{"report_id":"09028c2b-9ba2-4cf1-ac11-9112ec654af5","version":0,"status":"done","tags":[],"date":"2026-06-28T13:53:57Z","url":{"schema":"https","addr":"1win-portal.com","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1win-portal.com/","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"title":"1win Global Promo Code STARTWIN26 — Up to +500% welcome package \u0026 Registration Guide","dom":{"size":112488,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65512), with no line terminators","md5":"93acd7ae39f0b12f3d0d78c4547f76c5","sha1":"4b700f476383df6c0acde3f0a2fcd0b4e4ca8100","sha256":"f7434f6992a10f5c4f4cd6ac1eee78dc97912bf56e686470967fce998280d4a5","sha512":"2e439087bb38143246057657c12135cbc811bcef81edadfc0fe0c39d0295845053e596489f71b9db0e07d547d1b0340b2a994120850adf16a2f51bb339ea6e95","ssdeep":"768:EHtQ/zB/VvOz1DnQNPhqdmAk+yRXkhGdGx6yH16vPhyRGmWi1sFstB0l7nU9Mu0/:JvvAlVkZs6uV+myzxz","tlshash":"deb3d83192400a3d316743f9f2e1b724d2bed389d26b47a8f7ad42721b86c96d9336d4","dom_hash":"domhash8e218e4772ed03c4e44aaa7c5cdd486d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"1win-portal.com","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T13:53:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"1win-portal.com","ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":38,"received_data":1476943,"sent_data":19297,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1win-portal.com/","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-07-23T08:51:13.070449Z","times_seen":15317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-07-23T07:32:16.039044Z","times_seen":12717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"718affc32071c352db10d76a583b1295","sha1":"978b1e6e74607049af9aac59024f12ea9352a518","sha256":"43604f83dd1932995863e152740a4d12b86959a7e0da171145b9dd9afc6e2ff4","sha512":"d96f373764158d133ceb81d91425bb340a96798cb7faa0c327a53c5d801ee4413dea5054f67fe2c87a5a23a996030e86aba0303c4a4bffacfefed7e92d2143b7","ssdeep":"","tlshash":"36e0f1002a67b136f33f41df979b014303223178015c54dd12237871c13cdc801e4f61","size":372,"data":"","first_seen":"2024-12-18T07:45:08.635965Z","last_seen":"2026-07-23T06:04:54.988623Z","times_seen":2277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"588bf7be4b5c88bf6f5c03966c86720b","sha1":"8cb15489827a98a42d0dc4f822f34e6114d1e006","sha256":"efa522cd7e16783e69245dad23da957378958ddc77e21be0db77795af892a8c4","sha512":"de8bba251460fa6e77d0725a21d9654e45b8730b192b1c1d737520170cc97651f16b2dfad2035a65e5888dccf6a7d87e2b63625072e33cc319d612a228ab3911","ssdeep":"","tlshash":"9ae0c20c10bf043a48b3835f0bcf97eb26af204314099c543e4c81842fd06554b59b81","size":302,"data":"","first_seen":"2026-06-28T13:54:03.055674Z","last_seen":"2026-06-28T13:54:03.055674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/site-ui.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e57bb48c031f89e5e8c0738a601c0933","sha1":"b10906b1e54b10c6681a69e1788be8f44e8ca7ac","sha256":"883bc67912f6cf82dd7488d8c2627acae11fc6f6b288b04dfbe2ddba391dec6c","sha512":"1805d272533d3de6012c8b5b67ca56c914078f0118867c42d5189956bd45835de99d5e816a659b3aafe0c810aa30d62da110c41a1b8f779c9689fc86d6f43c25","ssdeep":"96:BihKgCjizIspU+BFinNOnbYTYbV4mRndnD5Qq+yYxWpBoRbPMn4720ocX9PW9x3:BihKg8i8saEiUnmYh4mRndPp2uHHm6","tlshash":"8681419e21f312b241fb217d4797518832397087a80ec4583e4dce94afd592d96f6ea8","size":4189,"data":"","first_seen":"2026-06-28T13:54:02.993262Z","last_seen":"2026-06-28T13:54:02.993262Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/sticky-cta.BYj2C4ZT.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a7cd5df545f04113552309d29cda0e18","sha1":"e9ffd9975c51b9357153caf9a4ea6c0c1d0a4b95","sha256":"21801d04f52788b3ba3b0229b2a605a29452c7b693e2460cf562666d37b25a69","sha512":"316c6f93f6faca96767c2d22f09184414d32e72e2864bc8df89ad00a4af2f6b14995228b994aa786f720ec6100a12b3ee390925baf25da8f466aae2c2d173ff3","ssdeep":"","tlshash":"094194147180627f95674ea87a1fd0cc620e3268da2e5550e2bea171297006e7957ec8","size":2363,"data":"","first_seen":"2026-06-28T13:54:03.045747Z","last_seen":"2026-06-28T13:54:03.045747Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/index.DBy5LfQW.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8523ed33bcc00a686f4f09b766caa75a","sha1":"722a46a89610f11547fdac1be9e08a1697e7bd56","sha256":"ed264ca08505aaae32cb5e151f268f3ff721d0ecdeb7d33c4470de92bc892ca6","sha512":"efb94fffc87c4393ef13d6faf0309716c6049cff0b1f383793f1e86c96ce563f87021c30573eb2d6bd6953d1ec59e3f43dc90ec7730f78085b629f7d02ff29a0","ssdeep":"96:kapqtg4EsI31Ma9+2HrWxXZtV1IwNTlUN5YFQ02qBwGC80gDP49jShAWFwsgvGXe:Vqy4gKAWRZtV1I0K30fOM7bAEtxj5jQ","tlshash":"51f163c9f899b5504aa37670423f555bf33d38a4284e84b8e272d8e47db804ec427f6e","size":7848,"data":"","first_seen":"2026-06-28T13:54:02.990871Z","last_seen":"2026-07-19T13:54:34.084671Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/register-cta.CSE3QhKA.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e0531f67fc0565a810b777f23339f5b2","sha1":"65d2adee6fefad3da3628887bcd9524185ab741f","sha256":"e6841f252c91ecb9447db1a02dd8d89825560853064d5e743d90a146be831ff8","sha512":"9efef6efcaf69f229fde557276698c15f8c96c76ef2f87cbef23978a41aa83efb78732be76b61dfab7dfeebed4786b3d2472ea6f3d401d9e24b3089269023c36","ssdeep":"384:ZgAMUa0TUFOpNpJg+UFWVCNThEo9I/IGBnQ/KeSpXpgRzN8YC8PzS7QXSgE9vj4g:SZUjzJzCNi6k/+Sp5gRzNNC+nCrRj4g","tlshash":"6cf2851ebb44f04c23971918bfdc7b459a7d0728cee2c4d42de98b2805d12e5a676fb8","size":35758,"data":"","first_seen":"2026-06-28T13:54:03.00281Z","last_seen":"2026-06-28T13:54:03.00281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/scroll-link.Cs2jyH-s.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"17708d153e66a8d75a36d3007db0f0dc","sha1":"eedb189700c648614e65f2f3a361bd7e282fbcef","sha256":"77c4ca3c3ce877fdafff51394d93da7de92f9a8623f868d80d06cb0dda9d6620","sha512":"33fe7fc76791b1f54a8fee415208fe743120ee165f91ba2fb99cc5431a4285c98fe743d1c7f3a7779a8a28f8c3f9f7740871f2d89d6f7f2091679dc06e4588e1","ssdeep":"768:v2qSX3RLBcKhPC9or31wRtt/z3nbPZqD2VJYd9W:6DFwRv73TZqD2Ved9W","tlshash":"5bd2f7257507053f16ef83d7f16caadad9383a02e0498708e3974f35cb59bac619ab0d","size":31102,"data":"","first_seen":"2026-06-28T13:54:03.046974Z","last_seen":"2026-06-28T13:54:03.046974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/site-header.B67GT_lm.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ceab603bcc028851c3af642533023e50","sha1":"71548572003c0103bc8e0f940c7c9fa10012218a","sha256":"21fd1ca374a1039f7ea48f4b51dffa72801226e43791294a64bc8ac7ce266916","sha512":"a87331ad81cadc4255ddc446487ace059872361be58bd86f991991472870397aa827dcd030a1f7b8fb54d83a4975f300562738ca7b20398e277537e0aeead8d8","ssdeep":"","tlshash":"9171760db28166bea55747ac765ff05c604f8adcc62f4f25f07e6036192211a6d93fc4","size":3659,"data":"","first_seen":"2026-06-28T13:54:02.998136Z","last_seen":"2026-06-28T13:54:02.998136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/client.nFz3bvDj.