Report - 1wbala.xyz/v3/4151/betting-india

Report Overview

Visited public
2024-12-07 02:34:43
Tags
URL
1wbala.xyz/v3/4151/betting-india
Finishing URL
1wbala.xyz/v3/4151/betting-india
IP / ASN
104.21.33.6
#13335 CLOUDFLARENET
Title
1win

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
match-storage-partners.top-parser.com	unknown	2021-11-11	2024-12-07	2024-12-07	617 B	453 B	154.197.121.129
direct.1wprod.top	unknown	2024-01-22	2024-10-18	2024-10-18	2.1 kB	1.8 kB	3.69.77.8
1win.com	unknown	2002-07-04	2017-02-03	2024-02-14	447 B	5.0 kB	190.115.24.78
cf.1win.direct	unknown	2022-08-16	2024-10-22	2024-12-06	606 B	348 B	154.197.121.130
1wzvro.top	unknown	2024-09-21	2024-10-15	2024-11-30	406 B	56 kB	186.2.162.102
partners.1win-cdn.com	unknown	2022-12-12	2024-10-14	2024-11-30	403 B	2.7 kB	190.115.19.14
1wbala.xyz	unknown	2024-10-03	2024-10-08	2024-10-08	10 kB	952 kB	172.67.188.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-07	medium	1wzvro.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	1wbala.xyz/v3/4151/betting-india/assets/index-CgAUfHkb.js	ScriptElement	464 kB	2024-12-07	2024-12-07
Pretty URL 1wbala.xyz/v3/4151/betting-india/assets/index-CgAUfHkb.js IP 172.67.188.106 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-07 02:34 Last Seen2024-12-07 02:34 Times Seen1 Hash 0c626592f85b08176486a2e8cd200b8b 9428be9186aef2f2b73a127697c7d4cdce1e90ac 8ee0233a26e6816b18a7faab8cf58420c336f2caf4213a5f5945fb905685271d Loading...

	unknown	Function	163 B	2024-08-21	2025-04-16
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-08-21 15:31 Last Seen2025-04-16 17:09 Times Seen17 Hash 9b0a95e9b91cd29febcb59a3be2ebf17 0462b8740482109e9ff514327b9d91bfa01de755 85736de4d2be6f8c37a7631e7f78085af72b19910f398c7e554e793292caa523 Loading...

	unknown	Function	150 B	2024-05-26	2025-04-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-05-26 05:54 Last Seen2025-04-19 07:36 Times Seen18 Hash 110b87eff6829fd898ac39b47d34c898 69326172146d4fbc63c810369446860b459492e3 9c0626b4425f876e74c3aef07bad408f2ef06884fd2edb257e47fc8b5d73895e Loading...

	unknown	Function	148 B	2024-12-07	2025-02-26
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-12-07 02:34 Last Seen2025-02-26 19:17 Times Seen4 Hash ae9c3eeacdb4178c615e9dc998d58242 7e0f4103d9918715e2cc4f5b537310496689ed04 4a6fe12b8b65f76f8092e6ac2dbed1d57a10d1e7c3a4cc80b8bdf678662fd06c Loading...

	unknown	Function	144 B	2024-12-07	2025-04-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-12-07 02:34 Last Seen2025-04-19 07:36 Times Seen5 Hash f1ec5af201fad834fac07cc8835c6fbc b7434695ca85f614395c3d6169ee4472bed3312f 64e6f763cca5ad6ed0da0594cb3fa89d5e621da76c1fa70f9f2f319e72a564d5 Loading...

	unknown	Function	137 B	2023-04-13	2025-05-15
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 07:32 Last Seen2025-05-15 06:23 Times Seen99 Hash 4660f3b5374c1363c8ce7427dba3e038 b42f435dcbdc008075395a059910cbcddeebb1d7 46dbad19c58f8fca06a38b9aef2e9c976899429b90e02587012c925328c391c8 Loading...

	unknown	Function	152 B	2023-05-26	2025-05-16
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-26 21:07 Last Seen2025-05-16 12:35 Times Seen44 Hash 969de514e9f9bcb8f52be00bcfaecc93 5df64ccfa02c7126bc681847a29a6cd4c43eb18a 7a6c76fa386fb3cc70f8a47a7062caba11f6167e6465b21cfd3fe97150300ea3 Loading...

	partners.1win-cdn.com/index.umd.js	ScriptElement	4.1 kB	2024-11-30	2025-01-26
Pretty URL partners.1win-cdn.com/index.umd.js IP 190.115.19.14 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-30 09:38 Last Seen2025-01-26 15:32 Times Seen30 Hash 6feb43d74a16b3cc65b61beb8e2ad824 4afea7eba697b086571dbd452189f91a9820f64c 7f6668a7e9ef502207250ae107377a8dc32f43c20a8c38ab7a06d7acfffceef6 Loading...

	unknown	Function	157 B	2023-05-05	2025-05-15
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-05 08:00 Last Seen2025-05-15 07:17 Times Seen84 Hash 7cb2aae2b1c57b6dbb067db9a3943c40 27e561148e55047f8062c8c3eebdf910f5569c5e 118351441004efd33c4d05ec9db5b8296b494ed99726dcbed0cae414e2e382cd Loading...

	unknown	Function	168 B	2024-12-07	2025-02-26
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-12-07 02:34 Last Seen2025-02-26 19:17 Times Seen4 Hash cd6ee481282c452baa5df8b053015185 0449abdd22d9a699e0fc0dfdbb4bb61cf5f63cc0 beecd83bb151bee5ddc5df380c9af0d6e38ceed041006979ad69780ca1014e5b Loading...

	unknown	Function	163 B	2024-12-07	2025-02-26
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-12-07 02:34 Last Seen2025-02-26 19:17 Times Seen4 Hash b9e828982ad73ccf426a3feb7fe8fcc3 71004f2f410e94b6a60898b8e0672181382665f0 d0fb9c6aa85384a1ca7ea196ef91ec451effc323d8d7ca6f59e032b7e86a82b4 Loading...

	unknown	Function	141 B	2024-12-07	2025-02-26
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-12-07 02:34 Last Seen2025-02-26 19:17 Times Seen4 Hash a599d8ffa3d41a72ff56d6e3898827f9 ff70610e5cd8e696d6d8f2d6a483215880ccadf4 425058f83189f96563df1f0a3950fbcee729e02a6a3c67effe9225569af60cb9 Loading...

HTTP Transactions (29)

URL IP Response Size

partners.1win-cdn.com/index.umd.js

190.115.19.14

200 OK

2.0 kB

URL GET HTTP/2
partners.1win-cdn.com/index.umd.js
IP
190.115.19.14:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subjectpartners.1win-cdn.com
FingerprintA5:AA:98:75:17:43:B5:95:AA:1C:A9:57:2A:1A:7A:FB:49:37:D9:4B
ValidityTue, 03 Dec 2024 23:34:34 GMT - Mon, 03 Mar 2025 23:34:33 GMT

File type
JavaScript source, ASCII text, with very long lines (3571)
Size
2.0 kB (1977 bytes)
Hash
6feb43d74a16b3cc65b61beb8e2ad824
4afea7eba697b086571dbd452189f91a9820f64c
7f6668a7e9ef502207250ae107377a8dc32f43c20a8c38ab7a06d7acfffceef6

HTTP Headers

GET /index.umd.js HTTP/1.1
Host: partners.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=ScQ2I0XspTHvN83P; Domain=.1win-cdn.com; Path=/; Expires=Sat, 07-Dec-2024 02:54:17 GMT
__ddg9_=91.90.42.154; Domain=.1win-cdn.com; Path=/; Expires=Sat, 07-Dec-2024 02:54:17 GMT
__ddg10_=1733538857; Domain=.1win-cdn.com; Path=/; Expires=Sat, 07-Dec-2024 02:54:17 GMT
__ddg1_=NDbddluDPmDk8nqsOaIH; Domain=.1win-cdn.com; HttpOnly; Path=/; Expires=Sun, 07-Dec-2025 02:34:17 GMT
date: Thu, 05 Dec 2024 04:35:38 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 24 Oct 2024 07:15:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
content-encoding: br
vary: Accept-Encoding
content-length: 1977
ddg-cache-status: HIT,HIT
etag: "6719f3fa-100d"
age: 165519
X-Firefox-Spdy: h2

1wbala.xyz/v3/4151/betting-india/images/loader/logo.svg

172.67.188.106

200 OK

2.0 kB

URL GET
1wbala.xyz/v3/4151/betting-india/images/loader/logo.svg
IP
172.67.188.106:0
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
SVG Scalable Vector Graphics image
Size
2.0 kB (1988 bytes)
Hash
802817c97bc5b5bb8a1cc10082d7cb31
12470add7c917ce07dac8e9f5bd99bb9a4c43cf3
e389f4ab9897abda074cf68b7e8c4450384596b8f656e90c5ad7eb44f970af28

HTTP Headers

GET /v3/4151/betting-india/images/loader/logo.svg HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/svg+xml
content-length: 1988
content-encoding: gzip
etag: "674f258c-117b"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2BhlT2s1u7c1r7chevphJArmCe1%2FneluE1p9caVyVrhqxLRjmJ%2FGTqbEzyZm9DYF%2BEBh4lbtlhA7znMlzS54%2BiQ6ZZatfsp3Easx57WHDglxOvShexTs6Qfw5%2B5T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da54869b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1988&min_rtt=805&rtt_var=1341&sent=168&recv=37&lost=0&retrans=0&sent_bytes=164752&recv_bytes=7603&delivery_rate=1150&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=678&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/images/logo/logo.svg

172.67.188.106

200 OK

2.4 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/logo/logo.svg
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
SVG Scalable Vector Graphics image
Size
2.4 kB (2359 bytes)
Hash
f19eb0b4d290dcf578ae037a1236a935
9136e1b875c929cc3cb1b4897b17269b0aa7ef8a
b7eb1b8615eb6afc335a25b706e2a1cb261a233908bc630e6b5d738b29081f3b

HTTP Headers

GET /v3/4151/betting-india/images/logo/logo.svg HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/svg+xml
content-length: 2359
content-encoding: gzip
etag: "674f258c-18e8"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHYp%2FO1wFNgwyxmvbuMhjIuRUnJyr0fIp7LzV%2FnAvIHvvIWd691C5LnDfmDeUs224wgNF2dnbbBgck2yIhrljDcveZaEFPOZgV6laovYDIbPSOiFh7RcC1wLZ5RV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da5586ab527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1882&min_rtt=805&rtt_var=1217&sent=171&recv=38&lost=0&retrans=0&sent_bytes=167505&recv_bytes=7649&delivery_rate=18961&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=681&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/images/info.svg

