=1w-astt.top&sub_ids=undefined
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /affiliate:link_visit?visit_domain=1w-astt.top&sub_ids=undefined HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1w-astt.top/
DNT: 1
Connection: keep-alive
Cookie: visit_domain=1w-astt.top
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: undefined
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg"
set-cookie: core-sticky=http://10.233.94.243:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
X-Firefox-Spdy: h2
1w-astt.top/img/icons/favicon-16x16-darkmode.png
190.115.24.78200 OK 344 B URL GET HTTP/2 1w-astt.top/img/icons/favicon-16x16-darkmode.png
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 55101f46ace081073c98f0d75229ae94
384e813b0f35437de99eb269c7d5c76479e20886
e380e9db272a2b59fabadab58a1d0a0ba51fbba121eec2920d4ab7b239b85a5f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/icons/favicon-16x16-darkmode.png HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Cookie: visit_domain=1w-astt.top; core-sticky=http://10.233.94.243:80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 344
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-158"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
accept-ranges: bytes
X-Firefox-Spdy: h2
1w-astt.top/common/title?path=bets&lang=en
190.115.24.78200 OK 29 B URL GET HTTP/2 1w-astt.top/common/title?path=bets&lang=en
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4267b7543fca3b994865ed0ad3bb3200
6c53f8744aae64519fdb6f9d6ba30bab73da6106
c07b2c0a515caf1306fb4d9366fab5758253eeadcf8c0414cb44ccd48f82e59a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /common/title?path=bets&lang=en HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Cookie: visit_domain=1w-astt.top; core-sticky=http://10.233.94.243:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJkMmM0NThhMC1lMjJmLTQ5M2MtYjlmNi02MWU0NWI4NzhlNDQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAxNzg3MzU1Mjg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlN0Q=; AMP_MKTG_494cccfe21=JTdCJTdE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/json; charset=utf-8
content-length: 29
access-control-allow-origin: *
cache-control: public, max-age=3600, stale-while-revalidate=300
etag: "25-bM/5z02X/xOkKbh8eZCiJpcKcd0"
vary: Origin
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
X-Firefox-Spdy: h2
1win.direct/v4/socket.io/?Language=en&xorigin=1w-astt.top&EIO=4&transport=websocket
134.122.54.186 0 B URL 1win.direct/v4/socket.io/?Language=en&xorigin=1w-astt.top&EIO=4&transport=websocket
IP 134.122.54.186:0
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v4/socket.io/?Language=en&xorigin=1w-astt.top&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1w-astt.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jAfH8GTtroagfyiPHKkW1A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: cu09UBG2PCNrofIB7Z7ioVT9M1I=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=c950f3221c09bf70; Path=/; HttpOnly
Upgrade: websocket
1win-cdn.com/img/present-with-light.bd57fb068-151.png
172.64.143.26200 OK 6.7 kB URL GET HTTP/3 1win-cdn.com/img/present-with-light.bd57fb068-151.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 151 x 161, 8-bit colormap, non-interlaced\012- data
Hash 6e2f4fff39b3a495fecefe5fee863c51
d358f1c8d7fe7298feea325c7ea6d145a3634026
4800fa860802fd0e46629776201afccd5adc1bf6b8b5a45a5e7c46d8d3b2a690
GET /img/present-with-light.bd57fb068-151.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 6732
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: "656893ea-1a4c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 388294
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UL7qBi6h3dQkwAujFvjgOE%2FRTGZyYF1Po4ErY26Yf%2B48cOJ8%2FNzHsGhqP5qShC1fCntOCgQOO2%2FgWBghwatkoNMAt52%2B2pj6gafl8J8AqAlCrQdkyZL8m%2Fy3o63kV7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e574a5253a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
172.64.143.26200 OK 194 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 362 x 429, 8-bit/color RGBA, non-interlaced\012- data
Size 194 kB (194363 bytes)
Hash 3fa3eee2dc5421a36ff30dd2007d72ea
05a782d268b545b6556a2305a240922c94822326
00167ec87e61893b4c74daec9f3851ba9a7439cff029bf56a440cef7df9d1ebf
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 194363
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-cashback-casino.png"
etag: "bYO6A3TkrGzIprX68BfyOBGJEQnSmCYqqMK6NzP2zdM/RIjYxYTRlY2U4LTYzNWI4Ig"
expires: Fri, 08 Dec 2023 01:18:47 GMT
x-request-id: E_qqWLW7Z72AsGAuUkgVD
x-cache-status: HIT
cf-cache-status: HIT
age: 368415
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C4KhmXnvXDnj2LC88PpbQtuPQYUVrwRU1Z3kOKY9IafVOIjYYVgdoflLpZ%2FEdZSubBYfFtz%2FemCWcvI6wqR7RjpvKiyt35N0v83X%2Ft9HIelgQ2n%2B2IPzGnuwt%2BVNxc%2F8SY8J2Fq%2F92c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57fb3e53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
172.64.143.26200 OK 170 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 362 x 429, 8-bit/color RGBA, non-interlaced\012- data
Size 170 kB (169712 bytes)
Hash e1b176b9789ec5c9cabae3ed071a0e07
e123c7a520fad8e5c57b4e9f3692711a27e3dea8
4296afa9913dbe8551dee74e410071d2e5b04be41a744898410525c45d19b230
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 169712
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-deposit.png"
etag: "bYO6A3TkrGzIprX68BfyOBGJEQnSmCYqqMK6NzP2zdM/RIjYxYTRlY2UwLTU0YWIyIg"
expires: Fri, 08 Dec 2023 06:32:52 GMT
x-request-id: qNX34hMP3HtUsrYJu0d_0
x-cache-status: HIT
cf-cache-status: HIT
age: 371038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MLHRTtQp3vby%2BSJuvGNHWnZ6uiqj9XbKWzBJkrxW7eox2VrO86ynXqjqp2ee77IYq8Khi6dQQWBHMh6YS0bJs6mJZYbJXZjRg86ABuEHclQxAGaJ3eXjuf0RA95Yagch9sLsGXgTmhc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57fb4153a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/home-poker-banner-bg.486a9e6a3-600.png
172.64.143.26200 OK 21 kB URL GET HTTP/3 1win-cdn.com/img/home-poker-banner-bg.486a9e6a3-600.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 600 x 295, 8-bit colormap, non-interlaced\012- data
Hash b7c053087a575f09f60b2bdb1fa8bd46
12062e57c0509fa77d34405134d1ade0044fcbce
f504b2bfd476b2986860328e018348eecfe83de4fd6757071b28b1cd646cc584
GET /img/home-poker-banner-bg.486a9e6a3-600.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 21066
last-modified: Thu, 30 Nov 2023 08:24:37 GMT
etag: "656846c5-524a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 452302
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cj6qwMqEyvZv6of04wDs6sVXISZDxdWMbRgImqPDeV7gfjS3JQ6nEmB2BbMgzRt%2B%2FOzeEbvW0dUnkU4x5hCaL084FS8ZzqU2ISxFheYJj6Muuz4foScBKndKLdlwFHQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e580b5553a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/free-money-link-image.4433e4971-120.png
172.64.143.26200 OK 6.3 kB URL GET HTTP/3 1win-cdn.com/img/free-money-link-image.4433e4971-120.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 120 x 97, 8-bit colormap, non-interlaced\012- data
Hash 8c77c77c33189721a876fefeadf5ca83
0b197aa9e55fe824b28e55b9e0591f8631b6c3c8
b2a4295182c1f7c9619a4d2f842be12f4cbc6c4bb8d2ea607f06ff3bc4099486
GET /img/free-money-link-image.4433e4971-120.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 6292
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: "656893ea-1894"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 387620
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zwZ7BO7qekkWSie0KjdxEpCdC7yp763UUehliIwLxzE0Qt6AeOC78G20orLdFeeNxB6xdDmrbjLBwNSzQTFV%2BOGhopiZIzomav8RLc9R1hcyhrnka2yBNUrlkVOni%2BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e590cbe53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/8653.70c34138e.js
172.64.143.26200 OK 5.1 kB URL GET HTTP/3 1win-cdn.com/js/8653.70c34138e.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (952), with no line terminators
Hash 6cb37362c9f47f9da06554dee435ff92
e34a75d99c356fe77ecca00e4bf6ce46fbe51e6c
8c951bf88d9566dc954964f5498e4acc49f3080391c11c96500964f87ddf701d
GET /js/8653.70c34138e.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-3b8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 435978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y7zySICnQ2mrB%2BxN51jI1GQbBcx5f9tjTmZ5259GEOQJXufzSNUC0Hpc4IfecSDhJ10S2WN%2FftXQLYrs3%2BELfB2osRTcdjiy0Bd2UloNNSrlZ079KYd8fSNz0jlROh8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e586bf053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-roulette-frame@2.76ea5a241-256.png
172.64.143.26200 OK 30 kB URL GET HTTP/3 1win-cdn.com/img/sprite-roulette-frame@2.76ea5a241-256.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash fa83f73358ed73cbd8a0faf0d8e6c019
586b95f1e5e1945abd0248e995f79274463c1cd8
ede3848497b96e7defd4c5d53133cf2e374487411186a66a6146191ae5692f77
GET /img/sprite-roulette-frame@2.76ea5a241-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 29770
last-modified: Tue, 07 Nov 2023 17:21:12 GMT
etag: "654a7208-744a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2369825
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ND%2FHxSh5Svr9yQyDjbrnQHJGnTs5%2Bkaed6%2Fx07mUhohPl7bKXSF%2FJOnS%2FUHx2iVjgenSQICDDxnOBRBhyZK9ITuVXWBrE1%2Bx%2FNl9gfV6scjjsL2NnKda%2FWQadd9LpMs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e594d0653a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-social.5fc8577bd.js
172.64.143.26200 OK 23 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-social.5fc8577bd.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (19567), with no line terminators
Hash 31665382a39cb2ef3044c2571647422c
211ae9d52e1247b14290d4e57e7c0ac2c48fbf34
85646f7ce55d666ef7f5b856992f4720a6d79f181035246bbfa216e37bc9ab22
GET /js/icons-pack-social.5fc8577bd.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-4c6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Js%2BrQ6znm2pPKqmpZ9Asp8no4BIYFB8kOg6EUOAVVB1j5rOU0mDWhTT%2Ff7waWXsHYBSZKYfew57h%2Fi7Cvlv7DvDLoqaG8cQsU2hu35bIwVTJtlsAya%2FnZKOOriK4dqg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e588c0453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-home.401c8301f.js
172.64.143.26200 OK 359 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-home.401c8301f.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (18922), with no line terminators
Size 359 kB (359235 bytes)
Hash 325c4a59d9bc91d434baa4a7563c38b4
070a43d12a678b20daf2851076340bf4b595d5ff
da9eec33115c64c998ab64b58d507a763696e716f0573c9dab499e978e599edf
GET /js/icons-pack-home.401c8301f.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-49ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yXZIRAfX74cYi%2Bb1cu%2B9HCqCl1PsLjsSJzhVSUVHgFRXJViH9z941lEyxLLAFo4pWIajX4vYt%2B7NpQNKWa86LU2ETUSJ%2F8QEw%2BToSiNS%2F2Bzf7ICjLp8%2FPKW%2Bwxd510%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57fb5353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-roulette@2.255074856-256.webp
172.64.143.26200 OK 720 kB URL GET HTTP/3 1win-cdn.com/img/sprite-roulette@2.255074856-256.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 720 kB (719644 bytes)
Hash 344d71695bd0f387fedd84fba6ace2c1
1d37e2d66ab1098072febc0a0dc3769d44090048
7775854f4b641fa2c9f954c79de9d4bd51ffea8b9bc74d8e01768718cc438003
GET /img/sprite-roulette@2.255074856-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/webp
content-length: 719644
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-afb1c"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 603
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DXCVs49EvceB7PLaGPyL9zfYgJl2cCbiUAGbQJaiYJgvkk7OBSsBaMBOYILKfmJ91b0PE1S7v7DPLgM57N1JKs%2F%2BKLXJ6ghj1WICWBT4mh%2BDL6TH8Toz56Ck9Jo%2BAHM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e595d1d53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-dice-frame@2.8e0d70675-256.png
172.64.143.26200 OK 17 kB URL GET HTTP/3 1win-cdn.com/img/sprite-dice-frame@2.8e0d70675-256.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash b5469917695caf597285ce3e08c0e314
8d6b57a1590baf7531d688d5dde729ede7d02108
3353862bc343fe2f92faf7e59595d9aa80d2fbdc90c6677437daf3a9acd84b32
GET /img/sprite-dice-frame@2.8e0d70675-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 17269
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: "6564bdb0-4375"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 634548
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JxXJXrEhULDqz%2Bu0Fc47pitEgPfNpFJbEOmyfmN1CitWJPEfTw%2FNHivq6rmL%2BynOUVoK6P8ulWLD6LCWzMWBVdl%2BxIF4xVRowpUe2J2YMaLwNL9XW5Z62Kki7KhaXQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e595d2153a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/41543.b55be867b.js
172.64.143.26200 OK 430 kB URL GET HTTP/3 1win-cdn.com/js/41543.b55be867b.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (695), with no line terminators
Size 430 kB (430117 bytes)
Hash 48813f2325a439cb966c5096fc8a810a
fb44ed9fb85edbd34701708c1fa10cfaa3f07bcd
de64ce06fbb042ecead3cf7684326db4f0c50ac26ba91a99d3399f7de24f6ded
GET /js/41543.b55be867b.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-2b7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436097
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xX4%2F8e0%2BgRGQ7n63uRigN0ehFbeMS5Tvy7jYdln0KmWjVDgdgBDTxsLxq6pdXYeMVPp4mIz8I8O6IejCYkT0RNkJiJfs%2FptnU7RIZ9iCqcyoBgZ9uHaT7FEZe3nn5LU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e588c0153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/jetx.64787fc5c.svg
172.64.143.26200 OK 41 kB URL GET HTTP/3 1win-cdn.com/img/jetx.64787fc5c.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8774)
Hash 0046061bb77d38094cc0f71b7371d406
1fd7894d0117251f1eeec1a343b85532d7864a05
bac9b1ac206602f5369235b21d6373b9b6f7980ff55c4e851d8a40f00db4d0fa
GET /img/jetx.64787fc5c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-33f5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 380707
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A62EyTITFUV1HJGgXN4jSFMaIkt8r689BP91nfo4KlzaUh2WIX8wS%2Fi6ZGMDmfbXZrRv0oFEOxn2QyGYy4%2BuVgDstDRqPRkvazfF1xlg1zanWlYtkGmZ4hsKBmmJ1tI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57aad353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1win-normal.34748aac6.svg
172.64.143.26200 OK 362 kB URL GET HTTP/3 1win-cdn.com/img/1win-normal.34748aac6.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (743)
Size 362 kB (362445 bytes)
Hash 0a5e2aff3499f587617337c0add83e72
c713ec3dbfd744114ba3b9cbf7b9ce3d40fbd8a4
a5cb3d03f299b837679eaa793491a03acc5fc1afdbc7f207b7566646f3bd2ecb
GET /img/1win-normal.34748aac6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-1221"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 640687
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eb34JHxL9JD1q6EouQg78%2FjLZah%2BK5maYtLcKZjnzpKl2WlQz6PL6F6SRCzKS9fzHcoHRIWBnmusww25hQR%2F0cQhFPPwHC6kRwot4lIYF6idz80CtFGEaEM2imYyacs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e576a8f53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/home-poker-banner-bg.87d818974-600.webp
172.64.143.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/home-poker-banner-bg.87d818974-600.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash d42d6b091c917baad89cc62f34b1ef8d
6915e60ae50f4b00af5083ce1217a7dab04df42d
9ac95cc43cf590f1f9a5dd85b5b0bf04d98e38d3005b6e4b436f8c04d09a66e9
GET /img/home-poker-banner-bg.87d818974-600.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/webp
content-length: 11812
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-2e24"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 2027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SQj5A%2BCwIqJJXyCPgr6VkkX4u61TJ8ds4AWud7JQAMwMflQ4eoXfLc4voq8EtTWbrfWY4N7Il5YilCd4aZ7ssDQmm29IfON2ILPQ7Laxf9lqgXeS%2FN7Aj21BXI8QNUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e59bd7c53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pwa_android_en.b229a444a-690.png
172.64.143.26200 OK 38 kB URL GET HTTP/3 1win-cdn.com/img/pwa_android_en.b229a444a-690.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 690 x 450, 8-bit colormap, non-interlaced\012- data
Hash 8b6daeaca5784288934eb5c3dbc3401d
2df52222cb03510733d5f5c616278143e7f93f2d
53ee238e1169d7940016da0159e72a214403576447cf1b8cb384942a6200d191
GET /img/pwa_android_en.b229a444a-690.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/png
content-length: 37637
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: "6564bdb0-9305"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 645225
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e2JMKybBTRKe2JsiEedJTK1vn4%2Fh%2FdHMfL5Oblgt3HcUGUM9nSIQ1RQxFBHTTmo2jNbyNcpiM5BcW9Tp87zOhzGpDU%2FMGTbmeuV0ZDzYGFLshosh7cq23vD9zP6VPmc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e59bd7f53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pwa_ios_en.f08ddb1e6-690.png
172.64.143.26200 OK 39 kB URL GET HTTP/3 1win-cdn.com/img/pwa_ios_en.f08ddb1e6-690.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 690 x 450, 8-bit colormap, non-interlaced\012- data
Hash 2b063a8e2fb87b84cbf377d7a7fd389e
5c12f02ca086902c7fd9a5bd5de9eabce82c22a1
aa8f787e4db589a38a5c5a56bdb03f69329bfedc64649454f9fd370b78820b49
GET /img/pwa_ios_en.f08ddb1e6-690.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/png
content-length: 39066
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: "654cdf32-989a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1937024
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AKV5hqrYoy8zrwgHQ0%2BACgwEBW0x0VshjkRKtfeaTILZ%2FbuyWHsmcjPIQfFG%2FwoNAcxBc%2Fp9Uk2m9HMHcgAkybh27fA8Qnab6SNKE67tY6419nPJLmQDV8y3aLRHYfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e59bd8953a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@avif
172.64.143.26200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f86f39dc44e8f92cc5658a394e833352
54093f2e69f448e122e771ec7c63d3cce35ffbdf
3fded209043aa6ec28cdff6321cff18c41238215a062dc02fab1af3915c637fe
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/avif
content-length: 7940
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-cashback-casino.avif"
etag: "afr-jhlkuoDx_XrwjiuFbkzj6HdVsjvDmAeQvV8BbYs/RIjYxYTRlY2U4LTYzNWI4Ig"
expires: Thu, 07 Dec 2023 22:07:07 GMT
x-request-id: NSGR0tiiYjuYDeDuKYJqK
x-cache-status: HIT
cf-cache-status: HIT
age: 382750
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=afmwfC8bHjxR2loFso2x%2BsDqTwyYHYinwQAOprQ1AkTnOqSca9zXRFg4up5lI3AQjYV%2FbOMtE4QEDEOLcx5PZ2%2B8j%2BfNaCK3STGp5aZCB5jyQzGzwpqncXmS4zivna8YirU%2F0uAUrYE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5a1e1353a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@avif
172.64.143.26200 OK 4.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 22a160f55908549771f823852d5eaeea
267d86356fc72824681f08d9fd1207b77530c08d
bb19dc50ecc9dd60ce8760b73843ce465df86b78a76de6a924c813fc770a2f23
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/avif
content-length: 4323
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-deposit.avif"
etag: "afr-jhlkuoDx_XrwjiuFbkzj6HdVsjvDmAeQvV8BbYs/RIjYxYTRlY2UwLTU0YWIyIg"
expires: Tue, 05 Dec 2023 21:59:19 GMT
x-request-id: bGX-7YlVdW-5OVnjAF_Px
x-cache-status: HIT
cf-cache-status: HIT
age: 550447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HgAJZ6QnasqugmXKV0wTX%2BemyRVrUFLqYPE2ij%2FY%2FlMS0bZhg5FbZX3fF6xzK5tD%2FSntM5VQ94Cqt5v%2Fh3Vtf21MNp7phWS9JXiY45S1evezYQKsNUcnng2SOjBDngCTz2qikknMOGc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5a1e1453a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/5977.e3e891b30.js
172.64.143.26200 OK 49 kB URL GET HTTP/3 1win-cdn.com/js/5977.e3e891b30.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (24996), with no line terminators
Hash 04ec1b8f18fe09e0060090df331558a6
3df99985d97206bae165ad5fc5957f78a595602b
9aba34327a41e55ac9e4c8f9e9680d7d940620a3575b9f041471a9bce1d03568
GET /js/5977.e3e891b30.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-61a4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436036
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=atGQMUDStBKNZW9PQnU%2BXL0MKXLISH%2BgFOjjVk8tMogyjIRoyB2xvcc%2FzhxRQ%2Bzkq9dTwHBSz21RlIFxG8RXrGL5D7oRnhgyuGScxpriXpDlrV1dKY4haXZAPDSW2T4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56592a53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/96710.df69b5cb3.js
172.64.143.26200 OK 32 kB URL GET HTTP/3 1win-cdn.com/js/96710.df69b5cb3.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Unicode text, UTF-8 text, with very long lines (24321), with no line terminators
Hash 18bf03c1a601d07f9f7936ad33db3a17
74f9b85cd7b5bade067db385f68162abf15d7dc7
f698a6246c362f5d51d7f6829170d33986e4e13ea6bafccd3e624d9954021aa1
GET /js/96710.df69b5cb3.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-5f03"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 381869
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zTwC6wUe7pTfEcTrYbWHmqcMBWKBlBcJEbGrVW1la%2B6iNvvBA1lB1vo6HwV7tncvJyQjldfGNvuYaKohDj5W0w2KagQqlrZgYsM7Wa7xrxLbigT2tTixsRLvNpVWe4w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56694d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif
172.64.143.26200 OK 5.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 76a502c1036d076e2317739f0cc878d8
480303b6e1e68b1d04e998d9bcd26224429db376
e377abb67003f9b87b6c67e87b9814b99bb3c1de68f286546d9af4e6d6377351
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/avif
content-length: 5302
cache-control: public, max-age=31536000
content-disposition: inline; filename="5b4ab347-f37c-44e4-93e6-2c1c0efa069e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTc5LTJiMmQxIg"
expires: Thu, 07 Dec 2023 05:06:29 GMT
x-request-id: XPB25Lr3jfk3fZzUcj0x8
x-cache-status: MISS
cf-cache-status: HIT
age: 466561
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lg76id69pQirJy9q%2BDsq%2FtFg1KIZZCvcylUgKvl%2FB7VDhqR0L%2BMRlwXdWmKfbo2vqdI18SCjSojmqPwlKf2XKWKZmcz8IMARhpgAfsYkv9N%2FwGig3JfTOp5d06uPhXst55h4sW3v%2FBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5e6c3953a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif
172.64.143.26200 OK 4.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d5f05284c21b7798248cd9fa99bfd299
bf9b3b55c3aa5508d51c2935e6494a6f91fb21b9
85a15ca1b3ad7e7569214ac1e02596a70b806eccd8ebf2b9fb079ca53986a0d4
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/avif
content-length: 4304
cache-control: public, max-age=31536000
content-disposition: inline; filename="576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTZmLTIwOWY5Ig"
expires: Tue, 05 Dec 2023 22:07:34 GMT
x-request-id: V-7-HMGFEPeeurTiFsrce
x-cache-status: HIT
cf-cache-status: HIT
age: 550446
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EKHDkIn5lNT0wRBRlqYhMKtnB1fFAgIracJSg2YgB3NJflTCHm9brAP0SDkN6fyicb5AfmSR28gHpHPhz19Do4Z5JL5yiB7oPFJV4amCb4FlL11cDw0S23HxRLbvtBA60SqBU2tMASQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5e6c3e53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@avif
172.64.143.26200 OK 3.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 38274844df1004bd9a0e2ebaa78fc880
ef316b9b62257b1e930eb064f30c1baecd86f2b9
5d128fbc4ca805ffd77a5d0c93ed6c15e548157d1b6a68b16c2849a98799a6a6
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/avif
content-length: 3601
cache-control: public, max-age=31536000
content-disposition: inline; filename="81c5273a-ebb1-47f6-8535-6376c353ea74.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTc1LTY1Njk0Ig"
expires: Thu, 07 Dec 2023 22:25:03 GMT
x-request-id: H040NrDXdUnqbRUu4PW-c
x-cache-status: HIT
cf-cache-status: HIT
age: 375769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=14%2BGVyB6xsZYI3BxvcX8DWJEDZapij2ANG%2BiH1PU4L%2BlDEHkRBTRo7jofzKQAP7niEtXnxSi0STQKJ3CIiROB64w2PpI0mnybSwO1hGluPVdaIyi2N8m%2BJQfVCsS%2FotEVCTzSafZBwY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5e6c4053a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@avif