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f718fb16520dd4abbd90c9f6bbcb22d9","sha1":"04c784c4a885990198c8fbd75e40d60bc5cfa329","sha256":"f1f19998347720b3ae33e128aede401b2fbbbf86313e114f3f58990caa8256a1","sha512":"48b1bee92fb4c143438cf6585f928e45f79d9d330a68ce9679ce2a1471a1c46452dc821b3fcb6656a99e819bee4529449b9b5eb8f68b3af9a09ddcea8ef4612f","ssdeep":"3072:RkOMtZYTcpLFk1uvCLJr4pBnEmptwa1mRLG8HkF9:R1E0cpJSuvMJlN0T","tlshash":"a9040bec32bea7566eb245a7109f1503727c38335c0c4cb1a251ee9967b444a50bbfee","size":186619,"data":"","first_seen":"2026-06-28T13:54:03.044167Z","last_seen":"2026-07-19T13:54:34.088742Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1win-portal.com/brands/1win-logo.png","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.727Z","timestamp":1782654807727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /brands/1win-logo.png HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"abb9-19eead0dff7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXPX7rORXnzNt%2BegSWHvCqJ8hH81gDkJhhSLl%2FGitNDqsZaLNzPYxZYnITIhagQd8%2B8ieHrkyzt4TWO41nbDokiCId2WGwHVLqo0S%2BBGRWU4dqxh2oIuZj7vIpHq1PMBPdI%3D\"}]}\r\ncontent-length: 43961\r\ncf-ray: a12d2d844e3d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43961,"size_decoded":44927,"mime_type":"image/png","magic":"PNG image data, 1024 x 525, 8-bit/color RGBA, non-interlaced","md5":"f8a0c8eb64c6c6f3849331f838191c0a","sha1":"7a0b87b8d5c234270659e8a0ddeb37f2932bcf2f","sha256":"4f59d9c4f65daf57aece9982e6833d9e0d72a6f5775a94c41e7b25e3f9cb3741","sha512":"84238eb0a6a4a48515a403e553ba7cab8e50ecc2cc792f306ccd617d6dc44544ca75451dfcc44bf42f9567bdae45550f88b21c55f5b7c7cc33954c6d296e898d","ssdeep":"768:LAh7uvNEa96BYRCAfxZ4MynPAaBkU4E5Dx15Gst8X9F8jdf9qGb1AsVkc:0BuV0BQfv4xPAkimv5HOX9mJf9Vesic","tlshash":"77130284c81c401af3786d349799f924d36627d1bc74b40a6eea0fe8bd5edda2125fd0","first_seen":"2026-06-28T13:54:02.971161Z","last_seen":"2026-06-28T13:54:02.971161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/lucky-jet.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.772Z","timestamp":1782654807772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/lucky-jet.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"5e55-19eead0dffb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FxQoHrAqmcOdnQWkRZ8VkdrP%2Fio70wRc4MOBe9ZrFOqgmpQHJJqpXT%2B9mt2KlICaUGs3VTcnH67znDJIejfqyxqXkQ%2B32d3EJSiBoqyXIToWXUpTU%2BOaeO93JA5VjTxCRU%3D\"}]}\r\ncontent-length: 24149\r\ncf-ray: a12d2d849e450731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24149,"size_decoded":25118,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9d46e01581599461a1fc4a63f01fed69","sha1":"1dea052a2cea4195e261f855a1464bbfdd0f14ce","sha256":"7c4c9dc4316b7d5a58af7aa6e5c0ac1a14ce0ecb7f23a8d639c685d7dee458f2","sha512":"dee9f2149494eb22916cd790fca1715fb5c8b20d546adfaf4a9027975d048339f0e7ce474f6d168df951bb59fddbbacbc3571dc6a33bf1bbced74c9b2551aa1d","ssdeep":"384:rhVzUQeG2J0cJ40nfNGnXhPY7+ktB5IcGKcAYj/l+Lq3WXOoU9WvWK9ger2+FyPM:lVQ9G2fAXhEjlo+Lq4MaW8ra+F3tMITx","tlshash":"49b2e06d3317c48ae188c43d5d450f231e9048156ef9ac07f84570586ee15f69f6ace4","first_seen":"2026-06-28T13:54:02.974326Z","last_seen":"2026-06-28T13:54:02.974326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/rocket-x.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.780Z","timestamp":1782654807780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/rocket-x.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"53fc-19eead0dffc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8wDS4Vah9k8a2nwpvXJRaJT9Z4o39Sanuxs9A8rDymCIpFl1xSZe5lAuPDfVrBH6IDTQLk%2BVaazfR3uTzBXh0Akvq8BLJN3awCPonwAXj5aEnUbbjFyZA4Hb%2BHMuU%2BCLzo%3D\"}]}\r\ncontent-length: 21500\r\ncf-ray: a12d2d84ae4a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21500,"size_decoded":22465,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3d467e5ed6d0a07acdaab3d5160475ae","sha1":"f2bff1302b179eeb5a299095ba017f8f3207ca4f","sha256":"f4fd05e6462a7712454966c3ea97dee0cdc4fc61dd3c0eac797bc21ad5921909","sha512":"2fd24418a232efee58d1bd6bb7974d9089e16784da7f9151a1a185cce2bf9375e93656c17d28135d65128b9075d01572a4f9f03831d7b9859beabc3a37523c66","ssdeep":"384:r7nGmEgr+dHNMltR1M88VQa4/k/zUnCsdCygRrw2LUHdcebsxexf:nGPgft/IQa4MUCsMv8249cSsc","tlshash":"8aa2e06d11f4d092c4992c3acb2d22607256cb6800235fa37ec395ddcf4ea894f36a27","first_seen":"2026-06-28T13:54:02.977589Z","last_seen":"2026-06-28T13:54:02.977589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/plinko.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.793Z","timestamp":1782654807793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/plinko.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"7830-19eead0dffc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lp33zMaKBrC9xovRPNOtA8DDgiQN7faGr8EIDTUGbf8OAnmAmCap0soUgT6Bk7VYzzkCN0H4mVNfQ0oYcDwCj%2FgMXpLHXca0K2OunRZn8rmCX6V3SO7q7dlPC3AYhQ8JPhA%3D\"}]}\r\ncontent-length: 30768\r\ncf-ray: a12d2d84be510731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30768,"size_decoded":31729,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fe0c20db369c04127d81f796d95a973f","sha1":"e1e7b7f798b6479f8028378f40f2061d20b36fa4","sha256":"487e313a09bc1ccdcbb6b5ecf09d39d487a9e4caf94fabd16f5347f5db284fbb","sha512":"c2ca4c6fc45e0fa37b7fc41314d1615a6b14033143fe14b35bbe48b8e6663ab2d1059d50e8127db5563c9238050d8358792a9dec3de2d148e435036007d503aa","ssdeep":"768:azzclprHCLa2nbsC3VZmxyKsrBarATEfbFx64o38Y:azzE1dCFZysrUaEzxoD","tlshash":"2dd2e2bc57c162e3ef302ffa520df315e6554378242c5bd31a1a74c93d852ee06d9998","first_seen":"2026-06-28T13:54:02.980587Z","last_seen":"2026-06-28T13:54:02.980587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/fruit-blast.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.795Z","timestamp":1782654807795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/fruit-blast.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"68ac-19eead0dffb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITt3iI%2B7UknTWuJbLvTW1t5TwN%2BhAHTFvR8AUQojmHuj8OeSojFTKHwhDvAGsD%2B79AqGj%2BcoRexAyeJQv6xqhw8EMslReDNAziwWhohdqhK5z%2FmVloICq20lFS6s6MrLv6U%3D\"}]}\r\ncontent-length: 26796\r\ncf-ray: a12d2d84be530731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26796,"size_decoded":27765,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1189d7c15d032aec4c25b7c310800a38","sha1":"87c734ec6855ade58fa6401a1c6be47e6348f514","sha256":"848252dd13479486f6d5662df630a557a76fff3d94476031b7310a7e8a21fb1b","sha512":"57039857fa3c89ffbe824f7a295c7dce93890af8bbd0f24ea5fb00474b6d6de6f0936b90bb256386757a90dd98b3c01cb5d14ec58ba411c01801394179e502f0","ssdeep":"384:rg+O9WjV/XesOHa4Kh1Ynneop1Wbw+YTckbM8pnB4OjmllLVAyxoYCzqVfPRf:qWJOhgkWbw+YzVnZmXOy2Y7fPR","tlshash":"ccc2e071da7d57c9dcbcbab9d472ea120044f183a3f65308a6173221aca930c3f67d51","first_seen":"2026-06-28T13:54:02.983377Z","last_seen":"2026-06-28T13:54:02.983377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/lightning-roulette.