172.67.188.106

200 OK

442 B

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/info.svg
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
SVG Scalable Vector Graphics image
Size
442 B (442 bytes)
Hash
ec329c398037993dc6a560fdf27bf831
2fc58c5b85b7c1a09f7c9e59ff498438a659837b
eb16820c2fca0af92d734a1ce85820b066fbc22113674e3fcdcf53f903f04776

HTTP Headers

GET /v3/4151/betting-india/images/info.svg HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/svg+xml
content-length: 442
content-encoding: gzip
etag: "674f258c-30a"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2FloZd1Wi0U0pRxqPX%2Fdb3u74NcPuNig15CLkh1p3UYLrd5Zqzag%2F%2BoemhVHWBpeiBateoqj5cSGon4TS5X2U8I9wGPPKKGYg4eoMnUkKaLeah3RrEHbPbKhx7dr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da57883b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1665&min_rtt=805&rtt_var=872&sent=220&recv=41&lost=0&retrans=0&sent_bytes=224587&recv_bytes=7786&delivery_rate=4798822&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=710&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/images/badge/1_768.svg

172.67.188.106

200 OK

353 B

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/badge/1_768.svg
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
SVG Scalable Vector Graphics image
Size
353 B (353 bytes)
Hash
b1113e97999097eb8836ef21c6b01897
01bf54051b23bd2f0c333cb7479a9da8f0eb508a
38d325af4f0645645d57eff4178f224774265df87833a12e7f54b838ee76a51f

HTTP Headers

GET /v3/4151/betting-india/images/badge/1_768.svg HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/svg+xml
content-length: 353
content-encoding: gzip
etag: "674f258c-31f"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=duKu%2FRqe%2BdLfOcEXRuvIB4yncz2sAFQZGtVvWbdeoBwzwR9jTI9FGB%2BSR9nGuCH0%2FzY4%2Bg%2BqwFaLKdtkg54mz7c3zSYh%2BFg98d4SXmfwsXLPeAsF7cN9rnzAdhvt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da57885b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1665&min_rtt=805&rtt_var=872&sent=221&recv=41&lost=0&retrans=0&sent_bytes=225738&recv_bytes=7786&delivery_rate=4798822&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=716&x=1", cfExtPri, cfHdrFlush;dur=0

match-storage-partners.top-parser.com/lp-feed?&lang=en&service=PREMATCH&sportId=25&startCoefficient=1.01&&endDate=1733711657

154.197.121.129

200 OK

0 B

URL GET HTTP/2
match-storage-partners.top-parser.com/lp-feed?&lang=en&service=PREMATCH&sportId=25&startCoefficient=1.01&&endDate=1733711657
IP
154.197.121.129:443
ASN
#328608 Africa-on-Cloud-AS

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subjecttop-parser.com
Fingerprint29:99:05:30:DC:FC:52:87:8D:79:48:FF:7C:DA:BD:1E:B3:44:50:96
ValiditySun, 10 Nov 2024 08:05:02 GMT - Sat, 08 Feb 2025 08:05:01 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /lp-feed?&lang=en&service=PREMATCH&sportId=25&startCoefficient=1.01&&endDate=1733711657 HTTP/1.1
Host: match-storage-partners.top-parser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type
Referer: https://1wbala.xyz/
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type
access-control-allow-methods: GET,OPTIONS,PUT,POST
access-control-allow-origin: https://1wbala.xyz
access-control-max-age: 100
x-forwarded-proto: https
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8ee11da5dec892a3-CPH
X-Firefox-Spdy: h2

1wbala.xyz/v3/4151/betting-india/assets/index-CgAUfHkb.js

172.67.188.106

200 OK

144 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/assets/index-CgAUfHkb.js
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
JavaScript source, ASCII text, with very long lines (41224)
Size
144 kB (143715 bytes)
Hash
0c626592f85b08176486a2e8cd200b8b
9428be9186aef2f2b73a127697c7d4cdce1e90ac
8ee0233a26e6816b18a7faab8cf58420c336f2caf4213a5f5945fb905685271d

HTTP Headers

GET /v3/4151/betting-india/assets/index-CgAUfHkb.js HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: application/javascript
content-encoding: gzip
etag: "674f258c-7138b"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YYUSgFDD27BREDNrbQ3zlaLVVQ0jiIZrJbeRTUltBMjWmAmNwGXllp6olfVEj1Vd0Nj3moXrOcywfgFFQHiGuiQ5A97cxTOrfc0TZuBlo8ssKk%2Bu0n0%2BrizRXn0z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da30f00b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3474&min_rtt=1578&rtt_var=2062&sent=25&recv=10&lost=0&retrans=0&sent_bytes=16279&recv_bytes=1538&delivery_rate=36948&cwnd=24000&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=345&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/favicons/favicon.svg

172.67.188.106

200 OK

551 B

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/favicons/favicon.svg
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
SVG Scalable Vector Graphics image
Size
551 B (551 bytes)
Hash
8b473a456b4ec2cd5fe052094249c256
91a343f061a3e06326bc970ec20b18af00695a7e
b839f860a1f8993a7d97bf39c14519ab53c0332918dbcb2ccd13c28b2fb82bff

HTTP Headers

GET /v3/4151/betting-india/favicons/favicon.svg HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: image/svg+xml
content-length: 551
content-encoding: gzip
etag: "674f258c-642"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tGtPrSSh6uXD7FN%2BtbmEUIkr5ZJWCVVQPXIXaEAeYrqnMoKivqqp9Zkg%2B2BrxsCiT8mcqo5fjxVsI3vyFwk%2BlDClQWTGUuq9HRvVGIfQL4pOnMbjdmuDd%2FMCZk85"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da7b9b6b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1347&min_rtt=805&rtt_var=435&sent=650&recv=62&lost=0&retrans=0&sent_bytes=725518&recv_bytes=9261&delivery_rate=14359272&cwnd=187200&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=1072&x=1", cfExtPri, cfHdrFlush;dur=0

direct.1wprod.top/domains/cached/public/findMany

3.69.77.8

204 No Content

0 B

URL OPTIONS HTTP/2
direct.1wprod.top/domains/cached/public/findMany
IP
3.69.77.8:443
ASN
#16509 AMAZON-02

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subject*.1wprod.top
Fingerprint7F:0D:43:A5:54:CD:86:33:F0:29:5F:31:B0:11:A6:DF:BC:69:0D:7D
ValidityThu, 21 Nov 2024 06:42:25 GMT - Wed, 19 Feb 2025 06:42:24 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /domains/cached/public/findMany HTTP/1.1
Host: direct.1wprod.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://1wbala.xyz/
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
date: Sat, 07 Dec 2024 02:34:18 GMT
vary: Origin, Access-Control-Request-Headers
x-app-version: v1.55.0
x-selected-tenant-id: 1
x-trace-id: 9ca561d0c3c3d1cb085c44ae5592f7db
content-length: 0
X-Firefox-Spdy: h2

direct.1wprod.top/domains/cached/public/findMany

3.69.77.8

200 OK

43 B

URL OPTIONS HTTP/2
direct.1wprod.top/domains/cached/public/findMany
IP
3.69.77.8:443
ASN
#16509 AMAZON-02

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subject*.1wprod.top
Fingerprint7F:0D:43:A5:54:CD:86:33:F0:29:5F:31:B0:11:A6:DF:BC:69:0D:7D
ValidityThu, 21 Nov 2024 06:42:25 GMT - Wed, 19 Feb 2025 06:42:24 GMT

File type
JSON text data
Size
43 B (43 bytes)
Hash
4d6134e35b202e86e4096cbb44c3c5ac
e05f5b375626d2270e5973f764da3d68f2ca1f8f
884e04bb992c7a9e719ed457290475154b28ea243e845f3177440a6a8ed2be71

HTTP Headers

POST /domains/cached/public/findMany HTTP/1.1
Host: direct.1wprod.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wbala.xyz/
Content-Type: application/json
Content-Length: 63
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sat, 07 Dec 2024 02:34:18 GMT
vary: Origin
x-app-version: v1.55.0
x-selected-tenant-id: 1
x-trace-id: c7defce1a2f62b08fd59dd30bee581c2
content-length: 43
X-Firefox-Spdy: h2

direct.1wprod.top/domains/cached/public/findMany

3.69.77.8

204 No Content

0 B

URL OPTIONS HTTP/2
direct.1wprod.top/domains/cached/public/findMany
IP
3.69.77.8:443
ASN
#16509 AMAZON-02

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subject*.1wprod.top
Fingerprint7F:0D:43:A5:54:CD:86:33:F0:29:5F:31:B0:11:A6:DF:BC:69:0D:7D
ValidityThu, 21 Nov 2024 06:42:25 GMT - Wed, 19 Feb 2025 06:42:24 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /domains/cached/public/findMany HTTP/1.1
Host: direct.1wprod.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://1wbala.xyz/
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
date: Sat, 07 Dec 2024 02:34:18 GMT
vary: Origin, Access-Control-Request-Headers
x-app-version: v1.55.0
x-selected-tenant-id: 1
x-trace-id: c8c288b6bf34744deb199e65f8eb7ed1
content-length: 0
X-Firefox-Spdy: h2

direct.1wprod.top/domains/cached/public/findMany

3.69.77.8

200 OK

404 B

URL OPTIONS HTTP/2
direct.1wprod.top/domains/cached/public/findMany
IP
3.69.77.8:443
ASN
#16509 AMAZON-02

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subject*.1wprod.top
Fingerprint7F:0D:43:A5:54:CD:86:33:F0:29:5F:31:B0:11:A6:DF:BC:69:0D:7D
ValidityThu, 21 Nov 2024 06:42:25 GMT - Wed, 19 Feb 2025 06:42:24 GMT

File type
JSON text data
Size
404 B (404 bytes)
Hash
706cf400cc9ec5dc05b026222b1806bf
79db8718295c676527fafed2972912f15427c86a
5c9d61b6de37eaf28d5a823226d3f855bdfb32a2c86db279ccddc80af5551c10

HTTP Headers

POST /domains/cached/public/findMany HTTP/1.1
Host: direct.1wprod.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wbala.xyz/
Content-Type: application/json
Content-Length: 61
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sat, 07 Dec 2024 02:34:18 GMT
vary: Origin
x-app-version: v1.55.0
x-selected-tenant-id: 1
x-trace-id: 67aa4f6551f360a08c7ea37451945918
content-length: 404
X-Firefox-Spdy: h2