172.64.143.26200 OK 3.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash bbb2a9093140015e4ebcb4b1ade5b171
dc35c677bb7d9b9e222f93e844793afc4fc06b2a
769a8489bc32f748e268b35024e9726719ef2a65d32665b0a5a54ca6d28789d9
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/avif
content-length: 3255
cache-control: public, max-age=31536000
content-disposition: inline; filename="f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OThiLTFiYzYyIg"
expires: Tue, 12 Dec 2023 05:05:21 GMT
x-request-id: 3jwdRVYAR7vMQNno8KaxO
x-cache-status: HIT
cf-cache-status: HIT
age: 27464
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oOZrV%2FOhvJstd1b1lx6AgolJV4%2FLlKpkFDEPphtbhSQ7AO%2Fa13I3QlFkPpHJzz6FWSBYQXUf8RZ0X8Bk%2Bwr7P8qF25hHIqVjIfAevJrmMj%2FKX%2B7pYNV%2F7ecgJwSqs%2FBKrN6SugbU%2FIs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5e6c4653a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/9ea6777e-3796-45f5-bd3d-2bfdfa8686df.jpg@avif
172.64.143.26200 OK 7.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/9ea6777e-3796-45f5-bd3d-2bfdfa8686df.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8158b9f371713e0436e44ecafbf1bdc5
26eec89a12c9427cedd9bfbb17112564df818ae6
b964140bb004fd05112cf56c1aea9c561e3b90bd59c5dda852f518821b89f7ee
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/9ea6777e-3796-45f5-bd3d-2bfdfa8686df.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 7283
cache-control: public, max-age=31536000
content-disposition: inline; filename="9ea6777e-3796-45f5-bd3d-2bfdfa8686df.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0ZjcyOTE2LTRiMGQ0Ig"
expires: Tue, 12 Dec 2023 00:13:04 GMT
x-request-id: tS4A6pTQNWfD65LFQmybI
x-cache-status: HIT
cf-cache-status: HIT
age: 18005
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HeE7EofaNvU49RRS3E1RULv7oL1i3YIlf3ByPt7bWdiQIFs8fHiasxAN5wuF4PULStgbVlim%2FMj%2FVFc5KWfzXgpr%2B0rgRuAKEKuUWU7u%2B%2BlVQhIuMk5u8bkAm0hQthdpg5QdJP%2FXVjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e631b3e53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif
172.64.143.26200 OK 6.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 970eb30eb4b7dbfb4e6b8ffd28076b7d
6a0f8512e3df00e5a94559fb30c0a53c5ff2dfb3
f8cc82596f9e85c7926e3ed1823e8f9deda4f8ef6d2958cde527946e26910931
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6673
cache-control: public, max-age=31536000
content-disposition: inline; filename="2fd6d9d1-bb10-49cc-902f-28ef851837dd.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzZWM4NWNlLTI4YTY3Ig"
expires: Tue, 12 Dec 2023 00:07:05 GMT
x-request-id: bDE2Hg0Sxp8QEMLqBbS75
x-cache-status: HIT
cf-cache-status: HIT
age: 21517
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0NOlQD%2BmjSShPV6KNPsH59JxTDy7QpCR2b2d66hJkhSZkto8GBWyAQMmZbuSyRMPsWCjsKJ7Ku4um0VB0nBhfxe3sT%2FwtguFKHEDjQQDCb0cWKVBiXif6dID9SAFVsqClDoKN6RKFKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e631b3a53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/be638e8b-a87a-4415-9189-076bf86835e3.jpg@avif
172.64.143.26200 OK 6.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/be638e8b-a87a-4415-9189-076bf86835e3.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 52694a00e9780fff40144f291cba16d5
9e5dcb9693f9d084f0c121c2811b0ea202f67689
1e74fda9ab10815e1f4c5b8d4ce1e0e12ac45ebb96b6d439eafb10e41b9fa036
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/be638e8b-a87a-4415-9189-076bf86835e3.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6730
cache-control: public, max-age=31536000
content-disposition: inline; filename="be638e8b-a87a-4415-9189-076bf86835e3.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MGM1MTAzLTE1NTk5Ig"
expires: Fri, 08 Dec 2023 11:44:44 GMT
x-request-id: 4W7x30zVEjjkoMYLDeC-y
x-cache-status: MISS
cf-cache-status: HIT
age: 356267
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xH0u0cDIA3huzSU1%2BzGPPeagE3tF4BK5iUOfL0%2FlC3ovLbQpW6Vgi6RTQCrUVm2TLvfLH1XLbW624j1Mm8loDsiPNr2oJ%2FW%2FoqmMtnQdpmTDMK2M%2BsBF1m4pbofWe61FsHt1a77fVco%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e632b5853a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/b8fb8825-f49c-4d66-8da7-0d57cf75282d.png@avif
172.64.143.26200 OK 6.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/b8fb8825-f49c-4d66-8da7-0d57cf75282d.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f8c1d6bebf7d789d547581b56b3becef
585ee178c680c45cb30621b69da1d2744b8fd5d7
d6ae9bea7384a4294b539e3e3658c242c00fc9972b9c79dc33bc3d9c3f8d7cbe
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/b8fb8825-f49c-4d66-8da7-0d57cf75282d.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6386
cache-control: public, max-age=31536000
content-disposition: inline; filename="b8fb8825-f49c-4d66-8da7-0d57cf75282d.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1M2EyYzEwLTYzMjMxIg"
expires: Tue, 12 Dec 2023 02:23:33 GMT
x-request-id: 5uL4fVraS3IMcTFY2gKTO
x-cache-status: HIT
cf-cache-status: HIT
age: 32031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzM1cZnOFaw0pBFBR%2By%2B1SroYEhISArEBfGDGXfwGvP7eJY%2BoMq7LCKjSH1d%2BF0AhJTODpuKS8zwWcBm0QOrUhtsAzRjPIe1sYGF0I%2B3uvDr2XMYmhAHbTncPYdZqj%2B0feXkgRBHjis%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e632b5b53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/atmosfera.32402e33f.svg
172.64.143.26200 OK 14 kB URL GET HTTP/3 1win-cdn.com/img/atmosfera.32402e33f.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1969)
Hash 9ce0b2562981364a4ed9056c3d6cccc5
dc0ad8e18b30eff66b5f091a91d9d65d9341b6ef
792290315f84da3485c22f9437b138803343a3321ebf774fa6aa2a04d90e422e
GET /img/atmosfera.32402e33f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-230d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0fin%2Fi4E6nmewi9OT8U7Ls%2FbHJvXvrh%2F0h2sHRJDoUuOO7YdooFPq2XTWYH0KqMcjQdK1AkZt2sBtXiFhZBERcFqK5IjRQiljtsb6Jqn6jAFISFjMcAbln%2FmDTwMPNU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f6dc353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/b766d86a-eade-487b-98e3-7c58464e62de.png@avif
172.64.143.26200 OK 8.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/b766d86a-eade-487b-98e3-7c58464e62de.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d065f4df1e5468326fdf699352e94876
b3c054de9deb2099cd89460e81db6449f75a65db
5acf53885761081080901f4ae3c97dc9dc33bc8d260f8cee963cdf4a9e42f26e
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/b766d86a-eade-487b-98e3-7c58464e62de.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 8843
cache-control: public, max-age=31536000
content-disposition: inline; filename="b766d86a-eade-487b-98e3-7c58464e62de.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MTJlYmFlLTMwYjZmIg"
expires: Tue, 12 Dec 2023 05:03:15 GMT
x-request-id: ZlhYwwKdy_s_BnZBV3pNi
x-cache-status: HIT
cf-cache-status: HIT
age: 27465
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VYtiNcFsXosPFg3T0QvVJey8rw4XVWj82Oqtvz4Tuv6CQnjRUDrPiGO0s0qJnvyie0hkDUCv75cEYa4hXFB10OXvdnfcUEk056AluWrl4oDVy9uGu7VfQ7mqHVK%2FEcjcSgOOyyU0sLk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b6753a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/688b1fb9-d322-48ea-aad3-fb1fd9612eec.jpg@avif
172.64.143.26200 OK 8.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/688b1fb9-d322-48ea-aad3-fb1fd9612eec.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 245e5ca0be06d4dcea85ba15bcd331c9
8d2ce762ff4f5cb2501192d7812ed3097fa99561
0b4389affb3f4c8c3bae867ba667cfd8d7175d4bd601d19a0d2e8b13783204bf
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/688b1fb9-d322-48ea-aad3-fb1fd9612eec.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 8547
cache-control: public, max-age=31536000
content-disposition: inline; filename="688b1fb9-d322-48ea-aad3-fb1fd9612eec.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MGIyMGViLTIwNmNkIg"
expires: Fri, 08 Dec 2023 14:19:19 GMT
x-request-id: Oc6OljJ1u1wghxUEwrFJD
x-cache-status: HIT
cf-cache-status: HIT
age: 344727
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FIPWj%2FduYbWsJE%2BDlr75zTFh962Qv0iVDwP6o8JT080L0hTXTqQpYclgwCpBCKhL2NojdriAG1Rui9p0cGh5JiYQ2LYJCcI4kY6pMu%2B1XmXC0%2F%2FazIHO5%2BLQiCSNSMwFnFV2kI6P1HI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b6b53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/6c924d76-6964-4196-b545-1cc5c1ce019e.jpg@avif
172.64.143.26200 OK 2.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/6c924d76-6964-4196-b545-1cc5c1ce019e.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8348ef8f26d3425d0b56bf648cd74c0e
637ed8fb1fae2a0c8ffed335d959be504c01c3ce
9c02dd0dddeb31391c17ed6abfcf220ae23275e185918f4e681e886c753c1a13
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/infingames/6c924d76-6964-4196-b545-1cc5c1ce019e.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 2641
cache-control: public, max-age=31536000
content-disposition: inline; filename="6c924d76-6964-4196-b545-1cc5c1ce019e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NTIwNWFmLTEwNzYxIg"
expires: Fri, 08 Dec 2023 11:44:43 GMT
x-request-id: nMMFISO-xFyNseZv-2tBu
x-cache-status: MISS
cf-cache-status: HIT
age: 356268
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F3hfPJ1dLc%2Fch5eRh9UI8aVyHok6MTQh%2FoKvhbQcZyMgjAMNP8zuUHUN15sJeAUlnw8Gth21k3I1yjaYQ%2FbQZIdol6j9YADb40diITtZYH3PhJy3yuSxH9kVCi56dziSVtlBy4DuJQw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b6d53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/e72d3aa7-8742-414d-bf8e-4cc530caa4bc.png@avif
172.64.143.26200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/e72d3aa7-8742-414d-bf8e-4cc530caa4bc.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 03388c7986ef4c3a0404e64210376e0d
8fd412751fd0161527666ddd2e14a1d2c754eaa5
92208679bf5e01a3d76ffde65057bfc1dd062328e422f744504784ba37f401fa
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/e72d3aa7-8742-414d-bf8e-4cc530caa4bc.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 7871
cache-control: public, max-age=31536000
content-disposition: inline; filename="e72d3aa7-8742-414d-bf8e-4cc530caa4bc.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0YzEwYjczLTRlNmQzIg"
expires: Fri, 08 Dec 2023 08:34:14 GMT
x-request-id: rKDCMQaYjYxYcsZ0uv0qa
x-cache-status: HIT
cf-cache-status: HIT
age: 367635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FIzuWNRiuKnijPjLVVrQR29agldE3SmTzivvJt%2F9paXTRL98RPoBV2vNyY0NdbT%2FLvOLWhTMd5%2B4dnop8FceA6sShwrvRI1cJ7neWjzVZIS%2B4xdGQ7ZjXW9gzMG7RDpcxzM7nZdKEn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b7453a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/bfgames/5771c41a-5bb6-4ced-8f5d-a93b7be3163b.jpg@avif
172.64.143.26200 OK 6.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/bfgames/5771c41a-5bb6-4ced-8f5d-a93b7be3163b.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 29ef0c515154109b3717762dd271cbf4
8c5167181428026d0cec1f3f07c08dd75f846e2e
6200efd2d647104250e85894fcac68bbf4586caefb19a4bcb8c8405e7028298f
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/bfgames/5771c41a-5bb6-4ced-8f5d-a93b7be3163b.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6151
cache-control: public, max-age=31536000
content-disposition: inline; filename="5771c41a-5bb6-4ced-8f5d-a93b7be3163b.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NGI3YzExLTIwOWU3Ig"
expires: Thu, 07 Dec 2023 14:53:38 GMT
x-request-id: Cv-RY41VwxMOksSm7fDuH
x-cache-status: MISS
cf-cache-status: HIT
age: 431332
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bTn17bVnso6aobiVvZzMEJyVM%2BVNWvDC1jASZ9LpleYk3S4f14SI8DEwbHk0C4coFKk%2F1Rz1LMo2YKSDYukL9VubOXDkSjRFiqzqfdS6WMy73M5VvFf7bVXol9NNUrFznxLpM%2BRubYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b6f53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/northernlights.45b12b0bd.svg
172.64.143.26200 OK 9.1 kB URL GET HTTP/3 1win-cdn.com/img/northernlights.45b12b0bd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 2a6b2dff2a76f7463b6be12ed4d136f5
e62e76a85307fcd0b812ae76d3e163360498921b
b5130dfb2ff063f78deda2ed2e31a55b88ba30040496577f89c8fb6a5ea252fe
GET /img/northernlights.45b12b0bd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-df4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TxyRZO%2FdZWwJrf5lFTgYHLdh9X0YePeUYVn%2F4q%2B0Wu4DjV5qqzhI4aLyNXNYzrz6S3FAlw8F9Lqsz2W7GHphsjrC54QD1GsZkcKh%2Fgda69IRceqmRTE2SAogIepwcFI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61793a53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/d0e1db1c-4e12-4cff-b46f-97008a7f3999.jpg@avif
172.64.143.26200 OK 6.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/d0e1db1c-4e12-4cff-b46f-97008a7f3999.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1dbf73c3fb8237291d598c2b353edb58
8ecbb91517607149582236292fcdebdc0fac5cec
26ff102bc1b31f826162ecc7dfd1cd6727dc4b1af2ba7ef9a4659d34d4a1d310
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/d0e1db1c-4e12-4cff-b46f-97008a7f3999.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6493
cache-control: public, max-age=31536000
content-disposition: inline; filename="d0e1db1c-4e12-4cff-b46f-97008a7f3999.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MDliYjgyLTFlMGVhIg"
expires: Thu, 07 Dec 2023 18:08:59 GMT
x-request-id: tEhYsv7QFLb2DnvYOOe7m
x-cache-status: HIT
cf-cache-status: HIT
age: 417855
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GEddfaZXEH4ECurViqmabUShxFL5HLXSRNvR7RiCD94DQS5rMniq4QoeO7WVqf22H3zIPssjEWb2Rzo%2F%2Fup0ybh0zQuDOU2wt8e4q18VT2g0vqaeiMPdVW99JinPp7RRKuSyeF%2B%2BgGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b6453a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/40271.884630170.js
172.64.143.26200 OK 102 kB URL GET HTTP/3 1win-cdn.com/js/40271.884630170.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (52220), with no line terminators
Size 102 kB (101556 bytes)
Hash aa95d4eb3ce8e6fea3df953e7acb4636
a126356302f55175547f2b466b7f17f49331e115
21a8c80d7a348f547694bb8b3ae6bc841a7677048469b21ef9771ce64f1ca571
GET /js/40271.884630170.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-cbfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 441418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XbcFBW8X29V3bE2Tv5VQSWz67FbhmH5uvgdKShXFXY%2FBbR0MlEwuLBo8KDdSHWavJTHpPpQq1FE4piThAt7iJBnvQimkGMLlHj8gLu1jhNLIRx2M2PhUft2R%2Bq4JHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e53fdc053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/e6dd9f4c-282a-4040-8fcc-256b4d959834.jpg@avif
172.64.143.26200 OK 8.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/e6dd9f4c-282a-4040-8fcc-256b4d959834.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash bb9decc2b4badd49ad52aa4c5490641f
34e841e7c61eaecc2bbea02426b3b24a23279eca
ec6a65fb8efc7d0a8b38eb2274531a3067ce3ee981dac9c06cb0a01f035f4ec8
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/e6dd9f4c-282a-4040-8fcc-256b4d959834.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 8386
cache-control: public, max-age=31536000
content-disposition: inline; filename="e6dd9f4c-282a-4040-8fcc-256b4d959834.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NWY0Y2IzLTIzZDY3Ig"
expires: Thu, 07 Dec 2023 22:09:34 GMT
x-request-id: rbRzka5Gd3neekDr7hWht
x-cache-status: HIT
cf-cache-status: HIT
age: 368539
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=69EiqHFnSwQaw70uZvmF6W2PVeO6hpGAqNg%2BiCGYBZIBv8IhX70gYCiG%2F4frKTdoLuzcCTi54etDEzYcQTISrgUAyOnP%2BdhL1gGyU2b28EIsOdW7HIS004HdeO%2Fr26cdXNXLXnTpwWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e652dd653a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif
172.64.143.26200 OK 9.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash b969533d76140b5d61ba0b598faf9d92
0f1c02c6990f7be7bc314d7e1ebc72e1029904be
e094ef696c10eceaab121d964d2ace3e8893cc72c3f17d13a455905d4b38a633
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 9876
cache-control: public, max-age=31536000
content-disposition: inline; filename="aaf2d443-c77f-48d2-b319-c986f21359b9.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MDljNTQ5LTRmZWNiIg"
expires: Tue, 12 Dec 2023 03:29:15 GMT
x-request-id: UqWyFN-7FLMirOohlV_x-
x-cache-status: HIT
cf-cache-status: HIT
age: 32031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Thj%2BRduyZoJcgDBrAy%2F7t3cxRsSDtV1r8KlV5TfZyD7CTWZu8fBYCivmrVjtmtPhicl1YoEHc23w%2FCddul9QsQKdfacEvd%2B06Rj4R2%2B6amEF9PX04l6AiInKVVccfG5QQJs%2B6icfZkY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e652dd553a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif
172.64.143.26200 OK 6.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1135961e3dd1057fc744a3de2d76c131
fcf9be70400cf7727cc841967609bfab980309f3
92315a4efaf32b20e2b64752e618aa317e3b97ab26b3bec9d171fe260ee15fdd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6283
cache-control: public, max-age=31536000
content-disposition: inline; filename="728d6758-6f50-4b1b-8132-2430ff7e0aa6.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NzQ2ZGJmLWRhZDki"
expires: Tue, 05 Dec 2023 22:06:50 GMT
x-request-id: Z3JQtxgj-9LA64P_oVznd
x-cache-status: HIT
cf-cache-status: HIT
age: 545818
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tzYnU5bxbXsDYx2MOkJNcAqjI3CKnsX%2FxNXvAe0aNYdllmdJBAeoi3CLQCAddX2z8WccYxjDQAmYh8tIZnLUrFTivCi23oq9G2kOg0O5vNSfQBLJGuYM5ZKOAFyHJXZw7VfqX4OmXyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e652dd853a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif
172.64.143.26200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8d5d3c8e4c5ced87df63ebb3c1e9639f
5b4b41da7186518d4bd92fafa8083df5d947a9f2
a6765bfbb58120c85a6bb35e390fa22d5b56f747ada1731ea7c32d101473f8b9
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 7921
cache-control: public, max-age=31536000
content-disposition: inline; filename="3223fafb-6b1b-46ba-bb4e-d667854eb8e8.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NGIzZjM1LTMwNzIxIg"
expires: Wed, 06 Dec 2023 00:44:55 GMT
x-request-id: 6PhL9OsSoGgPNvIUq4JZg
x-cache-status: HIT
cf-cache-status: HIT
age: 539369
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zapfs8lEg74F0UlRQ2cTlCqsST66kuEkZ0hbsdpD3IIkPB%2BTx2rToW40%2FPzPHz1gUgMztbhFKYrZe8f2EHOLH%2B1yixqN9NkeX%2BHSsgaP0R4tw7yB1Ijd0ukjGRaxvVHLbPLsI8cB2tE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e652dd953a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif
172.64.143.26200 OK 5.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 0205590f4a9509c158018e329db4420c
b826e726040a213a2b78d7537de0ae2f9b41e13d
1ff87a32167939f79b46677dd94e9bbc6d5d68a12eb24792dc23da24d3d9018d
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 5220
cache-control: public, max-age=31536000
content-disposition: inline; filename="1da897ef-8952-4c44-b4a8-8da8e13393d0.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NDM2M2M3LTYyM2ZiIg"
expires: Tue, 12 Dec 2023 03:19:37 GMT
x-request-id: KEkq6PAfpXh7AaubBK3h4
x-cache-status: HIT
cf-cache-status: HIT
age: 38816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2wz4GEL7MGl4u9XN1CBrRnxuPw1A6tsS7fhDwu%2B3OtycTlZjtFisjEFkP4uRaKa7SNf%2F3X9Mhv%2Fq7YXADe4kWK5NA9fOqzxvbAkKvg1Potew%2B%2Fek%2FU7wcUBL7us1EF4GiQnr%2Fd8BvaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e652dd753a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@avif
172.64.143.26200 OK 5.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash d43bad364c5a03c96a9609f5817e6150
15772d42d72303f27a057a208ffa73a5e2cd79c5
fc301e54c3cfd5b3a1ae24e06ce4df85391d488199b163e44fe653027fc014e4
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 5690
cache-control: public, max-age=31536000
content-disposition: inline; filename="26b06924-2e59-423a-b6ef-9bd9c97f41ae.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzMDc2Zjg5LTEyZjkwIg"
expires: Tue, 05 Dec 2023 22:21:26 GMT
x-request-id: KA1ZGyMR4R6Vh59KSDXqk
x-cache-status: HIT
cf-cache-status: HIT
age: 550446
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uuxxr8UJT%2F7khuv%2FBqSxmCixhTEaeSxLQ27vNR0pk5nIlL5pGzgSRWqNLMadLilK1iC0sWZydrUsJdC2USUjsCZ1A9pFxeZSyi96KVuvWgQ1oxwn2eaUJrLIbsxAyxs7gWXmyZ9DTNY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e652dda53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/quickspin.d9067a98a.svg
172.64.143.26200 OK 6.5 kB URL GET HTTP/3 1win-cdn.com/img/quickspin.d9067a98a.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (599)
Hash dbdf56e7cc86a8b3a6015b7922079ef4
b7e4c0e3150a6c917269b7ee44d530aab0aeea62
4f70eb70d7c293aa781dba608df93ccfa806a5907925b0951ebbbd8d70715868
GET /img/quickspin.d9067a98a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-954"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 628226
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CovlfHFTMz8yLgQtZchzQFADrML%2BrVFDQc1RMkWPlCiZR%2BM%2Fdp7TUzQot6og%2BYEwRQ%2FaphPYwgJoWbXCRIEM2d3hBuDhW%2F86Ex4Io8UFOrbfrWy69U64mqSCZNWIty8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61e9bc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/habanero.92654c79c.svg
172.64.143.26200 OK 7.9 kB URL GET HTTP/3 1win-cdn.com/img/habanero.92654c79c.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1800)
Hash a539fd82c0ad82fbbce14d5ff4f87bdf
5b25955571cbc032e232fa9348d8dd6c417891fc
59a6c3a824840a659b76258192246060aa956ec4a0171a6e9ef162b7ae8b7ba5
GET /img/habanero.92654c79c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-de9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 646370
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w%2B6isGgC56AqAfJTUX8Z0v0Wk7%2FJWImHZMZmdxK4TvNF%2B8oWgbsg13i9VYJjuJkh3W7DHcGO7mFOtBJ8NoyFJ%2FlVU%2FeQ1d9FcYTzULHGZ0AeayDlOI4M3SHBk4r%2Bs8Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61189953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/hacksaw.5f0e80ecd.svg
172.64.143.26200 OK 20 kB URL GET HTTP/3 1win-cdn.com/img/hacksaw.5f0e80ecd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 55399f250e42c4e086428c7735547a4d
26ce6a38c7cfeb991c8275d110f844bfd7ae7ab4
c6862f57eeb87df76a6805a8c83c670a1ecd5ecb93df053fed89698c7f5b428f
GET /img/hacksaw.5f0e80ecd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 474481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N3RlANa%2FarzO%2B2gdbLDknTZMlkZSrEwlDocTofKOsVjFjYtD6Li2grs7pU0k%2BB3XC5z8ZxxZ5D%2BRnS9FsQCXteajMGj9%2B%2Bm6afMUGRnylZhMln9Eezkx5OadWkErb%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6118b853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/retrogames.bb592a878.svg
172.64.143.26200 OK 11 kB URL GET HTTP/3 1win-cdn.com/img/retrogames.bb592a878.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1496)
Hash 55b23f03edcf4e9f0b134953159925c3
a16931d905ec27cf53f8e3e277e80486fa5132e6
3dd7420fc8b0737a0087bcff3b86bd9f282b2c014b44f549f09dbda3aecee187
GET /img/retrogames.bb592a878.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-1cb4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 564669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r6MzzOl5AxxUxxpOi%2BqHKhLwubmHqqpeU5NbWlJ0crmVWNTuDc7kw58JBypJ5hhRxQBAongvvnOkg%2Fwjed4H3CPXKs3uAY6YnAMlX70hzXW2N7LNb0TkAvOb9RKLT8I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6209dc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/red%20tiger.157f419e2.svg
172.64.143.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/red%20tiger.157f419e2.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (13158)
Hash f0a8d4ae6c95b6d6b2b0bbbaa62aad9d
9ea188283d324f5c87a802c14ec3386167e7e2a8
4572ee67d26acf1ccb35decf47651e67464a7dc0a438d79c721b9ba739f14d2e
GET /img/red%20tiger.157f419e2.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-3990"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212333
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ssuVwPxkq5388vAFNbSb%2Fvf%2F%2FM4COw2b22FGX9Rb8cCxWVsX9M%2Fh%2Bs8t2qJ2ET97sgvGkrWX1DDkd%2BsDlIK8bxxwCMchGavvWjcUGRtBbtSlqSJfjOUZdiotY70C3qc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61e9bf53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0454b4e5-60dc-489e-b56b-32a10b2c8515.jpg@avif