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.797Z","timestamp":1782654807797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/lightning-roulette.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"6227-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpWtRXb7FfPHMUlJTZYMUQtxPYC9gPW8UK975%2B3qkWov1291JiEP9lw4Ei60Yd%2FjKQVsB2dgz5cbWeMahShrFay%2BrzaNrd4CYtA7TsgyXdQs8gmM1ljNy4H%2BKAWjclYEtOk%3D\"}]}\r\ncontent-length: 25127\r\ncf-ray: a12d2d84be550731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25127,"size_decoded":26094,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"47e2ca0f20fb4aa4c54fd55a5e73ff75","sha1":"9a48e19df2ca8d4f2b5af9cbe876a0c77c95a9bf","sha256":"1adab735b87179e6ea742f666d510e7939c5a4890cc028945f2072a99fabb3a2","sha512":"3e89e7321a87334bc674c327fe62f2d78c21f482b1bef3f254a0805ad09b988091a5e315206d146c679ec2d2ea9e1c8a614b48e2ca6aa9d72541a591b1cc8738","ssdeep":"768:H9QActjke5NemAZFYm3eMqz6rwcbUhOvNnd:H9Cj3l7Tfz6rwUIOnd","tlshash":"5fb2e1a003da0b13f2484f37e5470704bb539b19b267aa66b867dc790f158f4cc651ed","first_seen":"2026-06-28T13:54:02.986016Z","last_seen":"2026-06-28T13:54:02.986016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/roulette.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.798Z","timestamp":1782654807798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/roulette.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"702f-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2F%2FBBEbMen2kCezV2fp%2BBgCSZ7u9rfDPiETcNtik6dVm4gt8JlNqH%2BlbXry5YcHY%2BrM%2BE9IVe2xVhbEXIbeeMMI4EP3GZdViK90%2BI9%2BrKTOOH26No7u3TLHtvZ99ytpcAoY%3D\"}]}\r\ncontent-length: 28719\r\ncf-ray: a12d2d84be580731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28719,"size_decoded":29694,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b1ef4432cffc86b434f2d2333909a90d","sha1":"13a91bef63f892bc550cf600c769ce0a00440e7f","sha256":"bbb75ded0368078bb063df5ffe83b9329c2d6ba7ae332eee71fe0022ef76b60d","sha512":"12140b8107f83437826352c5f2ce1ca086ec37ad257c4ec1f166be6553521f8b9f1ba7264370ee6b49f7b4a4f6e35251cb9207bdac6602df9e69c33aee8660c2","ssdeep":"768:+KBTw0LcXps1ewhUuP36mokMQDGlc/lRemR9m7LbQ00H:PNLcX21XhUuP6mokLCKjJQ7HAH","tlshash":"2cd2e2a1ee433a08e06d803fcc5b6f67d152fed59e589367d77cb9609052ab44cc8ea0","first_seen":"2026-06-28T13:54:02.988461Z","last_seen":"2026-06-28T13:54:02.988461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/index.DBy5LfQW.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.968Z","timestamp":1782654807968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/index.DBy5LfQW.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/_astro/site-header.B67GT_lm.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNft9GYdX6VWAJ84ZBOxz%2FfOcADO9KHZoZXltF68HSy23SYvqJhqf7ChB55L5gtsI8AQji6XGE42HrGlZFiLw4WyZnkAG3rnLaEcAbTItGVjRhUxJQoiqzNgt9gwYtnquZA%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:38 GMT\r\netag: W/\"1ea8-19eead0e08f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d85ce7c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7848,"size_decoded":4177,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7592)","md5":"8523ed33bcc00a686f4f09b766caa75a","sha1":"722a46a89610f11547fdac1be9e08a1697e7bd56","sha256":"ed264ca08505aaae32cb5e151f268f3ff721d0ecdeb7d33c4470de92bc892ca6","sha512":"efb94fffc87c4393ef13d6faf0309716c6049cff0b1f383793f1e86c96ce563f87021c30573eb2d6bd6953d1ec59e3f43dc90ec7730f78085b629f7d02ff29a0","ssdeep":"96:kapqtg4EsI31Ma9+2HrWxXZtV1IwNTlUN5YFQ02qBwGC80gDP49jShAWFwsgvGXe:Vqy4gKAWRZtV1I0K30fOM7bAEtxj5jQ","tlshash":"51f163c9f899b5504aa37670423f555bf33d38a4284e84b8e272d8e47db804ec427f6e","first_seen":"2026-06-28T13:54:02.990871Z","last_seen":"2026-07-19T13:54:34.084671Z","times_seen":4,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/site-ui.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.723Z","timestamp":1782654807723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /site-ui.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpCNymo2IOfHTGf7SNPXnacar0%2BxNmLG16uDuetgRoBHV1KlCp%2BhbayLPqTqZxm6WizAyIF6UuEC0GVDiJiv7NGsUzt6WfHlnXfoKvg7R%2Fb5nU1DKc%2FjKbikj8BXz0N%2FLNI%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"105d-19eead0e008\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d844e3b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4189,"size_decoded":2510,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e57bb48c031f89e5e8c0738a601c0933","sha1":"b10906b1e54b10c6681a69e1788be8f44e8ca7ac","sha256":"883bc67912f6cf82dd7488d8c2627acae11fc6f6b288b04dfbe2ddba391dec6c","sha512":"1805d272533d3de6012c8b5b67ca56c914078f0118867c42d5189956bd45835de99d5e816a659b3aafe0c810aa30d62da110c41a1b8f779c9689fc86d6f43c25","ssdeep":"96:BihKgCjizIspU+BFinNOnbYTYbV4mRndnD5Qq+yYxWpBoRbPMn4720ocX9PW9x3:BihKg8i8saEiUnmYh4mRndPp2uHHm6","tlshash":"8681419e21f312b241fb217d4797518832397087a80ec4583e4dce94afd592d96f6ea8","first_seen":"2026-06-28T13:54:02.993262Z","last_seen":"2026-06-28T13:54:02.993262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/images/bonus-hero.webp","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.729Z","timestamp":1782654807729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /images/bonus-hero.webp HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"2a756-19eead0e001\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2aJa0UY3SQhdLrI6AC9ZBlUCQdz5o9vg4ghSLuaZoZ9LDvG2q4AVfCSGox%2BWum%2F6ht3lW%2B1xVrWKFZt1mBaq1uCW2cUFOJLWBrFRaAZmLejCugp5SeDHmy2bZBf7%2FWeJMGg%3D\"}]}\r\ncontent-length: 173910\r\ncf-ray: a12d2d845e3e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173910,"size_decoded":174879,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f74ff51cd01a7cb79bba8fb206977856","sha1":"416d8ecbd41240f2563eb1f248229e9cef8b0f2d","sha256":"1f86573caf55e83ff835417098852f16fd8003e884dde1006c4e54376a454b5e","sha512":"40a4efe297ecce16b21dfaa689349a5218cf4919e33c07888b16b82850f5445b14d4befca168b4b876585cc4664cfa6caa8a5db5a4bedd01e4724d66efffac20","ssdeep":"3072:ErCVFNv5uLkpt2y2U6uC3nHtfFoZfUK4TVmZ9W2zirgYaGnpEMEwAUZbc:EmVFnuyAU6uC3tCNO5me2z2dmMPAV","tlshash":"c904126695f94737e9b978b563ea5388724876164fb8b3044e6f1303b3213d7ad38e02","first_seen":"2026-06-28T13:54:02.995862Z","last_seen":"2026-06-28T13:54:02.995862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/site-header.B67GT_lm.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.753Z","timestamp":1782654807753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/site-header.B67GT_lm.