1wbala.xyz/v3/4151/betting-india/images/background/player-center_1024.avif

172.67.188.106

200 OK

15 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/background/player-center_1024.avif
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
gzip compressed data
Size
15 kB (15161 bytes)
Hash
189d348b569521e5777b43a9531c9340
df24b7751791781bc1e114bcffc576186f3f0f09
d6f598d04bfde9b25e777be54383f9c1a46db4bbcf67665eccada7a419c6c229

HTTP Headers

GET /v3/4151/betting-india/images/background/player-center_1024.avif HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/avif
content-encoding: gzip
etag: "674f258c-396b"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wpv6lrG0pBvQOmaGbzERHwb03%2FEh7a%2FZRfl1hAesQepct4jDVbeE%2BOOx625vmaSpl1uOtGcoyC9kxaBIkfGycViVLq3%2FiHZ3LFitPm4f%2BaW%2FKK92Q%2Fxvz6seQ9Xh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da5687db527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1628&min_rtt=805&rtt_var=727&sent=222&recv=42&lost=0&retrans=0&sent_bytes=226801&recv_bytes=7832&delivery_rate=317566&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=720&x=1", cfExtPri, cfHdrFlush;dur=0

1win.com/affiliate:link_visit

190.115.24.78

200 OK

3.2 kB

URL POST HTTP/2
1win.com/affiliate:link_visit
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subject1win.com
FingerprintFD:29:D3:50:95:AC:F8:37:D1:B5:85:CD:61:A4:4D:6A:48:49:CA:0E
ValidityWed, 27 Nov 2024 06:08:03 GMT - Tue, 25 Feb 2025 06:08:02 GMT

File type
gzip compressed data, from Unix
Size
3.2 kB (3186 bytes)
Hash
bef356bfd3f3f1acb1e14dd27c43f07b
ba9243431049a2e0831df005417460d3f330e316
a3a136afcf09b92a55622fc167167fe79d46ea6de689aaa896534c5f44e001de

HTTP Headers

POST /affiliate:link_visit HTTP/1.1
Host: 1win.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 135
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=1rGThGfF3Ard1bd6; Domain=.1win.com; Path=/; Expires=Sat, 07-Dec-2024 02:54:19 GMT
__ddg9_=91.90.42.154; Domain=.1win.com; Path=/; Expires=Sat, 07-Dec-2024 02:54:19 GMT
__ddg10_=1733538859; Domain=.1win.com; Path=/; Expires=Sat, 07-Dec-2024 02:54:19 GMT
__ddg1_=4Hr2JWVVeCk0qLv2GuvG; Domain=.1win.com; HttpOnly; Path=/; Expires=Sun, 07-Dec-2025 02:34:19 GMT
core-sticky=http://10.233.94.74:80; Path=/; HttpOnly
date: Sat, 07 Dec 2024 02:34:19 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wbala.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"46-6XlpOT+Byk4XoanGxqaALW7gw2c"
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wbala.xyz/v3/4151/betting-india/sprites/flags.svg

172.67.188.106

200 OK

198 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/sprites/flags.svg
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
SVG Scalable Vector Graphics image
Size
198 kB (197560 bytes)
Hash
f5b8a019d51a8b64c1fd456f39f924e4
3c60801edc5ad8bb3c861f4572bf93229757445f
2a20b54a313fc6aeb5aaac32ec9c73aa54786e49b7eda96ef6dbf9171fc548d9

HTTP Headers

GET /v3/4151/betting-india/sprites/flags.svg HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/svg+xml
content-encoding: gzip
etag: "674f258c-303b8"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJ1esbW24shoyU6GyqASoyu68yJknYNJYN4z9O1QjPFKEpCpS%2FMRG9xluxhEcdJaHSJCUfkhgP2Bu8J3sSNDuaVN0YdA6j9t%2Ft9AaEo%2FdfbMOiPK%2B%2BHLx9YDbfTv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da5586cb527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1757&min_rtt=805&rtt_var=1163&sent=174&recv=39&lost=0&retrans=0&sent_bytes=170626&recv_bytes=7695&delivery_rate=2228437&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=683&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/fonts/Inter-Regular.woff2

172.67.188.106

200 OK

103 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/fonts/Inter-Regular.woff2
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 102604, version 3.1245
Size
103 kB (102604 bytes)
Hash
136ccf10feeed1f95c3a0c5e91a24333
7b5b5c831a9f75918d1d6660222cd7aebc0acab1
78302f9c9577ab7c8dd7e26e486b355ac31bbd86dc1103cd654a8eb074f52f22

HTTP Headers

GET /v3/4151/betting-india/fonts/Inter-Regular.woff2 HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: font/woff2
etag: W/"674f258c-190cc"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mW73PLkbnuTO%2FqFak6ioWGUQcc9wk7m18h3icJ0dWHygcfIp9vrX%2F%2Bawtw7g4eYc5IAPxG3E1GphUfCOWhaTKeW9PNBgY4qi7ZySpagbqGxDvDtbFegD8%2F%2BPWFI%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da57887b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1494&min_rtt=805&rtt_var=365&sent=320&recv=49&lost=0&retrans=0&sent_bytes=341312&recv_bytes=8148&delivery_rate=21131955&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=739&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india

172.67.188.106

200 OK

3.8 kB

URL User Request GET HTTP/2
1wbala.xyz/v3/4151/betting-india
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4043), with no line terminators
Size
3.8 kB (3786 bytes)
Hash
1c2217686c83ffaef7675c4d98c86ea6
c4881c023c8823cdfa3fce410eeccc7a058d51a4
3eb8dcc9346b4c04c4150511e55644a4541fdf5d3533e59149caca6af57fe78c

HTTP Headers

GET /v3/4151/betting-india HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: text/html
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t8czpsN9UmxE3Sx8tMm7HjhhM7zehAzxBtG%2FK98KJiC6yw226t1T0u8BzJCe7ZF73Ne9xTElgDm%2FSZgCJyeIpvH4xm2a%2B4QGqOsYvq8O%2FBiry%2FFDLZZmOXDdCoHS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da0fd5a56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6317&min_rtt=434&rtt_var=11770&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3195&recv_bytes=1129&delivery_rate=7288590&cwnd=254&unsent_bytes=0&cid=19c8187e397ff2fd&ts=166&x=0"
X-Firefox-Spdy: h2

cf.1win.direct/v4/socket.io/?Language=en&xorigin=1wbala.xyz&EIO=4&transport=websocket

154.197.121.130

101 Switching Protocols

0 B

URL GET HTTP/1.1
cf.1win.direct/v4/socket.io/?Language=en&xorigin=1wbala.xyz&EIO=4&transport=websocket
IP
154.197.121.130:443
ASN
#328608 Africa-on-Cloud-AS

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subjectcf.1win.direct
FingerprintB3:A3:FB:FD:97:79:B3:E7:F5:C6:DD:23:E6:64:2D:D1:20:7C:23:0B
ValidityThu, 17 Oct 2024 11:01:33 GMT - Wed, 15 Jan 2025 12:01:27 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v4/socket.io/?Language=en&xorigin=1wbala.xyz&EIO=4&transport=websocket HTTP/1.1
Host: cf.1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wbala.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dKwo1t0Z6BpzHwEiRurA2g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Sat, 07 Dec 2024 02:34:18 GMT
Connection: upgrade
Sec-Websocket-Accept: e2EpZ1ptmBoZFZZWLlJJWGD0/AU=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=18c88ded5fff03c8; Path=/; HttpOnly
Upgrade: websocket
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8ee11da60feaeb50-CPH

1wbala.xyz/v3/4151/betting-india/images/background/background_1024.avif

172.67.188.106

200 OK

5.3 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/background/background_1024.avif
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
ISO Media, AVIF Image
Size
5.3 kB (5283 bytes)
Hash
c88ffcfd40c2da03d38d0c2c2299ae64
c964e3375a2c746fe6a5b09acfe00c798c42bf80
9ac0143324f436088a0a77485a44f40fe6165409d6460355d01692bc5787b560

HTTP Headers

GET /v3/4151/betting-india/images/background/background_1024.avif HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/avif
content-encoding: gzip
etag: "674f258c-14a3"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GHKO%2FsfWiau5mz8zcorc9CrJY2s54RlVZovfO32PxJLdccKV7XyEDVHwdeXgn9tTK5OIk8Cgrs6ba3hYid5qBfPODlckLSz6SziW2nOQoUAjWWQjlzWFOfiJlu%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da56878b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1766&min_rtt=805&rtt_var=892&sent=214&recv=40&lost=0&retrans=0&sent_bytes=218521&recv_bytes=7741&delivery_rate=18065785&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=698&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/fonts/HalvarBreit-XBd.woff2

172.67.188.106

200 OK

49 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/fonts/HalvarBreit-XBd.woff2
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48716, version 1.0
Size
49 kB (48716 bytes)
Hash
0cc424bb03fe662042b724f16d6e5b11
6f0de9965734f545926674e6cacf46dc729d29a1
7c02fae2b3bec2803ece2500131526447278d6f87b10d74fb13aae609bd9647d

HTTP Headers

GET /v3/4151/betting-india/fonts/HalvarBreit-XBd.woff2 HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: font/woff2
etag: W/"674f258c-be4c"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4h9RT0BTgcrr5a5SHKRacSemYlNS5QZB4yFpm%2FARPDhyj6CeOBfiYdchqwu4lkfGF61Kjpo1hRKHmONAnfnKXFfra4RZVsayBHog%2FGc9Tngn6KfEZPT4wajYfZb3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da5788bb527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1620&min_rtt=805&rtt_var=443&sent=282&recv=46&lost=0&retrans=0&sent_bytes=296491&recv_bytes=8013&delivery_rate=8141347&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=732&x=1", cfExtPri, cfHdrFlush;dur=0

1wzvro.top/

186.2.162.102

200 OK

54 kB

URL GET HTTP/2
1wzvro.top/
IP
186.2.162.102:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerLet's Encrypt
Subject1wzvro.top
FingerprintD8:4E:E2:40:C5:CC:BC:23:A7:C5:79:9E:7E:B7:BC:9F:C9:F2:6E:6C
ValidityThu, 14 Nov 2024 10:49:07 GMT - Wed, 12 Feb 2025 10:49:06 GMT