172.64.143.26200 OK 16 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0454b4e5-60dc-489e-b56b-32a10b2c8515.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 8ec5cb671f5d77870c4aedcbdddf8fa1
076251b76aa32b66c0cec26a61c5a734055f1c8b
6b909f634726426df55659b111f2296bcfc59dd903b08e80c9b8cc3761d1b2b6
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0454b4e5-60dc-489e-b56b-32a10b2c8515.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 15723
cache-control: public, max-age=31536000
content-disposition: inline; filename="0454b4e5-60dc-489e-b56b-32a10b2c8515.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjNiNTZiLTE4NzgzIg"
expires: Fri, 08 Dec 2023 00:11:34 GMT
x-request-id: iDozTX-mrOC4MSYp5sNGd
x-cache-status: HIT
cf-cache-status: HIT
age: 381869
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PldyiTqJzgWLaySHhXyv6Lcq9KLwi7%2FtCGDxXXGbhfYd4WDAvqQFlL7bP6fSo9gUJ%2F7vLJuDXyl41F%2FdCYZuspCPr%2Be%2F4YEgwpfBd8gb2TqnYDEImKdVPCXtsfKSAmEAbRc5qoVWQ1A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e653df853a0-LHR
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
142.250.74.168200 OK 83 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash f0c49c80729c2d7062c82bce29256a5a
a1ccbffdb32b010859e6b73f2abdfed1f3deed63
e3d7161bf683d9954e58a664f1ca4cabc417ae9df12d3afad431e618a200d69a
GET /gtag/js?id=G-548949LWLW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 14:42:32 GMT
expires: Tue, 05 Dec 2023 14:42:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82616
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1win-cdn.com/img/goldenrace.4bb50c89d.svg
172.64.143.26200 OK 50 kB URL GET HTTP/3 1win-cdn.com/img/goldenrace.4bb50c89d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (923)
Hash 18935ec1879e9e218a1f3817fb7bcc93
3c7b70bcce041e717389c72842bc136b7a9b7eac
eaa1e694d79f284139bacfcb4e9f37d17853783e877eb8d79add270bfa009c59
GET /img/goldenrace.4bb50c89d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-88a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tkld6bWjcd7Et%2FnRzabGYuxgFYW%2FNeDPAFLouK8A3QRHpQndkSN7hBlFIBsQ8Y4rjU0xcpewhYNJ5Bm9qJKbXrAGTxohtrRMJlcj4me0DokRFVWGTfl6qvM6Jwd4i6U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60f87c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bonus_hover_1.eb9b2d69a-1320.webp
172.64.143.26 48 kB URL 1win-cdn.com/img/bonus_hover_1.eb9b2d69a-1320.webp
IP 172.64.143.26:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5495ba7e07dc7a05a6008b8585bca92b
f8dadc060dcf17862805f72d7815c9b9b119375e
570d0b7b7b49c540125d6b4636dcd2284e0c18a2c015ea56035b21ae91e400c7
GET /img/bonus_hover_1.eb9b2d69a-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:49 GMT
content-type: image/webp
content-length: 47816
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-bac8"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tPL3IRp8DO%2F8LP9MKiQUx%2F0Nz4KT2T%2BpP%2BXzZBG2ZTBeietlPfOVH53z3%2Bq85bSFcBnc6M2Bja4nWbmRmBVptA%2BD0w95Ob32IHMs47mFwYbsDi4Xo%2B6jX3bqr1yum7g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0ed1eda453a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/84932daf-20a9-4284-808e-41cb266daa15.jpg@avif
172.64.143.26200 OK 8.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/84932daf-20a9-4284-808e-41cb266daa15.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 1723d0352e11bd2eb76905fab57c4aab
7a094bcfeb38d30174d16ec36fa92271fa0c4826
eec89e00832278535bbc839ac5e0cf943e1947ea24e236fd8a257bf1561363ee
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/84932daf-20a9-4284-808e-41cb266daa15.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 7963
cache-control: public, max-age=31536000
content-disposition: inline; filename="84932daf-20a9-4284-808e-41cb266daa15.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0ZGRlMzI2LTIzZWI1Ig"
expires: Tue, 12 Dec 2023 07:04:51 GMT
x-request-id: zD9CAgAtdV54OAzF1CY0A
x-cache-status: HIT
cf-cache-status: HIT
age: 27460
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C%2BJbgxi6MYekHcVAZTw1JjReNDTS3VslyyPCECNF0AuKNovHQeA4K7%2BfkZUI0oWB4tib9c6XZe40D5juVmerPhMSgOpDCaIxfqgMOoCAtFJhYFzNGgy191%2BU%2Fb0mp2PO8USenvWgrqg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e653de353a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/belatra.1e7508387.svg
172.64.143.26200 OK 5.1 kB URL GET HTTP/3 1win-cdn.com/img/belatra.1e7508387.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5163), with no line terminators
Hash 3a3db4a05ec45ff249ff2330cc6131d9
d4e82a85d11863ae6e91cf542676f8ed0dc5a130
356a6b1e0c2826d245756e52b8505d57e4cc1d2059957fe6fa4b4c37ce6754ff
GET /img/belatra.1e7508387.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-13fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 627552
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dFzTy9OHEnlwxipmVyHWBC3u75xiJPHWQHoUY%2FV7Uzip2E%2FBGAzwvLVKCU%2BvtIs5r%2FdU%2BV%2F8f81J17PqrThKQadqrZ5vyAnU625RsursEsOS8LArH6lgKLlj86oG9jI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f7dd853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betsolutions.5d0a153ca.svg
172.64.143.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/img/betsolutions.5d0a153ca.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1600), with no line terminators
Hash 066b7782f9f8acb732cd85f2df1344ac
7bb3c193cb5dd835fec3e3ce7ed032be4200afc9
95ee3f610ca3eb081f9fd0b7c61dc40ea0e5f470b0ba72dee69c1a06a9198e35
GET /img/betsolutions.5d0a153ca.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-61d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 374197
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=obK9OKJrh9mn9E93yKu21d0E0ynqEcmXP7MbkdFfRQoJjQ4iiwzKg0drlFL%2FF4WIIx14HzBZScPI8XRF0XJZh%2F%2FTfq3DD6S96WDNQXj%2Bm01G1muqHtXNuhYMt3BDJCw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fbe2853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif
172.64.143.26200 OK 17 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 151bc0973a888c1c3abed902f5e7d9af
5e3e6c76c81b2891ce6d8001a6cd73b267e6bd66
e7ca152be70af106f7ab79894d653efb6cfe72050652b42883d3878f2783fccd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 16569
cache-control: public, max-age=31536000
content-disposition: inline; filename="0e2d11b9-786d-4e45-8265-542c38fc3575.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjNiNTQ5LTE5MzM1Ig"
expires: Thu, 07 Dec 2023 20:16:33 GMT
x-request-id: ZvQAs7jgK4oBY_SgMn0Aw
x-cache-status: HIT
cf-cache-status: HIT
age: 380643
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JhMSTUEYZmk6vlLZB2CDltQHr2R9dEKRjoKJZuwEL71sPRVgQxp7E9pzrOo2HbZWgT8MO%2BBFMhcLpTZ2wjL6nOP4Z76F7I4e3ILkhnGNCzpB%2BjiE0OMSwCLvFa1um5nbjjrxFcIDyUc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e653dec53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/24698.f5655defd.js
172.64.143.26200 OK 109 kB URL GET HTTP/3 1win-cdn.com/js/24698.f5655defd.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 109 kB (109448 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/24698.f5655defd.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-1ab88"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436036
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ej0xWj4dR5jwBACKCQlr%2By57hjm0MsT4cZ9YloKlop3lA5FmTydUWKtudgC4gJixRALMsxZxIBfyyCJl4P5gRslTfFi10BiJ3Dqg6rVMfDA5t5rwFSPqvTHGiLqvdOE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56592353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/uefa.093dd4fef.svg
172.64.143.26200 OK 1.9 kB URL GET HTTP/3 1win-cdn.com/img/uefa.093dd4fef.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1944), with no line terminators
Hash 252f6dec5cdba134798b102acab7283f
a159330042e787e62a548cbf2dc4dcb59a00fced
7bcf663e19c650e822b1f795b49a01535cc7994e2aaf701b8b3f7a98fbbd9696
GET /img/uefa.093dd4fef.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 08:29:41 GMT
etag: W/"6565a4f5-782"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 626508
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b4GSnDbqLKzTMdhRaa3EnQcU3GrbVq3KyRBJSoYd%2FBdGS%2BrjD8jRGvInxSu1lv8AzXzDTsPDKkY1tviUliLwA6qiqcEmiVuFsP4ytFuWGuqM8r3Koq49xObWlBaub7Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b4fcf53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/4theplayer.f89265cdd.svg
172.64.143.26200 OK 4.2 kB URL GET HTTP/3 1win-cdn.com/img/4theplayer.f89265cdd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4252), with no line terminators
Hash 5cb7cf2507e642be8dd905487dc5ab67
68ad93bac5948542dade50964d8384eb9bff3573
f5bc2b7e50f7ecad4b80ce6102973c2cba12fdbd502b64505788c6f82ba08b66
GET /img/4theplayer.f89265cdd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 545467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u21qe8459yqko0jBHx2hlN9V%2FCXM%2B7H9KIoHdiL7e07Dv5c%2B8iE7T11xyU70jaBEndL%2FmtEWXWyAXrws6YUSIuSB5epDVXZT3hC2L47xfT1GoS6RI5oPlgU46EJPjlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d5153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bf%20games.7559aed26.svg
172.64.143.26200 OK 5.0 kB URL GET HTTP/3 1win-cdn.com/img/bf%20games.7559aed26.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5165), with no line terminators
Hash b94bb2811096b861bfbf8fbcd4de9149
17418a385bb399e79588ba1f6d3ee661c40197c5
c1f44795037017c6bfdb6b4e563a6c9323468cc8df433cfd871784dcf55472f1
GET /img/bf%20games.7559aed26.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-1382"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 373971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dgIgSE7o0fTZeNi9j27Kgsm8u9QjDn3pfs47jKgtyrQUslhS0qPYqW4kh60OtYm29i8CtE24zlWXKe7R7GtZdu37nPyYFRcdcr%2BZtgl4UtOBU08iGPr1n0MaWJj%2FZzg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fbe3153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/5dda4ba4-4732-41dc-a3ab-54bca5e984e5.jpg@avif
172.64.143.26200 OK 7.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/5dda4ba4-4732-41dc-a3ab-54bca5e984e5.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash f689b69cfe32f8e4f42fe1b0b29604e0
e3224617d37564a54edb332f559bf889814c28ec
65342e9dc38d6e03f961fa186cd8bff5e5452c64d43995e626363775a94b328e
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/5dda4ba4-4732-41dc-a3ab-54bca5e984e5.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 7433
cache-control: public, max-age=31536000
content-disposition: inline; filename="5dda4ba4-4732-41dc-a3ab-54bca5e984e5.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MGIwOWEzLTFkOWIwIg"
expires: Thu, 07 Dec 2023 14:32:15 GMT
x-request-id: W5oKlkmiAmSFovJ6ewgl2
x-cache-status: MISS
cf-cache-status: HIT
age: 432616
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVOWV2n3iUGbVe9MsM0CBnUIA2nc1YDubAmvUnSU8QvWrU38lXn7r3u%2FJjTo8Y5YUHA8lsxN5J%2BxrBcKYKE9Zl8q%2BmdBCGbR6MKqR5%2F2shTE%2BeNvEW5s1PQTSbN3Y4YnSuX3gkTJhBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e633b6353a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/zeus%20play.534e0839f.svg
172.64.143.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/zeus%20play.534e0839f.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document, ASCII text, with very long lines (1070), with no line terminators
Hash 5dcf605920d497723b8d7c2ff2be316c
5b7b5d13d3d55f1d731501ddf650852e48639e53
2abd42db5b7bf4ae93eb64f68fae9896998100b96cfbba5aea36b72ece7be89b
GET /img/zeus%20play.534e0839f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-40c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 381870
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ec%2F4rg3UokOVmSo8W3Ip3dR3HgOGMu30Wcl0PyLTTu7Pm6TUB9PYrxY594L%2BHKVffay%2BATnUOIeucKmDz4g%2Fm3EcY9MRuUjLnvvn8fExoXpiZvAQp34iLFRt8AT2l2E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e627a6953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fantasma.8f4e2392c.svg
172.64.143.26200 OK 3.4 kB URL GET HTTP/3 1win-cdn.com/img/fantasma.8f4e2392c.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3439), with no line terminators
Hash 2b6e488681e5af743e430cce2f0c2187
5a3102291017d617e6346a59664b1ec7eece4423
f34079a7f0c56e9ef5af475418998e11aa38c64bf4900827c830263eb9e8ac11
GET /img/fantasma.8f4e2392c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-d34"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 373970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lPE6f4tVHNv6vmb2GeSmomxTWyHpjPlNicKCTuctLtrHLZHTbxe8caENhnbeMaG8jobOfIM11EOft9k9%2FpBf4pNU%2BqpgxnlxWtFBMPdga8LIpsq5fgiSfyMKQzqmiqk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c84753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pragmatic.2e7a96b71.svg
172.64.143.26200 OK 2.4 kB URL GET HTTP/3 1win-cdn.com/img/pragmatic.2e7a96b71.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2440), with no line terminators
Hash 0318d08339acfa9fb15b1f56bb22b145
caa87d78a9c14af0beeb66733294652e6b1627b8
24fe7388e4f3fc5ddea45e6369a02683ca4ecbe85d5e18c8f67d47a69709cea9
GET /img/pragmatic.2e7a96b71.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-953"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 370758
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlyRlurKkCikmHRvARH49nEi3IRuYSiRxTU12BNfdRdeK5aBAma7Qvrw8R15zF96SCSHsLrbcnSCh53JOTOWEb1Y0gHCJ4qJfG20lIwizm4kLYDs4I835qacxKolN1g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61d9a653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/slotmill.c42ddd447.svg
172.64.143.26200 OK 13 kB URL GET HTTP/3 1win-cdn.com/img/slotmill.c42ddd447.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10345)
Hash 39d48e4b982998cd10417bd09dcc0afc
541c60c508d7777db2cd0e49c18cf32219532dd8
3e18df680be6da9246c3675408ec0e7e107891281a863ab9b6377832b44ee48f
GET /img/slotmill.c42ddd447.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-3313"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 645225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5KJ1GWAwt2jVZTIQT1zCtj5%2BKnnoUZn%2B%2Bko6x8Nap5yVU9PthFgUVmCrfSj8m3ynCzwgG%2Bhm0wq29mOH2bYlXZn%2BRGhnCA0SWKCFEll4MpdqpUCnL%2BNNbPYVj1iuu44%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e623a0253a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1w-astt.top/img/logo/main/1win-normal.svg
190.115.24.78200 OK 4.6 kB URL GET HTTP/2 1w-astt.top/img/logo/main/1win-normal.svg
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4865), with no line terminators
Hash 6a657a7851fa92f791304f1cdb123e9a
ae2def67a366ffe67578bf82e3c47b4f1966e784
8443e4838f78a5ad2efa628846e3337e1cec32b94cfce323eb25f2e97989a02f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/logo/main/1win-normal.svg HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: image/svg+xml
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-1221"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/js/91217.73609eb3b.js
172.64.143.26200 OK 828 B URL GET HTTP/3 1win-cdn.com/js/91217.73609eb3b.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (846), with no line terminators
Hash 873b0a1f00b7e367ac6843a8b9e80deb
b9333e21da514f326abf81822702b8897c39fb48
647917f9f3afebc3e96f7512bdfa2faf4e3b02948b908fedc205a18a5aa4c76c
GET /js/91217.73609eb3b.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-33c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436035
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iwrvpo8j%2Fym0WjiTOX7ykv2qj8lkW64nUvUuBX4ciFHz23d1C76PMsLZlP1koQKhiTkmHTWOUPh4RiztYLjiN0eDqwryrkY36iNm7JiTClyvfOHxswLhuEgzgO7NI0o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e570a0953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-dice@2.6e1ac0ed1-256.webp
172.64.143.26200 OK 430 kB URL GET HTTP/3 1win-cdn.com/img/sprite-dice@2.6e1ac0ed1-256.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 430 kB (429680 bytes)
Hash abaa6833958bdc5427e6fa573cbfa70a
d43989916cc382e4e3d983933d9cd52a7d1dbeb2
51ba8ea694483e38020360731af53be7cd411671786008119b70b2a320e3bd92
GET /img/sprite-dice@2.6e1ac0ed1-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/webp
content-length: 429680
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-68e70"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 2026
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3R33Lp0GQAgCqyh23GYNkHV7rczVj1yuI526SmE3JUiWu2BT%2B06R2gS8aorkedm%2BCdPbPgASC9OJEQk%2BuFIYzGNZ1o10NjCoHDI6sfV5g6ILSgo%2B2%2FtN%2F2vggMV74t4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e595d2253a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/common/banners/all-v2?lang=en&type=desktop&bannersType=main&localeId=1
172.64.143.26200 OK 4.1 kB URL GET HTTP/3 1win-cdn.com/common/banners/all-v2?lang=en&type=desktop&bannersType=main&localeId=1
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (4378), with no line terminators
Hash 9fd28f2c141850248449d891501624a6
7809ec7460f945835b26c5ecc762b3a880be2e2f
906f4aa236c158214ff145fbd1852a2f18a97a9c15f07e57ea7f0dd1a77e4d38
GET /common/banners/all-v2?lang=en&type=desktop&bannersType=main&localeId=1 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1w-astt.top
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=3600, stale-while-revalidate=300
etag: W/"1ba0-hCWL1F9JIbPOEHFuHDH4guWJtt4"
vary: Origin
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQcZvJTQUDQrYi1qMwcxnTtNNx4CMSRfk0%2BIuPZ7r2MSVoVyUvnaB56w8ePUAGkCYHooeuc%2F31wlig0dVff376eBlCQqRZLmkaxK5mF6Z3rnbIeZ%2Bcpupp515tOD8F4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830d0e59ddce53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pgsoft.fdb9d6567.svg
172.64.143.26200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/pgsoft.fdb9d6567.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1509), with no line terminators
Hash 71eb5806fcdd473839d2654d03c3fd5e
76a63507f2c2a26ffc343182aaa5d3278197ab88
dcf4ddaaf54ac6541b02df2c9198fe4743b219ec65ec8caa67b999e6a07335dd
GET /img/pgsoft.fdb9d6567.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-5a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 474049
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rlIdx1N8hRNIrcBgPK%2F1m%2Bm5u9AliTD0cwf6TKgSrn3N%2F2s0Ui10QlDyH75oxImmfEdTEz4IlnPD%2BkWkDKpJcDycbiM58ZLIlS9zWGgyO3qbP0H5%2FePoLjyvxKXAp4g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61996953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/smartsoft.d8a4b520d.svg
172.64.143.26200 OK 299 kB URL GET HTTP/3 1win-cdn.com/img/smartsoft.d8a4b520d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (31788)
Size 299 kB (298969 bytes)
Hash 6bec0d360a5db76d67f9da29d3d4d206
614068b8909c0fdf885888290e5c0d62cff35951
df436f88f7f3b8bca45c6f8717853ca32849bb220297851fca614a4d574e6eda
GET /img/smartsoft.d8a4b520d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-48fd9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 373968
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=daFl3C4BTguQPU8N1xETvGOaCpTpQqcJvylkp8Q4qf8xOKRCO9nFdY8IXTBAOkgZnXCE%2FHTzyjIhnWiawf5QFegGThwIjaRoDzdKJNFoOmj1l1VEPQ101jxvYENhUYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e624a0953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/33777.a4e206d0c.js
172.64.143.26200 OK 401 kB URL GET HTTP/3 1win-cdn.com/js/33777.a4e206d0c.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 401 kB (400782 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/33777.a4e206d0c.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-61d8e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2825
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bTw24pV4oNv3M76z2iL8B1%2BUAZKaKw1LDEBskwoUVE0LFa%2FXax2Xg7hMrIZ96LisXgHQ4VYbPHf08XmgQmcCSnoyt940ShbPYW9x29Ri7Vdaf9iezjhJejY31dCEogs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e540dc753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/20085.9a6de51fe.css
172.64.143.26200 OK 8.3 kB URL GET HTTP/3 1win-cdn.com/css/20085.9a6de51fe.css
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (8339), with no line terminators
Hash f014be944c4c68465d8f1e06331b8019
49b1486fce0beb50e38bd737026fbcf2d1c5dff0
be1c335e569077b523355610d8165f61e6af8a7004e29db7d7218d79ace98d6a
GET /css/20085.9a6de51fe.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: text/css
last-modified: Mon, 27 Nov 2023 14:39:57 GMT
etag: W/"6564aa3d-208f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 690455
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0gSdv8j%2FhPYUx2Tf6j6DdbHd%2F5dqY1%2BbcDC8JbGfjUu257YEaEoppPbDOjSVjCaNKqVrAYPgRUXiRv%2Bm7JId11o4nTQCGFzj09%2FC4%2BelGivD39AtzvYfNqYda2jn8Hw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56695353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/7mojos%20slots.c8ad63b4f.svg
172.64.143.26200 OK 9.0 kB URL GET HTTP/3 1win-cdn.com/img/7mojos%20slots.c8ad63b4f.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (9119), with no line terminators
Hash ee7f334d83ac78ee94aa7cb499a7d252
acaf3f1ec2dd643c920f036bceed9922c4398d9a
eef20c5785f1ea1445bc5d54982011d999ae577a2d354eb7035465336ad1555b
GET /img/7mojos%20slots.c8ad63b4f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-233d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 460489
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XIp56GzCOrkBOnDUUFd5e8f9iJ9sF%2FYguUfSGfC0%2F1bfmhCVSfplkVlDQOdGWDFP%2Fi00UB5baBFUVI9XlLgGadXbEv%2BPUht83UNozW%2BjIER4Yud4mv8cyJGZnOs2rig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f2d7753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bgaming.ae3573ff9.svg
172.64.143.26200 OK 4.0 kB URL GET HTTP/3 1win-cdn.com/img/bgaming.ae3573ff9.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4045), with no line terminators
Hash f2081caf12b5dad178e766a8bd906e19
5ffdd19030dd7868b979fa8c19243e62b70eabb8
ac0b648f44a2ab64ba3f4e7517ebbe6ba9ff28082268f67b9afebc0d8d38e884
GET /img/bgaming.ae3573ff9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-f9d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 645225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d94J%2FSRiUGyvIUchzkv3h4JSeJcxJWHIdn5%2Bt53CV1DQhwgU4kvQDksZ2whUoqd1UclkkLUqLOyavkz36JLnnjcTrpBKy7sXDMCxMW8Ko%2FHcj8JCfKvWlH3aeaKV3VQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fbe3d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evoplay.cfa676ca9.svg
172.64.143.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/evoplay.cfa676ca9.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2620), with no line terminators
Hash 7b4d8b1998ceae4f1e4defe0e5b322a9
b60d4fa2033a28349d7920647907368835ab514d
ba06d2a9476e9302fb1576b656f6c522ada52d31d30e9461649e874207ca18bb
GET /img/evoplay.cfa676ca9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-a24"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KI5tK4rnGJ3CeKNPCmv9Yd1JcapZvVmCRHgJf7hw%2BTIRgjgfgmNQxxav0JoO0A3YmQvMQitRMTrkl4anS8z%2Be9RNDnPGh3j0xJwBS%2BPfxrkbhBMZLyRNLXblLDO3RSI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c83453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/salsa.8d18d113d.svg
172.64.143.26200 OK 4.5 kB URL GET HTTP/3 1win-cdn.com/img/salsa.8d18d113d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4731), with no line terminators
Hash 8ddc56d0a9c2b1ae996c3521eddfae36
db430c81bcb0d7090c4067b858c8d48f0ba5d320
08bcd575204796b49e6590b14d0aef61c53647132f039606f45957b971c37844
GET /img/salsa.8d18d113d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1187"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BbxydY%2B%2BuMTyHWZiQQR876qlpZAMGwWfCh7w6qjyOmKTi1MhfIxwAddeiZucshowy6br6Fo%2Fc3tys5sYu8wMiiPofVfzUMM3E%2BFbGm0F5EoUG946z4fF2LdDTTxZWqY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6239fd53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/mascot%20gaming.21cafbe70.svg
172.64.143.26200 OK 5.2 kB URL GET HTTP/3 1win-cdn.com/img/mascot%20gaming.21cafbe70.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5300), with no line terminators
Hash 692c90ac31385db12fe64a48ec01b77a
e9249716fcbdc6e0b75b798d0f37ed6942a045da
d0b041e1a396908bda558a5d224edb3cd80787d88910beb2fdb2dc4e5186045a
