Report - cherry1xbet-774.ru/

Report Overview

Submitted URL
cherry1xbet-774.ru/
IP
185.196.8.72
ASN
#42624 Simple Carrier LLC
Submitted
2024-04-18 10:39:25
Access
public
Website Title
1xBet - букмекерская компания - 1XBET Зеркало рабочее на сегодня | 1ХБЕТ Официальный сайт
Final URL
power-1xbet429.ru/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cherry1xbet-774.ru	unknown	unknown	No data	No data	742 B	738 B	185.196.8.72
riobet-casinogames.ru	unknown	2024-02-07	2022-07-08	2024-02-20	828 B	732 B	185.196.8.72
1xstavka576-lotoru.ru	unknown	unknown	No data	No data	828 B	724 B	185.196.8.72
power-1xbet429.ru	unknown	unknown	No data	No data	11 kB	863 kB	185.196.8.72
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	486 B	1.8 kB	142.250.74.74
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	2.1 kB	54 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 10:38:59	medium	185.196.8.72	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 32

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	riobet-casinogames.ru	Sinkholed
2024-04-18	medium	1xstavka576-lotoru.ru	Sinkholed
2024-04-18	medium	riobet-casinogames.ru	Sinkholed
2024-04-18	medium	1xstavka576-lotoru.ru	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	power-1xbet429.ru/	3.2 kB	2024-04-18	2024-04-18
Pretty URL power-1xbet429.ru/ IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 12:39:34 Last Seen2024-04-18 12:39:34 Times Seen1 Hash efb81401edc1e1fa44fba53444c5b166 b8afcf9fb3e51151e7e0fbad26c6c9001fadb6cd 79fc212549f0ad8d105b30d37ee219761fc757d8629bca18416c31bf63cb49e6 Loading...

	power-1xbet429.ru/	242 B	2024-04-18	2024-04-18
Pretty URL power-1xbet429.ru/ IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 12:39:34 Last Seen2024-04-18 12:39:34 Times Seen1 Hash 95b78d722f87d9fd0c3cf9c0f89858ec f3d960a4880ffdf8587f645bddfe2840e6cde834 e4ed6b709cfc2a5c0167364fe1e5d92309b3c9d7a36b12c6bbd503acbd7bd59a Loading...

	power-1xbet429.ru/wp-includes/js/wp-emoji-release.min.js	19 kB	2024-04-10	2024-04-25
Pretty URL power-1xbet429.ru/wp-includes/js/wp-emoji-release.min.js IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-10 21:07:03 Last Seen2024-04-25 19:42:48 Times Seen8 Hash 0eec1c4ab7bf86f404adde4eb7fef079 8ffda7ff4628796dc1e4133b4ac22cc4c12a191f 24a2071a6ff33f8868cf8d73f227924716780ba699241ada0a66298ab7e6b824 Loading...

	power-1xbet429.ru/wp-includes/js/jquery/jquery.min.js	88 kB	2023-11-03	2024-05-01
Pretty URL power-1xbet429.ru/wp-includes/js/jquery/jquery.min.js IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-03 09:26:43 Last Seen2024-05-01 02:08:49 Times Seen43143 Hash 826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf Loading...

	power-1xbet429.ru/wp-includes/js/jquery/jquery-migrate.min.js	14 kB	2023-05-09	2024-05-01
Pretty URL power-1xbet429.ru/wp-includes/js/jquery/jquery-migrate.min.js IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 19:21:05 Last Seen2024-05-01 02:08:49 Times Seen81646 Hash 9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89 Loading...

	power-1xbet429.ru/	230 B	2024-01-22	2024-04-30
Pretty URL power-1xbet429.ru/ IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-22 05:08:27 Last Seen2024-04-30 17:25:53 Times Seen10 Hash da7b909f84bcacb33db605858dff8e83 1f1ef876ec4d22dc81e28aa92a512857b93d81aa e7d1e38cd8005616feb48d7f1ad093db564e9d63e6b21b1996a953bd0d16aa08 Loading...