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFOX0Z3Oqydtf6pO0EPPuA4ulAq7E4vJaomxtP34TbTvBLDITa%2BEanbxGIrAig6TJyl9k0a0X7R2jqIF%2BaVn%2BdCvW52EvLE26Py3KddHze%2FOELIxxivJRvNDFH2DWEjxedM%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:38 GMT\r\netag: W/\"e4b-19eead0e08f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d847e420731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3659,"size_decoded":2341,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3022)","md5":"ceab603bcc028851c3af642533023e50","sha1":"71548572003c0103bc8e0f940c7c9fa10012218a","sha256":"21fd1ca374a1039f7ea48f4b51dffa72801226e43791294a64bc8ac7ce266916","sha512":"a87331ad81cadc4255ddc446487ace059872361be58bd86f991991472870397aa827dcd030a1f7b8fb54d83a4975f300562738ca7b20398e277537e0aeead8d8","ssdeep":"","tlshash":"9171760db28166bea55747ac765ff05c604f8adcc62f4f25f07e6036192211a6d93fc4","first_seen":"2026-06-28T13:54:02.998136Z","last_seen":"2026-06-28T13:54:02.998136Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/speed-baccarat.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.804Z","timestamp":1782654807804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/speed-baccarat.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"5615-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPPC0iXAbop3v2NjOnC1BOF0ygCN7s%2FndrEe1O%2FJH%2FFCgyIC2vNUjMEdRWdSEStuzWm81RRyatW%2B1f4Z5NoRQOUvSPgFn5VjAo2JLzt0nksCFloAKcshze8fosSrzI2rfpI%3D\"}]}\r\ncontent-length: 22037\r\ncf-ray: a12d2d84ce5d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22037,"size_decoded":23004,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fad4cc6632948e847cbb487c51cf9a2c","sha1":"3a7d433e4b8a938a40c66e9c4e0c5dfc6535fc0e","sha256":"9f344a36e9fe0bd74ea7a0a5e428c363bc09ab0b0e2e597c72c71f36eddb8960","sha512":"faf6139d14e0d8616f3b83b399aece57c01512978ca22ef5b23da242dce84c41c92fe826a2307e29d0b07c1856bd72a0b3e2ee7bdacd26edfa4de3e85ceba182","ssdeep":"384:rIDVVDT2ig24EtLM3KD3aPtRlka7pdiuFlFTajbGyKfv4eong82If:MBVDCigREFM3n/lkqiuG65v4rg8J","tlshash":"aba2e102f6c3c9bfed00a135c09473297b3afad82cf945fdf54060a62656d52d9dc946","first_seen":"2026-06-28T13:54:03Z","last_seen":"2026-06-28T13:54:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/register-cta.CSE3QhKA.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.970Z","timestamp":1782654807970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/register-cta.CSE3QhKA.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/_astro/site-header.B67GT_lm.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKgOlx3aIXKkMWBQ3Zw1fQ7x%2Fodepr2WdirOda2%2FjQI3RPWZxJ9bYhUPBgWuUM5DtTkH5GNt%2BEfwbKPky%2Bn2DOqz1aWf7NSb5sgrRzuWtbFvTwbglPhby2pXVMUDJRXrBpE%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:38 GMT\r\netag: W/\"8c52-19eead0e08f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d85de7d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35922,"size_decoded":14518,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (30124)","md5":"e0531f67fc0565a810b777f23339f5b2","sha1":"65d2adee6fefad3da3628887bcd9524185ab741f","sha256":"e6841f252c91ecb9447db1a02dd8d89825560853064d5e743d90a146be831ff8","sha512":"9efef6efcaf69f229fde557276698c15f8c96c76ef2f87cbef23978a41aa83efb78732be76b61dfab7dfeebed4786b3d2472ea6f3d401d9e24b3089269023c36","ssdeep":"384:ZgAMUa0TUFOpNpJg+UFWVCNThEo9I/IGBnQ/KeSpXpgRzN8YC8PzS7QXSgE9vj4g:SZUjzJzCNi6k/+Sp5gRzNNC+nCrRj4g","tlshash":"6cf2851ebb44f04c23971918bfdc7b459a7d0728cee2c4d42de98b2805d12e5a676fb8","first_seen":"2026-06-28T13:54:03.00281Z","last_seen":"2026-06-28T13:54:03.00281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/crazy-time.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.796Z","timestamp":1782654807796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/crazy-time.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"617c-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXcNmvYseplZPLACvy1CCjHrYzkN%2BiW%2FAVHFHLMBuHIl3A3YYmn4rfr2QNBRGBiLYzWK2WNWqfRKpWYBmBpKS87qCCA8hTqkgZMhi76bmaMvxeL7CI2%2F%2BLrNL7%2Fi9rei65E%3D\"}]}\r\ncontent-length: 24956\r\ncf-ray: a12d2d84be540731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24956,"size_decoded":25925,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b9ac66ac0b81cb61356a1c040ce7ef11","sha1":"c321d328305be19b4da42c1dbe317ae108c7dfdb","sha256":"d2f421758cb1fcc0e79ac848cf8bcedb1617a402124461407351104474f35572","sha512":"1e4fcae7f62d9c2b1358dce4c8bc63d0177d2bbbab4c4d6114c1bb0471b25036944af8c2df6054dd563339df41fe6a26d3e3e5e83c8a25c81949d2ba8757b2fc","ssdeep":"768:sG6+867li0Y22xS8lbCPll54jGLNC4fuXPgSrD:Gt67Q42x3Ell4Q5+rD","tlshash":"f2b2e10479d11d8afe911573adf352a2e674c529038b822f98836b3f8c550f7dd36a3a","first_seen":"2026-06-28T13:54:03.006143Z","last_seen":"2026-06-28T13:54:03.006143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/blackjack.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.798Z","timestamp":1782654807798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/blackjack.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"8240-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hA6sendXWgp1U2LqQzgah3s2ds7efK1w8LrqgeSZ7lb%2FjnqRovUedeLLFS%2F4LZRacJzK6BOR6rpIq7IRO5QT0q32dl42Bnar4HPKDd2kFrD29wG6A6M9vcNIi4%2BmyO5v8sw%3D\"}]}\r\ncontent-length: 33344\r\ncf-ray: a12d2d84be570731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33344,"size_decoded":34309,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7a96b5472a006251484d688db4383449","sha1":"0ca073a4f10d35b671022171b38ae0e9176c66a9","sha256":"6e64ed7cc482f961058d3efb83db243856f74e42ea575b541cd8f3b2a78c11de","sha512":"ecd51251c1dce5e54701d57dde9df51527b684edd64604d258cd04c0e6e3c67bffbdc6d1c3bfbbabc468f3a274bc8a0255e0a07b52b5926b43415c522e67a009","ssdeep":"768:ZswvENVYgnXIbHNQz/1JhR6tGgve40OTuBpRNpUfE22lIv5Z4+krBg:ZMNVYgXe61JhRkiBOKBFm89lIBO+0g","tlshash":"d4e2f11934456190e57a7875f5312fad872db2e342011daab35c934afce2ff8f930688","first_seen":"2026-06-28T13:54:03.008779Z","last_seen":"2026-06-28T13:54:03.008779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/mega-wheel.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.803Z","timestamp":1782654807803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/mega-wheel.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"75ea-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRkshJ%2B8IYb3BVEoqBa4MwDZwAEW0e8rKWeOgKFFJC0OLfaH3RzHTkXyql4ZCjbIN0bnPk%2BSmEa9NejubenpY%2BZDefZ4843RZq2wD5VSY%2FULgTGZuxti4AU6xLMNRBv3lYM%3D\"}]}\r\ncontent-length: 30186\r\ncf-ray: a12d2d84ce5c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30186,"size_decoded":31153,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1eb401fe9c5fe6942b04ced6b2d521b5","sha1":"bda506094147b4ddc3ec58eaeea85770c9289946","sha256":"1ec02fa6f3defa409b0edd4bc8b7e693e9244e52a744ebba0f2939eec6915012","sha512":"234b0ad4001ef0f1a2c9cfb5974537eaf904115ec080189ec215eca60eb8af56193f24ceeb0ac48fe1f7f2f39754ca887a54a3118252c5dcbc50a0744ad0c84a","ssdeep":"768:/0KZQ1ZJvP5PSEbCEM1XkWDy7+YvRp5zSqSX4T8tMr/29FB:/0B1ZdP5PnbCEKXkvSYJ6q/8tMrq","tlshash":"f8d2e19aa5545575fbaf623484c00af3c2630b0bb22d3f61bd8531ed681711d8ea7a5c","first_seen":"2026-06-28T13:54:03.011082Z","last_seen":"2026-06-28T13:54:03.011082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/lightning-dice.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.805Z","timestamp":1782654807805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/lightning-dice.