GET /img/mascot%20gaming.21cafbe70.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-144f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DYXBfv%2FJNmNsUkXuNnlj8slOoeIwco7fA%2FxTc7cdqZ2uFOt%2B2FUbCCnn64M8PtkIGVOXh1UTrTL%2FuYws45jv2KzgVz9kSlX%2BG3zhEl%2FECOHS7sKxYk3gsxGzXtbW904%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61692453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/chunk-vendors.938878614.js
172.64.143.26200 OK 220 kB URL GET HTTP/2 1win-cdn.com/js/chunk-vendors.938878614.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 220 kB (219646 bytes)
Hash 5262e1fa83792c06cc6fdea7016cff5f
2028782168be7d43eacf979318c0c042f761d9e0
ac069e1a69001599cd5966f5e0a679441f33c40e1056142ace48e1be094a8d7c
GET /js/chunk-vendors.938878614.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-359fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 441437
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FGhl%2F%2FWp54ZhYeB8RxNQiBwvdVS0kRD9lXiq3YOwZhmKyxL28666gAvpYBGzm8xEwxp%2BXb0eXjEGrOTwsqiMJatkecPY%2FyHOvt4zissNTaQOAZdpPOICzCG35ihVuSM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e51dc83650f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/img/500_i18_bg.0e037ee17-1320.webp
172.64.143.26200 OK 40 kB URL GET HTTP/3 1win-cdn.com/img/500_i18_bg.0e037ee17-1320.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 14de8fd7c8de24bb9f6f89ddd3c2d480
9635193c712dafa2c58339dee09588880a96a980
633593c73a175eabb2a5716a04aa84b1b49fc8e4ac4687b07509db36350076b7
GET /img/500_i18_bg.0e037ee17-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/webp
content-length: 39614
last-modified: Tue, 05 Dec 2023 09:45:11 GMT
etag: "656ef127-9abe"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4988
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o6FFvuBA9goWx%2BThqWKgLGb%2FSc4b%2FlPOoE%2FaCDK7Hw5akH4Fzqy%2FUC5Y1yTq%2FOG%2FsMVqi5BJrCXBc3paJMtRxi53lUfxvi1WuJ%2FHCRSWeRcCU7dWhpkY8L5%2BVslLWxw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5dfba553a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1x2%20multiplayer.00302c7de.svg
172.64.143.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/1x2%20multiplayer.00302c7de.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2620), with no line terminators
Hash 113eb6d7137f5f70e8e824f5487e85bd
3d4d5852693e551b81b3d8106608e11bdb3a5080
72f4e464420bdd29f86767f770246a82e37d7d54e601f3f460fdcaf351339a0b
GET /img/1x2%20multiplayer.00302c7de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-9fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 635582
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cbwUuMm%2BSh2nsviSYupcUix%2BinPgz%2FmJPficp2KZ4Nx9dKO2Ipukop5Kmq7CMwY%2ByNGk%2BrlVhD8tjW3ZhKWEZqJW8hSXXawj%2FRBLXrfhnuwHV4WgWkKAP2%2FA8kyEtjk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evolution.acb5f3085.svg
172.64.143.26200 OK 2.5 kB URL GET HTTP/3 1win-cdn.com/img/evolution.acb5f3085.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2640), with no line terminators
Hash a27852d0f8f77af9c6a274605b932984
415500832c34ac475d87411fa799dead414701b4
c162d16756ed886b03e4195178b00ea6d54baa3e71ce40f0dd46f3ebb3643e39
GET /img/evolution.acb5f3085.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-9da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 455914
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iw%2BRfF25h1c%2BAtzdvpsTN8ZOY1BDeCsbTJI9hY9QhcsWKr5Xfi44U7H63ckEzp1HHaiboJOVjbnu9kUX2V9RZiRWEEDNISLICIUm25mEJidtdX%2BSbD2cxpfJ1O6FWt4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c83153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamebeat.5649e97f9.svg
172.64.143.26200 OK 1.1 kB URL GET HTTP/3 1win-cdn.com/img/gamebeat.5649e97f9.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1228), with no line terminators
Hash f47237dc478a7b0d1ed4d2687cc13396
66ce5afa1722b78b22858e1ae057290f36a13c81
af0e90737145635ae2a9807d550dfc2bd2746cbc50f74b828a3aa4c0e9a8ca19
GET /img/gamebeat.5649e97f9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-472"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2F%2BaG4hFv7aLZ2JJh0dFe1QbwS8m3ETAHSovVmVgfYp%2Fq5I4Ida2NKIvyTfFcttL8yFsRu0VAXIUWdJht3hqVL6l7%2FAQJdsVRXu1p0Hmm9bE6OVNALFELX2BlfiF7RE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87253a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/yggdrasil.a6bc350dc.svg
172.64.143.26200 OK 5.8 kB URL GET HTTP/3 1win-cdn.com/img/yggdrasil.a6bc350dc.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5824), with no line terminators
Hash 1156d7b0c16ee989276ab38995b5e316
2efca22c943534eec487d1441efc9c1280c0ce62
05a95300234033b2ad7ffbf88873540ae90bfb3b849dc207666d8deed966d24d
GET /img/yggdrasil.a6bc350dc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-1697"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 553655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cyi54s7LjE9A9FI6FMzj6%2BgOKVevIiojZebEyh7P7spqeDyPEYXtoym%2FDHV7q8Tys9ASWiBQ8BLvbFroe%2FpotGj9%2FcjnqLoV1y07ucxTHFgjJAfVGbobu4Wii9B8DQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e627a5353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/caleta.b1dc71f69.svg
172.64.143.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/caleta.b1dc71f69.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1327), with no line terminators
Hash bbba19a0f7e2c3b02a8ca7d7c833eb63
5dd340d9cc4c395174865b155829f3054fb29275
96061a9a0bc3a990d16e91b8c52ca6436dfde7223b3e9741bee8a772f4559ccd
GET /img/caleta.b1dc71f69.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-518"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nlGnitTXsveWvha934Kd5mYTh9M5c1%2BYIl1H9hNWkQCFkQeGRlzbN26xCcv%2F8geiWqsIiPOhHFATAEDTYE4y%2BSORyWHg%2BD0r5S8cNxSszslA7TaguW8Jn4BHjHu84fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e602ece53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-tvbet-frame@2.52cde99d0-256.png
172.64.143.26200 OK 4.5 kB URL GET HTTP/3 1win-cdn.com/img/sprite-tvbet-frame@2.52cde99d0-256.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 40212134fb58f842529fa66647f1b7d2
e6d355ea609129942cde7b9d47e587ae5cc8596c
c04666bc555dfa0fbd2b5da4984cb813b58eab772e1fa1efa2fd2e62c6d11f7b
GET /img/sprite-tvbet-frame@2.52cde99d0-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 4458
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: "6564bdb0-116a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 635582
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XtotO2eA%2FUrnsFbJRf73NrvJ1ruLuF49mSsyK%2BKZ4J7tHEm2V%2BrEePRid1xdQhSyq7kj%2BbYtA6l2TJ%2BTyijitna4e4w9cNUslu7NuzAgnIW2d2XSqgSvhrkhlTVB94g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e593cf953a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_bg.d251a9b83-1508.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/500_i18_bg.d251a9b83-1508.png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/500_i18_bg.d251a9b83-1508.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/1x2gaming.00302c7de.svg
172.64.143.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/1x2gaming.00302c7de.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2620), with no line terminators
Hash 113eb6d7137f5f70e8e824f5487e85bd
3d4d5852693e551b81b3d8106608e11bdb3a5080
72f4e464420bdd29f86767f770246a82e37d7d54e601f3f460fdcaf351339a0b
GET /img/1x2gaming.00302c7de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 08:29:41 GMT
etag: W/"6565a4f5-9fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 626160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Blp5sG6tTW3%2BoEhxvC7yR2iamNsVC25sYIVo372Nzh9M3tt26PHhKfeN5XMJ3TeT7AngsMhoIqy3TB3PLzPBrGB6wn9mXSizJ%2BNKFqga4j7q8e1QQi1evdhpg8URH70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/ezugi.a9c66babd.svg
172.64.143.26200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/ezugi.a9c66babd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1463), with no line terminators
Hash 329b99ccd51d8cd3e1a5c8a1b83a84eb
ad907259ddfcffb089829ad24a4411ff1cd4b1c0
96e851dca3bca1d7d99061ec91cab28bd2c037ce8732e80a4ed601e86c0e67c4
GET /img/ezugi.a9c66babd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-59f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 373970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OJj9MY0Ktnsn9aYIM6JFlMtGcyecf0t50sRAB7xZvjdzsySvx%2B%2F9bDm%2F2fOAc0KZ7rJftY3TqnxuX%2FLP1WM3Egj4SiiVwJJBEumB5TvUvgCa1TIMc4HVmGtqgfyF42s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c83853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/flags/en.svg
172.64.143.26200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/flags/en.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2329), with no line terminators
Hash 79e4258317717cae7d54221d403e28d4
85a14a9c6aa03cf4c9ec9e942a06e5987cb61d0a
0b0d98ecb898886bc24f0a6859a7a76034f960374c9914370e69d3ac7467a697
GET /img/flags/en.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-8ae"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 3055925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nxFco6L3v%2FO%2FZrlfN4I9%2FZnAyXzESDsHcnFQPIylz%2BX7187OdfLTxhKjPW3RsWMeCyAjt3OhRHjmcWBbNNtCjMGEWLsZiOW21YSgHQUswZROD9Hy1yc17d13XUTiUtI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e576a8453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/atp.e87cf2801.svg
172.64.143.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/atp.e87cf2801.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11818)
Hash 3fc6d0c6036c51b4dfe66e116e849214
86ce1aaadafc27a3777f00411012d449f3ae9637
8f671c058e48d1614f577f5acae1f1c27c7ce6af1cc2bcebb8cdacc1280f5207
GET /img/atp.e87cf2801.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 15 Nov 2023 08:46:42 GMT
etag: W/"65548572-2f1a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1746602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FNOWAna9b%2Bh0XwzgHJ3VwGy9Ix%2BN%2BxcRAGXUuuMLfxCbIiJbJmiDubjnKBp8cfCRfGbjHbeiArBaIoaqx%2F8Q5fDQ9G3Z6D70gHByFye2rLEhgYP6HHOw3tTY6VcdV6M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b6fff53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1w-astt.top/core-js/3.33.3/minified.js
190.115.24.78200 OK 244 kB URL GET HTTP/2 1w-astt.top/core-js/3.33.3/minified.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
Size 244 kB (244105 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /core-js/3.33.3/minified.js HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-3b989"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/js/90206.1cb37ca3d.js
172.64.143.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/js/90206.1cb37ca3d.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/90206.1cb37ca3d.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-2d08"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 441418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2BKwjdcYo3TKCZ5HRbuEU8GaUFb2WT8ijFE7MiAyCAJMH%2B8cizaHiWR3udSYu4bK%2BjdnzvUuRmyAqD8ohTge58mNgp2BYeoxc2DybNrRiPpXoVrH6FO4aadPS%2FpEcRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56592753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/5%20men%20gaming.097954de8.svg
172.64.143.26200 OK 3.5 kB URL GET HTTP/3 1win-cdn.com/img/5%20men%20gaming.097954de8.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3512), with no line terminators
Hash 0d8d5ad9a6aa74686d61568450fcf69e
4446edda593f44d86ef726d9a4df51abe1c8ec4d
e5bae8fddd4377f01d342b54c7ea610683b1ed071bd215b3d66f8c97e83f7f66
GET /img/5%20men%20gaming.097954de8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-d88"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212207
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRZX9TYv9gtuFhTTp5xo72YJP1jyidVRkvsiungm5HXgP3VtYWYhvxmrOH%2BqGOPpAPjmZb6ryX0iTnnVOo42l7Ern%2B0npEbI8KSB0FX4jxgq8LvrkhyGDBSX8i06Hxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d5253a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/barbara%20bang.790acb7dc.svg
172.64.143.26200 OK 27 kB URL GET HTTP/3 1win-cdn.com/img/barbara%20bang.790acb7dc.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1431)
Hash 287d95b42ce0b42532a5c8caff190779
6d6b4d0d17c558215c719336d124ba53a7118083
739c17db57dc727e751e65cf1d4aed12fb371a1e40060a3b22c92e630219e945
GET /img/barbara%20bang.790acb7dc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-68da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212207
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n4uyHC8WyTLpoarNSQ2ZnTgemyO66hD4tjgb29tcVWwdD5q%2BtSQklz9RW5Y5h%2BtpRsXOUlQGQlZgAyG1y4t%2BtrzRKlKBQ%2FsX3NfI9gAHjpraX1v%2FltSfX4FfjHAKGHw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f7dcc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/superlotto.0b2069aeb.svg
172.64.143.26200 OK 7.0 kB URL GET HTTP/3 1win-cdn.com/img/superlotto.0b2069aeb.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7086), with no line terminators
Hash 128046b1d7f6f312cc287763f0c22336
4d2984a448e97d8b6e5b34a4c9fd08dfceb6f4a1
8531767fbaba9dae9a2f659ba50799bef2f9f0c207105bd1010f5e0a12b84f89
GET /img/superlotto.0b2069aeb.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1b55"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sWoxkMfwDE0RuHts1IogoGHx%2B6Dkg2G%2FkShBSHpFj%2BCv5CPJtoZKIfQbd8Hj8ntkPf1lb9tHUk%2ByjcpJn%2F6kxh3uJf8CDYXFK1jgj82fqisMcV0MpnFAROCploLB5Xg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e625a2953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/turbo%20games.0a45ae56b.svg
172.64.143.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/turbo%20games.0a45ae56b.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1070), with no line terminators
Hash a3d3ed5aaed2f3fd7a089aa6b6e00aea
d366f4c84c203fd116575a62676b89bcd97c5816
8c7289cbe7f24989aef5f3b52bf00d1178c03b134a718bdbf54d7ffa7d8426ed
GET /img/turbo%20games.0a45ae56b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 640908
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MJMXvgkDFKtkur%2FM5kgXHHF5wcCTGRFCTFl5K%2BHODtVk1oZ56Rtkr6%2BEodHCsi84XL1W9dPyKf0xO2pVCeVZcM0WFXPFfPtZm%2Bbr3c8TZXw%2Bm4dkYqsYM%2Fg6BPrgtmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e625a3953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/33777.14b2a46a7.css
172.64.143.26200 OK 20 kB URL GET HTTP/3 1win-cdn.com/css/33777.14b2a46a7.css
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (19592)
Hash 8dcc2a31acd34c0bf20bdf8210db8e2f
556d403eeb5b252cdd87f06b03cf70bf2e93040f
18230f418ffa66758bea77f27e7463d10ee96b5c0b7caa1708bce34fd80c6bb0
GET /css/33777.14b2a46a7.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: text/css
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-4c89"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2825
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HRl7Y3gd9a%2F9GwAeOQuOrNEtyjaryTLBJ2ZNbmtNXxWm6oFRXOzvkfcmDjSNurT4Bz0IXm7FsVi9UdgnAJu6pBVnGKP94ahhQgW6ynsOQajg5ICj4FXxsT6h5Y%2FyUeg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e53fdc153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/58183.b5e329285.js
172.64.143.26200 OK 88 kB URL GET HTTP/3 1win-cdn.com/js/58183.b5e329285.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 29c3cb0dbfa599b34f0f87ddfcdb41d3
3a0203c8ebcfe397ec82c2302603badc95ee5d2f
8e534ae1b4258d7bf332bdf3abb158404804bb1ce1277271346e3336fd2b6a98
GET /js/58183.b5e329285.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-15645"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 441296
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iMOzi0WdoL%2BS3WEHWS%2Bt9d7LF7nTrBsd2dL4Rv1OnY0bQCsfRJw4ZCEp1tEqlEqMkHCetlg76edVxdiYMJ54siJ8%2Fs%2FBra78N3kH5gt5hmrl4oRwKgCe0kiTZRIeP4k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56491b53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cool%20games.019d15340.svg
172.64.143.26200 OK 3.6 kB URL GET HTTP/3 1win-cdn.com/img/cool%20games.019d15340.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3706), with no line terminators
Hash c3efa9849696becabebca718837f0827
96c9a9ae1bcc9e9b7ca05f52c14a1dc0cd986653
ee6d141e322862aa269184cbe47e86f7e8882b13966a905121857502eaa1a8fa
GET /img/cool%20games.019d15340.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-e13"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SmVDeYEGrRmyrXncOm8z2c2jJ1s0CVVx%2Fzgh0GjAN7Wobd2Q2IfRLTod7wwHjauECBtlQzBdU3v%2B%2BY1dA64NAdpfiiDZF8BFays41A8aHq%2FYE2rT8d7WQGJd3ETtrvw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e604ee353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/desktop.748f131d9.js
172.64.143.26200 OK 129 kB URL GET HTTP/3 1win-cdn.com/js/desktop.748f131d9.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129364 bytes)
Hash fad7a4eed4c3dd4480d01efbc72b8c7a
6edd3f0d0cf4771f6ef3ba1d0fca9e78dde30f47
78ef73e8f41731480bd4b01be98514037716fdd72882ae85bde70d7fd29a6df7
GET /js/desktop.748f131d9.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-1f954"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2812
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aHLyALkSLAQmotPpCxkWEcTG1h0q5jnLUBLiEJI1ZqUAur6Voq2XARo0ujxAy4lCtmzcHZhKtEPeKKS%2BeM1M%2FUL1P8co6Fameo1LO4LWYg%2Fmx7yIEB%2FUuIuer8r2XIM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e540dc953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/7mojos%20live.cb6749a25.svg
172.64.143.26200 OK 6.6 kB URL GET HTTP/3 1win-cdn.com/img/7mojos%20live.cb6749a25.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6764), with no line terminators
Hash 63dcbe9ebaa3f238a8c0152142b06a03
cac36df8800a2f72b9b51f9eeffd74e82be4ae7e
c22e31035811334913ddbd32cfc1881c38c08fdd4d4b4c1c5362ecb6ee23a316
GET /img/7mojos%20live.cb6749a25.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:41:33 GMT
etag: W/"655dbebd-19ef"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1143296
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GcnaIJDA4S6pBTonh1of5IZ4hciFH38gJDpoxKB1pjhPoZZvPa%2BFHfFbzZxo0ENZ%2BXIek88oU0Kn1iePm6THLOlS4vg9Wslr4vQDc%2FPM%2Fei9ot4mRUWZcus%2BI9LSJ8M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d5453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/amusnet%20interactive.428b45c71.svg
172.64.143.26200 OK 672 B URL GET HTTP/3 1win-cdn.com/img/amusnet%20interactive.428b45c71.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (702), with no line terminators
Hash dd800d25fd1fc6956949e43d9997d38d
d2e3ced7d4ad91488dc8dde871b6651a01153f4a
8a010ef18c9d5777be9dbf363882bb9eadb3ded464fa63f0dd133e10a1bfef1b
GET /img/amusnet%20interactive.428b45c71.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-2a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 459273
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JYOnMKDafGj3gRbTrnEg9H77p3soW3ZzD3FtcnOMocwkT5eiuXW9AoWiROrDi8J1uSKKY0OcfH%2Fi5MeYoX1QEorpLaV%2FzfRAhHZm%2BEShL99DBohQE9yzTDclNvgBl%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f6db853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/88971.78a663d44.js
172.64.143.26200 OK 529 B URL GET HTTP/3 1win-cdn.com/js/88971.78a663d44.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (547), with no line terminators
Hash 747fc30343cbabbbcd8246b2a4598ccc
9bf22fb112b065a447c3dc013d3e513f7814566d
7970a6d096e6162d9b534b3160178c89ea5aa9c041f6adf5294be76148e09780
GET /js/88971.78a663d44.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-211"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436094
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HYgwTXRZk22mEfSpeES4aVZ%2Btn36hXC42hiCpukXzn2XAiFSPpDrGlmSr7WyVQ39CL8i7aIehl%2Fr7Dax6JsAFw7FIjsdEc62%2BCi6vkX89El1Te5vrhVwX6O87Ua7Spc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5eccd653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/rubyplay.b4553f39e.svg
172.64.143.26200 OK 7.6 kB URL GET HTTP/3 1win-cdn.com/img/rubyplay.b4553f39e.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7646), with no line terminators
Hash 3858ea5c6be5319073b0453eac475c1b
72be49666df66401b531cfe9658ae2b64f897b0b
fb96a6365440b705da9c72c59a869499f4872ed922243f9d248536974a860980
GET /img/rubyplay.b4553f39e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-1d85"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 645225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nEi9ZaOiZkvlvYVqtD6Lz1I7EccTecHdMo%2FMtpU7CoKYZRBr922xRO97UZIJed9daxLE90hKVQK9JbLvuKxdphhxR%2BcOmHTw%2B4XCcVuaP%2B53YqP%2B55ilDuQo7AhvQSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6239fc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/tvbet.fea6d0222.svg
172.64.143.26200 OK 9.4 kB URL GET HTTP/3 1win-cdn.com/img/tvbet.fea6d0222.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (9935), with no line terminators
Hash daf98e0c0d45cb1db158d09bd07e4959
2c28a0c557fb1cf89267d49d2d5ff2a958f896c9
e3f1319aa5c6feb25f6b42156eda20d784b7a7fa6ed97488292a7f5e23b44ab4
GET /img/tvbet.fea6d0222.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-24ca"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CY5b89mlvbRs1jkhFoM5j1BDcIngB7b6Pi%2BKoUXRQyul8wiw79fPQb0OU3yY12tC0QFRzD4JwdcC2c5IqGUHudDdEspx0zk4NWR1pJmM7GBMEAMcNMhZ0CNvXP4E6ik%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e625a3c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-tvbet@2.888adc8ee-256.webp
172.64.143.26200 OK 354 kB URL GET HTTP/3 1win-cdn.com/img/sprite-tvbet@2.888adc8ee-256.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 354 kB (353842 bytes)
Hash 8df817e5ef0af5dc8279d3f20cae9bc3
12c85bcc74a48053c92f3f75ce3c14e1a19e46d3
61a0f98511e6c60430ab044d1f80e1c9eff83f577064d465cc5f893ba3ce0fee
GET /img/sprite-tvbet@2.888adc8ee-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/webp
content-length: 353842
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-56632"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 2026
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lb6et98mT3LEeIOu2Wh0aQvGWYXHTfEaBS%2FYx6T%2BH6jx7rxNJE1GvGrKZq7ac%2BCfK4IsQ%2FfNG0dNy5bDUSrnwH1FjiPnL83m04b5v6anRr9k9jtfb5UR4ZIBltNuT1U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e594d0353a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evolution%20gaming.acb5f3085.svg
172.64.143.26200 OK 2.5 kB URL GET HTTP/3 1win-cdn.com/img/evolution%20gaming.acb5f3085.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2640), with no line terminators
Hash a27852d0f8f77af9c6a274605b932984
415500832c34ac475d87411fa799dead414701b4
c162d16756ed886b03e4195178b00ea6d54baa3e71ce40f0dd46f3ebb3643e39
GET /img/evolution%20gaming.acb5f3085.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-9da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 387310
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PDCs1z7lgVOyHg%2Bwptrnm3RhT8xLKG98nYFK94%2FNg2dBjCtLyU78EW5mMTRsBhrcTSiUZXbhHCO1Kx4d44ziLK6WT0tqGBoJcVcI481Orh8nRzi70mHyZNkJ%2FpZgmU8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c83353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/igrosoft.69f8e3ca4.svg
172.64.143.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/igrosoft.69f8e3ca4.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1321), with no line terminators
Hash c193a82075a3318b6b01f6652548e025
008409af9a242969c8c0205fc8052d17b61410b3
71151a1f7c348dc26ab089351320dfd6cf0ccfe3c0019c475e0917c0f9b353f8
GET /img/igrosoft.69f8e3ca4.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-500"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 553655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XSpmPrUVoh1%2Fr0MeKmH8r7D0cVBcDaVZkmn8qi8M6IsZuZGMwO2prz6%2FVMzdhImGxrh0Hf2Vq4zTRHi7IyetYbMRfvgiijJU0K%2B9dTv6O9eQgiMM2pXomxqJVx7mLF8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6128bd53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/revolver.25aaacada.svg
172.64.143.26200 OK 3.9 kB URL GET HTTP/3 1win-cdn.com/img/revolver.25aaacada.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4079), with no line terminators
Hash 49db2026a7b56b5525113dde1df88e5f
145eaf3e89aaa41bc641b6cfd321d900f74065d6