	power-1xbet429.ru/wp-content/themes/root/assets/js/scripts.min.js	7.5 kB	2023-03-07	2024-04-30
Pretty URL power-1xbet429.ru/wp-content/themes/root/assets/js/scripts.min.js IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23:38 Last Seen2024-04-30 17:25:53 Times Seen287 Hash 7a831dfa599fe582456e82d4f3861ed1 8dbbc7c71cfc6ff61cfc870d8ed06b45c2794d56 68babdfc4950d6f622a966498dbe69a5d2c99665f0388af533848f4f7c165cb4 Loading...

	power-1xbet429.ru/	451 B	2024-04-18	2024-04-18
Pretty URL power-1xbet429.ru/ IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 12:39:34 Last Seen2024-04-18 12:39:34 Times Seen1 Hash eeda7698556dee2775dd1ed96bfaac5b 9209a215e4e4476fb22c17e0cf1d301127c73184 5a459de312ab785c3e5c85776852ec89aa080dcabf66d61bf17a1594b98fe581 Loading...

	power-1xbet429.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js	23 kB	2023-03-08	2024-04-30
Pretty URL power-1xbet429.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js IP 185.196.8.72 ASN #42624 Simple Carrier LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:35:53 Last Seen2024-04-30 17:25:53 Times Seen1437 Hash 63fad256b41b5d84bc1e86461a96a318 20d44c76509b9fb61a6e005112d60a1f3b73b8ec a69c12ccd186a899db79fce802b46c08e71f69c2c422be2666ed8565e3add026 Loading...

HTTP Transactions (33)

URL IP Response Size

cherry1xbet-774.ru/

185.196.8.72

301 Moved Permanently

169 B

URL User Request GET HTTP/2
cherry1xbet-774.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subjectcherry1xbet-774.ru
Fingerprint92:E8:94:31:64:47:E5:49:3B:E3:2E:ED:68:9A:72:CF:1A:14:24:D3
ValiditySun, 24 Mar 2024 22:33:49 GMT - Sat, 22 Jun 2024 22:33:48 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

HTTP Headers

GET / HTTP/1.1
Host: cherry1xbet-774.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:38:59 GMT
content-type: text/html
content-length: 169
location: https://riobet-casinogames.ru/
X-Firefox-Spdy: h2

riobet-casinogames.ru/

185.196.8.72

301 Moved Permanently

169 B

URL User Request GET HTTP/2
riobet-casinogames.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subjectriobet-casinogames.ru
Fingerprint4E:A0:86:6F:DC:F9:15:D1:D7:53:61:78:4E:F2:48:E7:A3:5B:93:6E
ValiditySun, 07 Apr 2024 21:24:09 GMT - Sat, 06 Jul 2024 21:24:08 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: riobet-casinogames.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:00 GMT
content-type: text/html
content-length: 169
location: https://1xstavka576-lotoru.ru/
X-Firefox-Spdy: h2

1xstavka576-lotoru.ru/

185.196.8.72

301 Moved Permanently

169 B

URL User Request GET HTTP/2
1xstavka576-lotoru.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subject1xstavka576-lotoru.ru
Fingerprint43:EE:E4:F5:50:FF:61:F8:C0:A3:03:22:0E:B6:AC:AF:6E:BA:76:3A
ValidityThu, 14 Mar 2024 14:46:19 GMT - Wed, 12 Jun 2024 14:46:18 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 1xstavka576-lotoru.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:00 GMT
content-type: text/html
content-length: 169
location: https://power-1xbet429.ru/
X-Firefox-Spdy: h2

cherry1xbet-774.ru/

185.196.8.72

301 Moved Permanently

169 B

URL User Request GET HTTP/2
cherry1xbet-774.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subjectcherry1xbet-774.ru
Fingerprint92:E8:94:31:64:47:E5:49:3B:E3:2E:ED:68:9A:72:CF:1A:14:24:D3
ValiditySun, 24 Mar 2024 22:33:49 GMT - Sat, 22 Jun 2024 22:33:48 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