File type

Size
54 kB (54200 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 1wzvro.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wbala.xyz/
Origin: https://1wbala.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=Wb711NtXmuYVcNTg; Domain=.1wzvro.top; Path=/; Expires=Sat, 07-Dec-2024 02:54:18 GMT
__ddg9_=91.90.42.154; Domain=.1wzvro.top; Path=/; Expires=Sat, 07-Dec-2024 02:54:18 GMT
__ddg10_=1733538858; Domain=.1wzvro.top; Path=/; Expires=Sat, 07-Dec-2024 02:54:18 GMT
__ddg1_=vd1DzVLP7mFhFvQhKDOJ; Domain=.1wzvro.top; HttpOnly; Path=/; Expires=Sun, 07-Dec-2025 02:34:18 GMT
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: text/html; charset=utf-8
x-request-id: 3nHgQQjzuKc1mE8X
x-app-version: v2.136.0
x-match-domain: 1wbala.xyz
vary: Origin
access-control-allow-origin: https://1wbala.xyz
access-control-allow-credentials: true
content-encoding: gzip
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
X-Firefox-Spdy: h2

1wbala.xyz/v3/4151/betting-india/fonts/Inter-SemiBold.woff2

172.67.188.106

200 OK

107 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/fonts/Inter-SemiBold.woff2
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 106856, version 1.0
Size
107 kB (106856 bytes)
Hash
dbcb25f0c2e55f3c9e5f165f5c3c1a55
59c640801bed5da6212ed378fc2ef4c61d51444b
29ded6dfb958304dba27fa08ce8ba3e820f5f12c1d25d0075011eade19071a02

HTTP Headers

GET /v3/4151/betting-india/fonts/Inter-SemiBold.woff2 HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: font/woff2
etag: W/"674f258c-1a168"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uM05dfi6erSPZ%2BT0Wv157zeqmX7d3rLJqkwKSKLTyfa9vTy991AM%2BaP96lV9X90oYv8F9iFlGp0o1xEv1ZPEvCgrixLg3k9ML2PbVA0%2BlIYPD0IujbjxVEipvY15"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da58892b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1579&min_rtt=805&rtt_var=415&sent=307&recv=47&lost=0&retrans=0&sent_bytes=325908&recv_bytes=8058&delivery_rate=9074635&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=735&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/images/background/players-back_1024.avif

172.67.188.106

200 OK

25 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/background/players-back_1024.avif
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
ISO Media, AVIF Image
Size
25 kB (25330 bytes)
Hash
9990f2683ec6a2126c9c2fc23d6c3ca0
a897ed1e435417fb03f3d74f65a67b4b58c53366
dc2fcdf3109710d61702a2df81afbcfc473bd6aa7796a5f73421fb519155e82a

HTTP Headers

GET /v3/4151/betting-india/images/background/players-back_1024.avif HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/avif
content-encoding: gzip
etag: "674f258c-62f2"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZZkXiN5Wxaf25yvhW5dgTYyfaNNQi%2F4maPN7n1uXE9RCWSaPTSLG8O9eM1uSy%2BxDnsTkrJ%2FmqR%2Bc1DYFUGb9kL9KWNK1QvZA6eq5cPZb2zbrh8YpTXa6ZFe0J37e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da56879b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1599&min_rtt=805&rtt_var=603&sent=246&recv=43&lost=0&retrans=0&sent_bytes=254446&recv_bytes=7878&delivery_rate=7303051&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=723&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/fonts/HalvarBreit-Blk.woff2

172.67.188.106

200 OK

48 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/fonts/HalvarBreit-Blk.woff2
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48384, version 1.0
Size
48 kB (48384 bytes)
Hash
0f8b1a33555dcc20b0e85451b81b07a2
a81e6b9041af74bf0c9fcb4e3dc5c942830d1c46
e2337049ffd8b804e066edbbbd2e71aa82e8998ee97d6000b46d7a140879881a

HTTP Headers

GET /v3/4151/betting-india/fonts/HalvarBreit-Blk.woff2 HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: font/woff2
etag: W/"674f258c-bd00"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FlHUJsISBGsutHOMIEabBR1SBY%2BkAVa5Z290I6bONaztlq0mBGsPfNF2UzkisBkdsgyOXzmpDSAxHi0VnhB8B65v56xkdunq3mpYoOW73xa%2BHXzYG25vqSI6kZwz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da58893b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1483&min_rtt=805&rtt_var=295&sent=333&recv=50&lost=0&retrans=0&sent_bytes=356724&recv_bytes=8193&delivery_rate=8059042&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=742&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/favicons/android-icon-512x512.png

172.67.188.106

200 OK

11 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/favicons/android-icon-512x512.png
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
11 kB (11072 bytes)
Hash
822df36448d97877853abf2cce421ddb
be6c97c312a28bd1a458e90cdaff592e38163f5e
8707e7b56f89a25ba382128e12ba37988d4afe442f33bc3a5b34a2a04a692667

HTTP Headers

GET /v3/4151/betting-india/favicons/android-icon-512x512.png HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: image/png
content-encoding: gzip
etag: "674f258c-2b40"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yxAwmjjpwpvzvEN1Xf9ikab7hQGNeljxze0MxeJvcqhil7OmT9jhvzz1jSCnAWuITcCDL2Cile%2FX3DacMzmxqsFF4yKJkm1R1WWQI8AMLasNpP%2BuBxcafZFHuG02"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da7b9b5b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1293&min_rtt=805&rtt_var=434&sent=652&recv=63&lost=0&retrans=0&sent_bytes=726808&recv_bytes=9307&delivery_rate=8366&cwnd=187200&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=1090&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css

172.67.188.106

200 OK

86 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
86 kB (86053 bytes)
Hash
124cb6f181d73beed6cb240636fc3cc0
f53dd6533ea4f59f515b073d323a24d0d6269414
dd9056f7090699c8e4bb9be2c35c1d86be454399800d3c395472350472744a65

HTTP Headers

GET /v3/4151/betting-india/assets/index-vCwBPBKk.css HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: text/css
content-encoding: gzip
etag: "674f258c-15025"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AI4uSUPGgSOfxPxB7D4NBjhJmPgs%2F2YFIGUE15faxSrgWrw03%2BlXEYuG4b4Rwc3WI0iis%2BGxwA%2F0YzDZ77hHgXLWCowjtnGTEULGgN3N%2F83c277wSA5ZgxhgSCYv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da30f02b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3712&min_rtt=1578&rtt_var=2115&sent=14&recv=9&lost=0&retrans=0&sent_bytes=4168&recv_bytes=1495&delivery_rate=376245&cwnd=12000&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=339&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/images/background/front-elements_1024.avif

172.67.188.106

200 OK

13 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/background/front-elements_1024.avif
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
ISO Media, AVIF Image
Size
13 kB (13158 bytes)
Hash
f1b1627e2cfa7519663a6e1a9e4ac0a4
838d41869e1aff9aa1d0be80beedb5f1cafe2f22
b236281e7196b5312389262f3bd6e0973a32a87a4279336cf373684a3549895e

HTTP Headers

GET /v3/4151/betting-india/images/background/front-elements_1024.avif HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: image/avif
content-encoding: gzip
etag: "674f258c-3366"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FcFLC3hh348y4NTTvD2eXNBTx5N7RSPRKloklbtJk9%2F%2BpEl9YZF%2FgMj%2FgCCRNQRuze1EmgsG6LdBei1IycrOeCQ2mQZJuVe3iOi4MQfDqs32s2sAnwWkducXI%2BSf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da56880b527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1579&min_rtt=805&rtt_var=415&sent=295&recv=47&lost=0&retrans=0&sent_bytes=311806&recv_bytes=8058&delivery_rate=9074635&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=735&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/fonts/Inter-Medium.woff2

172.67.188.106

200 OK

110 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/fonts/Inter-Medium.woff2
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 109604, version 3.1245
Size
110 kB (109604 bytes)
Hash
f0740bda9ae5dd83cea8bca8a7c1a7d3
ec499f99bf1f43ed5e22857531ca491a6477eae0
86952cdde19c4cc7ef002ee463b73a26e5b6747510557299b65064d9bf76d8a7

HTTP Headers

GET /v3/4151/betting-india/fonts/Inter-Medium.woff2 HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:18 GMT
content-type: font/woff2
etag: W/"674f258c-1ac24"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=chmnWJKDvdXbqdGVHlkf5Jxnk0KQHH2OOvxrDBvLAdHixwzmbZBjxo46TvrX4AWpUol6sIrfkHullX4tTOmovF9OA4j%2B9Whppg59QOck5a3nG7KPSxffSrYiuhdQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da5888fb527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1650&min_rtt=805&rtt_var=513&sent=269&recv=45&lost=0&retrans=0&sent_bytes=281046&recv_bytes=7968&delivery_rate=11433345&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=730&x=1", cfExtPri, cfHdrFlush;dur=0

1wbala.xyz/v3/4151/betting-india/images/background/back-elements_1024.avif

172.67.188.106

200 OK

11 kB

URL GET HTTP/3
1wbala.xyz/v3/4151/betting-india/images/background/back-elements_1024.avif
IP
172.67.188.106:443
ASN
#13335 CLOUDFLARENET

Requested by
https://1wbala.xyz/v3/4151/betting-india
Certificate
IssuerGoogle Trust Services
Subject1wbala.xyz
Fingerprint3A:CE:66:77:00:61:63:BB:1C:81:BB:B1:6B:66:40:C2:C0:DB:1F:FB
ValiditySun, 01 Dec 2024 13:37:41 GMT - Sat, 01 Mar 2025 13:37:40 GMT

File type
ISO Media, AVIF Image
Size
11 kB (11046 bytes)
Hash
1b7d2468d578c83b5ed2aff4a245b88d
90e3c538f48df21752b4460a8a2eb25b8235f3d2
8f84d43a02dd3e585f5433ee26e5ca115efc2ab47b9dc32f19538602c02d1b69

HTTP Headers

GET /v3/4151/betting-india/images/background/back-elements_1024.avif HTTP/1.1
Host: 1wbala.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wbala.xyz/v3/4151/betting-india/assets/index-vCwBPBKk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 07 Dec 2024 02:34:17 GMT
content-type: image/avif
content-encoding: gzip
etag: "674f258c-2b26"
last-modified: Tue, 03 Dec 2024 15:36:44 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yFmW5oEqOYrCva3B361fPjr7BXQnbrogfHS17vnlk7I1k7WzZkRnI42FDfE5K3%2BAuPg4nHM5BH6Q13TIycX076eTK%2Fg2fThFatKNrNyOtJ0IEnLfhXSOe6NpGwYv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee11da5687ab527-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1628&min_rtt=805&rtt_var=727&sent=236&recv=42&lost=0&retrans=0&sent_bytes=242506&recv_bytes=7832&delivery_rate=317566&cwnd=93600&unsent_bytes=0&cid=f977e94dddeb0e1f&ts=722&x=1", cfExtPri, cfHdrFlush;dur=0

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by