6f0a14e96df44350c7101bb3382f02983f1eb98fced9d4309cf99b2210a96adc
GET /img/revolver.25aaacada.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-f28"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KsazwHMZ%2Bz5YICefVUD9exx2iVf998LBr3wGabVvhvYx%2FThE9pAn2BKcnc8vFfPBJWfL56L0lu%2F2OvKUDO%2BEc3lHKzjYvwrgxQ%2BGBdedKziqXy8FI1OzSVRO9VL8jbE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6219e553a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/thunderkick.6962312e1.svg
172.64.143.26200 OK 841 B URL GET HTTP/3 1win-cdn.com/img/thunderkick.6962312e1.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (876), with no line terminators
Hash ee06089b308c5065a8e92a32b7b38686
2e83ac75ceb109c245525a733cfb3efc97cc42bd
24c651706b7981a60f137cc5b44b8d28dd81116565ffbdaef6687c8b41e4da21
GET /img/thunderkick.6962312e1.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 474481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pp806zSbkAwy5CA2p0fNV7d4FlITt%2FOkw5HOkDhwGZHoDvA3KaX8V9ssEIErng074yu7Z1F%2FDuoHcJMZXDA1F5VNzc8FL8sWs0GUoBs2VsXX5yEMNc%2BLyt0OH9RShnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e625a2e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/47408.ab11b4ff6.js
172.64.143.26200 OK 8.1 kB URL GET HTTP/3 1win-cdn.com/js/47408.ab11b4ff6.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (8344), with no line terminators
Hash e3ff7b181d30c489beb178fe8433a483
7f5bfb288ea4a1180f72cbb5fea0394bf364193d
346cd3f2711de1bb36cc91fba2a9e1fc9c7a5502b6e0f7b6dcb3b2490e3ba1f8
GET /js/47408.ab11b4ff6.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-1f89"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 370870
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XlfdGe%2F2WnHUswvA4gyuMyZ6LAQS9DgaymQVA58Dbw6jnN1wF%2F4lm1ylfUAwUK5QiO07Ci1dhzP5Nur86dPSScrANCbaZSOJe81t5yKKa%2BDo0DBMpBcAccQt%2BGLdOu0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56592553a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/35967.07f728900.js
172.64.143.26200 OK 958 B URL GET HTTP/3 1win-cdn.com/js/35967.07f728900.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (986), with no line terminators
Hash f101f5dc77f24d2d3912e2c93bc1edc4
49f1e57d6778aad6b5a46d2cfb37ca3211dc6374
ca67bce590a2a7f3283eb1c50196d936b87658532ef3ac5485ba1459ad1577f8
GET /js/35967.07f728900.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-3be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436125
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DTFpHvCXcQHiHaljBq0AqfrIkzAP0gGrGxeAUNU2GYLYW1SJ9DWCP9wwk3z0bd%2FOs7kcP22Du7uZCHLb%2Fq0nkdszvCs115aHznD5pZjribXQLFp3okmTTk8jJJvylm4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e582b8c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-poker@2.a38733e7a-256.webp
172.64.143.26200 OK 361 kB URL GET HTTP/3 1win-cdn.com/img/sprite-poker@2.a38733e7a-256.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 361 kB (360930 bytes)
Hash 3da44652926631bc4fc847cfcbad6c71
a5f7955272162e543d5db897e200d00d3af22b22
354fe37cee669fe141e1e1dcb3b5a12df1ff2b9b34be38b4f2e20dd46fdb7d2a
GET /img/sprite-poker@2.a38733e7a-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/webp
content-length: 360930
last-modified: Tue, 05 Dec 2023 09:45:11 GMT
etag: "656ef127-581e2"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 6964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A9%2BeE8XuD4IsVkkJhPspSdXgyyzxVI7ZyZd4CVE%2BKJLaAwjeWDj8Wqu6GWdakzEEWpWcRtb%2B2XpzbGzaypv3apgYpmaBq2C1Y89%2FK%2Fz%2BXywiDRhWeJYWHRfxrjAttDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e595d2753a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/liw.134f23084.svg
172.64.143.26200 OK 7.8 kB URL GET HTTP/3 1win-cdn.com/img/liw.134f23084.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (7938), with no line terminators
Hash 264daa943330a145d35b4c46632ff260
9eb716994914e9640f1a2965a0cef6eeb6c2eba0
f0224d25386512226df690d731c56ff27c141f6c608684d2c3d67fa9e26594de
GET /img/liw.134f23084.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1e9e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5CzlsnV7Na5rgszdyfsZvp968jWwI9NVilDbjWSCGgl%2F2MGTcYDlZGUl%2B%2FWuDeQ7WnBECY3Z0y2ZG%2B2qf2DDE4aLfMSgXbKC2b8mvd079jg%2BT44LzpFf8GEphXFyLXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6148fb53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bet2tech.41863da88.svg
172.64.143.26200 OK 1.8 kB URL GET HTTP/3 1win-cdn.com/img/bet2tech.41863da88.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1887), with no line terminators
Hash 37036b9327cf2f08f10c828a969255cc
110c9e121e3f79982f785db63213d01a94faf4b0
13efe39819f6ca0b2ae3ceba64c239738536fee39cd1d6a4a142079050975f2a
GET /img/bet2tech.41863da88.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-71f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 381869
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bu1YhK%2B17A%2BDTQZ1vTgTC50jlixJKD9mbof4MhTAJvc3QCyTcbIPCSqHJtgowQ%2FDqnXJyQ0jEky17ZrVDCIpWV4HDWi5n9iq6Tzja07JYbmgrm0WrGA1Vef3OpiBCIw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f8de453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1w-astt.top/firebase/8.1.1/firebase-app.js
190.115.24.78200 OK 20 kB URL GET HTTP/2 1w-astt.top/firebase/8.1.1/firebase-app.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
File type ASCII text, with very long lines (19927)
Hash 5b9dcee25dd464bbf914b48e05e770c7
3f4e99ad6ce1fb6eb6be51dbd50ffab375eb0533
01a87f9f8138f66274cfedb855c0bfbe1529600a65ed26b0c863533e1e94abce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /firebase/8.1.1/firebase-app.js HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Cookie: visit_domain=1w-astt.top; core-sticky=http://10.233.94.243:80; 1w_lang=en; 1w_locale=1; AMP_TLDTEST=MQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-4ded"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/js/99366.9ce6d7dbe.js
172.64.143.26200 OK 64 kB URL GET HTTP/3 1win-cdn.com/js/99366.9ce6d7dbe.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (63518), with no line terminators
Hash 58a6e71b09f79bdfbc9aeb72d3fe575e
7719dc83567e2ef701aac30f915437e04b3eae06
fd21afaa108a532956e67cae1a39bceb06ebed1fa0d5fdfbd600e5f71eff6368
GET /js/99366.9ce6d7dbe.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-f81e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436036
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=82zkfocDq7ioH4IPXD6kanMLKfYyUiIzAbP5t5Y1l4bc8fr2uO%2BqcIH5NvZzv6mzep0bIQ9nG03MQJ8rYrLpARcGQZy71wgdbdm92wb1gqORylyWBd%2BLfJuHs%2FEmuAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56593453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-payment-full.3a69ec728.js
172.64.143.26200 OK 121 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-payment-full.3a69ec728.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 121 kB (120961 bytes)
Hash 1111e0b9c167337a8165557358b3ed5e
e2f650db011594f660598f138976012f05a3072d
0bbfcfdc02bf4beb9f0001b84537abeba49813a2c29045313452fe9d68bec384
GET /js/icons-pack-payment-full.3a69ec728.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-1d881"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zdycaj%2FHFhfIUcQK3tzgNSZWdcSXlHSYscLeku883vxLZAtX8j7eaxBkJbHkSf9h78eREUIhrF0YGG%2FJQFpBrwDfKdts%2Bn34uBcIJbP0ql0C3wf7mr2g4f%2F6BzskXhk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e588c0953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/apparat.f7a706d8e.svg
172.64.143.26200 OK 387 B URL GET HTTP/3 1win-cdn.com/img/apparat.f7a706d8e.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (423), with no line terminators
Hash c263fae5892b9bdd3fa5e761a8aeb723
4646d9080fe51e04962c1f2dabf13119c6d71a41
2a333baf6e1f1e4d92fa73faae466563009d96e860c1423519b890b68153b70d
GET /img/apparat.f7a706d8e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-183"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fvaY9CErDipybLhK6RIa7wFeSmatgpWSfpEEHEzg46%2FQ%2B0gyiGScf2lgtE1LGUzOQSzKFksbgXabdBRnFxGMnD7lOoYL9%2FDdHXHqUAH0uJt6LteOv%2BIrlwmRYfjVyyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f6dc153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/big%20time%20gaming.e2bd46001.svg
172.64.143.26200 OK 5.6 kB URL GET HTTP/3 1win-cdn.com/img/big%20time%20gaming.e2bd46001.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5645), with no line terminators
Hash 736482b909f3d90f4b87845b06343f95
05501f25bbd97642449a87b6113fbb3a2cf36f41
68f08269f37245370fb3122fa2c76f755644e1a9cce3e1abb1cda283aff2de62
GET /img/big%20time%20gaming.e2bd46001.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-15e9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 634539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IuXWXyK4I6PUronQbXAqFxGjm7Y%2FCMrtyJlHc6VBEiOmGcK6KWbMQjE2SUj%2Fyt9Ns3pluqp86p0%2BFl0MRXPJcjAzpydjxUxgFCYMglmfEco9KXfrNXq7plY3ePFjsn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fce4753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/onlyplay.1c7a3c455.svg
172.64.143.26200 OK 1.7 kB URL GET HTTP/3 1win-cdn.com/img/onlyplay.1c7a3c455.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1797), with no line terminators
Hash c3e69f9fed9cc0cf56f269a871ebf7b8
24c64655556df116228009b2d0e64950404e45a2
c983a2f37ed5b2c73940d48dc81e885d6fa8136a5e0f3399e426e427dd7ff5ff
GET /img/onlyplay.1c7a3c455.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-6ad"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gzOrgg8Oo%2FkarlweorfsJsUwyW07%2FwtO7bQvdz%2Fcj27SYSXeN7sLdLpv35TkXeSU4SnAAHlMUYUd2aTXTfX%2BB5mJILx6ymY8qFvt%2FTcht59IB7EfVFhkFc8IK8bzxC8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61995b53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/99366.4781da078.css
172.64.143.26200 OK 54 kB URL GET HTTP/3 1win-cdn.com/css/99366.4781da078.css
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (53984)
Hash 9d5f1fff2bd591b1b777edfcb5293cba
fe5c911b71e4587f2c2626576e7c8d523bda23f5
30dc60e0f0a725c8c237e15002ee362eb1e874b4eecded9a088b87e85f80a004
GET /css/99366.4781da078.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: text/css
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-d2e1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 375700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8nyGFD8zL5KDd%2BlF7j1uKlcACLaTuevskXLYJPGxV11gBFQpCGMhV8ui%2F%2Fp812BmDriL%2FAew3KoEqe%2FoJQGJIH5S9klqO%2BnakPbp7l%2BoJgkTxTvfVKKt3ENlbXppDIM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56592d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/31310.5ad3b93fa.js
172.64.143.26200 OK 528 B URL GET HTTP/3 1win-cdn.com/js/31310.5ad3b93fa.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (546), with no line terminators
Hash 819ea0d23f76434d7cf7bdad5c0dc71f
06f5a3c6cd80db3f5850633d2f868f55e7e92447
3fc29ff364ab40aadf6f25a1d6423b9d333cfecf786e3cfcc04175850357eedb
GET /js/31310.5ad3b93fa.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-210"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436035
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9uamrMN2fErUcR2EiJ5r1K1njZMLhanVikhib%2F0Yha4zRdvnpyANydTzDinaRhUXj2vDCGY8OgPmxF9YHVejkBS18SCEdlbMsdHCktgrqG3akstqM1kyc2%2FQDWoRl%2FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e576a8253a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/46665.874f409a0.js
172.64.143.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/js/46665.874f409a0.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1042), with no line terminators
Hash 530c1fc3208b67ba84edf563465386ad
d2ae074df39f95da703f5a582a2dadec59962e2c
82df31a277f44a4f8045b7081e23b00003dcadb0f695354354559aaff26a392a
GET /js/46665.874f409a0.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-3fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qqxFRoHaUaZOsd1u70ifJ0uYwz%2Bud2Fu0URXkjBJyTKlaJDCiu4iXgM1gvtNoDKzK7Iqw7heDcqwmQoIWwjbbkGQuj1HM7NfdW7iSLYUV51H7dmCZgmTGSTNip98CFs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playbro.9ed310f23.svg
172.64.143.26200 OK 4.8 kB URL GET HTTP/3 1win-cdn.com/img/playbro.9ed310f23.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4896), with no line terminators
Hash 221b773f0eb73aa28f7617e628f7fc2f
67e3b29f4a951351da5183dd7d6e083fbc991322
4ad7ef6a7e11897fa2b2830921fe86a3d878866c81c87d159f90732be0d30e9d
GET /img/playbro.9ed310f23.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-12e7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=su1E2nN9zUIOKAjbi%2BdHzj46eWOKo4%2BWEgaZa1Vzy79Mcye8E8mokTmjMlKrEAkjhng3oIhF%2FgjaCIaVQ9yG2QN%2B%2FMU6it%2FARMfiE%2BXlwFDyBWuN4UCseTACJF8zgtY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61a97753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/29734.4dee2f2b3.js
172.64.143.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/js/29734.4dee2f2b3.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1653), with no line terminators
Hash b47b23fbee3694091f4f5701c175340d
28f4693c4d807dab19cfa578387d74c87aef7feb
ef66f6e09ab3c9721d948b8a29fe46fedd897ff75aa9cd0ff281f5dab2bb00d6
GET /js/29734.4dee2f2b3.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-649"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nrIpWlpZjJKMb4Ww8axhCZDdRGahyRcMnn6w%2BEbqgCJ5HgCih9FbEB%2FXr4lEjaGOHGWkFpcELmQRhBm%2BtSQz0yzT%2Fg6kAk1DPWI0UsO%2FMCaNIr1KnvQGiP5rGqHVbTc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e574a4e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fugaso.1a40d61ad.svg
172.64.143.26200 OK 2.4 kB URL GET HTTP/3 1win-cdn.com/img/fugaso.1a40d61ad.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2426), with no line terminators
Hash fbe83afa72fe7a858d1fcd467a7e3acb
5dc85aabeac449d7287662a7b6ffe2936e447b84
21f646343e711bc51884ff1699ff6dc11de867dd10a58fee0ad946c197d46cc0
GET /img/fugaso.1a40d61ad.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-951"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212334
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0rHCU5ydvo9Z5g1oRDWaAOhhwFj%2BRzHRNHqoIHY0EfdxB9aMbmPXphxsYi1MHKRbVZ2QfNrFVaaGDVl5uRwBxtxep%2FT47xPl70FGo05LSHyUGkCxOyJNnSeAxNuNSKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60d85153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/vivogaming.436af0a9f.svg
172.64.143.26200 OK 62 kB URL GET HTTP/3 1win-cdn.com/img/vivogaming.436af0a9f.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (61871)
Hash 70c2bbe1a5ed8af496fae56d272b053a
f2c6c04689b7c4123d86229f2929b199ed399851
838796fcbc2d6f7bd235db697a4138551cba6a4e822e1a44d4aa6a8c0be054e2
GET /img/vivogaming.436af0a9f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-f236"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=siHLCtRctzRljybE68VTgn8SOe2tMje2DKpJKPxxg8oKo5HrUrFYYF1ICoTbK7sbow9hGD%2FkGn56Xck3wi8BFXMimtrxapc5hB9NPmyYZy1%2BIMy2QGnuzcq5fw7VQFs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e626a4953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/33700.6c9135ff9.js
172.64.143.26200 OK 992 B URL GET HTTP/3 1win-cdn.com/js/33700.6c9135ff9.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1010), with no line terminators
Hash 7a56ca20c70147de869fb6f869c24757
8ba632a6c326ca6152d0c51a202527013eeb42f4
543572cbc25b63dbaf723d527cdb47a50c56655698f3eae1708b30e881429640
GET /js/33700.6c9135ff9.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-3e0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382511
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ttrSepZy2Rm80xZ9bHCl246gqpCJvlMQjsNRNE0eaFQwSgyK2SMTQk%2BiQ1yXX8q71JsD1XRGQZg2u5fGLjuZyqhU%2F0LSq2LdX66Bf2Z8JHAlEvJVMp%2Fd1WfA9aE8VE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e576a7e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/90511.c15f000e0.js
172.64.143.26200 OK 637 B URL GET HTTP/3 1win-cdn.com/js/90511.c15f000e0.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (655), with no line terminators
Hash a148eff943a30bc50c489b0cf73349ca
757f5c140878aca4fd1e3c8936e54f6abe59f95f
ce9597252bbb61b1a89d84ac59a501e64985510009e7521964cdbf9933e32c09
GET /js/90511.c15f000e0.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-27d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 387569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B2e6JLQi81ZJ9BU9jfMjUkJpFSKuIvhCX2Zr31Q%2Brs10U3vw33CQ9dMvHJr22ySbmmeY4%2FAaU5o3KSddroE%2FdoimuX6eb7ZouVepNWZnHjXMx2xvj6n4O2SZSAdC9DQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57db1d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fazi.19d7f4b72.svg
172.64.143.26200 OK 645 B URL GET HTTP/3 1win-cdn.com/img/fazi.19d7f4b72.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (696), with no line terminators
Hash c2948d97afb6d8e1cf8e7b50b62a9272
a1607553e252407e35addae9b48c1cedfeebd048
309347ec479f691cb02b9aaac9c06aea9cbefa075c591a35b0651e8928e64792
GET /img/fazi.19d7f4b72.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-285"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LTG98uMe0txURCFYf%2FsaMWA8X0oaRK%2BkDFlpjZOfn%2BhykbsF%2FlaaVEdiKjQ1xNW3svtQfaszA45QJJGWLk5RWjNAr%2BidT34xcvpRDwIuMMmD3zK%2FMc9903%2Fv1CFkVdw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60d84953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/726a5af4-eb51-4dea-bdb3-0c15a08bda37.jpg@avif
172.64.143.26200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/726a5af4-eb51-4dea-bdb3-0c15a08bda37.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash da3fa0df80496c274338aa0c3b090e4e
5c6da2b74836e5de56d667806cd1e049a1d41be3
9d137d4714642b8284dae422a954cc596c51a0aad41732ffe2076183ce3aefba
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/726a5af4-eb51-4dea-bdb3-0c15a08bda37.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 7913
cache-control: public, max-age=31536000
content-disposition: inline; filename="726a5af4-eb51-4dea-bdb3-0c15a08bda37.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0YTY5MTc0LTE1MGFjIg"
expires: Thu, 07 Dec 2023 09:26:29 GMT
x-request-id: p5KIrZCVwJ6k7PDHCfFQd
x-cache-status: HIT
cf-cache-status: HIT
age: 450891
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3a9lJRbbD%2F7o7G1tLUmbphWkOWY5D%2B%2BJTAxwWI%2Fh8%2FXQoh8R1oOMFik%2B7ssBr9CSWt56TPfCQH9bN9brIFKhafaBesrdDSCQwEevY6HhuX%2FYec3Ciju1xPaPd%2FVLG5GbzETBsr5CXvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e634b7c53a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@avif
172.64.143.26200 OK 5.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 6c2338a2860272eaa33dbc857a2fdc8a
99a694cf85046ac81a381a1a02850d0c30779f9d
48080cd30151b1193375419c1be2fbd884482606f19be9486f5c201b0bbecc55
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 5443
cache-control: public, max-age=31536000
content-disposition: inline; filename="1693e57e-f215-46fa-bc7e-9c04aa41a5cb.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MmY0Yzc3LTQ5MDIwIg"
expires: Tue, 12 Dec 2023 00:49:30 GMT
x-request-id: zn0kEMCS_M2XcJUaRMKPe
x-cache-status: HIT
cf-cache-status: HIT
age: 21516
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=piSsBMxfu43BA67ZWDXBj3RDN7nMj1ozjE8aJIbKwBX4A%2BSgAKeVc5mvzEVA%2FWBg7vEV5FR00uXq4wg144GmM3ByBRTOob0EaNt9irHsUiJZiMtFRDHcAm3axO9%2BK5NOmng2GYDOqek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e653de253a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/max%20win%20gaming.00fa88483.svg
172.64.143.26200 OK 763 B URL GET HTTP/3 1win-cdn.com/img/max%20win%20gaming.00fa88483.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (809), with no line terminators
Hash 6887ef2393d55338db36ccf501d3b364
cada230cfe07fd9fda37cfde92abc048879815bf
9a8cda3aaf7794cfa521832e211f826e61a93bbe5c0105671dc790b6bed65732
GET /img/max%20win%20gaming.00fa88483.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-2fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fYSuZ82Fk072YfISU%2Fzqu9taWULG%2FxNV%2FlYR3dvi51KlOC45mP6YQ%2Bz1zXHFqw2EibRgVBTh613z5JKMgv2aDhdZC1ItGD05O1gLACvVY9qIRP%2BIoR9A2lJ%2FPiNzKZU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61692753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
190.115.24.78200 OK 357 kB URL User Request GET HTTP/2 IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
Size 357 kB (357168 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: text/html; charset=utf-8
x-request-id: BBDfPrsRUeA1L6NR
vary: Origin
access-control-allow-origin: *
x-match-domain: 1w-astt.top
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/js/index.43c77a997.js
172.64.143.26200 OK 184 kB URL GET HTTP/2 1win-cdn.com/js/index.43c77a997.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 184 kB (183749 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/index.43c77a997.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-2cdc5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b62jPcu6V%2BF6ExeG7Wfy53zKUoKNOtDsLoupjIkjWLDms%2BV1IiLy%2BDWa6EfvzazNbBoYe2Zxnvf1zLzqFbKnHNHm62zOsPDfDebNSlVwZigyV4kZGIlBJVUH4fgV3qc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e51dc87650f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/js/86359.d4aeec9c5.js
172.64.143.26200 OK 634 B URL GET HTTP/3 1win-cdn.com/js/86359.d4aeec9c5.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (654), with no line terminators
Hash 33a83c5ac34b557d3037a52c8dead1fe
6bd3202d3720d8c86a84a63f1975b5d53d044ef9
7eb34e53490cdfe14b7d40ae44b2bf4e92d10e204114c1bf5352f6a66c587b8b
GET /js/86359.d4aeec9c5.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-27a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 435978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=frNvTjDfCJVQDZja2nPNe2f%2FkD%2BV7l8wfqq7V0Lzz2%2FY3mJImKFKZQIOu%2BRCdjbptdoLObbpPdHSEmBRmjP8kMHQRaV3GDA5S1HQBuS2XrWUg54nNRM2z6MBMy4eBzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e574a5653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/58258.a28a3a50e.js
172.64.143.26200 OK 2.7 kB URL GET HTTP/3 1win-cdn.com/js/58258.a28a3a50e.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2724), with no line terminators
Hash 8692e36ae40202509fcf29c9029676f1
7709e6929dc63ac467d0bd948268795fbec2181b
b1ec5aac00e643db59f10336f15e83163d7840bcb12bf70938dea4ab61993b26
GET /js/58258.a28a3a50e.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 04 Dec 2023 08:44:19 GMT
etag: W/"656d9163-a8c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 58184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K4k0wiWM3UOG3io3sPpl9HxNGEbkdxWHfWA2kKLTqyVutu9nQuG4bkU9IgUjhO2Vcg6cbVwgcM4DCmSdmJKBJEaNRSxE%2FhQirHCktSH%2BeGfvwBOkgcZxbLBEN%2B%2BziIs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e584ba553a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/ct%20interactive.74b20dbc3.svg
172.64.143.26200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/ct%20interactive.74b20dbc3.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2226), with no line terminators
Hash e709608dd45ff01d7f75d21bc3534e1e
d45bc1ea2a957ab8113ecf7da9564be00207c6d4
d3909007c8efcbb7e2d3fdabe0dde74063c3efcd76d989f83f6d128b89494b2f
GET /img/ct%20interactive.74b20dbc3.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qaZGHX1aKyOhqx9pPd813Ksse28q9xUpt%2F9JI9c9OyGASG%2BA0v%2F%2B379oAlNleZCnUPnjrvVTkRjqIDrgFEMeM%2FjMOIYYiquF8cH%2FGdHBWvjwGLAjg1adv%2Btrtd9UEb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e604eef53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spadegaming.8dc1e9a8e.svg
172.64.143.26200 OK 3.8 kB URL GET HTTP/3 1win-cdn.com/img/spadegaming.8dc1e9a8e.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3852), with no line terminators
Hash 747a1c4577c4f0216b3c2312e11b1950
c38313a9fb030d29f16ed7bbc1dab939a874aff5
e6e69bc9af907311e8e0d47d368dc74a985349748dc05803b4717e4aa8a3f6c1
GET /img/spadegaming.8dc1e9a8e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-edd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y%2Bqf1edAEQ3aINgvO8IlV3ITZYsfj0dtZD8VbxUX20VBpbpOFgqU0BoODpIMvTMo4CBq1uTKvupFW8JdAJzfhaOxwIACmZFwgaTb7nXexSv9sJeT3hDX2Pm0DqBki1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e624a0d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/ufc.0ef6261ee.svg