HTTP Headers

GET / HTTP/1.1
Host: cherry1xbet-774.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Thu, 18 Apr 2024 10:39:02 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://riobet-casinogames.ru/

riobet-casinogames.ru/

185.196.8.72

301 Moved Permanently

169 B

URL User Request GET HTTP/2
riobet-casinogames.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subjectriobet-casinogames.ru
Fingerprint4E:A0:86:6F:DC:F9:15:D1:D7:53:61:78:4E:F2:48:E7:A3:5B:93:6E
ValiditySun, 07 Apr 2024 21:24:09 GMT - Sat, 06 Jul 2024 21:24:08 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: riobet-casinogames.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:02 GMT
content-type: text/html
content-length: 169
location: https://1xstavka576-lotoru.ru/
X-Firefox-Spdy: h2

1xstavka576-lotoru.ru/

185.196.8.72

301 Moved Permanently

169 B

URL User Request GET HTTP/2
1xstavka576-lotoru.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subject1xstavka576-lotoru.ru
Fingerprint43:EE:E4:F5:50:FF:61:F8:C0:A3:03:22:0E:B6:AC:AF:6E:BA:76:3A
ValidityThu, 14 Mar 2024 14:46:19 GMT - Wed, 12 Jun 2024 14:46:18 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 1xstavka576-lotoru.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:02 GMT
content-type: text/html
content-length: 169
location: https://power-1xbet429.ru/
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/1xbet-%D0%B2%D1%85%D0%BE%D0%B4-%D0%B2-%D0%BB%D0%B8%D1%87%D0%BD%D1%8B%D0%B9-%D0%BA%D0%B0%D0%B1%D0%B8%D0%BD%D0%B5%D1%82.png

185.196.8.72

200 OK

3.3 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/1xbet-%D0%B2%D1%85%D0%BE%D0%B4-%D0%B2-%D0%BB%D0%B8%D1%87%D0%BD%D1%8B%D0%B9-%D0%BA%D0%B0%D0%B1%D0%B8%D0%BD%D0%B5%D1%82.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 672 x 209, 8-bit colormap, non-interlaced
Size
3.3 kB (3275 bytes)
Hash
fa72d493b5809eb300f29c88de78d0d2
63efc9468608f58df3e164dee2f53a76a7888e61
0c04e6718b797872bb28debe80ffa2b6284f003b0c2b3614bb0eec1370da5718

HTTP Headers

GET /wp-content/uploads/2020/01/1xbet-%D0%B2%D1%85%D0%BE%D0%B4-%D0%B2-%D0%BB%D0%B8%D1%87%D0%BD%D1%8B%D0%B9-%D0%BA%D0%B0%D0%B1%D0%B8%D0%BD%D0%B5%D1%82.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/png
content-length: 3275
etag: "5fb4c428-ccb"
expires: Thu, 18 Apr 2024 22:24:24 GMT
accept-ranges: bytes
cache-control: max-age=43200
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700&subset=cyrillic&display=swap&ver=6.5.2

142.250.74.74

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700&subset=cyrillic&display=swap&ver=6.5.2
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://power-1xbet429.ru/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
1.2 kB (1218 bytes)
Hash
2e8b13ad4f6333008671dd71b193ad60
89fef4bf65874d2cffd8b150044f6f6b5e5a68c0
a17f85267138262664c30e5ec1d7957e20f17b07f7f24717f55733fad585492b

HTTP Headers

GET /css?family=Roboto%3A400%2C400i%2C700&subset=cyrillic&display=swap&ver=6.5.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 10:39:03 GMT
date: Thu, 18 Apr 2024 10:39:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/1xbet-%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F.png

185.196.8.72

200 OK

5.1 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/1xbet-%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 898 x 276, 8-bit colormap, non-interlaced
Size
5.1 kB (5104 bytes)
Hash
e2e5e56bb232f1a41bfc19daf7096d44
2667e6e7f433f37da52e36f1d838e544b65c7b1e
9912e33041f739bb2b6ec5a1441f3fff2f718b537c1127831dd1eb1d7efbd72a

HTTP Headers

GET /wp-content/uploads/2020/01/1xbet-%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/png
content-length: 5104
etag: "5fb4c428-13f0"
expires: Thu, 18 Apr 2024 22:24:24 GMT
accept-ranges: bytes
cache-control: max-age=43200
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/1Xbet-%E2%80%94-%D0%B7%D0%B5%D1%80%D0%BA%D0%B0%D0%BB%D0%BE-%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD-%D0%B3%D0%BE%D1%80%D1%8F%D1%87%D0%B5%D0%B9-%D0%BB%D0%B8%D0%BD%D0%B8%D0%B8.png