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"7d2b-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dxi0%2BhWYxkEXMQ7ARqiamtFKEoNOvE1jaTjgQgcbOE2UuibpP7c%2BoZcjp0OkZIRwmyjIrWVELHL%2BVjq2ZEMGX6OKdcTn22FTp0TxyaWwWDS6ttgmNCUx1F8ZYxNccuakOBA%3D\"}]}\r\ncontent-length: 32043\r\ncf-ray: a12d2d84ce5e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32043,"size_decoded":33008,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"06b0039278e3c06d5f0a827f91afdd74","sha1":"9e0204f6e12fbce35542a2eb4e1109d5d64d99ce","sha256":"c13005d98cc2e5cb30c3251a884a4231dba07af6e0d91650e4b9156043db3c31","sha512":"a4adc00a970b973d72cb8d51507abd2c54e4f0692262d1e36f30f7605465ecefd82bc5c96b25acb58e95fc747ecba28377c622b9249d4abed8e90c6a60f552d3","ssdeep":"768:wCe6KtIU+kkpDIJ3rlZQpTliTBli3eX1buTOVnM9qhj:feftlYxIJhetliTBliuxoOVBhj","tlshash":"cae2010fbfcfac68cc45fb3962d71325c9d4362e50a9a230508ea0f5ebc55464a78e9d","first_seen":"2026-06-28T13:54:03.013411Z","last_seen":"2026-06-28T13:54:03.013411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/coinflip.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.775Z","timestamp":1782654807775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/coinflip.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"8720-19eead0dffb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJASGNZdq69rUKLOZUwsvHZjAHtNLVGWOKcShvWzseQdnI47mZ1Q8JBq7QLaBJBySWy5FXWSqfB7hyWeWHTAZDBlAf6gDggSI8R3OcSb1uTAuRgLeQ3rrcpDrz8NomVqKDc%3D\"}]}\r\ncontent-length: 34592\r\ncf-ray: a12d2d849e490731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34592,"size_decoded":35551,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b3a5afb92c8a372b21dab6c02968b2c6","sha1":"e52e695858e30e78692f72b69fecab37ae665003","sha256":"840e1de89b3a3dd05a2505e1046cc783a995b832477d3a91af4ca4e4570c42b2","sha512":"b58d58fa8b11085f95ef8082556a8ce5c4e0e9e11bf343b7ab3e50de49e325a5c43c4d0b3014ef542e2d3b369646ccb343456e82256968ed1a9866a3d33adfd3","ssdeep":"768:pZSo4lQlAzHI7L8IylFOC/urLfVC1Dqap3myhSR3XUPXkmBkAzk:psovAzHI7L83ld/ok1x4ycRG0QA","tlshash":"68f2f1066e35ed3cdf5d5ff602642f5290078f36ac02c6d24baa169ed1623c94d2f41a","first_seen":"2026-06-28T13:54:03.015669Z","last_seen":"2026-06-28T13:54:03.015669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/rocket-queen.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.782Z","timestamp":1782654807782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/rocket-queen.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"71b9-19eead0dffc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7jwbb0UhMQNbvfvf58ehVNopp9dtdUamFFOJ5K4j61n%2BqOpOiOZa4yLYvfUl27p%2FzNEjMLPAlesuu5B07QJgnSmHK42caza6EaRz3rgOE%2Bb09j49N2XdqUlg75G4vOHOGM%3D\"}]}\r\ncontent-length: 29113\r\ncf-ray: a12d2d84ae4b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29113,"size_decoded":30078,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f7cbd933384a3e5a91e3241ba8f383d9","sha1":"709798b703984b36dec04489dee0a8061ab5ca08","sha256":"ec51e012bebf3a1a4c63a1be08f4c478785ab650a03a4d92033bef062abed145","sha512":"a0aef8df867942db14eb0f54ab929ee7a6f9e3d4ecc22796e6443665de2df8953bc3cddd3dd6626c4e2d41e9778dae1ce19e3c1a77f4c0a123f14e3f2fc92270","ssdeep":"768:OoKUXmu1f7tcadHZMNqTevA3WhUQa2hXNp+Ss3:OHUXmK7tcyHZlAqniSd3","tlshash":"b6d2e106a92bc8dfc75618fdd0d1479e60180074919def2e9986be058df4aacd4f6c4d","first_seen":"2026-06-28T13:54:03.017994Z","last_seen":"2026-06-28T13:54:03.017994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/mines.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.787Z","timestamp":1782654807787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/mines.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"862d-19eead0dffc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3azODps%2F4rD1KpUBHrgSovg9kr7bNNkGt1vbbLZqxbtK4JUg0I3lO%2F3f4tfFFXuzIP0qEHt9uXMjyu9OzUsUhuJNdhzE30Db1rtW40OAMNIsajxihXCXKRe6TRp3b7wY20%3D\"}]}\r\ncontent-length: 34349\r\ncf-ray: a12d2d84ae4d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34349,"size_decoded":35312,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e674b4590989cc0292a56e8d0624d76e","sha1":"549eb31be1a478c52383e9f9ab52e12aec73ba43","sha256":"2e4d6e46626c2be4a0ac7a45e315b274232e2da086e51096e50741f2b4f25ea8","sha512":"faf69bf816820756a8ac8b8ee234d48f684989dbae2bace4ff2079732c8de49ed20e6ce309836fe3bb630ba27455f910e352bca549cea6a083ccb503c969bbfd","ssdeep":"768:dQa2mAAyZlhf9dLwZqwyxkclLUCmc7UKIx6xfA5s:d4Aypf9+QwD3CvULx6ZA5s","tlshash":"e3f2f1e906e9f2b3c4ae0472f75467c15ebdbcc6a66a0a4192d4ff8b445e4ccfca2501","first_seen":"2026-06-28T13:54:03.020218Z","last_seen":"2026-06-28T13:54:03.020218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/dice.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.789Z","timestamp":1782654807789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/dice.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"307b-19eead0dffb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKFj0MBqmh1V17k7HDtw3dNQt15mZ9yH0SFt7%2BT6kds%2F%2BCXWwxlv2qQsc8nQFpb4aKbT8crknlg397Jg4w3tLiNGUFtwh%2FFIk0DrP8pU%2FwyXOwmxjPUEWulwUWbqIVu6%2BG0%3D\"}]}\r\ncontent-length: 12411\r\ncf-ray: a12d2d84be4e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12411,"size_decoded":13382,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9da6c40173aa392369ec209227ad0126","sha1":"48f457862fcacd4eac5bdd5fbec6b971c0bf02f3","sha256":"dff7993d92d26829d4f02bbc525af8b83f8e2b0d50d471dca97926a39a70f9d7","sha512":"ce8233050538da7983ee212af3d6f63f365c93a7af68510a08658db35a9375d28831a2f0e00362320dff3a5e9f8c48609f0d0c26e6e7ce30469aeef9104a2da3","ssdeep":"384:rywROcBmPJI9jP7SWJk0rnFcwB+aQ2U6thABEf:zOlJI9jP7ZfnFq9B2","tlshash":"8742c0f2e3667883e23731f2d0217b2144915912f57e9626ca903835fff61964e89d64","first_seen":"2026-06-28T13:54:03.022424Z","last_seen":"2026-06-28T13:54:03.022424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/penalty.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.792Z","timestamp":1782654807792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/penalty.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"84ca-19eead0dffc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2Ftp7rLXEyj%2BfBaEUC23zoYQj2vbtGmae%2By3LsoXTcDHf6A7Qh6zDL5I5m602zZ9uLeOz6JNur9108JxHj5%2BxOylE9lu58rOHMGBESr%2BFHWsfim8I%2BOWDBI2JBFptlZ7SF0%3D\"}]}\r\ncontent-length: 33994\r\ncf-ray: a12d2d84be500731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33994,"size_decoded":34965,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"db4fc295a6345455ae7612d84b658257","sha1":"35536c757f0495409c7c58443115850d0adbc044","sha256":"9de5852f6d473e6e125b8649094940adc7be57d95f37358f6c24ad7b1c73cb70","sha512":"6b2dae3b0b91504f123a3e81d0c98b766f1cbca288c3cf4c74415b12640bb8f7e0308b536df8a85b9ffe3c15f87717943b2857802b5ea81248e984a8bb53bf4c","ssdeep":"768:11jSr4zv/dnN1f71+KcPJlAFfD4Y+Vrph/AtkylDQb:11Pzv/dnrf712P7AZmVrpJAtkyhQb","tlshash":"c2e2f177e418dc8ce81e1976a09c7674cfbade54f19e510e23b3ad19b8257044f08379","first_seen":"2026-06-28T13:54:03.025007Z","last_seen":"2026-06-28T13:54:03.025007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/aviator.