172.64.143.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/ufc.0ef6261ee.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1366), with no line terminators
Hash 5e1d7cc60040fd95a490ccc47b6d1e2a
7a5e6176ec8156ab9cdbbe382e92390f05bb388b
f993e31c54b287c1ba4d046fb9e9fee3959cbf3a3608c7e8da6cfb4daa1ec083
GET /img/ufc.0ef6261ee.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-527"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1939530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2Brb3BHhwY8tHmh0NcjkZ10uhlrVEm%2FeZMK9lmY3AAlV9nKv%2Funpx%2FuItHK%2FyTGfC5K9Ihyt33gFofg1aHoti0X4iGd%2FRENPwjJ%2F7YoCtB4bWHT77ExTXMcFfKc%2FuB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b6fe853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/aviatrix.b5fd712c8.svg
172.64.143.26200 OK 14 kB URL GET HTTP/3 1win-cdn.com/img/aviatrix.b5fd712c8.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1612)
Hash c92109aa9c320cc21b175481d4219bac
624606f9179e2fe695a087e64df63ec4cedf912b
8892810b3c337925e0e2a61199d9fee94a589789225f916bc9aa6d0b6c76b438
GET /img/aviatrix.b5fd712c8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-34fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2FYwlsAO9AwGYLyhVugUfbM6Mv%2FZagtq6aQAnE2lZjhc86vIR%2BDZDM1kOiBccC%2B7hvEUJyCKwWwp%2Bdd7MYZn5EDhHEX0RYt61hi0qHU94TAuuATn%2FdPsd2tdx%2FYF2%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f6dc853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/mancala%20gaming.441ae5f23.svg
172.64.143.26200 OK 3.2 kB URL GET HTTP/3 1win-cdn.com/img/mancala%20gaming.441ae5f23.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3303), with no line terminators
Hash fecafa12f578f5ced554ed31aba5c852
7e1f6f044c0508f11d1c5a58a41c3d1423bd7069
77c790b43104ff72a4363c886ef16e2716f2de4bd9b8a870b1228aec39924fe7
GET /img/mancala%20gaming.441ae5f23.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 16:40:47 GMT
etag: W/"655cdd8f-c90"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1161245
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3wXEp%2FWMvkVkHJ89J4S5SYXzCYCaJuK%2BK%2FpBoi57vYEC4qQO76Ne9qV%2BnXUtKHHOrd64QaJm%2FdB%2BRrooMHCgkleH0RrDEuYV6ZTGvXXcsGlT6DHDDyQwx0qEgtjXtFE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61590e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win.direct/v4/socket.io/?Language=en&xorigin=1w-astt.top&EIO=4&transport=websocket
134.122.54.186101 Switching Protocols 0 B URL GET HTTP/1.1 1win.direct/v4/socket.io/?Language=en&xorigin=1w-astt.top&EIO=4&transport=websocket
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v4/socket.io/?Language=en&xorigin=1w-astt.top&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1w-astt.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jAfH8GTtroagfyiPHKkW1A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: cu09UBG2PCNrofIB7Z7ioVT9M1I=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=c950f3221c09bf70; Path=/; HttpOnly
Upgrade: websocket
1win-cdn.com/img/electric%20elephant%20.dd56c804d.svg
172.64.143.26200 OK 5.2 kB URL GET HTTP/3 1win-cdn.com/img/electric%20elephant%20.dd56c804d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5309), with no line terminators
Hash ee4b076249d3d52c42ca2f59e03cae25
d072a4002835fbd0279757a42bed97a398e7adf7
9eeb2fb4664558d20a84cd82fb347d73ef91975eb4a5c5ee274b16f3ebd9c495
GET /img/electric%20elephant%20.dd56c804d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-143b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c%2FfwhOstIw5%2ByZscM7EE54K14tR4B2b%2FTgjj0fjV4arqFksuA5SS47tYz8stJtUc0KdHq8fEC8x0679ooi1y70IAkbPs5BhQa%2FTTJSka8%2FE04seTecPHSwwyqSLUMUg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60980053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/cq9.5d5072e17.svg
172.64.143.26200 OK 4.6 kB URL GET HTTP/3 1win-cdn.com/img/cq9.5d5072e17.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4727), with no line terminators
Hash 47469c2cd9d79b1305e3e02f76d0dc24
d63ca4b97bbdd2533e5c1ac86bacd621a4150410
cbdced2050313c54915ec2417995b7de59675fffbbedf861202570a6e4ad5536
GET /img/cq9.5d5072e17.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-120b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 642648
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2FS4Mll8MBG%2Fnj4u6PqULwqzzR0%2FITn67NctCOT6cS9P3kmy2Jq1MKZLRnb3DIRhUwHG2ED5X8X%2FsuH7B6XvrZdqhEhiDyJLDzFuSeCdWNsxbBSdMCTwny%2BZZ4bZsvA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e604eea53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cyberslots.988fdd12e.svg
172.64.143.26200 OK 2.3 kB URL GET HTTP/3 1win-cdn.com/img/cyberslots.988fdd12e.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2340), with no line terminators
Hash aeeace00abaabb5ae6a47e900873f09b
d6e4385ea3efcfbfba30b6f0a58ea08ec9a11a95
0c1fdd20cf809c07733b67a12eb0f3cdc88a57ebcbb2ba293a717b4b9b3865ab
GET /img/cyberslots.988fdd12e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-901"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 380643
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hrYiqHUMZ18eiGFKsqIBIYXaDcYxQXLBtCT%2BPkDs0hzdkYZgikD0dPv5irzP2p2rLXqnRBWU7IwGbVUjWoCW03lEFpOreyI2rHTfoFAbwRsrlH5Tzl2CrnA73g%2BFg%2F4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e605f1c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/onetouch.b026a50c5.svg
172.64.143.26200 OK 2.4 kB URL GET HTTP/3 1win-cdn.com/img/onetouch.b026a50c5.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2442), with no line terminators
Hash f04cb7d15621db8eda5af2216a4f824f
a0aa7231bfbe4ddc48be81716c3b31ba5c1702ec
de4ec671f76aa1afb93d074c5ea3b64d3d759cf404a142b359be0d9fccedb84e
GET /img/onetouch.b026a50c5.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-95a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 553655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RwP%2Fyxjd7GVaroYWCcinbIWFIeQ1hGxHtL7zdOpxyePQn93eVK5T1o3GzOPqcOB5yJmujc02Ce9z4SSyCvoo2J6Kuwiz3WpFjSHv%2BRGltudxLN9YEH%2FDAUThXdOHzkQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61995953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/62825.d0085a8aa.js
172.64.143.26200 OK 736 B URL GET HTTP/3 1win-cdn.com/js/62825.d0085a8aa.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (768), with no line terminators
Hash a56324a88fee02690b8a3ed35e889018
18e9af315ba78b3b7f467894aa838ef2eefee254
dd0ed1a086018d01466171d96d3c7d99fe4a0d88e8d965bd2d08f31dfa541202
GET /js/62825.d0085a8aa.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-2e0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RXU82epL1Eb1tPuVLeHx2hnfBanwmmGvxb6D8MyAKckzHIQJfrMD58oEwnTAWBOo3DNIdhytxEWJIlQvZ5J5K0I%2FGdQ5lIrYrnESBdCYp2GioB4ZP2jsEZERqUqFd0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e588c0853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamomat.593230062.svg
172.64.143.26200 OK 643 B URL GET HTTP/3 1win-cdn.com/img/gamomat.593230062.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (678), with no line terminators
Hash bfaa3d42e6ab264b9080e74f867e85de
5026f5b14a42af9eaaf3d09468fa27728287cdae
9911098f481a732b6e8ae3ff8ce922ae03f087eba0d8359f1ad1a23b8a71e630
GET /img/gamomat.593230062.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 645225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aaahWLCnm1WoW207K%2Fcs12cbhsCNnbJ45tTVUrwLYgEr8jiuNF0e2TU4xtgKMVYB9I52JkQk8qgWJp1RMnE4DGw7AXLzxW%2FNy2xlA%2FLfK16hQcP58osmKqnMFSz8e6E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamzix.c753c377b.svg
172.64.143.26200 OK 3.9 kB URL GET HTTP/3 1win-cdn.com/img/gamzix.c753c377b.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4017), with no line terminators
Hash c9bdfac4b8a9fec4171e1e4eaada52d9
e0ecf83a680f3cb4750ca30306d444bf25e8a890
a9f4f158614d42eb732421ef41983f0cbfe1f29e95101bd315d0b3d238f1d21d
GET /img/gamzix.c753c377b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-f3b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 553655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Y5xNw9%2BqQMoQ6STy7QlTlSCnYKfagj6LDVJ62O4KkjVEv%2FfmCYbP509xwjP4JEd0UQuUuibzDiRm2%2FBovZgsQDOhjYYazxA8NM%2FpoADihjaH2GVWhZi6Gfgk9eznu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/netent.95417a961.svg
172.64.143.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/netent.95417a961.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1066), with no line terminators
Hash 24c2a93da817e20deb8796b20655510d
e0e0acc2a55fd9623907272dac8f96c8f30360c6
01707112895fbab90532a0afbe23c9ec0402c8f73656fb87e74eca54550a5bcf
GET /img/netent.95417a961.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-3f7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 628227
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aNiDEhsQq0hXE5ODIDMAsMkRd9saKpTmlezm8KVeBVr0dJK%2Fw0woIIO0%2FTj1x%2FkQ6HgLTeH8ych8RAuqBbskBwVUo3VD88D78SC6JXd5qxyQodbGz9mfYkmPsR91c4E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61692c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/skywind.e705b3676.svg
172.64.143.26200 OK 5.7 kB URL GET HTTP/3 1win-cdn.com/img/skywind.e705b3676.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5911), with no line terminators
Hash f597bbfefe2fbb5be97f3ca9bedda7f1
50724171ed506f6e09a28f6a17d152e6838ffbd1
c0c670371ded99439cc4601ae86e83b3b514df3986e2a6866edacc7d21b128d6
GET /img/skywind.e705b3676.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-164a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 381870
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ssnCj%2Fetuk3HKQFt0JVuY1VYjIp2dJ4UY4WXg0otRIs7oFWE%2FpbTHY0GFgJFfRDtjYH5a03bd9z%2FQzVof5cEjefsnOPMxLyJCebd9oJzEblrB%2Bhz4Lw%2F4uCC9uFNJ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e623a0053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/48430.611129e47.js
172.64.143.26200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/js/48430.611129e47.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1192), with no line terminators
Hash 13ee598a8e47be5a3df2543dc3171f75
630992d944c63ecf139694eb2e3e5ac0047bd23d
602ae541f8651417c75bee8a5666440303481bf090e791bad62894339350c339
GET /js/48430.611129e47.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-496"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 375214
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xc2Mpd33HATPaH5BPuLe9Y0YZzIt%2F%2BDZ%2FNiuxT4NXEYNUHK2I23d6umnF6K8dcPPS75CP2muI3%2FJgzOl%2FmgN5numWOWPJLLTA9kaxYsSqV9qgidsXnew1fD5iibR%2BLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e574a5953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fifa.604717ea7.svg
172.64.143.26200 OK 924 B URL GET HTTP/3 1win-cdn.com/img/fifa.604717ea7.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Hash 27cf15a53b2412f9ed5eed8d31e3e42c
7e36a8980f616c440e2be62e539ea1dbd932f668
da435f1ef957744b70f4ce88d8463e883b23601054fc39e53c31a80536ec590f
GET /img/fifa.604717ea7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-39c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 645225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NB6BjFhUEguqmMGPgMefj7jb%2Fxvf67f8teueirW2%2Bx0ThtdSF23Qx%2Ff0FRr2tDMypqyUIu7kxobqJNjGpIYAkf66dzZdLHH%2FuQ9w3zK4d40qVam6b%2BzQF6IKiWYym1c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b680953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/46719.84d0ee868.js
172.64.143.26200 OK 527 B URL GET HTTP/3 1win-cdn.com/js/46719.84d0ee868.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (545), with no line terminators
Hash 8375a4110ec42498df870269f31e79db
d974e51c02dbdc175ffa8d4384b385ecce38e581
b63b4ea04779e05a75b5e69f026faa71ee3601834dc416ce230a65ef9171d861
GET /js/46719.84d0ee868.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-20f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436033
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yz1ifKSCwQ%2FIue0vqtF87x6Cu4TLvd%2BNTFjSNnLnMPnwBjE3UbzpMmgIXZNVnBdMhOvZBFyDQYBFpNRe5oWl8eviXh8Dk6E61hTwY8FkVAcgsy%2FY23LTWxKi%2BvXfrjM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5e6c4e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/elbet.701d0b0cd.svg
172.64.143.26200 OK 11 kB URL GET HTTP/3 1win-cdn.com/img/elbet.701d0b0cd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10694)
Hash bd34c45017a4b3fe3d0813abbe16f113
2177a96200b95aa21ece71bfcbeadd200904c279
2ac83316161088868fcb56ac9812110d94b73567efab5e25b7387089d1ba7624
GET /img/elbet.701d0b0cd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-2a4d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 640909
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SguwjgZHj96IYcreyBnzAo3cbczybzYKeOZ%2Bb9tsDuySzIE7J22o5swS%2B0iAZ%2BB%2BxK2Sk6zPDC3t0%2BLUEPxOBqKCjhqzfwMHGsfxI%2BQP%2FLzhtjk030W4hL7Vy9AW9RI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e609ffc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gameart.7beff0d18.svg
172.64.143.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/gameart.7beff0d18.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2688), with no line terminators
Hash 0316280cc350cb02b448e29142cbc493
16182a01de1fe9f3918bdfff51002844776c1b08
be85aab3a3bd01ae6471157366d278a01d650882cccaa670c8d5472eda92a073
GET /img/gameart.7beff0d18.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:41:33 GMT
etag: W/"655dbebd-a30"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1143295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fv7%2BAa1Rkl4INDThTPWCwj7HlFDoPZJuFyOHJyl4GrH9zuSpCYG98k3zNpCinMH2OL%2FNztW93Rk0Y6kPXoYiPg39iVM8OtgILIJEwQgFmSNLSJCRikApZN%2BrSN9K1yQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spinmatic.f74cf69af.svg
172.64.143.26200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/spinmatic.f74cf69af.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2198), with no line terminators
Hash 12c6733c47b71d93b36447dcb999d080
f6440015ef35215d9009b4f08340145df1f7d9e1
fb365d3e4d36a26db4aae3e00690d0b35f5289b5e80c371ed687b7239be22f07
GET /img/spinmatic.f74cf69af.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Dec 2023 08:44:19 GMT
etag: W/"656d9163-86d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 56929
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=leyDQ71k2FF8OaJOiCjiOK8%2ByozP%2BvAHpMIdzd5yNERajeC%2FxMHdYJHusDgUazP0sAo6VpKvYDBzvKOFaGzQP2YN5ImCEGvm6sL5ttgXLhi6qZwC1y2ViTJ%2B%2FOk7cSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e624a1653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/virtual%20generation.eb4d59dbd.svg
172.64.143.26200 OK 5.7 kB URL GET HTTP/3 1win-cdn.com/img/virtual%20generation.eb4d59dbd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5802), with no line terminators
Hash 9f1ddfba2d32e3e258797ae7f13b3610
ef5931477eadddaca84e7c70e669ea3410ba1862
97ae5090520008703bf43e73c19e43216697b72b0e0abbc255d5e31a0da0417f
GET /img/virtual%20generation.eb4d59dbd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1669"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O3kg6%2Fi89gdLB105lkStgD%2FF5Cf90MxDPJRBN2I2cmiVHN8RgusWA93BWLdOK3M8t3HcL%2BXIEX451tNM9yVOPtF9xDG%2BMNYNgEYEQ5ap6MU60sx8DnZMJFp95gKgRKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e626a4553a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/desktop.748f131d9.js
172.64.143.26200 OK 129 kB URL GET HTTP/3 1win-cdn.com/js/desktop.748f131d9.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129364 bytes)
Hash fad7a4eed4c3dd4480d01efbc72b8c7a
6edd3f0d0cf4771f6ef3ba1d0fca9e78dde30f47
78ef73e8f41731480bd4b01be98514037716fdd72882ae85bde70d7fd29a6df7
GET /js/desktop.748f131d9.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-1f954"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2811
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4%2FTlkIOgQsId5dwvPDFi8pBSemo47GmY%2BNIEISqezUQb%2By5HM5mZuk5LIiaYWH%2BvCczxa9jBwMSuks2T2JWwyg4tSlitwvyjP6tIlmszygtCXkRvLx%2FoWz7nAhsxf5g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e52cc4353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/relax.1a68769f8.svg
172.64.143.26200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/relax.1a68769f8.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1472), with no line terminators
Hash d29d9c49a3e8be4842246e8b658651b1
71129bcf41f71edffe3fb4db0b4ff2faf37bd536
67d8edefc6b96e711c297519bc268d93c477cebc6a6cd0f912bb1567ee2a71eb
GET /img/relax.1a68769f8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-57f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 460474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=icJQxqw8d4c3jbEKkqtAeb160RlqhUqb3wlpF9OPG%2FW2QKC1a0yjSe%2FrOxwIfbR%2F2%2FWdaJXPAbJkmfQWVD7yqkZNsNALPjnB8oC0%2BmFdpwPh2HnNkspy6UAeaVSP8qg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6209d053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/62692.744dfada0.js
172.64.143.26200 OK 847 B URL GET HTTP/3 1win-cdn.com/js/62692.744dfada0.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (881), with no line terminators
Hash 2396c8bca3aec16d12512850881beeaa
f5e1ff1163ce9250fb0aae5e5ae0f7b53fa92bf1
dec438624d1ac734c43c52b607f839c13cef99ab7bd4f172d32c97e81630ff18
GET /js/62692.744dfada0.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-34f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 435978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zpAY2z0spV8%2FsMktr9bq4Cw%2FjmNIe7ZQMv%2FKm8Q%2BQZEXYm3MX4De5vIvflLJbkryvmRNajOH%2Fr6kp%2FMQrZyI5mTVjizKxz7H5LAyK5qNcvp92E71C76x8hWu3NuUVtc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e570a1453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/57652.d90029273.js
172.64.143.26200 OK 647 B URL GET HTTP/3 1win-cdn.com/js/57652.d90029273.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (667), with no line terminators
Hash 53d580c5f29a2a838b6595fa6ff0f0a3
ab60adb7207a806d271778effe677ed01dc144b0
d09039f573818646e722fef48f6f9d999dc7382548877a5699e9b45be29ec6dc
GET /js/57652.d90029273.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-287"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436035
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kucBtcu4K%2Fdq%2BAGvLlSL6e2dHMB9woe0maqgcMS7ergOh5RiTTxDK2Vy6vNyGlXwfWioXmpH9uAxRKFNG6BGCunGQT58%2FhiR201F3NXzKov%2FlSJv5sYHUKwbbasnx3o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57db1753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fiba.4b405b699.svg
172.64.143.26200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/img/fiba.4b405b699.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1258), with no line terminators
Hash 4aa9ad25fbbca388328ba8098758f0c7
82dc10c520383464da8039c4175e315c182ccf2e
c9a23ae008a3f9ef8714a6dfd1ddb0ee0c70c17fe3bb81bf54794c649ebebf29
GET /img/fiba.4b405b699.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-4ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 473267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L6ulsO8VJPxZlH2EwrCIfZ42K3EISvhDG27Tzwas8zycjTNgltLgKKv4EzvEfCszJ4vaNN8T1VZBcqlwFzgsOEXobw7xytEuDhIZe2pqpj9bmAiSFoQ%2B3jz4M%2FgIE9o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b6ffc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/nhl.9b1a4945d.svg
172.64.143.26200 OK 5.5 kB URL GET HTTP/3 1win-cdn.com/img/nhl.9b1a4945d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5560), with no line terminators
Hash 776fb511daa35474ef8291916961aab6
58a4d5e39d8d100ef715b74a99bc5920259578f1
4e5efe564f1dfb5226aabc8c88a454033a02f175a7e9c807314a05b9eebc7571
GET /img/nhl.9b1a4945d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-1584"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 630776
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UUeV68SVf8ypP8mMOlwoPopTTSgBTxPIC0ITYxfDHSpTM%2BSCIrQPSx5KCGIeL%2FcmG3h%2B8t9Y6C6pymYSrZJc31p9JAWG2KVq3AKQCM0oT6xiNQt5zOt7tpZPkXCiajU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b6ffe53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/no%20limit%20city.5b7440267.svg
172.64.143.26200 OK 1.7 kB URL GET HTTP/3 1win-cdn.com/img/no%20limit%20city.5b7440267.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1747), with no line terminators
Hash b922d7644363785eac0ec67b0a31e5b5
aeb685310c81a6bbde2c3dc8c6e4bfcf59c77336
f5949bda30ca6a410fa6db0e60789cad60c32183d2f52b4888ab292910bd45bc
GET /img/no%20limit%20city.5b7440267.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-693"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 468435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ieAkqLI1rQeXOjp4FsCYfVkRFDAg%2B6yAd5MECviDxKAsf1U70aPVwtdlTQBGlnS0RItB455UlTG9nDGVfJVeEyJESEV%2F%2FmDMl%2BVtKL%2ByGGbdyPnoREgYAyjWklPb5Z4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61793953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playtech.cecac3222.svg
172.64.143.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/playtech.cecac3222.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2595), with no line terminators
Hash 54cb545ad750e3e670cc7cfaed81c2d4
f808d9b539d13d64c4b405da4dca9b0db732b87e
2bcda89b73c859c34d62c330205d603cb247ae31b00e987f3c3bfaaa3ba2a64e
GET /img/playtech.cecac3222.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-a00"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 482542
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QFrsYnhHICkWkfpLAaWMWDLZkAWuqu%2B1LmXxFLIE94QOzDwn9orpdFSumkwcugl6tV6HL8YqsPSpnA2mzsE8iuesnRIsgt8s1NOkwAIHsp4nXekyp%2FvvPZQr2W3ohsI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61c99053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/chunk-common.4b923c9a4.js
172.64.143.26200 OK 130 kB URL GET HTTP/2 1win-cdn.com/js/chunk-common.4b923c9a4.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Size 130 kB (129617 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/chunk-common.4b923c9a4.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-1fa51"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 441437
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zwM1UF%2Fhj1tkxpALpyHNUVkWbsOasUZXUtMOQVXrBoM98OEpYeN0zrYhHKdcKVukag3r5kL7fJiVqRk2w6lTYBml6mUzzX8SW3%2BeOEjdnoJckNL8G7DvYa%2BznmhgAg0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e51dca5650f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/font/SFNSDisplay-cyrillic.e423f3776.woff2
172.64.143.26200 OK 17 kB URL GET HTTP/3 1win-cdn.com/font/SFNSDisplay-cyrillic.e423f3776.woff2
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 16852, version 1.0\012- data
Hash c4f31a30bdf4dbced79fb75fc03111cf
14765799051deb933539e19f1ffa26198cabd4c1
cded98e2b95ccbf34690d20e4d466e2457d754f960b819d052d188dae2c9e9fc
GET /font/SFNSDisplay-cyrillic.e423f3776.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1w-astt.top
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/octet-stream
content-length: 16852
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: "656f29ac-41d4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cjdgoOid7rHEuTz3B1irfQ7OaqQ7FP9PdFvR92rf4aE9OzPvIbZIiaczGLf%2Brc%2FiKU8Cl8wCazaudarhkU911huw4SbgwxdJwCqbeWvizi%2BvGG%2FTitEyVYKLs3alkvE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e591cc253a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/endorphina.20b721ba6.svg
172.64.143.26200 OK 7.1 kB URL GET HTTP/3 1win-cdn.com/img/endorphina.20b721ba6.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7173), with no line terminators
Hash a89aae2f962bcb01ecb8e3ddd113b797
706e09d5fa8312ec4cd3c7ca606ad19edca158d9
3a3f4f70b1c092a12634c8a8fbf3409fa001ee6d9a1eed7f0a3a5cfe5866dd6a
GET /img/endorphina.20b721ba6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-1bc9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Di8iNPMP5RSXtVwH5Z0DyX0QnyOndeRd2LBdEfUUaeaIOIbkJY4AsyH5ZAb245ayjK490h7cx0Ha0HihKjvy8JDSVOLAiwdvQAkTNaUR6PFJ76AW8EW4TsyctkD%2FU8k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c83053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/games%20inc.64fb099a0.svg