185.196.8.72

200 OK

8.3 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/1Xbet-%E2%80%94-%D0%B7%D0%B5%D1%80%D0%BA%D0%B0%D0%BB%D0%BE-%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD-%D0%B3%D0%BE%D1%80%D1%8F%D1%87%D0%B5%D0%B9-%D0%BB%D0%B8%D0%BD%D0%B8%D0%B8.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 452 x 138, 8-bit/color RGB, non-interlaced
Size
8.3 kB (8325 bytes)
Hash
b9020604afa57498cfb3f0019997bd1d
4348fe32d53c54c51fe7c18310b1532185b2e551
462a7f085a7e86d90dd81653cfe8762668d7eb6634d40be36b9f1e6fa0d793ea

HTTP Headers

GET /wp-content/uploads/2020/01/1Xbet-%E2%80%94-%D0%B7%D0%B5%D1%80%D0%BA%D0%B0%D0%BB%D0%BE-%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD-%D0%B3%D0%BE%D1%80%D1%8F%D1%87%D0%B5%D0%B9-%D0%BB%D0%B8%D0%BD%D0%B8%D0%B8.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/png
content-length: 8325
accept-ranges: bytes
x-original-content-length: 17807
etag: W/"PSA-aj-uQIGBK-ldJ"
expires: Thu, 18 Apr 2024 22:24:24 GMT
cache-control: max-age=42320
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4-1xbet-%D0%BD%D0%B0-%D0%B4%D0%B5%D0%BD%D1%8C-%D1%80%D0%BE%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D0%B5-768x263.jpg

185.196.8.72

200 OK

28 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4-1xbet-%D0%BD%D0%B0-%D0%B4%D0%B5%D0%BD%D1%8C-%D1%80%D0%BE%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D0%B5-768x263.jpg
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 768x263, components 3
Size
28 kB (27592 bytes)
Hash
90f688fea769df802669eabd5452b1c1
0964ac2b35e0bb418ad768326ed003aca45d6e0a
7eb98385aedd2c482417a7467227507b5ea8cf429c257721a3c6d641e4b7e102

HTTP Headers

GET /wp-content/uploads/2020/01/%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4-1xbet-%D0%BD%D0%B0-%D0%B4%D0%B5%D0%BD%D1%8C-%D1%80%D0%BE%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D0%B5-768x263.jpg HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/jpeg
content-length: 27592
accept-ranges: bytes
x-original-content-length: 29813
etag: W/"PSA-aj-kPaI_qdp34"
expires: Thu, 18 Apr 2024 22:24:24 GMT
cache-control: max-age=42320
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/05/1xbet-%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9-%D1%81%D0%B0%D0%B9%D1%82-2.jpg

185.196.8.72

200 OK

52 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/05/1xbet-%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9-%D1%81%D0%B0%D0%B9%D1%82-2.jpg
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 898x436, components 3
Size
52 kB (51739 bytes)
Hash
e6425cbef41f4ee5d8fb7426a994338f
18d4b7941f35325e73214db5042a9e0d9253b1bc
4dde7f82094c4e423485285ebdbb399c045a33b2a36830d9ebeb3610c91d2652

HTTP Headers

GET /wp-content/uploads/2020/05/1xbet-%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9-%D1%81%D0%B0%D0%B9%D1%82-2.jpg HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/jpeg
content-length: 51739
accept-ranges: bytes
x-original-content-length: 54512
etag: W/"PSA-aj-5kJcvvQfTu"
expires: Thu, 18 Apr 2024 22:24:23 GMT
cache-control: max-age=42319
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/header.png

185.196.8.72

200 OK

86 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/header.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 2880 x 188, 8-bit/color RGBA, non-interlaced
Size
86 kB (86294 bytes)
Hash
4f5c3380e3e1f821822d775bff8074e2
dd7d87ec3e5fc3fdaf2c934afc9a8c51a4c776e6
2044d14610a09247cd32cf33b8f345bf15d38a269bc0184f85d5b7cae1b53589