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.794Z","timestamp":1782654807794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/aviator.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"519b-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbOepim7hYj5hAsxdu1O%2BDBkFmhTB7ptsKpGnasvTxpHxaXdKaQAi9S%2Byue3vTX8hyOP2Q20YUd2UCYNW6YJ9KUH8Sit4%2FPiF48IVTT0Tt5gpxFgtoZReGYIgB8pZGMCllY%3D\"}]}\r\ncontent-length: 20891\r\ncf-ray: a12d2d84be520731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20891,"size_decoded":21856,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f710189d5149ce3135f6c51d8febe3ec","sha1":"4ace21024fc9414b08faab221b990faacb8b5fa0","sha256":"9f5587e6cf43519e6628475d5c2c32b9ef9f60164cd332a4685aaf992f21618e","sha512":"2e04ccb5ec4d41ec5fa57422e55c2e44fb3ae2cad08f69bf3899a40722440d25cbdbd953c147edd144e3d7ac80e5e9f2d2f1fdbcdfba28b513b41c9f5002f572","ssdeep":"384:rhgJ+IIr2y7W3AcgQSKIJCZfExGV+d9AtkAeKsbryGzf:SJ+5rHoglZKfGd9MkosHy4","tlshash":"4292e17639b16bb9c0d4dafc16644f51099bc4318126fd7a88c3a102d297c83e5dfa2d","first_seen":"2026-06-28T13:54:03.027205Z","last_seen":"2026-06-28T13:54:03.027205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/cash-or-crash.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.806Z","timestamp":1782654807806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/cash-or-crash.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"778f-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95NO2SSRWSWccDg4KeX6ZPRjXiuz8HsjHgdADKIQCZSuHy%2FMmcw%2FMzxfzbzFWnFzB7Mwff8kNKHYtc4h6ByWMdNTAjWTEuX3VnvMA6dPUX51fkQaMorMZGspOPW2SxTr6lc%3D\"}]}\r\ncontent-length: 30607\r\ncf-ray: a12d2d84ce5f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30607,"size_decoded":31570,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"484483334aa693b4db20d1527a1e8b4f","sha1":"cdd39ed71e70a9f5a7dc041bc77d5404f8343747","sha256":"edb13c38af192d1325e97b2ae7c85d1910510469f343e884310d65dc588deaec","sha512":"b671f070620db2fcb97de467a6e854e3b5ca1c21d3952329ceb7d1810f4a7464c4200bb71a0956b4620be01b92593be527a4a21aa427d1c0d2550d753e89e02d","ssdeep":"768:wflBCqUjm132v3KmXniIkHogAbgxQ3NduwmUo2s0i5OxX:K4NSsLSHmEKUwmUy0iQl","tlshash":"85d2f15a3030114ad39006bc9a42fdf7d2b5fa28ee51df72e484ad9abd483d711b05c2","first_seen":"2026-06-28T13:54:03.029088Z","last_seen":"2026-06-28T13:54:03.029088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/side-bet-city.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.808Z","timestamp":1782654807808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/side-bet-city.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"405a-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbum%2BBJ2Br8i8IMDKsY82bakTzFVWV%2BrICPar5XL5vtHfmAJ8FMYJPgzfX4y03KtPfm1x%2BwAOCvdhHdF54QwoB3TNJyp1L3HEWL9WGZAVDOF2aocaEXN%2Fo1RPThQ5QulZPI%3D\"}]}\r\ncontent-length: 16474\r\ncf-ray: a12d2d84ce600731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16474,"size_decoded":17441,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e27bc82e63b15e601a653974f8798a64","sha1":"85751d3fcfb2acf2b1078cc32fafe2c913dcd78c","sha256":"b88a492655c60ef02f99224f4893a61fa684423fec081af30fc35980e6e3bbf2","sha512":"ff60338895e390982654b429ab2d86dc825006c83c3822162daf42cd2dbe834f7d3bbb04e6a3def82f60d5b64b06a5b22e779cd1e574eff71e4991c5ca4c56a9","ssdeep":"384:r5YkwrAHf3Y6+kKI8b6SZ7LzfETh8HqZFI9f:C/6Y6Nm6SZ7Lz2AqZu","tlshash":"4572c0c74432053ac6af12b919f5c60747ea7379e06c966fd694517d3c86121ccfc86b","first_seen":"2026-06-28T13:54:03.031061Z","last_seen":"2026-06-28T13:54:03.031061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/brands/apple-touch-icon-1win.png","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:28.465Z","timestamp":1782654808465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /brands/apple-touch-icon-1win.png HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"10bc-19eead0dff8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7%2BTHnm6hi3vgShvh3Tq2sLW9O4uLVXV9jwPrGfyTB1PJU5bFrh%2BJfUsdWYrWovj7eMYjqkhklC2VqxHPZuKOMP3OiqM1lTMSwXigIrfly3st0mLixPrznT%2BTJLg9lDa1LU%3D\"}]}\r\ncontent-length: 4284\r\ncf-ray: a12d2d88eed50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4284,"size_decoded":5247,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"9d26a7bff0346c0546ee7a2c6b931a34","sha1":"43da82e2ae1bd286e0029d95a4958f3321acd749","sha256":"e28861b0b67d5446248f95b405c4146bdea2d76a6449a50c5983e42932a5d80d","sha512":"df396b79392b7875e2f165fd1aef04d0deaf60ac2e43f8433716bab74e691232ac6d6a82498033d3c3207b0b3a1aadeed428a626cc8b3e817da74b391991155d","ssdeep":"48:g23rTM+jDk8Vw58Z7FIRNLQ5Ml7DUXtCevF1sXGSigP7qbmtJnAn9NY/MFp9CmoY:HU+fTPhIRNL1lUXtTFeX7tG6JMFp9d+u","tlshash":"6591912af722ca0b9ca69e7f897658f0605938d72bc92d00f665c1ed0d0ccd3e8d91c5","first_seen":"2026-06-28T13:54:03.033122Z","last_seen":"2026-06-28T13:54:03.033122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:53:24.117Z","timestamp":1782654804117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 21 Jun 2026 15:33:39 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQyD%2FXem0uV5BqqqWPt8xOdUU%2B2FHvcgRwBqzCIu5iPYEG5IIq1RqAo3QQcFMWaWXMbjZ3XmIY6UMSsxlXlSFjflT4fHKfaIKnYoxaiGeM9Fv4359lwNA4bCycs2%2BV0Pw74%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d819ddab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112347,"size_decoded":16422,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65512), with no line terminators","md5":"2eb8fc6c92d9afac6202ba9ab049f310","sha1":"23428072a25d18a0ef4d19225f43e26eb6c46b20","sha256":"1a66058261cf2357ec99aeeb9fb02a5189cb19edf251b4b0721b3f4f01e83a95","sha512":"f50efe9814789e37e1751e3ebed9d0db4c3655286fe6de6b17e5bf513285e8160b7fe5466e0509e3d960dcfee2a2909fc69d339ecb153f7054132ae14aea79ae","ssdeep":"768:JHtQ/zB/VvOu1DnQNPbqdm3khyRKviyRcsI9Mu0WQZ5tuTTOTPTFTRTTTdqluLmB:GvvPlQkWsxuV+4CvcX","tlshash":"5eb3fa3192400a3d316743faf2e1b724d2aed389d26747a8f7ad42731786c96da336d4","first_seen":"2026-06-28T13:54:03.034906Z","last_seen":"2026-06-28T13:54:03.034906Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3378,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":210,"receive":0,"ssl":3157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/_geo_.CTfcOAS8.css","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.718Z","timestamp":1782654807718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/_geo_.CTfcOAS8.css HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJns%2B8uGojPagp2kGn51mt0PJd6YkceN2RU5Yp5TaFkNYy0zBR%2BbrcuMRqMUD4if6jmFURnA0qT6OjNkSP%2BZn9RgVigODW9J6ey0KPAPgcLIjpPPiMd1ouD76hcjHvdKeBM%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:35 GMT\r\netag: W/\"8d38-19eead0d66b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nage: 997\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d844e3a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36152,"size_decoded":8339,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (36151)","md5":"81447ec8657a5a95bdfc5fc554871368","sha1":"b3d5fcc18c3f986332461ad9dd9470c1b569a677","sha256":"f1d0603828245bca17c36fbcc408c61e26ab5764b6cc3a127967e4fd0893240b","sha512":"aeed682c9ce4f4897e796179b983f0852aa81c37ba9e2e58d0664ff4bdb00cc51be8efd7b117ed460cdd6676fc02122a790df07a301db6f9b4d01e103882963f","ssdeep":"384:AkwfmyWHB7EiTFb70mzpjTf9S1XjSRJdzognf:UuL4iTFbj390Xj1gf","tlshash":"daf26660b376d97fac6374f2e3dcb44ca518619ace2167ecfb42221216c77f1590ab24","first_seen":"2026-06-28T13:54:03.036955Z","last_seen":"2026-06-28T13:54:03.036955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/blackjack.