172.64.143.26200 OK 695 B URL GET HTTP/3 1win-cdn.com/img/games%20inc.64fb099a0.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (713), with no line terminators
Hash 3d90ca2a78e19006ff1926510ed316d4
0becc591fcf773fa9e56396884dfd0f963a46e73
e7d7da9c1e3909de31009cba4f854e960403196039b489c7e42d4d6ad3acec0c
GET /img/games%20inc.64fb099a0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-2b7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y90EnS8QAFOZSsbiqmoSrNdDMvpnNjrr6g5qEYQHtQwZ4EK%2FhZunkgF8gb8XErYUf5CEGfOmNjLoQcPWnrXTXLa8uMTNvgkrgFOC71a%2FtsvhOuzIW7Sbavbv4tPGlps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/iron%20dog%20studios.bdf700654.svg
172.64.143.26200 OK 16 kB URL GET HTTP/3 1win-cdn.com/img/iron%20dog%20studios.bdf700654.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2233)
Hash b002f96a069f34ccc5fc279e59b406fe
2f899abdfd2042971ad81e2a4de87594565c0971
c3aff3a52b14a596ca246cd3c637478f6783559568f33f68fb0b2c8299429ac3
GET /img/iron%20dog%20studios.bdf700654.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-3dc4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zquBMCRjgOwwrikvVVsi9ESgVjtGIAGu%2BHUUFmkxhsRnejHsx%2B4mPwHOwE0rMac0S%2B3QKwuV%2Bic%2Fu8N0c6LCwIsb5wz6bh8WsiEpuDOTYGaHsq7KHneFvbSLgUAFIUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6128c753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/itf.9b1402c42.svg
172.64.143.26200 OK 2.8 kB URL GET HTTP/3 1win-cdn.com/img/itf.9b1402c42.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2857), with no line terminators
Hash 27cca74bc2226d97c21e7f62ff3d1865
737970ba7c15660eb385cd530793056ea1106019
c1ee5d4712434ef1e4d165c360d4931abdf99d8e8fc81bfa8d64ca8cf8f9fe64
GET /img/itf.9b1402c42.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-af0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 472599
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qnTE6IMHN9yq%2FJ%2BNFpLyvOQixBUbq8kbu0NcJ27nnNIuwH9vu3%2Bk6%2BpDiJZ8Y3raWHya9cS6CNxcVrjRmvRCsWfUhsNdxpzJ17dG%2FmTdg6fcd%2FEsmuf048EwR7HcAFA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b680153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/20420.a8a37ffbc.js
172.64.143.26200 OK 573 B URL GET HTTP/3 1win-cdn.com/js/20420.a8a37ffbc.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (591), with no line terminators
Hash 41330d1d45db0c752d96abc28dbb0644
3e716caf3e130d706d19fff163b8fda8b91574eb
fbcbcecc2dd56e59b3e7ae495a64eafdbee9d493cd3b86ba0ebe14f75e031dc0
GET /js/20420.a8a37ffbc.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-23d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=02yk3mCD436bwd80GSCc792XHr3ULYjhcBPA6UMfGVZaMnAVGmLe7dHN96XAFDYqZEytaEWHMwpo9xuLajY1bs%2BnpF9LzY6fbZ3o2kjQ88s4WYE9CQCtASBONuUoyfk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fae1b53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/boomerang.413a98511.svg
172.64.143.26200 OK 36 kB URL GET HTTP/3 1win-cdn.com/img/boomerang.413a98511.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5938)
Hash d37b7a09c29c7e0179175433f4b9cff7
9c24e32b7e570cd294ee7400d7b6b96348a6a8f9
e9eaf42baf55a608a7663e6f63812bd1faf020d3d75d6c12ddec5ea4b945e53a
GET /img/boomerang.413a98511.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-8c38"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 635583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PYyzVzKP9YweKRazLUp8rN%2BiD4LlfMKTb69bDNWSxO3MuUvLZyT9eVr42jqzwkZGept%2FVYDNLL1uvzV8ZhZQNyL0VxNbp7CO%2BiX4XdDtCIpAApf7fsiECHGfHkqkRBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e602ec653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@avif
172.64.143.26200 OK 5.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 3af37f2f8befa76a2a35cfa1c4d8d118
40f565327a7717b7f8cbe291eab372092322d651
2c27aeaee680e07dc60d322a8b6f7b07eaebc8a10e29011b6f960df47b849009
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 5524
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_d25464ae840baf966d3d1019c718c0fc.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYyOGUyMTVlLTRiYWM1Ig"
expires: Thu, 07 Dec 2023 22:29:52 GMT
x-request-id: 88V9ThTQjum4Vae-_bjfP
x-cache-status: HIT
cf-cache-status: HIT
age: 381869
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KHmRvgg3wKLJoY0mPE5CpAdKN5zi7%2BDGnVArVqyFE6cCzkfBtNnX2U%2FoMpdBnR4K%2FO7%2FMCTtzs6NiUehlaE9IPJRmqhbA%2BFqv4B0v82Mme8tGdwzSVDONeyrnNzIKGtVHFT05ONeJ1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e653de053a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/netgame.8e28ed366.svg
172.64.143.26200 OK 2.9 kB URL GET HTTP/3 1win-cdn.com/img/netgame.8e28ed366.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3049), with no line terminators
Hash f7a27f15353cbc6d80464cb321e6f7cd
8e9d03da3c5f00a3a228b545cb8759e837059323
c7829189320f0892562d94639b839e69ab98bc4148e5827a634127bcc2ba9740
GET /img/netgame.8e28ed366.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-b65"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9EiaKJoUVXJVAqcrg0xqbMT4gjXvVYyFxHPAcuvUmgp2NTAC5u76UgkHeUSBrslzvHchYW1TR%2BEC2pJfi4xUfLC0v%2BIsLiw5RSdH1RJVUsUuXtdlZYdKPZR08oX%2Frz4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61793053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/oryx.ddc50c514.svg
172.64.143.26200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/oryx.ddc50c514.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1407), with no line terminators
Hash be6fe09456c38389975b47be1d6e664c
aa63088e5bb8604d301bf747e760f3fbb47cca9d
f8822aadbf4cdec8d633d4b6e8e4928dde87a143cf57d6d9f018ffe50809f1b7
GET /img/oryx.ddc50c514.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-557"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BqvKHk3LaiPaDDuFdVZYRk1JAo2KH3Op5cjgmjMXhax5ewPeRF93PeDpnLzxS2AyNkmaXErr0xNEZTRAN%2FkwEBfd8bQ4X4r7XhT%2FHp1CwCWCq%2Fd%2FlJG5hQONsqj41zM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61996253a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/zillion.c0e3dd6f0.svg
172.64.143.26200 OK 684 B URL GET HTTP/3 1win-cdn.com/img/zillion.c0e3dd6f0.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (702), with no line terminators
Hash d9e09ca4e933fc8dabb60c1335cb7cd6
37b3bb2ea200f88ae0f7c681547dfba6fcce1449
fb15bc779be9be33fbb41082ce8c6defe5cbeb6273b2a3cf620e40ef4416c177
GET /img/zillion.c0e3dd6f0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-2ac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 367931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LWfIMPq8o%2Bfz7lnNQLsgtAy8jLPz5b2JJecd8GOzEVBBpNJCAgePLUdD2wdGV5K%2Fbh2%2Buxn6L2X03PAN4QBlPcF5ZQ%2BYpQlBSaLixttNuMOYt6Nhc7G7EShEoWxPemM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e627a6b53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playson.2ff1c7d85.svg
172.64.143.26200 OK 2.8 kB URL GET HTTP/3 1win-cdn.com/img/playson.2ff1c7d85.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2830), with no line terminators
Hash 241ae7d1512148f38162202a1838bcf7
7937917d26b57052c052b0cce94f5d1697c8caa7
a6bbee3377db6138a13bd0bd2bc21f778d1f5744a38653efe4acb48d8078367e
GET /img/playson.2ff1c7d85.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-ae5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sM2TG42bx2uzcvDlxpDHD5VaH2rtH7yLkGat%2FUS4xaAOFyWx44YmoKTP5NcXjRBmEqYSL57aWAHe0Km53%2Bw81Oz%2BvM6JBJrbLV%2B2vF2GqlUX%2BpBc6dolxrgKC6LN7IQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61b98c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spinomenal.e0cf93b3a.svg
172.64.143.26200 OK 2.3 kB URL GET HTTP/3 1win-cdn.com/img/spinomenal.e0cf93b3a.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2314), with no line terminators
Hash cccb25968af8377b09aaabb6aac79736
84938c2eeb2043bd681550b012601b0b0a2395b0
59b22e2b3007555e659e3a56f1c622f3635e7e0a7f284ce7b9a56dfe5fde9e9d
GET /img/spinomenal.e0cf93b3a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-8d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 543244
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8x4cxlkLis2GRHvnyol%2B9U9re9JHeYkdQ65SbWXpCxXc5sEMWvwqytUF8jrHgOqZnnY5O4Wcp8Hm8KNPgutc2rt1YKF86gw%2B5Dr0wCzAjQ68fjfziZDnONlBcKHvTzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e624a1753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/desktop.d0a0f5bb5.css
172.64.143.26200 OK 73 kB URL GET HTTP/3 1win-cdn.com/css/desktop.d0a0f5bb5.css
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 62484184ae360dc98326e0bae1a00ba6
b525e8bf3389651e6194f774375941cce6edc625
6d163d753b60bdafdd79275fb6e265f2d02270f0a5c12d6be16a34de45c0546c
GET /css/desktop.d0a0f5bb5.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: text/css
last-modified: Fri, 01 Dec 2023 08:25:01 GMT
etag: W/"6569985d-11d0e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 367663
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7f2n%2F%2FStqYTZ6%2BzkKTEHvuYqj8obG0E62GrUbBrBOA7xwLUfj9kCnRXBLjCTC0FjxDeyTBmtwGEsb5801z%2B5mrSbdfFAu8ppZv3L121DC9bWaFNe0htYmpI%2F0Frltzs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e52cc4e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/36373.17f191460.js
172.64.143.26200 OK 29 kB URL GET HTTP/3 1win-cdn.com/js/36373.17f191460.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (29147), with no line terminators
Hash 66d5bd3a73efa4c70217786786131786
927e02d67638b30f030b6103728b3373bf981939
e2c875680a5637309108302317540c06c1f1eb2894b605ee10e742f6c67e51a2
GET /js/36373.17f191460.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Dec 2023 08:25:01 GMT
etag: W/"6569985d-71db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 367717
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Uls%2BQhwYgXol73P1%2F9IbB55MFtxZEaUNWhjf08JytOtgQdSxyw0R3%2FZ8xaRbjMx2xfP7l8w2Jv3jkggWP1%2BEGKExw2gE%2FRwzwbqMOinQxatdeMw44awblhcpXgxdxA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e53ed9053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1w-astt.top/firebase/8.1.1/firebase-messaging.js
190.115.24.78200 OK 41 kB URL GET HTTP/2 1w-astt.top/firebase/8.1.1/firebase-messaging.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1w-astt.top
FingerprintB4:C5:30:25:9A:E3:BC:41:78:BB:44:01:89:56:39:21:C9:9A:50:D5
ValidityWed, 08 Nov 2023 14:02:05 GMT - Tue, 06 Feb 2024 14:02:04 GMT
File type ASCII text, with very long lines (40719)
Hash 450e8b32262706d42cfdd438c49208f5
31c7e4aac1d1303c1e83a0b591abc3501e278668
58a372bb9d424111a2e73c427edb10db91c0f05e8f323f046d20f5cf8fd6f30f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /firebase/8.1.1/firebase-messaging.js HTTP/1.1
Host: 1w-astt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Cookie: visit_domain=1w-astt.top; core-sticky=http://10.233.94.243:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJkMmM0NThhMC1lMjJmLTQ5M2MtYjlmNi02MWU0NWI4NzhlNDQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAxNzg3MzU1Mjg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTcwMTc4NzM1NTM3NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCU3RA==; AMP_MKTG_494cccfe21=JTdCJTdE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 13:46:20 GMT
etag: W/"656f29ac-9f25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY, ALLOW-FROM www.1win-partner.com 1win-partner.com www.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/img/silverback.297288e25.svg
172.64.143.26200 OK 42 kB URL GET HTTP/3 1win-cdn.com/img/silverback.297288e25.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (19015)
Hash 2910b9f6ba7f900a0246432d2777b217
86b09b58a3eb69c70f175e577cfefd4efe1dfa0c
b5274849cf17745568ee5854a736f1ca11cf874511dc6554884c6083155fdde2
GET /img/silverback.297288e25.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-a2dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 474481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RJfnDYa08%2BVwQjo0153LBrI0UnkqY%2BXi0GIlzl21CVmm3eWHaYajYJZFLqELlrmm4i1cFAxkNbUXWI%2FmxfVjWCtVyQlbL8OjtoQvVguyjYWu1Y0O5R%2FrhciGD6eW9Zo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6239fe53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/speed-and-cash.dffacd6c5.svg
172.64.143.26200 OK 24 kB URL GET HTTP/3 1win-cdn.com/img/speed-and-cash.dffacd6c5.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11315)
Hash 3c62bcde419e822cfa55d45a05fa112d
77631a7cbc25e1d4567b72cc5b8c4acb43c7eb38
feb59050cb394075bb3efee348121151a8a214d673e69b1a3b8021e85a46c5f0
GET /img/speed-and-cash.dffacd6c5.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-5bb7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2193270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N2vgFGvChsi9a6DwvZWENwL4z1dOnt2L%2B4UE1SsYMeWMqPoOXs1Dq55f4UYZJsB65VAx3Hu8Uy869ddX9MczSwPZHry%2FVnrDKmNOElnq6mo0Uo3crC7W8eA79iGUbmQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57aacc53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/57460.2ea30a73c.js
172.64.143.26200 OK 438 B URL GET HTTP/3 1win-cdn.com/js/57460.2ea30a73c.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (460), with no line terminators
Hash 6dec8ed713dfd3300ca7f2907fe2f259
a467664dd1f209c8b7360ae5088144073d4b6272
a359d5ee11e7b5c08922355687a9b639fb2d73f1a259db499e935d49dfba9386
GET /js/57460.2ea30a73c.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-1b6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLnOQArAddZLhyLe9g9HYsQVvfBpj2de4ixk1GUi9KJHLaam5If3BpC0OZNP2nobH8o7kXCVh0CZ1D70wZ%2Fd7np5VfxRdOcqrLTFrgYqqVxNPMRDSpk2z0q%2BFN4A0fE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d5353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/genii.367222bbe.svg
172.64.143.26200 OK 3.8 kB URL GET HTTP/3 1win-cdn.com/img/genii.367222bbe.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3840), with no line terminators
Hash 237593257bbdb3559e06330cf7e76c54
c3e1a90bb3397fff3428fdd71d2a4d7df74ea164
2b84c2a6e55531b52b615ebaba90cd7bb757fe1399e901927b4aba9f1718b097
GET /img/genii.367222bbe.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-ecd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=snuEY8n6QH%2BQm3X8t5nBsgQ5YGzZabwXorlHKTo6EWzz1XM6C7I8op1plqI89cJVplgeOWyzAFCvSf4U%2FvoLhDexrs%2Fd5kFPUEcBc7g9UhIiY46jBxJqT6OXABysWyk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_dice.jpg@avif
172.64.143.26200 OK 6.1 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_dice.jpg@avif
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ISO Media, AVIF Image\012- data
Hash 7fca07d8bc788b5c8e8deeed904a70ee
fe4984ddc136e06c745c38b4c52eeab688b563ea
643de82b238824f7d005a604a97dd031a674993e121414c3ee58daac337abd08
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_dice.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/avif
content-length: 6102
cache-control: public, max-age=31536000
content-disposition: inline; filename="lightning_dice.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjVmODQ0ZWFlLTQ2NGUi"
expires: Tue, 12 Dec 2023 06:36:11 GMT
x-request-id: TcmVbrlMlCPCrxphj9dl6
x-cache-status: HIT
cf-cache-status: HIT
age: 27461
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FT2LrxSZvFqW%2BQbYtXQ7AsovWOV45WyysE%2B6kuDeKnZNce0jMiv6mwzDgWooiD3aE5MFd7WeN3occV4yrU06IsFarjp%2B4wIk0y6HV8spEDCLjPTvDTsRPw1ln%2BXTeMNbRBL5L%2FBye8I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e653deb53a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-casino.e0372c0fb.js
172.64.143.26200 OK 91 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-casino.e0372c0fb.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash caf103b3719cd36e18dd18439deac2fe
b2e498d23c374abbc8ccd46f2ca03cb2bb2f41a3
4b280d2612a827e6604aef233c91cfd79b359a47065c728a350d0646c5c8a68c
GET /js/icons-pack-casino.e0372c0fb.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:06 GMT
etag: W/"6568853a-164f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436044
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y2P1dLmnGbeV6bIhOwqpgUXYTJ1eqjT1Mcuqeb3FQnf6MaA7Zn8lRGLdCnjn3runkhtIBCSPatiIi6r3lkOzkVUYoLtPntX5e2GNYOQivNsrFPbp5QXYIOvZhD%2Fzh8c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5e7c5153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/agt.893343a61.svg
172.64.143.26200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/img/agt.893343a61.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1232), with no line terminators
Hash 7ad74db93c568d4ee26b28bd127cda5a
4ab7df3219bc8e68824c09c8f758159829875274
0a4c193bc9415878d304a5fc14e1e45c5390cf8648bb3d0c8ee4827663107f2a
GET /img/agt.893343a61.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BOJV5Jz1pI5rMXu70j2elcRfqu6qq%2BSsAPLe0698oF0yjVPEr%2FiCECsoTgcO%2F%2Fa7p%2FI0TzFHYGbplHAMfIQap44kv%2B0JhbMWk2iUcfZklv5V7rvOL3mIWEhz8%2FoAD1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f4d9753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betgames.f9572e26f.svg
172.64.143.26200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/img/betgames.f9572e26f.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3152), with no line terminators
Hash 22c1b0dd1e37b9c443eda963fe76d96e
7cdb9b3ec3c095dd657c2bc18489b00fc8f5f7fd
058002db89099b878d2fceffc78b9bdc47a5c5e990ebab7af3d1a9bac806a4f6
GET /img/betgames.f9572e26f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-beb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 482541
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eD4a5m2J9AE4Lln%2FaCXMhJf%2B2eQQ1e%2By0mEoqwZXPeFwRDmnPGrIzi2LYJBfsoa1JagESIJXtx4gtQ1lJO9NpBM9frzgr5ixvFQCcyGWKxLfnJebVSsf0Dg9x2uIvt8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fae1853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/28852.160372f87.js
172.64.143.26200 OK 906 B URL GET HTTP/3 1win-cdn.com/js/28852.160372f87.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (924), with no line terminators
Hash f97751384d582a6e650b35ebe9d32479
e545afff49a2a354c28392833508fd88ebaa4875
1df0101a9f183c7133c49e126c64e4820760e5ab7d99895d0ee7e6d514810b9b
GET /js/28852.160372f87.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-38a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5pdWpQX2F7RwA0zyzm80AHPvHBFk66d31HPDHu%2B%2Fktdae6so9GUVNN5h6MWmanoDFg%2BqX%2F5NNYi29zATsAeVy2tVYxe334n3jNWf3QgWsKRe8vznx6%2FOmj7s9XiyJU8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e574a5c53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/play'n%20go.b092db97b.svg
172.64.143.26200 OK 6.9 kB URL GET HTTP/3 1win-cdn.com/img/play'n%20go.b092db97b.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6913), with no line terminators
Hash b1c6f8bbf4262b88104f1c7d64262e20
f1fd9128a85e9937b6e421ea96bdd1845dd7d69b
f8897aa7922884454813ffa2cbb63c96faeb8c65c8d512bb905a46f7ca60ef58
GET /img/play'n%20go.b092db97b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-1acc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 635582
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vc%2Bx6CKrjz8dOSQk5SSHtpXfGJOEcD5SRn2xeFqwv6H%2Bnrtm2R3cRIqAmJ5pu4LzFCM%2B8yPeWFy2YrkmelyQ14ablOdK8YQmky3gqVnkxjc7oogM3puZmQvTZiTHh%2Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61a97053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/upgaming.242b9e921.svg
172.64.143.26200 OK 4.8 kB URL GET HTTP/3 1win-cdn.com/img/upgaming.242b9e921.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4811), with no line terminators
Hash aeb4cc1caa82c4f55b3598ea0c7003fd
8c1eec585578ba1c3803b2d6b724d67cb8e3de25
236f3b8b8aad7f6ad5e23aa1eaf555fb7420d9dd6eb1df70e7957b1707554982
GET /img/upgaming.242b9e921.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-129c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qpsFCgKnWkkDkfjvolkKoeoew9HMoUX0cRCIYYIg0rvyDvBXw9%2Bx4VJkf1NtffozzPvyl6lQr8RLgdUX4bHi7Wtd1HLiISHhDB6RcV3wb1fGHNGkoxbkFIGHVHXs68U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e626a3d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/8726.232cb7938.js
172.64.143.26200 OK 664 B URL GET HTTP/3 1win-cdn.com/js/8726.232cb7938.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (682), with no line terminators
Hash 2e216c1b879ec285c8c32567174c9af4
e1e1af06fe2299d4a230eb5467395ef6bf3354cc
2e286b2372f85cadaa903f3189b912a18def9e9c561f6b4121af91682164cca2
GET /js/8726.232cb7938.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-298"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IYgmVpIrW0i1AZfhMBEZXMEVWMHLSnLnaZgpxgQ%2BZdrUMR%2BSw5IdAim%2BnmCWf5zL9D9NXY613MyXq6byOS8xSm72opAGvIL8wlgWbwOxYPPo9QX35yAf07KW6P%2BECZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e581b7a53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1spin4win.bb21057a4.svg
172.64.143.26200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/img/1spin4win.bb21057a4.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1299), with no line terminators
Hash c7e582dcd4acb7d74e4065abbe28183e
d04183d1e1dc6665f54a667c7977b6c6a3672791
671ef5f707012d29c043164d157ca7028d371107dca629046657198f1f0173c8
GET /img/1spin4win.bb21057a4.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-4da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 548844
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aul75fdNy66cGMIxAFtiNAzb2n7v%2BUE4yTEdXsphDRw5UqNgErMa8qTXpMP6Hjnx%2BddHTjp94Gzg34iGCfSZrucvv8lLrjPQKJPf4ROYc%2B2jnlouSrnbpHUR1WwaGH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/3%20oaks%20gaming.a6d146d58.svg
172.64.143.26200 OK 2.7 kB URL GET HTTP/3 1win-cdn.com/img/3%20oaks%20gaming.a6d146d58.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2746), with no line terminators
Hash 443b070227be618d0513c134be5b65f2
cea77f63f79f4a2406af9f75e29078e40c69f9e3
99766510c4cf78a018e87ef969b90f738755e653efa66e1b5f2f9e6ab7d41ed8
GET /img/3%20oaks%20gaming.a6d146d58.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-aa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 627552
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fnm%2FGIzgx%2B2JD9VO%2FiKUW4YsyMdyHeLDtb4ieuDn3KqlNJj4j2YvjElpMxP%2BAUjC8IvBpTRQahqMdWN8r61ZxCgbwWefB1gsVkMoyRLnc3iF2bwOkTtgzQ8TGe6wtHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1win.9b8574150.svg
172.64.143.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/img/1win.9b8574150.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1661), with no line terminators
Hash 50dad4fc2924bcfbb1745e9351fc32bd
e71c68d2d20f197e3d4645e4d791436496b4528d
98974ebbc36d921b989f19beb197990dec088ab52912315b8a7854f4a8a871a2
GET /img/1win.9b8574150.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-643"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=27u9FXpbkIfH%2Bt3lMMsPboeTupc430ZRV%2FvbUx5YAbUeoFMAR952rY6bvMOn%2Fa4KEb5JI77c%2Br4PA2feuHS3EHs4DINhseFuCj7SvdHbz53FJnj0pzFjJYbW4AGHGBM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4553a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/booming.4b21630d8.svg
172.64.143.26200 OK 3.9 kB URL GET HTTP/3 1win-cdn.com/img/booming.4b21630d8.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3922), with no line terminators
Hash 1deedba785ed7846bb879ac5681429ef
f637eeb28efa4e2fc2c839c024a0b592ea1b60a9
da014348f02d964c192ebad79f7fb8d67220ee284adbb38e09bb1f2a97895ecc
GET /img/booming.4b21630d8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-f29"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cKCFGkqSUrR%2FslD275iEji5Uxm1hLlcX4u%2FFq5UeLohkhh9xPiyOAVJkrnKIpuMIUCxnUv953yTxC4zc64VsiXvqrbB6r1RNenjAkIP7wOII2BdqFLkmbOuufFsUp44%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e602ec753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/kalamba.6e06f7faa.svg
172.64.143.26200 OK 2.7 kB URL GET HTTP/3 1win-cdn.com/img/kalamba.6e06f7faa.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2752), with no line terminators
Hash 7c40c808f85699562366c94d8075727c
daba803ead149eec52b19b82e57afa940922e3c1
8b130bc8c17d44e469cdaabdb68bf8bd4fd819a3763227a6c5601b28a637b8d1
GET /img/kalamba.6e06f7faa.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-a9c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 545468