HTTP Headers

GET /wp-content/uploads/2020/01/header.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/png
content-length: 86294
last-modified: Wed, 18 Nov 2020 06:50:16 GMT
etag: "5fb4c428-15116"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
accept-ranges: bytes
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F-1xbet-%D0%B2-%D0%BE%D0%B4%D0%B8%D0%BD-%D0%BA%D0%BB%D0%B8%D0%BA.png

185.196.8.72

200 OK

51 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F-1xbet-%D0%B2-%D0%BE%D0%B4%D0%B8%D0%BD-%D0%BA%D0%BB%D0%B8%D0%BA.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 768 x 339, 8-bit/color RGB, non-interlaced
Size
51 kB (51420 bytes)
Hash
2e760e33155403d129b59300c87fd6e4
336b3e3216fdee0edc4647a1e0ca7c621697a96a
e2b26ec014063ad4eb6d6f02c84e0037dbafc55e99e716e9ad2f20f82b222dbe

HTTP Headers

GET /wp-content/uploads/2020/01/%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F-1xbet-%D0%B2-%D0%BE%D0%B4%D0%B8%D0%BD-%D0%BA%D0%BB%D0%B8%D0%BA.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/png
content-length: 51420
accept-ranges: bytes
x-original-content-length: 56122
etag: W/"PSA-aj-LnYOMxVUA9"
expires: Thu, 18 Apr 2024 22:24:24 GMT
cache-control: max-age=42320
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/themes/root/fonts/fontawesome-webfont.ttf

185.196.8.72

200 OK

166 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/themes/root/fonts/fontawesome-webfont.ttf
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh
Size
166 kB (165548 bytes)
Hash
b06871f281fee6b241d60582ae9369b9
13b1eab65a983c7a73bc7997c479d66943f7c6cb
aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8

HTTP Headers

GET /wp-content/themes/root/fonts/fontawesome-webfont.ttf HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://power-1xbet429.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: application/font-sfnt
content-length: 165548
last-modified: Fri, 23 Sep 2022 16:25:39 GMT
etag: "286ac-5e95aa0e902ac"
accept-ranges: bytes
cache-control: s-maxage=10
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://power-1xbet429.ru/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://power-1xbet429.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 151885
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2

185.196.8.72

200 OK

25 kB

URL GET HTTP/2
power-1xbet429.ru/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
gzip compressed data, from Unix
Size
25 kB (25051 bytes)
Hash
00898f027e77ca43e4629d6842a1939d
dc470b8fd3dde69d74cefcdb1b3dcee434b1ad5c
39e918df6701b9929d18269c5fe27f2c344ec20b89d3b242ffd2e96972130fd4

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 13:31:37 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"661e7db9-1bae5"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/themes/root/assets/css/style.min.css?ver=3.1.2

185.196.8.72

200 OK

41 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/themes/root/assets/css/style.min.css?ver=3.1.2
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
gzip compressed data, from Unix
Size
41 kB (41357 bytes)
Hash
20d0211c079f49d121502b80df58387f
de38847da29a7085f8e784286749c5d9aa0ae82a
9a9fd378067d4c66ada4c1e4f3f796ec5194c22095670ee7bdc9b1ad41834892

HTTP Headers

GET /wp-content/themes/root/assets/css/style.min.css?ver=3.1.2 HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 16:25:39 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"632dde03-28a9a"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2

216.58.207.227

200 OK

9.6 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://power-1xbet429.ru/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9628, version 1.0
Size
9.6 kB (9628 bytes)
Hash
d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://power-1xbet429.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:14:20 GMT
expires: Wed, 16 Apr 2025 07:14:20 GMT
cache-control: public, max-age=31536000
age: 185084
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://power-1xbet429.ru/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://power-1xbet429.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 204273
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-includes/js/wp-emoji-release.min.js

185.196.8.72

200 OK

4.9 kB

URL GET HTTP/2
power-1xbet429.ru/wp-includes/js/wp-emoji-release.min.js
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
JavaScript source, ASCII text, with very long lines (18607), with no line terminators
Size
4.9 kB (4905 bytes)
Hash
0eec1c4ab7bf86f404adde4eb7fef079
8ffda7ff4628796dc1e4133b4ac22cc4c12a191f
24a2071a6ff33f8868cf8d73f227924716780ba699241ada0a66298ab7e6b824