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.791Z","timestamp":1782654807791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/blackjack.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"48eb-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F99qDAVW6jxNhGmMO5umP1W%2F7LRAjHGDr0ZY%2FK9sXre9Yh5jvYzJBKhyDOmXQdGvVDYhi3zA4lOz3Mq8c5jdG4qON0rDVwisSLkN8VkBk1B3mxZ2H%2FQASTBod4QSCh04LU8%3D\"}]}\r\ncontent-length: 18667\r\ncf-ray: a12d2d84be4f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18667,"size_decoded":19632,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5d4daab9e8afb96c5146ee8ff1572266","sha1":"914c7ba0f50c998412add513418731effe365d60","sha256":"93d9d68a8a1f1b17d397bd8ef04bb21c36ccb4a88bdb4c7d058639ec1ee51642","sha512":"7444abde1c1de00cf8c733a76eaf7504a7cc13c698b65f677242c63662b30cbdf9abdf7edc92723c5e8e8b7811cf645eb603083f8842e5191e2e15b8d0788a53","ssdeep":"384:r/ACdPY+/6nlLFiGdOAZKmNeg3oOlmw8kdFZRC8xxqmWxtCI1utfMnf:Ex66neGPZKmog4THY0Q4CQec","tlshash":"b682cf59bc066c33f42da370944adb7667355962401e8a2ad0f2bf3caa24356c9f3fc4","first_seen":"2026-06-28T13:54:03.038911Z","last_seen":"2026-06-28T13:54:03.038911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/monopoly-live.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.802Z","timestamp":1782654807802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/monopoly-live.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"a972-19eead0dffa\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnMqloorlPSz7mEid%2FNFR5dTTVUiH9WWCLOS3E5thBpITnd7g2IrcVe6f%2FlRBFCdufj3sDrnqwTMHdtkbVRAiHl%2FlX4dNPH7ZT%2BCYM9Y0mc3gEsvekeNzb90PaNeFfgMzyI%3D\"}]}\r\ncontent-length: 43378\r\ncf-ray: a12d2d84ce5b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43378,"size_decoded":44345,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a9e6e48783186627eed7dbfa33f2fd4f","sha1":"04afb40c4582066d4cf735abb5416d4157b32f3a","sha256":"8e1aa7b3b6e28c95aaeebf2ab4bd17d4248c2dc0a68840a3e9e3842274a821a4","sha512":"03c191025ab41f8d38f3401721c76203d235088176240e60639cca9a0c17bdf6ce94773bec14754944af09578689bdf5f1ca3c67da47aa5ad2df69821144cd2c","ssdeep":"768:fWo3Win8ClwQ/gnzN2FkGuBck2/kqU5eg7QfOc3Kw5SRJwuVzfct39bfOf:fXhWmQzNpBc/kquesQ395SRJhZfcVK","tlshash":"b113f10a230aabc5e71663f5d69b4653bb4ab710ff306bdb3f7995a604c06fac019c01","first_seen":"2026-06-28T13:54:03.040728Z","last_seen":"2026-06-28T13:54:03.040728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/brands/favicon-1win.png","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:28.466Z","timestamp":1782654808466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /brands/favicon-1win.png HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"2d0-19eead0dff8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=luBOhAQkv1KNUM2qD6jqEIn2wqRam8N5eWvBp5tJbuOLaoBeHFfQ20fPeOKb63l1o0d3h3APggGWV6SZas4kZgMr67i6hYdtQIm6CoT4M0LQDaPIpOK2xPZvzwYw58sEgH8%3D\"}]}\r\ncontent-length: 720\r\ncf-ray: a12d2d88eed60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":720,"size_decoded":1678,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8be6703962e3561cea8d2e94aae1564c","sha1":"22643dcc89753fd457d7439d86096ce917b415a8","sha256":"b34028a040015882cbea74b04f3a6e6d8686c21608981c2268373ed174fd4413","sha512":"3fb859b7c17ca2698d32890e6cdcacc6962d2feb11e01da4a96c919649637b44b2536c64e214edc32be57af8ea36ddf9491cf55d04bf5d50209e7e4049f138da","ssdeep":"","tlshash":"8a01994587d04d74cf2dbbda107b52c4f82786e90786b3172308c43b50f403d5518782","first_seen":"2026-06-28T13:54:03.042329Z","last_seen":"2026-06-28T13:54:03.042329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/client.nFz3bvDj.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.755Z","timestamp":1782654807755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/client.nFz3bvDj.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ou0c20ZcwzDEzQpidZblPpygVJPYrO77qg3NdOoIgJmQlEVW82cgrTIkK5xjmAx6nkWPwM3liQXzjCNk9SjwwyWWlFIYhCru9Xg2H1FVyxNFf1n2BU%2BIj6xgpHK%2BwO2P62o%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:38 GMT\r\netag: W/\"2d8fb-19eead0e08f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d847e430731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":186619,"size_decoded":61836,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50851)","md5":"f718fb16520dd4abbd90c9f6bbcb22d9","sha1":"04c784c4a885990198c8fbd75e40d60bc5cfa329","sha256":"f1f19998347720b3ae33e128aede401b2fbbbf86313e114f3f58990caa8256a1","sha512":"48b1bee92fb4c143438cf6585f928e45f79d9d330a68ce9679ce2a1471a1c46452dc821b3fcb6656a99e819bee4529449b9b5eb8f68b3af9a09ddcea8ef4612f","ssdeep":"3072:RkOMtZYTcpLFk1uvCLJr4pBnEmptwa1mRLG8HkF9:R1E0cpJSuvMJlN0T","tlshash":"a9040bec32bea7566eb245a7109f1503727c38335c0c4cb1a251ee9967b444a50bbfee","first_seen":"2026-06-28T13:54:03.044167Z","last_seen":"2026-07-19T13:54:34.088742Z","times_seen":2,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":315,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/sticky-cta.BYj2C4ZT.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.760Z","timestamp":1782654807760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/sticky-cta.BYj2C4ZT.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASHKTslmGasHXjSUsn4frLR%2FICRtUhpefeW04w54GG78uK83qwmBFsN4Uhqi%2BJS9ev2H2wTXa8vwDQVSmzSDccmuoKOwPfiXMwVF04cYc1GeyEObSnvTTWQAq9baMnclM%2FI%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:38 GMT\r\netag: W/\"93b-19eead0e08f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d848e440731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2363,"size_decoded":2155,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1805)","md5":"a7cd5df545f04113552309d29cda0e18","sha1":"e9ffd9975c51b9357153caf9a4ea6c0c1d0a4b95","sha256":"21801d04f52788b3ba3b0229b2a605a29452c7b693e2460cf562666d37b25a69","sha512":"316c6f93f6faca96767c2d22f09184414d32e72e2864bc8df89ad00a4af2f6b14995228b994aa786f720ec6100a12b3ee390925baf25da8f466aae2c2d173ff3","ssdeep":"","tlshash":"094194147180627f95674ea87a1fd0cc620e3268da2e5550e2bea171297006e7957ec8","first_seen":"2026-06-28T13:54:03.045747Z","last_seen":"2026-06-28T13:54:03.045747Z","times_seen":1,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/_astro/scroll-link.Cs2jyH-s.js","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.966Z","timestamp":1782654807966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /_astro/scroll-link.Cs2jyH-s.js HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/_astro/site-header.B67GT_lm.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGWFGaWySiXRjlVlnODeLOdeko%2Fs8H4y0%2F%2FSF6q5IvbyvQetDp81cs%2FAr36NtwbFpghDh6%2FaJwkuYzDKXLn3RRxJPm6TItMLy55lRkElkC4Lsz%2B6hvTPYXGs%2FQ0uT8E0cY4%3D\"}]}\r\nlast-modified: Sun, 21 Jun 2026 15:33:38 GMT\r\netag: W/\"797e-19eead0e08f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12d2d85ce7b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31102,"size_decoded":11283,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27987)","md5":"17708d153e66a8d75a36d3007db0f0dc","sha1":"eedb189700c648614e65f2f3a361bd7e282fbcef","sha256":"77c4ca3c3ce877fdafff51394d93da7de92f9a8623f868d80d06cb0dda9d6620","sha512":"33fe7fc76791b1f54a8fee415208fe743120ee165f91ba2fb99cc5431a4285c98fe743d1c7f3a7779a8a28f8c3f9f7740871f2d89d6f7f2091679dc06e4588e1","ssdeep":"768:v2qSX3RLBcKhPC9or31wRtt/z3nbPZqD2VJYd9W:6DFwRv73TZqD2Ved9W","tlshash":"5bd2f7257507053f16ef83d7f16caadad9383a02e0498708e3974f35cb59bac619ab0d","first_seen":"2026-06-28T13:54:03.046974Z","last_seen":"2026-06-28T13:54:03.046974Z","times_seen":1,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/slots/keno.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.786Z","timestamp":1782654807786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/slots/keno.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"6a50-19eead0dffb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9yJgpXVa9Qnnl6zBdpFkNrEgbrGrlAmmmuma%2F9hzKI2H9Cl2eWcipXL%2BI30LwizN%2BR7rYsU%2FEv683N2Kc%2FzPdT9zuqYBQ4pWQJNA%2FZNmMULH8Nx82koYGaoJspKsiCknWs%3D\"}]}\r\ncontent-length: 27216\r\ncf-ray: a12d2d84ae4c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27216,"size_decoded":28187,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9d1823aab41325e1815d5c91ba3db1e3","sha1":"302b48e67fea12b6be67978a5635f99c6e8c6cda","sha256":"a24c07199e66ce659cf065a0dc709b6dbdd43bb015d820870f0c5bde28e597aa","sha512":"c7ed6de387d54ae50d56f73bc5afe1e11b2315e4ffc93234278b1542581161dad0f3e5cd38090a21b16eb1fe2eb66deb87d3a725ae3ffba399e3602f79525458","ssdeep":"768:gX2+s+mpTux9SeTWW7Aq2T+oJz8fwOo/Eki:82pzTTaUeaQfwOA2","tlshash":"d8c2e048a22da42ee176b47842d6f72b7843cc00c5ba983fc3eb2c574f0aa59d453e5c","first_seen":"2026-06-28T13:54:03.048279Z","last_seen":"2026-06-28T13:54:03.048279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/baccarat.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.800Z","timestamp":1782654807800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/baccarat.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"83d9-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l60wHQj0u7XJy1xPOeJqtWpaKqpn6uGYT4qxDCD1AiyN0h6YGrdNIdhTRVyXZzTt4XTB6WTeFBMtbSgCOh7c1tU2JCwrogn8h91loToSxwokKg04ib2mVFehKGMWExYVqmo%3D\"}]}\r\ncontent-length: 33753\r\ncf-ray: a12d2d84ce590731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33753,"size_decoded":34712,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d1c54344d1c3b1f52a53af622129607b","sha1":"2efd4fe7c05c4c084e14431f09cf146fb38b3c65","sha256":"7c977f0e93d842a3e5be26145f7c94f927c6dd17355d2a32b2e9cdc0f72635c1","sha512":"45e9548d393ebf3ffe10e618eb24328674a83dd263d6fb1e45f3f0fd3128875adb5d1d355a911e210b1adc21d8126a71308475f3c34961a4bb0286eef59b591e","ssdeep":"768:oWtbkHCSQfiJBmgPyLDm9r0QqXpkeNLqUKc7I7EZcrAhWy/:7hkHvQfwB5yDm9r0QapQUKuX5","tlshash":"30e2e107c1108d14c1aaf8b68db8ba4af561b0449df38e0bcad22602ddbd491ec76f89","first_seen":"2026-06-28T13:54:03.049741Z","last_seen":"2026-06-28T13:54:03.049741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/games/lives/dragon-tiger.avif","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.801Z","timestamp":1782654807801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /games/lives/dragon-tiger.avif HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"6af1-19eead0dff9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIMWVAwYNXrSWpLWkvmPIu%2BFWq3SFVunNOtWrh74eENs%2F0idBNV0P%2FPMeF0LdzbiuuX7njBQ8XK1NZjXz7ady8ObF2ApnjPohC8ltyvDZqq64ZK1W6%2BlpijBDM33zgG0%2BJQ%3D\"}]}\r\ncontent-length: 27377\r\ncf-ray: a12d2d84ce5a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27377,"size_decoded":28346,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"365609494d4fed6a1bef8e87646da80b","sha1":"423290054fa72376dedf2442e0ec53ba3c8cd28b","sha256":"b028f1b0f5c1328aeac56880a2d363f85b81c6667664262b5e8a500f763c6d89","sha512":"d00379160554426ae152db0150747675e1feef1754877bde326c83432346f8bf4799b70d40ccf165885f802071fc5ec29b6c10710501a473e4b8f515d14a722f","ssdeep":"768:vK1ri9yxT108TqhheuF+1xKWxlVdRx6JJ:vMri9GT10i2hxSTx6JJ","tlshash":"e8c2e103ab904c4ac096b0fe29d96aa7354192f0eeb5d7d30c3e5cc361b2c764f9899d","first_seen":"2026-06-28T13:54:03.05104Z","last_seen":"2026-06-28T13:54:03.05104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win-portal.com/promo/bets.webp","fqdn":"1win-portal.com","domain":"1win-portal.com","tld":"com"},"ip":{"addr":"104.21.88.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1win-portal.com/","date":"2026-06-28T13:53:27.822Z","timestamp":1782654807822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win-portal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:22:21 GMT","end":"Wed, 16 Sep 2026 01:19:58 GMT"},"fingerprint":{"sha1":"C8:95:C4:9F:D2:9B:6E:83:C0:48:94:CE:D9:21:65:DE:16:19:FE:93","sha256":"13:1C:1A:92:C2:AA:1B:51:81:26:83:43:60:6F:9E:C8:EA:9C:A7:DC:46:6A:5C:0E:99:06:DF:3C:18:DE:08:3D"}}},"request":{"raw":"GET /promo/bets.webp HTTP/1.1\r\nHost: 1win-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win-portal.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:53:28 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Jun 2026 15:33:37 GMT\r\netag: W/\"20dfa-19eead0e008\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4H%2FbJWBAOari0Yz13KjGj3lA9ou%2BHRPRnYWgk7bZ1gqW030K2whuYs7bRg0OWmgQktNxnN2x0kgSSr1%2BYCUe2qhQ15yF0V1LzebXGZaiCZ3Gxr3S8xIhyMIv95Ysd7ajyjs%3D\"}]}\r\ncontent-length: 134650\r\ncf-ray: a12d2d84ee610731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134650,"size_decoded":135617,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f5942365b7c957b322dcbc1ffa2c33e","sha1":"5b38ecc7144f4f3b9da3712f573f8f1e5e4b7634","sha256":"a54f04876007a6cd7345ad31299acdb6c653b3fe846afa3e7a94a1777dde984c","sha512":"d7ee2f4b105fa71c91ccf64eff041f9c0f6e9b9ca0648b556ff0c59ddc8edd80055c1157a12097a9b8b8a64f58143f56afc2b321960a4f55b8a4bb013a47ee1e","ssdeep":"3072:bmPuwDpO2IDUlVYI19Tzkriz1KoYeiggy28V:4/DhAU3YAfYoOCfV","tlshash":"b0d3122df9a47167ff7225b0c22a37a1cf749614cf628eebce31665e55a12682364031","first_seen":"2026-06-28T13:54:03.05221Z","last_seen":"2026-06-28T13:54:03.05221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}