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B7wn4W%2B9d6eexxwWLDe%2F0a98x%2Fii4QTZAgicUaJ4haVxlWBulgrIT7hlLT7%2F2Xyf4HZaZmLkZsTcTzyu%2FrkSPd7MLiovsCem1pALs%2FdIXS3%2FycS9MR3kIZNXKsjXCXs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6148eb53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spribe.7ce760055.svg
172.64.143.26200 OK 1.7 kB URL GET HTTP/3 1win-cdn.com/img/spribe.7ce760055.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1751), with no line terminators
Hash 33a9e45726e8faebc5b2e6d77375cd5e
cfb38d5cee2ec3a48d5bfa1a3b9c3806557dcb6f
1645b2d498bc98d5a05875f6d2d3681236d254cc2f8837965c925e511db72df1
GET /img/spribe.7ce760055.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-6a8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212291
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E17dx1TeLgeMIqJ1uLiSt91HiIO6Ud0Gv3eIyMrVaNt%2FGFtGpcgFhnu47Efoh0jwQuMsZTPXUHIu%2BUAl1fSMGdEve7k2dGs6sFwwJ0BCIikNCx2376jXDixjjMdWCCQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e624a1953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_img.22f56ee2b-1508.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/500_i18_img.22f56ee2b-1508.png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/500_i18_img.22f56ee2b-1508.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/truelab.ec113fba7.svg
172.64.143.26200 OK 2.0 kB URL GET HTTP/3 1win-cdn.com/img/truelab.ec113fba7.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2021), with no line terminators
Hash edd84be1aaadcb0b503864bea380f168
af4583fc1079d7d5e07cc6ca22b56f9eeaab7418
d73eced8792c2507b075c7a7a313f1e228700fda1108d4ab44d707b36b241e06
GET /img/truelab.ec113fba7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-7b0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TQ%2BJa6w1rzHtShhWBr2x3J2UjJIuDz8IoTB55WUWmfu5rYnA81HYEDVLig8fNXTsmFB7UcHAup3Y5%2F1tICFed1MfP0N6OIS3jyLewZWWxWx672cKWw6iWzMiLzHoUVw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e625a3053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_img.cad2d5cb5-1320.webp
172.64.143.26200 OK 25 kB URL GET HTTP/3 1win-cdn.com/img/500_i18_img.cad2d5cb5-1320.webp
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1312c2c31e69ae16717161d0b63e862e
1ea1ac50dccf074db7972fd01030d27764c647be
17e3ddf96f54278719c3951bdf7fd750f03eef6fa8f7e257b47bf04a7915fb81
GET /img/500_i18_img.cad2d5cb5-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/webp
content-length: 25094
last-modified: Tue, 05 Dec 2023 09:45:11 GMT
etag: "656ef127-6206"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4988
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQQpB0rbQ6z39W4RwQww1aegastffMzPoCYhu%2BwJ6P7wZurELYn5Hbb5Ov5fG%2BrJhz%2Fb7ohqs2iGRe7p6h%2B4D2jsyzStAbz%2FmweRHZcOF%2BsinOiGMnaWl5AAYf70erU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5dfba753a0-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/js/79125.642fa7e4a.js
172.64.143.26200 OK 7.9 kB URL GET HTTP/3 1win-cdn.com/js/79125.642fa7e4a.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (8158), with no line terminators
Hash 2ff765fdb365f21a4896e80a312314a8
d0b2f29a082074a1a28097f6c6cf8989eefc8654
21ce13b538a42929a71ec2092595f8e881ad3ca909cd053074c72df3bfb321e3
GET /js/79125.642fa7e4a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:00:08 GMT
etag: W/"65687948-1efc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 441416
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SKb0ohpgmIrDiEPryt5t9lBuvngtfB6MA%2FkffFhrHbi7Ye3Z%2Fkr%2Ftl7%2Brkyqp8WGoAp8FEgTQ7X%2FutL3sWeZPVg3QGzMPhnlhd%2FV082OvvmzyMIlhH7F8C9HFtyhhRY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e56694353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/91635.ab2c049f1.js
172.64.143.26200 OK 748 B URL GET HTTP/3 1win-cdn.com/js/91635.ab2c049f1.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (766), with no line terminators
Hash 74c5864ef446bbb00f9e7e1b39eff8f9
04696352def160b6c3536b2b11c4351f02f49780
348cacf24053c417315aaf1dd971cf88c758964beeb37725c7f683b90bb5e7d2
GET /js/91635.ab2c049f1.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-2ec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 387618
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k0tBlPh1hyfpRsl958aCxr0eQMGxKwALf5EVt6LlJqTVD729m4dxdAA1%2FnkhBcMd9K80JFcteW3loQuvxqJSt1u0pSrEbAkfGTDv0%2FQDI30H4qwdLmIekS1s84FUgss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e571a2253a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/wta.c6d5e2ef3.svg
172.64.143.26200 OK 3.3 kB URL GET HTTP/3 1win-cdn.com/img/wta.c6d5e2ef3.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3373), with no line terminators
Hash 040d7f0a9e965031fe2520530582a5d3
015a448fc7cbd8ca0b74360915ee71513921dbc1
fac8ba2fc8936b7a7f9faf5e0f94031ec8ad096c8094f026fc5fb67d5b2bff59
GET /img/wta.c6d5e2ef3.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-d04"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 376133
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RtgQmPV6fJUVL0NDSIy0jhmiMu3D8f%2BD%2FgQGIkgemGiivS5PV2cNW73zTYvdC4pd%2B5zNNd7IKEdxMfYRZwb3Q9XsT9Sgt%2BNxOjebEaTbOigDM9mcInnvtiOlR9cjumc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5b6ff953a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
142.250.74.168200 OK 310 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (49902)
Size 310 kB (310204 bytes)
Hash b0a002a9689bb538d1b56e21a485b53c
af444fa175819526e2dbf62a77d7a003123a6de6
56b3e2070a1fb0c5ff2fbe13e89fb9b4c43a2d63ca4ecedd1b14b7d7c9448cc6
GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 14:42:31 GMT
expires: Tue, 05 Dec 2023 14:42:31 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1win-cdn.com/img/edict.ca67383de.svg
172.64.143.26200 OK 13 kB URL GET HTTP/3 1win-cdn.com/img/edict.ca67383de.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1895)
Hash 7794e14088c92dc44e186b65dfd0782b
f81ec0b93e38339b2e2f8f94d2f7c568b8943fff
c7f35f1baf838b1d2df12f6f0c9ec002d9fc4f57fcee414b74fad3cabb71864a
GET /img/edict.ca67383de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-3206"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 368472
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E3IsK6mjQF1iZEIkrvnsRL1uUUWGoNOHpgM9LG9%2FCY5sV9MknBFg91MxCPSm%2F%2FQIkohbxjxjqnBR5QR%2FXO7VyarKl2Yvj6QXqfKsNb2zXnt8l8iD3uHpgVD8xVysJ30%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e609fe753a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/thunderspin.2d11ae63d.svg
172.64.143.26200 OK 2.5 kB URL GET HTTP/3 1win-cdn.com/img/thunderspin.2d11ae63d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2579), with no line terminators
Hash 604f41c295f537f07943cfe15d6f15f2
ab1b0075af6b7a8c6aa80eaa1ffbec9931a09369
9a89dee21e4f99f3d08e324ca4d4c6b1c08f3acc53bbc9027d57757359734198
GET /img/thunderspin.2d11ae63d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-9d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 460474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fq4A8a7GEz1azH7PzfOg284Gu0BnCMY4%2FqNRD87IWAbaQTP%2BgqdOZY5OHSl9%2BmET%2Bv8bKEEmFGhdAMIcR0a8v%2FrW8Fa32fEk97gGXMSSoPBK5l7atSl%2FNoKkgM0DQZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e625a2f53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/wazdan.1cf2cebcc.svg
172.64.143.26200 OK 2.0 kB URL GET HTTP/3 1win-cdn.com/img/wazdan.1cf2cebcc.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2034), with no line terminators
Hash f19410782a9e906c5987a9ec3dec0a8e
9df4dc8c8b7defde41a5caea964099dd1c882245
728bdcd00db7137c2e314ddf1f2dbe368b5a66d31ff5ccf0ca8e8ba83e3da5c9
GET /img/wazdan.1cf2cebcc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-7bd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 559824
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=meX4u4iYQ5zBnH8lM3gPwpVjBXtNwLMZ1cwUVsY5qGxxCytt8sKW8ihtIP6oXK5WrRGczIs5annMquOT0ZdAo%2FcB3LOPagTj%2FJeODTRilJkFaByItUVhgOnZ7SUIv2s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e626a4e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/aviator-game-logo.2fb50dc03.svg
172.64.143.26200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/img/aviator-game-logo.2fb50dc03.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3077), with no line terminators
Hash ced188fd368f5c8439ebd4398c9c9315
3b04cd5dfecda2e4b27b203dba4a6cef1b7890ea
82811dea95287317cc83610df97a7bc61db4783bd43ef75c8131c497f7868ef6
GET /img/aviator-game-logo.2fb50dc03.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/svg+xml
last-modified: Tue, 07 Nov 2023 17:21:12 GMT
etag: W/"654a7208-bfa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2367094
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zRK73tWJ88ZvqKMduk1QroF3tikPo8V1qYAcxQWZqmTlQGReXqpkOoX1ZKmkqywPEk4uKOADprWELeOKor8WxvGOGPL%2Fv2fdaI13GRMZM0Ht%2BO38EvseBFHPdFEabc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57aad153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/lucky-jet.f927485da.svg
172.64.143.26200 OK 4.0 kB URL GET HTTP/3 1win-cdn.com/img/lucky-jet.f927485da.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4016), with no line terminators
Hash 46387a9ff4a17ec246107df243120bfb
f662dcb3e5629d8b9dcd169f73e31f95309bda40
b3cffaeaa51fa3689ab70d930776d565a90ab7caaaace2f1cac5f67cfc13205f
GET /img/lucky-jet.f927485da.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-f8d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 376109
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dzsydc7%2B6xnPb6jP2wmpjWQH7lnFnKmIHTGr9ly1c8h%2BRvPZI5iOd2WbbNvOyfuDVwgiKH8n818Ka4A5fv0sOj68Iw63prPBzLMOj9jQQy%2F%2B0x1HkNyh8iwgvceLV00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e57aac853a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/78449.d46c5a3ff.js
172.64.143.26200 OK 786 B URL GET HTTP/3 1win-cdn.com/js/78449.d46c5a3ff.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (804), with no line terminators
Hash 3997e692861614602ae0ad581192673b
274ba9d8795299558fc25f0bdceb6997a27b8a4d
70920957cad5b0eb4747ccfa5e2cbde79c7f88bd7e3077e5715924c1c4368716
GET /js/78449.d46c5a3ff.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-312"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 371115
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fzDrZs%2B7KlAD8gVpmqYU%2B%2BftXaRL5iz3Do2tV3YJOKh5t7yu1N3ZA5r2CVekhzBCTArW6TXtguTzmT498xqXm%2BgFBAbMaSovGzXE7ZLUVbWqnsxxCJi2As8WV6pE5k0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f1d4153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/amatic.1ad22f1f0.svg
172.64.143.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/amatic.1ad22f1f0.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1042), with no line terminators
Hash beaad3ec246cc02d25e05017a1e1739a
391c594a7f9ff5db52bfbd1c41e6577e6ac49dc7
184333dfcbe0cc2997b77991da69552dd91fe8d480186f8a8b76187e11e00a84
GET /img/amatic.1ad22f1f0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-400"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 635582
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qcrf3BKX5TSE%2Fb56AbIEaiNuT%2FSphnbsZniTfdIU2gHpbyFMkGSMopso9KDPVG4hgmGABBeiKrRDHd9N1Bl422TD2U90J7hf3If%2BcZaJbFbBpjuWOBwPqn1iMWRy%2FIQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f5db653a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/apollo%20play.610da8846.svg
172.64.143.26200 OK 5.5 kB URL GET HTTP/3 1win-cdn.com/img/apollo%20play.610da8846.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5598), with no line terminators
Hash 50314c7ffb9d11a02d2c58c66e124e29
3ebfb6e02132e3281c64e7866a621fc9ff43678e
c6073fd4fbb0239b24f30fc4d2e90e2d34060adb4854b0b3eb34e5c0e363346d
GET /img/apollo%20play.610da8846.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-158b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 482541
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IZeQvfKLuVtn004PWZojZep9H4HEqw4jOH7BpGwDIsAkBor06mPz6FRe2UdLQtsgsP8E8yVIjkZdFuu7fIEj2DoYunWkaZyk0T6z72GXt1mnqF%2BsSDr0C4Afm2T1ZOE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f6dbf53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betsoft.cc500155f.svg
172.64.143.26200 OK 4.7 kB URL GET HTTP/3 1win-cdn.com/img/betsoft.cc500155f.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4861), with no line terminators
Hash fa91200f1738243c9a1bf9ebf853c238
43a438416c285aaf55c7f2edb2676616ffa0c838
9235396681ab2e82a2b5ce89e4f2e711f69cde3f6fb83af4050e110c4a55d3c9
GET /img/betsoft.cc500155f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-1286"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 466307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fpLCct0or5AFzmdzBi3rl%2B1ClHXFI3Xghe0F%2Fp9RBc5roXU7UhRr5DXieCegQSbmzWj28a9DdaclXEUYet4hx09d2rKP%2FoYyuNmVM1Z5vfO0Osxoxyy93YQNEpCjpfw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5fae1d53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/boldplay.70a46bd71.svg
172.64.143.26200 OK 4.7 kB URL GET HTTP/3 1win-cdn.com/img/boldplay.70a46bd71.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4715), with no line terminators
Hash b9145dace81bbcbef7d60609e72c9c63
c182aef9dae96fe22563e38cf8ad0bd5cfb9f588
8efe8d59068c4a443da7fca222bf01d3a94a01db7c7ace4463c434ff0aa93235
GET /img/boldplay.70a46bd71.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-123c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 382925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZOyS%2Fuc5KLCLVcqI54iMnDrzoptfNe3XBIn79XVoAhlUYc7I%2F%2BA5pe85EcbNI4%2BxfaV7o5fihZbQbnS2ADRwo8g917ocar46EAvvwEjfnxeOkSd5lbppAVUPBgE1CTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e600e9f53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/platipus.dd3b50ce6.svg
172.64.143.26200 OK 3.7 kB URL GET HTTP/3 1win-cdn.com/img/platipus.dd3b50ce6.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3788), with no line terminators
Hash 47208726d4dd191a03af9229fc538eb2
0ef7c3f6b3788794db7709213ecaee1b7558a5c2
b27442adef75a0afbde2ad9cacddd4d871e0a302390e6e860c59d627013b32f2
GET /img/platipus.dd3b50ce6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Nov 2023 17:30:48 GMT
etag: W/"656623c8-e84"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 553655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MFS5hoMbvRDEJneNeu3BiqmrJU5S7ENQxgn548UoMK%2FVOFsXP5pu%2BrbnRG3t4Kx3M%2FPrc%2B2G3nP4pPXMV9MsLUEIiDSl9K3zAaU46t7d51m78SbsFvWbZo%2FECV5R8iA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61a96e53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/1279.c6967365e.js
172.64.143.26200 OK 911 B URL GET HTTP/3 1win-cdn.com/js/1279.c6967365e.js
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type troff or preprocessor input, ASCII text, with very long lines (929), with no line terminators
Hash 3a0fd7772f5d3cd77c17b49876743f78
3eb84478f6c0ac3009e81576caf8fa6ddf4e2c5a
5d5a4e691e8df7115cff0e7b2b76131b7b633ce30509dc61fdf36c9ab36989a6
GET /js/1279.c6967365e.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 12:51:05 GMT
etag: W/"65688539-38f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 436035
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vdxz3AKcKMTiitbhWWl7XuJKcbwJdRz0xCLOQxmbdxthrutUusuij3z3lYxr%2FSI%2FrVJ1N%2BfbuXEpcFWTefhwIiJ5MX0wEuhw%2F6aghPNPTvpofIr36H1g8iYiQWYhPZM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e590cbb53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-poker-frame@2.50a0c1527-256.png
172.64.143.26200 OK 10 kB URL GET HTTP/3 1win-cdn.com/img/sprite-poker-frame@2.50a0c1527-256.png
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 02e1b80a02b656f3e40626b0441a8675
5fb12e431267a2d3f32372241648fc47ef123d7a
11a1d726e2d552c57e65db362098d91cdb4617789cd1cb4846e17aab0fe4ee11
GET /img/sprite-poker-frame@2.50a0c1527-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:29 GMT
content-type: image/png
content-length: 10453
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: "6564bdb0-28d5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 639632
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DcQEzv4lbePFIAS1GPOZK0pnm8aefefVjSKLbD0J%2BIwnX%2BRP%2B3Gh9VFK0e8x5cR9zx88GbEDp6aUA8F93l%2BKUv8Wdy1U7Z4N3ehCxFY%2BWzNzxjacIuaIhmyUQc9cCPs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e595d2553a0-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/elk.c0f58697d.svg
172.64.143.26200 OK 983 B URL GET HTTP/3 1win-cdn.com/img/elk.c0f58697d.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1007), with no line terminators
Hash 58995520e7430cd69b54d08c244aacc1
3db7918420563842879038fd5b4ba2050458ddeb
5110cb34328fe32430f0ef1a8a85709a1245aa2df8d876656a6dd74c8ed5accb
GET /img/elk.c0f58697d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-3d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 381870
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=afxuBbuRR5AZlMlYhS4iuH0etetM05uVhEx40d1DaBu%2BjifskhutigUvTRwoneynssgdgL67LymYS5G4QrfHvsp24GMi9QV5%2Fcsn7aeSKuzipPm7nIkaHyCT%2BK96PSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60c82f53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/vibragaming.4aef6c164.svg
172.64.143.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/img/vibragaming.4aef6c164.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1677), with no line terminators
Hash 7fd5e5dc27d49afe18b63c0225aae950
27a9bb01663a4b8b58fcf585665b7fa4ca8c62c1
35c7816662f7535724882bdc76a5565b025e65140b73072534cdf871c3c62b8e
GET /img/vibragaming.4aef6c164.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-62e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S6Czyuz0pWoE21d8pTmcDDylNjTuNCdcFjE6%2Fp%2FVa2D7nunCRhJV4TdPdxYTOSnFmuCQmF%2Bv8Fn%2BobebQHzlDA%2BOLC9DdwrBUaMGzFTJT%2F9rIPGj4XLGogB6xI5jlKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e626a4353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/spearhead.27c37f3dd.svg
172.64.143.26200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/img/spearhead.27c37f3dd.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1247), with no line terminators
Hash b7d0037b4b499acbf11a3a7d22d9f7e8
b4a122e841ea28158af2f35adaf0b802713ffda3
aaa2c2f064d9c7709062169ce8ef64c7e6158b89d6700351c1be538cb0bdc0fe
GET /img/spearhead.27c37f3dd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 08:24:37 GMT
etag: W/"656846c5-4aa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 453929
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2F4pXqNN7S8zK6JOMVxcGQ1Z6DsdrpFghXt8hO6BfINncKtjofCyfEOiUjOOZ4JH1ig7CiuFi0vxTa8MwfU62otW2BdnQjhL%2FgsyO8E2tPb6N5wjlP5s2vdiU6YCcj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e624a1053a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/worldmatch.9f3d40aa7.svg
172.64.143.26200 OK 522 B URL GET HTTP/3 1win-cdn.com/img/worldmatch.9f3d40aa7.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (550), with no line terminators
Hash c3aab966ecda4dadceb7b556b4205478
e8e501768b244593d7e5a59b6a7cf77e3b0d4581
ba1ec219d7a5dafe4c7ce5aa35171278f90b26d55c3ce4b1fd2474ce69487bf1
GET /img/worldmatch.9f3d40aa7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-20a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2E77IGbTQUMjUgjuGk2GdIpw2qnrSXlW1gHbpaqdmL3mDzcT842qeE2rL7aPhn74%2BnDk0op4DTikGJdxeCJ2JCZDTPH%2FmsZUqm%2B1oGRMNmLNDX%2FyVty4F5AFE%2Ba3NXY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e626a4f53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/index.bdcc4e5e5.css
172.64.143.26200 OK 6.5 kB URL GET HTTP/2 1win-cdn.com/css/index.bdcc4e5e5.css
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type ASCII text, with very long lines (6467), with no line terminators
Hash b17f343ab7229a65780b5aafdd820a83
2e4939d385ede3407fdb8390a97b7f811a0939c9
69eed09cab01f9bbfa1895b14d4c1f95037c02e08b466f0378ecf229618102f6
GET /css/index.bdcc4e5e5.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:42:28 GMT
content-type: text/css
last-modified: Mon, 27 Nov 2023 13:28:33 GMT
etag: W/"65649981-193b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 695242
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZF6TWRu97NRO%2Fxvh3lWmHxuDq%2BBAXWMekinmvI44BlNf%2Bk2koU1kGgGoykeoyGUNVlWN1KyUIfh%2BtH8q%2FJC5CqA3coR27GkeHcIUounRZZfxnz1kLxf8H1t3%2Bbum%2F7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e51cc7f650f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/img/beter%20live.8751ff763.svg
172.64.143.26200 OK 14 kB URL GET HTTP/3 1win-cdn.com/img/beter%20live.8751ff763.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2983)
Hash b23f70a0c2fd2682149b4d004d91188b
517dcf9bb45c59a0a2c37905cbed75b800421c0a
7fd1374e1892e940097c85ddbea69a0ef6686cff1881dc89b93c6eee33d47c4e
GET /img/beter%20live.8751ff763.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:30 GMT
content-type: image/svg+xml
last-modified: Tue, 21 Nov 2023 13:48:46 GMT
etag: W/"655cb53e-34d6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1212292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kCO14IQ2v5DoJP14c5mEUzfncRqXgG5Lga3uYfgcTSZsCQFWXxukuJh1jVo5LH%2Bm8YbwUvAyIbLcu18szFwiyZBMtlKeiuOK8iT4SFkoottTHzdreQVqtOvFw4lPCUY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e5f8df153a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gaming%20corps.5c3f3647c.svg
172.64.143.26200 OK 1.9 kB URL GET HTTP/3 1win-cdn.com/img/gaming%20corps.5c3f3647c.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1978), with no line terminators
Hash ddcf2a0ddef8449807db0b7419c39291
9757b762ac3efb096bd45b869ee4d06565a1e9c2
f03dab28c20b3b25823b4b64bbd27953a463c5e9bd7b5bcfa12930f6793fb1e4
GET /img/gaming%20corps.5c3f3647c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 13:53:46 GMT
etag: W/"656893ea-790"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 370758
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KWQ9EMtmjEW7IQinDshihUwcANayQHDruDJ1k3jXlI8FczNdTyXgTebqwBVtamP8BocMGJ5hphKuqPI8OFYl4ZOpzvmHdgkXPMae591O20gd%2FuBHBj%2F1yDXkiPIo%2F90%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e60e87553a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/leap.f4cfad944.svg
172.64.143.26200 OK 2.5 kB URL GET HTTP/3 1win-cdn.com/img/leap.f4cfad944.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2538), with no line terminators
Hash 9129fc106fce1317a16bb3acbd708de8
64dead6ad9646ce68218ae82cf9d369811d3b88d
993824f1fe4aa4c5c4132998d9b0a11fb719a92494f86e32d015a980473a59af
GET /img/leap.f4cfad944.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Nov 2023 16:02:56 GMT
etag: W/"6564bdb0-99d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 630396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XfvvAuL1xHO4J%2FthxkPiQExDa16G3XQUzpr182bzTOQOSNZwq%2F%2B50PyzmU3UvtWB1XI3%2B%2FxlR5%2FnkwKWA7nhVUWk5wOoXbmgsEGMylERf1eQHug6evDZ1d4swqhPR2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e6148fa53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/reelplay.06dc7f4c0.svg
172.64.143.26200 OK 25 kB URL GET HTTP/3 1win-cdn.com/img/reelplay.06dc7f4c0.svg
IP 172.64.143.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint69:65:5F:44:7E:1C:68:DE:68:3F:86:0A:9D:69:09:2F:E8:56:AF:CE
ValiditySat, 02 Dec 2023 19:11:28 GMT - Fri, 01 Mar 2024 19:11:27 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b322085b94eec118c20d5acba9ea8465
616f9440231bd629e6d2b6aea1d1baac51386151
542c8ac685d4bf37c20fe8c1b758db347c1300495f467ee0cf4d335239c42b26
GET /img/reelplay.06dc7f4c0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1w-astt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 14:42:31 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 10:07:56 GMT
etag: W/"65670d7c-60b9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 474481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P0TUtMnQFOyeBrfui7PgfeltNB%2BF8kokg58LVyMseQzLMNoRD9ClNnTRDcsesUmLnRKfOg4VXCvmgeqZGQl6uwTRqJH%2F%2B8C2md9h9ri%2FuGRNEpdppQMwDwPpWrW%2Bvcg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d0e61f9c353a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400