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:04 GMT
content-type: application/javascript
content-length: 4905
accept-ranges: bytes
x-original-content-length: 18726
vary: Accept-Encoding
content-encoding: gzip
etag: W/"PSA-aj-DuwcSre_hv"
expires: Thu, 18 Apr 2024 22:24:25 GMT
cache-control: max-age=42320
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-includes/js/jquery/jquery.min.js

185.196.8.72

200 OK

108 kB

URL GET HTTP/2
power-1xbet429.ru/wp-includes/js/jquery/jquery.min.js
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
gzip compressed data, from Unix
Size
108 kB (107793 bytes)
Hash
4a625f4a9b6557cbc51b666cd73f8d86
78a203c30e993385367513e39ef59846244fe851
4379ce2f3e3efc78850c727f0ed4d598cec869d32b930e58acb0e2fa3e3f9a0e

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:03:01 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"65521e85-15601"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/cropped-1xbet-32x32.png

185.196.8.72

200 OK

2.0 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/cropped-1xbet-32x32.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
2.0 kB (2004 bytes)
Hash
cde5dcb520c00c9a1745879406f2d7e9
e0e8e49580c8a137ac1860ee5ebfd98afb7c9add
28b1f428dedec31af34d634c2a5b3bd3ad1bdb8338439109d6bfe9f6638d5e40

HTTP Headers

GET /wp-content/uploads/2020/01/cropped-1xbet-32x32.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:04 GMT
content-type: image/png
content-length: 2004
last-modified: Wed, 18 Nov 2020 06:50:16 GMT
etag: "5fb4c428-7d4"
expires: Thu, 18 Apr 2024 22:39:04 GMT
cache-control: max-age=43200
accept-ranges: bytes
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/cropped-1xbet-192x192.png

185.196.8.72

200 OK

24 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/cropped-1xbet-192x192.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
24 kB (24338 bytes)
Hash
867e7d22f5c13c5739b6e3b7f49daa2e
eef5dca28a8db22c0e312f3b5e7c7cbd35005875
82033fdd8ca9e238f00e9bf14be2eaa5a2b12f70e51a5be319d28d3a90d87943

HTTP Headers

GET /wp-content/uploads/2020/01/cropped-1xbet-192x192.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:04 GMT
content-type: image/png
content-length: 24338
last-modified: Wed, 18 Nov 2020 06:50:16 GMT
etag: "5fb4c428-5f12"
expires: Thu, 18 Apr 2024 22:39:04 GMT
cache-control: max-age=43200
accept-ranges: bytes
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-includes/js/jquery/jquery-migrate.min.js

185.196.8.72

200 OK

14 kB

URL GET HTTP/2
power-1xbet429.ru/wp-includes/js/jquery/jquery-migrate.min.js
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
14 kB (13577 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:03:01 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"65521e85-3509"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/

185.196.8.72

200 OK

60 kB

URL User Request GET HTTP/2
power-1xbet429.ru/
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type

Size
60 kB (60177 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/7.4.29
link: <https://power-1xbet429.ru/wp-json/>; rel="https://api.w.org/", <https://power-1xbet429.ru/wp-json/wp/v2/pages/14>; rel="alternate"; type="application/json", <https://power-1xbet429.ru/>; rel=shortlink
x-page-speed: 1.13.35.2-0
cache-control: max-age=0, no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.11

185.196.8.72

200 OK

3.3 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.11
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
ASCII text, with very long lines (3442), with no line terminators
Size
3.3 kB (3343 bytes)
Hash
958d1822348194427d365b401e149100
1d6bef9846ec08e749843a812766f966562efcdd
4c5a6e9afca373deb59a6ea044cecb7131f868151ef82b0bdb96863d12a9b199

HTTP Headers

GET /wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.11 HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: text/css
last-modified: Thu, 18 Jan 2024 12:03:05 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"65a91379-d0f"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-includes/css/dashicons.min.css?ver=6.5.2

185.196.8.72

200 OK

59 kB

URL GET HTTP/2
power-1xbet429.ru/wp-includes/css/dashicons.min.css?ver=6.5.2
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
ASCII text, with very long lines (58981)
Size
59 kB (59016 bytes)
Hash
d68d6bf519169d86e155bad0bed833f8
27ba9c67d0e775fc4e6dd62011daf4c3902698fc
c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e

HTTP Headers

GET /wp-includes/css/dashicons.min.css?ver=6.5.2 HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 20:49:51 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62e1a4ef-e688"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2

216.58.207.227

200 OK

9.6 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://power-1xbet429.ru/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9644, version 1.0
Size
9.6 kB (9644 bytes)
Hash
6f112ec2b932ee12379442c42853244e
b2e73c8c70d6261e1d187f41693c43ac4fe0809d
6a84eeee6a25e7c9a8a03191007a6720566b5a2aa2384d36168fb07f49e97e9e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://power-1xbet429.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9644
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:49 GMT
expires: Fri, 18 Apr 2025 02:43:49 GMT
cache-control: public, max-age=31536000
age: 28514
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0

185.196.8.72

200 OK

77 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/wp-content/themes/root/assets/css/style.min.css?ver=3.1.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:04 GMT
content-type: font/woff2
content-length: 77160
last-modified: Fri, 23 Sep 2022 16:25:39 GMT
etag: "632dde03-12d68"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200, s-maxage=10
accept-ranges: bytes
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js

185.196.8.72

200 OK

23 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
JavaScript source, ASCII text, with very long lines (23432)
Size
23 kB (23433 bytes)
Hash
63fad256b41b5d84bc1e86461a96a318
20d44c76509b9fb61a6e005112d60a1f3b73b8ec
a69c12ccd186a899db79fce802b46c08e71f69c2c422be2666ed8565e3add026

HTTP Headers

GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: application/javascript
last-modified: Tue, 04 Apr 2023 10:07:10 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"642bf6ce-5b89"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/themes/root/assets/js/scripts.min.js

185.196.8.72

200 OK

7.5 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/themes/root/assets/js/scripts.min.js
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (7875), with no line terminators
Size
7.5 kB (7518 bytes)
Hash
b738caa61224d4ca6b5e172341aa4e63
67374d1a5edf931301f308f94df8c2bdee8373d1
268d850a563ef06c58dce1883e23e0fdfecf1f2f6905933477c873b8102ffa03

HTTP Headers

GET /wp-content/themes/root/assets/js/scripts.min.js HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: application/javascript
last-modified: Fri, 23 Sep 2022 16:25:39 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"632dde03-1d5e"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
content-encoding: gzip
X-Firefox-Spdy: h2

power-1xbet429.ru/wp-content/uploads/2020/01/fon.png

185.196.8.72

200 OK

7.4 kB

URL GET HTTP/2
power-1xbet429.ru/wp-content/uploads/2020/01/fon.png
IP
185.196.8.72:443
ASN
#42624 Simple Carrier LLC

Requested by
https://power-1xbet429.ru/
Certificate
IssuerLet's Encrypt
Subjectpower-1xbet429.ru
Fingerprint97:B5:5A:C6:5F:B6:54:2F:19:97:CB:41:A1:8B:8D:C2:EA:1F:E1:CE
ValidityTue, 16 Apr 2024 19:42:12 GMT - Mon, 15 Jul 2024 19:42:11 GMT

File type
PNG image data, 504 x 342, 8-bit/color RGBA, non-interlaced
Size
7.4 kB (7435 bytes)
Hash
70dd0d0d4ef26ce566084b6bd34a124c
ed8f716db1320b544382ee8b42122e7fca504453
309052d8dd7c2d0335869f069cf6a100c38e5d07ecb128ececd580c081668695

HTTP Headers

GET /wp-content/uploads/2020/01/fon.png HTTP/1.1
Host: power-1xbet429.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://power-1xbet429.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 18 Apr 2024 10:39:03 GMT
content-type: image/png
content-length: 7435
last-modified: Wed, 18 Nov 2020 06:50:16 GMT
etag: "5fb4c428-1d0b"
expires: Thu, 18 Apr 2024 22:39:03 GMT
cache-control: max-age=43200
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML