ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 16395c61d3e5152147b7b1bed1b722a8
855e8a622b24b0e47d76f8ccfab8102605e15a50
1b1a8181aadad85ed14f41cffee63e68e7b1a2146645c9202d9347539ba03052
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 09:16:21 GMT
Server: ECAcc (amb/6A94)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IF6wNzOTPG8m-u0qcz5OBDH8m8OW4hopcS8shmTVE_6I3Nk5w7KEjQ==
evoleageequirt.com/76e31dd0-690d-4e7d-839d-ca97c024f681?zoneid=5369052&bannerid=19620270&zonetype={zone_type}&campaignid=7661873&subzone_id=0®ion=sta&isp=pjscrostelecom&useragent=Mozilla/5.0(Linux;Android10;K)AppleWebKit/537.36(KHTML,likeGecko)Chrome/124.0.6367.54MobileSafari/537.36&user_activity=high&connectiontype=broadband&cost=0.000300&visitor_id=810551586723214186
302 Found 0 B URL User Request GET HTTP/2 evoleageequirt.com/76e31dd0-690d-4e7d-839d-ca97c024f681?zoneid=5369052&bannerid=19620270&zonetype={zone_type}&campaignid=7661873&subzone_id=0®ion=sta&isp=pjscrostelecom&useragent=Mozilla/5.0(Linux;Android10;K)AppleWebKit/537.36(KHTML,likeGecko)Chrome/124.0.6367.54MobileSafari/537.36&user_activity=high&connectiontype=broadband&cost=0.000300&visitor_id=810551586723214186
IP
Certificate IssuerAmazon
Subjectevoleageequirt.com
FingerprintA2:E2:38:C5:00:23:89:FF:76:AA:BB:86:FE:E5:C3:EE:2C:BE:E7:EB
ValidityTue, 12 Dec 2023 00:00:00 GMT - Thu, 09 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /76e31dd0-690d-4e7d-839d-ca97c024f681?zoneid=5369052&bannerid=19620270&zonetype={zone_type}&campaignid=7661873&subzone_id=0®ion=sta&isp=pjscrostelecom&useragent=Mozilla/5.0(Linux;Android10;K)AppleWebKit/537.36(KHTML,likeGecko)Chrome/124.0.6367.54MobileSafari/537.36&user_activity=high&connectiontype=broadband&cost=0.000300&visitor_id=810551586723214186 HTTP/1.1
Host: evoleageequirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://55ifc7l6dfa8odwmst.com/nuhs/0/wbjhnt6d06uct1213tgvdv9i/PropellerAds/%5B11%5DPAD-pop-RU-mob-andr-SCPC-bl%5Bpop%5D
date: Sat, 04 May 2024 09:16:21 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 76e31dd0-690d-4e7d-839d-ca97c024f681-v4=xd1y-dh_99NWgy38vT29U4rwnSW_4P6orMCOTJRmd4o; Max-Age=86400; Expires=Sun, 05-May-2024 09:16:21 GMT; Domain=evoleageequirt.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22wbjhnt6d06uct1213tgvdv9i%22%2C%22caid%22%3A%2276e31dd0-690d-4e7d-839d-ca97c024f681%22%7D; Max-Age=31536000; Expires=Sun, 04-May-2025 09:16:21 GMT; Domain=evoleageequirt.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NT_dUid3wZcfhV3ZMq5vDO9_MWRIfZtW7WEOnBo4UxxGCqomytIJfQ==
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/public/mb_prod.js
200 OK 7.1 kB URL GET HTTP/2 len6gyisnhmb.com/an/public/mb_prod.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type JavaScript source, ASCII text
Hash 92282681e315eb3d9ead093b4b7b4c40
fb7eba2720deb4d3c87f1849ae33f5f7bba30807
49083159ea959bb13b93d37a07ba7d092e0eb93fe3059ecf13b034863b03570e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /an/public/mb_prod.js HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:21 GMT
content-type: application/javascript
content-length: 7110
last-modified: Wed, 01 May 2024 10:25:30 GMT
etag: "6632189a-1bc6"
cache-control: no-store; must-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5PMSX62
200 OK 79 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5PMSX62
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (13419)
Hash 7d0e194ba844af3394a70db3792edb3a
9e59f9c5cfe7eb71225dca3e5473e4149acd82ee
4627cc888f86d3d1dd86a7fa5c67595931cc9fd84d8cd8b75422a94f5f277315
GET /gtm.js?id=GTM-5PMSX62 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 09:16:22 GMT
expires: Sat, 04 May 2024 09:16:22 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79020
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
x011bt.com/gif/test
200 OK 43 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectx011bt.com
Fingerprint00:B8:94:7F:91:E8:3F:7E:83:3C:A3:82:1D:BE:74:E1:CF:20:23:7D
ValidityThu, 18 Apr 2024 14:53:37 GMT - Wed, 17 Jul 2024 14:53:36 GMT
File type GIF image data, version 89a, 1 x 1
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /gif/test HTTP/1.1
Host: x011bt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Sat, 04 May 2024 09:16:22 GMT
content-type: image/gif
content-length: 43
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451983133900801; Domain=.x011bt.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 0
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash ef5d46c5e6bca16ef0f776226b80193d
b95961bc40be7fd59d3d89b101ddf1f1846ccdaa
0c349d243eae2ec5ea73133c0a4cef7815e68bf083a425cbf444d0491f68d604
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 720
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:22 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 3
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash 1ef1860d952930dcbdd110266ee0ad8f
ab90a300b3c75b634aa690cdffb0048f32904d0d
692a9e6f164f419ff7172d4be0789279f8adaab68d9c615a20abeefb9f76a8dc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 805
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:22 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 2
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
rstat.rockmostbet.com/public/rstat_pixel_spa.js
200 OK 13 kB URL GET HTTP/2 rstat.rockmostbet.com/public/rstat_pixel_spa.js
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
File type JavaScript source, ASCII text
Hash 0a79ac8fabc17c9fee41cf845ec61bd0
e93d27b7afc6b6a7ac00acdf85fa9c9284d86354
ca83e633f0f7b5ed13d1f5b33b526876bee0220b1e95156dad1da775682406a2
GET /public/rstat_pixel_spa.js HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/javascript
etag: "sccjlza3d"
last-modified: Mon, 22 Apr 2024 13:46:47 GMT
server: Caddy
x-content-type-options: nosniff
content-length: 13081
date: Sat, 04 May 2024 09:16:40 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-9Q6VE8VYRH&l=dataLayer&cx=c
200 OK 101 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9Q6VE8VYRH&l=dataLayer&cx=c
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Size 101 kB (100700 bytes)
Hash 8cd8ad3ac3013e778fb849c59154252c
607ccf00e4a77be4cb92fe89bd06b4a059512b1a
b9e89b841cfc43843aac6d0374f5c4c4911f70fff8b2358fab07c03ff3838a05
GET /gtag/js?id=G-9Q6VE8VYRH&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 09:16:22 GMT
expires: Sat, 04 May 2024 09:16:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100700
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sentry.mostbet.com/api/27/envelope/?sentry_key=4a626086556647d191e62e9bef5eb347&sentry_version=7&sentry_client=sentry.javascript.react%2F7.51.2
200 OK 2 B URL POST HTTP/2 sentry.mostbet.com/api/27/envelope/?sentry_key=4a626086556647d191e62e9bef5eb347&sentry_version=7&sentry_client=sentry.javascript.react%2F7.51.2
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostbet.com
FingerprintAD:CF:45:31:5F:B1:6C:40:B6:A2:A9:CB:37:E1:C4:8F:61:E8:7F:0C
ValidityThu, 07 Mar 2024 04:04:07 GMT - Wed, 05 Jun 2024 04:04:06 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/27/envelope/?sentry_key=4a626086556647d191e62e9bef5eb347&sentry_version=7&sentry_client=sentry.javascript.react%2F7.51.2 HTTP/1.1
Host: sentry.mostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 447
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:22 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: x-sentry-rate-limits, x-sentry-error, retry-after
vary: Origin
content-security-policy: worker-src 'self' blob:; child-src 'self' blob:
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_set?testcookie=d86g8ezojzvgggo5oa20aq
200 OK 0 B URL OPTIONS HTTP/2 mostauthor.com/multiauth/test_cookie_set?testcookie=d86g8ezojzvgggo5oa20aq
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /multiauth/test_cookie_set?testcookie=d86g8ezojzvgggo5oa20aq HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-methods: GET
access-control-allow-headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
access-control-max-age: 600
content-length: 0
allow: GET,HEAD
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_set?testcookie=izfqn1bs8ie7563ycg8bu6
200 OK 0 B URL GET HTTP/2 mostauthor.com/multiauth/test_cookie_set?testcookie=izfqn1bs8ie7563ycg8bu6
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /multiauth/test_cookie_set?testcookie=izfqn1bs8ie7563ycg8bu6 HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-methods: GET
access-control-allow-headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
access-control-max-age: 600
content-length: 0
allow: GET,HEAD
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/main.bd7965e9.js
200 OK 52 kB URL GET HTTP/2 front.cdn-mb.com/spa-static/1.4.1460/static/js/main.bd7965e9.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65465)
Hash 70bbb0849baf75c249812ee15defe0c8
95adf41e618e68e735470d2471dbe8d6f0b98ae7
e57427f65d4285e9acbb7f2643f212de5639146ff9bc06d588fa6c036190b104
GET /spa-static/1.4.1460/static/js/main.bd7965e9.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:21 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-23e70"
expires: Sat, 04 May 2024 13:11:26 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 294
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=45RKYu%2BQTZdd%2B%2FEaYWOl%2BtWoWctLkmHEVIQ%2B0tCxJCwTsGXk%2FZp0ryZGj0CfKkV8k%2B18Hahkr38Lvq%2FsUiyXiaJcQ6vFP42Hcti%2FqULTGgCKqocCrG023j1E7V2A3edYQmOj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7643cfe98712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_set?testcookie=d86g8ezojzvgggo5oa20aq
200 OK 10 B URL OPTIONS HTTP/2 mostauthor.com/multiauth/test_cookie_set?testcookie=d86g8ezojzvgggo5oa20aq
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash f7f86d583c92292a7025fc1f25657a1f
92659f2f702a5b18d44a58055c6cd77173630ae2
3b9de8f3bb4d65ebe964703b38c9ce2f3b40a58b33484e6eed8f92bbd5f10a4f
GET /multiauth/test_cookie_set?testcookie=d86g8ezojzvgggo5oa20aq HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
X-Multiauth-Version: authy
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 10
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
set-cookie: test_cooke_d86g8ezojzvgggo5oa20aq=1; SameSite=None; Secure; Max-Age=3600
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_set?testcookie=izfqn1bs8ie7563ycg8bu6
200 OK 10 B URL GET HTTP/2 mostauthor.com/multiauth/test_cookie_set?testcookie=izfqn1bs8ie7563ycg8bu6
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash f7f86d583c92292a7025fc1f25657a1f
92659f2f702a5b18d44a58055c6cd77173630ae2
3b9de8f3bb4d65ebe964703b38c9ce2f3b40a58b33484e6eed8f92bbd5f10a4f
GET /multiauth/test_cookie_set?testcookie=izfqn1bs8ie7563ycg8bu6 HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
X-Multiauth-Version: authy
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 10
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
set-cookie: test_cooke_izfqn1bs8ie7563ycg8bu6=1; SameSite=None; Secure; Max-Age=3600
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_get?testcookie=d86g8ezojzvgggo5oa20aq
200 OK 0 B URL OPTIONS HTTP/2 mostauthor.com/multiauth/test_cookie_get?testcookie=d86g8ezojzvgggo5oa20aq
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /multiauth/test_cookie_get?testcookie=d86g8ezojzvgggo5oa20aq HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-methods: GET
access-control-allow-headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
access-control-max-age: 600
content-length: 0
allow: GET,HEAD
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_get?testcookie=d86g8ezojzvgggo5oa20aq
200 OK 21 B URL OPTIONS HTTP/2 mostauthor.com/multiauth/test_cookie_get?testcookie=d86g8ezojzvgggo5oa20aq
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash e5b21ef9d336c6fe5ab6050fb9ab9d1f
3ce3fe564d8af003fe58f2d082571e7cba1a217c
0fb430e2fdf26d7e3ee13660211ba451888eb9d8a6c1de1731a8fd1121418823
GET /multiauth/test_cookie_get?testcookie=d86g8ezojzvgggo5oa20aq HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
X-Multiauth-Version: authy
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Cookie: test_cooke_d86g8ezojzvgggo5oa20aq=1; test_cooke_izfqn1bs8ie7563ycg8bu6=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 21
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_get?testcookie=izfqn1bs8ie7563ycg8bu6
200 OK 0 B URL GET HTTP/2 mostauthor.com/multiauth/test_cookie_get?testcookie=izfqn1bs8ie7563ycg8bu6
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /multiauth/test_cookie_get?testcookie=izfqn1bs8ie7563ycg8bu6 HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-methods: GET
access-control-allow-headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
access-control-max-age: 600
content-length: 0
allow: GET,HEAD
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/test_cookie_get?testcookie=izfqn1bs8ie7563ycg8bu6
200 OK 21 B URL GET HTTP/2 mostauthor.com/multiauth/test_cookie_get?testcookie=izfqn1bs8ie7563ycg8bu6
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash e5b21ef9d336c6fe5ab6050fb9ab9d1f
3ce3fe564d8af003fe58f2d082571e7cba1a217c
0fb430e2fdf26d7e3ee13660211ba451888eb9d8a6c1de1731a8fd1121418823
GET /multiauth/test_cookie_get?testcookie=izfqn1bs8ie7563ycg8bu6 HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
X-Multiauth-Version: authy
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Cookie: test_cooke_d86g8ezojzvgggo5oa20aq=1; test_cooke_izfqn1bs8ie7563ycg8bu6=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 21
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
mostauthor.com/multiauth/ping
401 Unauthorized 0 B URL GET HTTP/2 mostauthor.com/multiauth/ping
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /multiauth/ping HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-methods: GET
access-control-allow-headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
access-control-max-age: 600
content-length: 0
allow: GET,HEAD
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
len6gyisnhmb.com/favicon.ico
200 OK 239 kB URL GET HTTP/2 len6gyisnhmb.com/favicon.ico
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Size 239 kB (238902 bytes)
Hash 4305012aba288143d986adddc5be87ef
9b01a7f7dea81e6daeeeee3e9b3f03759714c1f3
4cf164432418ca9999e420253d8727aa0f3b14f6ff2d458561d0d44a0b5eff1c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:22 GMT
content-type: image/x-icon
last-modified: Thu, 02 May 2024 12:14:00 GMT
vary: Accept-Encoding
etag: W/"66338388-1536"
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Medium.13a29228654d5c5ec9c4.ttf
200 OK 172 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Medium.13a29228654d5c5ec9c4.ttf
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med
Size 172 kB (171656 bytes)
Hash 58aef543c97bbaf6a9896e8484456d98
f6783010d5def128c4a1539333324f75701d9bab
e35252aa3dc2e84e9d7211586fee9aede2a426d3230c8b131881d985f16ff836
GET /spa-static/1.4.1460/static/media/Roboto-Medium.13a29228654d5c5ec9c4.ttf HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/octet-stream
content-length: 171656
last-modified: Thu, 02 May 2024 12:18:34 GMT
etag: "6633849a-29e88"
expires: Sat, 04 May 2024 11:40:12 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6OCDXH5gKWV7%2BXz%2FpviJpPy3nVqzdz9bzVXPpU%2FDTBdj4x2AdjKJ5alcMtfVkiCr101We%2FajJZL9zb8AGATwnRSi86Hzp0lGM%2B8xNuqFEJQXcu6k1awKi%2Blz2jyDYdnVPlhq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76448eeb5568e-OSL
alt-svc: h3=":443"; ma=86400
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash 61d64d68074cc13351cafce03aa2cc1b
a45ace94ad9e7f97041f7f96b12c099fb5f09a76
1bd3b4307512eceda9851b89a1f109264fba22845103f26c50f445173b4ebc9d
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 699
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:42 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 9
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash cc5b19995cd50c381274b35300e049e6
28860f3b601a4c8977e90153feff8b1a4e43ec37
202830d0c47eca019245fb9a28adb3ec3a8b52deb9eb08e2517878cfcaece670
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 614
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:42 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 11
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
len6gyisnhmb.com/connection/websocket
0 B URL len6gyisnhmb.com/connection/websocket
IP
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /connection/websocket HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://len6gyisnhmb.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mgxr+ta6ARwnKajP6pHjpg==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sat, 04 May 2024 09:16:24 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: +FpU52PsEfQLu5tfOc6TthZd/Ns=
front.cdn-mb.com/spa-static/1.4.1460/static/css/6825.a49fb0a8.chunk.css
200 OK 73 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/6825.a49fb0a8.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 15feb985aa43cf8f2f75773f5b31fb2d
f9aa99c53662cea6fe3fc9e1e24a46f749a46d21
a3691ed324ed8a3092895e4643c26241d0a0042eb7975cc4f6b7423fbf1d4119
GET /spa-static/1.4.1460/static/css/6825.a49fb0a8.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:23 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-36eb9"
expires: Sat, 04 May 2024 13:11:18 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 305
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iqDdJLvmCAFoTWZIgiOotzZSw91FNtTwqA308SZG5F2cZlgDfcEgjQCOpD1ttQEpaOyNGv0XzWyNObsu0uYI5lntE42kl1HNbzCLb2FY2GojJmPARiQAP2bUfq%2BZDDspnz7i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764488e55568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/1981.1a3ca8b8.chunk.js
200 OK 6.9 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/1981.1a3ca8b8.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (30556), with no line terminators
Hash ec6b350a9b518eb93fa30d575ef32a95
0d339f89a9aee39b3ac343192f89eb9e95ef20c7
8b25501f6369be5fd7c45a3dad6fdf44e274e0377cb775a3a8f7be5e4d531543
GET /spa-static/1.4.1460/static/js/1981.1a3ca8b8.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-775c"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=27HOta0JSVCcXKgZcE%2BNLX4cdRTPxE1njQZjn7W%2FLwIDUA08lZfVaiXc0RhW5C3PVkL5x753wUSHa0760RAR%2Bmf4v8miEbnRbYvYbqDnuTMav7q14%2FHsHv%2B54iWE9sPC%2FKVh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b395c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Bold.4f39c5796e60c9d8e732.ttf
200 OK 170 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Bold.4f39c5796e60c9d8e732.ttf
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo
Size 170 kB (170348 bytes)
Hash e07df86cef2e721115583d61d1fb68a6
3dd713113ff2d79b94d2df343e2e28fa8e7279cf
c9cc991deb5d27f267830a19f2301eb164d9e61ec08669c1a1a291c5620ff40a
GET /spa-static/1.4.1460/static/media/Roboto-Bold.4f39c5796e60c9d8e732.ttf HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/octet-stream
content-length: 170348
last-modified: Thu, 02 May 2024 12:18:34 GMT
etag: "6633849a-2996c"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QUFAooPAbHIjXG1YBhIO2e4JMLKqmxRUS5Fk55Pfljg9382wqpcnpGbELXvcv2cts49eOa%2BZqlV2%2BGVMsUKSIJ1MERdtPaZGh57QzzD0tQtmWbQw%2BStwIr8rKwgWy%2BJJlX41"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7644e2cbb568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/fi.eb793b740dd4fa0f8b63.svg
200 OK 395 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/fi.eb793b740dd4fa0f8b63.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash b48413bec5778656a773aab237f031a4
4c2c50447dd41ac882df665516f38349f5347448
6c32372acfba871cdcd22614f0ebbf58ea2b88de648ee4e843a2bbda5c0a3336
GET /spa-static/1.4.1460/static/media/fi.eb793b740dd4fa0f8b63.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-f0"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R4IFSpO2%2BNT1zdMxVj8Tvf74ic8oOgEb8VI8biH4MgWsQ4vWX2tnfZtZFLxCjeNRHrRWp1xz8XotIHjCWmiW2NiuUnGZ8ALr0C7PaIyDj5WyxuhYg4wPgd9TgA0RP79QDqmN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dfc63568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ro.51182fc9671cbaa10989.svg
200 OK 18 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ro.51182fc9671cbaa10989.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 22278e1314d8e81440639fe8d1e6061a
3535a108818f0e004b6a7c262fffbf2e7d2a6aca
da9e0ce1ebd0f466ff68500173fe067212d304b8f4594f54bd61bd3e5409c7a9
GET /spa-static/1.4.1460/static/media/ro.51182fc9671cbaa10989.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-131"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YKE27SPOJqden1diFXbwyje2Ph%2FtZVgouXSwWVSf9ajZ0Zoufg1iR3khYOZFYtqZG5KITt%2FH2jpZTWxmmVLk66hP%2B3dWzMxKPWsfGl4oCljubKczaNEc7%2BgWLD%2BxK%2F5yzRgu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e2cb4568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
mst.tm53cd3by2.com/web/v3/OszY8YxLtMbMKK8o3fGo/loader_v3.9.1.js
200 OK 51 kB URL GET HTTP/2 mst.tm53cd3by2.com/web/v3/OszY8YxLtMbMKK8o3fGo/loader_v3.9.1.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subjectmst.tm53cd3by2.com
FingerprintCC:A5:45:CC:19:EF:39:0C:95:B7:FB:12:96:D8:5D:D3:7F:D4:59:73
ValidityTue, 16 Apr 2024 00:00:00 GMT - Thu, 15 May 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65425)
Hash abd3919cf350fc9076ed85a21cfc080e
4f00bc315dd28e169811da79349c234357f8e4c3
78339fb2faa4e2846d43d4ee4343a3a77c4451822168bf14e68be265fb14fda8
GET /web/v3/OszY8YxLtMbMKK8o3fGo/loader_v3.9.1.js HTTP/1.1
Host: mst.tm53cd3by2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: awselb/2.0
date: Sat, 04 May 2024 09:16:25 GMT
content-type: text/javascript; charset=utf-8
content-length: 50689
content-encoding: gzip
x-robots-tag: noindex
etag: W/"TwC8MV3SjhaYEdp5NJwjQ1f45MM"
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=3618, s-maxage=625499
access-control-allow-origin: *
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/logo/Mostbet.png
200 OK 3.8 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/logo/Mostbet.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash 44419eb6bbfaf4723e7a9123b10edab2
382709fefb8bb91669eb6d58b39a25ea8d4bc70b
56ede42429e6bdc8ae94b923228fc4d38b98dc128e9cd66a58186e3708454021
GET /upload/images/logo/Mostbet.png HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/webp
content-length: 3804
etag: "44419eb6bbfaf4723e7a9123b10edab2"
last-modified: Tue, 23 Jan 2024 22:19:41 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding, Accept
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB22C4968A67FA
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-contentmd5: REGetrv69HI+epEjsQ7asg==
cache-control: max-age=345600
cf-cache-status: HIT
age: 1714
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4gTj5cCMCni35M%2B90B3Rk0vzm0UnLpzlLXdyTqFM2hWeYCW5gw9Sg489N8nUWhe1JJQM3PieQjBK9qlSYCWTXlCuTISwawwABFOwQrQbQRGcipvmXyvjD87JbNm2B76BXYuaCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764510804568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/9980.bba4e325.chunk.css
200 OK 40 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/9980.bba4e325.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type Unicode text, UTF-8 text, with very long lines (51024), with no line terminators
Hash cab0a1dd00997a6a2641ec2f820e33e0
e27006eae19aaaa080620a54fc519121889810a7
16a97354eb18133bcd0610a36d9be7f2e9ff219f043e00dbf0038a35226406ba
GET /spa-static/1.4.1460/static/css/9980.bba4e325.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-c756"
expires: Sat, 04 May 2024 10:45:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WXxlp98vl%2BQ47VtWKpOUz4fUcaQdDHJWsPNaH1d%2F3xLrqfuh4gZYRbaTfcAE49Fa9op0u3S6e29sO8LTRtESQm5y9eiNa9g7qjxTyda%2BTbb5Bl4x3LLoXTytTnhh631aHPiE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b2924568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash 9198e0a55469e9d8839bd5475a0f9b81
110998a0f458d2d75cabb8b8d2d1891739af5926
a33f9531f3092644f464782ca4210c9353109a7fa2547fa693bd8e49f7510534
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1015
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:44 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 183
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash f66218460b3c6f9edd5f70fdb515e137
d2e10a39d36e9b0639134e5cb518369c049a61bf
1e957799ed0a3d889b343cc21cc2e6c8a9706fbb3f686928bfeda223f182aa35
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1013
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:44 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 183
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/gift2.45bfe9dd1ca64a744e62.svg
200 OK 386 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/gift2.45bfe9dd1ca64a744e62.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash c241091e28665ed7bc1b895ac1f14cc3
b35fba5deea801fb7756469a4d48d42ce2997bf3
a357a37f5175e5265f946ab25d3ea2fbbc62d1549e8758d0ae8639e5a1752d6c
GET /spa-static/1.4.1460/static/media/gift2.45bfe9dd1ca64a744e62.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1d9"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F69IJX8pyxtZQIgbvGiw2MM4rgQhveRZvz1Fm3Ut%2F7J7LEEyY%2Bf5bb9%2FBCcs%2F6CokRt6qb99cgFs6NzP3OqoseUuvJYd9VW72JqaCXoA%2FUE2B3PeOMDxeL8QvEfz9Gs57%2F1O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e8d03568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/bd.a3ae69dedf0b3ad8fb44.svg
200 OK 2.9 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/bd.a3ae69dedf0b3ad8fb44.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash c4a1485f3606f93b55fa19d86ec3219c
c8b886b0b05e5cf0d6616bf5df5f140c23a1d4c2
749b63aa937201843f63cedfd7d0db3019ddf95b931b4be80693716fd2b84cce
GET /spa-static/1.4.1460/static/media/bd.a3ae69dedf0b3ad8fb44.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-c0"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7it1gF%2FDGevJAJsO9M%2BVAXM9rOLyeNgYb7RrWXwX3ZbmLXQWz%2Ba9AoN8sulV6aNT0VkL6wVEZ6MMdlxV%2BcjQq9TIvQvH4VQO7a75UQ%2FYa%2FKVj3N0cD0%2BnQsw7zOt2hmcRds6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc10568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/coupon/preview.json
200 OK 206 kB URL POST HTTP/2 len6gyisnhmb.com/api/v1/coupon/preview.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type New Line Delimited JSON text data
Size 206 kB (206087 bytes)
Hash a419ae164f55bc9493b1d16a5c63887d
78880ec1c4a94f40ca7bd2ffbe0b2cfc75ed0d6b
8d0f0caa264026f26029e835a15a4428ab461d1f5579f33eda82c54affa453d7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /api/v1/coupon/preview.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a64433c249088090-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
Content-Length: 95
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 63674530d3474ae4c0bc826e1370f85e
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash 36c093f843f79964e8e6aaa3466ca416
ec7399d4383f6d183c2cd72660b4b2f7c4b3536b
b59463f84ddd1c9298678e5757ad8d18975d16fe5c073daf66442fed036437b8
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1012
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:44 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 230
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/it.9938f4b9588502f93b20.svg
200 OK 666 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/it.9938f4b9588502f93b20.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 22b99ae704f3de63285bc9b9411c5031
653faa79aef73d8a6ff0f39dd762e7152032dc1a
28a4339b1dc59c4e776f6bf07f51117de9fade0a8a749492e478764b8bd8c2f2
GET /spa-static/1.4.1460/static/media/it.9938f4b9588502f93b20.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-124"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7poKuCnW8v5NcL1WA4uhtSJhG6L5bvsulBab2jG36bIUtE77SuAJJvY1yDOcbJE8QrAxecB438TyUG%2FGsSsqaYhRCE9%2BzSV3jF0ZcJ6ZBCm9LzAxNhwiS%2FfkEDT6OyGfOfO9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e0c75568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
mst.tm53cd3by2.com/yXSUZam/ddwl/mUNXvas/a2awwY?q=OszY8YxLtMbMKK8o3fGo
200 OK 96 B URL GET HTTP/2 mst.tm53cd3by2.com/yXSUZam/ddwl/mUNXvas/a2awwY?q=OszY8YxLtMbMKK8o3fGo
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subjectmst.tm53cd3by2.com
FingerprintCC:A5:45:CC:19:EF:39:0C:95:B7:FB:12:96:D8:5D:D3:7F:D4:59:73
ValidityTue, 16 Apr 2024 00:00:00 GMT - Thu, 15 May 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 91aa08bb2b524eb2e087df8347df7258
fd0ecdcaf7274f4ec96a3afd9173daad162df80c
7f1c780f39172abd2d827c326af7f9149d82a76dd37c5ab230da5f4625e842b0
GET /yXSUZam/ddwl/mUNXvas/a2awwY?q=OszY8YxLtMbMKK8o3fGo HTTP/1.1
Host: mst.tm53cd3by2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:26 GMT
content-type: text/plain; charset=utf-8
content-length: 96
access-control-allow-origin: *
access-control-expose-headers: Retry-After
cache-control: max-age=31536000, immutable, private
content-security-policy: default-src 'none'; frame-ancestors 'none'
referrer-policy: no-referrer
strict-transport-security: max-age=63072000
timing-allow-origin: *
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/coupon.0c9776d2319ec242e279.svg
200 OK 25 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/coupon.0c9776d2319ec242e279.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 1e34a1086e393d7f964f49828d096188
0765688ea9b9bc4a0371cbb8b31f53713975aff0
056e5aba40bd2ca1f654b0db322563f02b15206347dc46025f09de6d5ececb8f
GET /spa-static/1.4.1460/static/media/coupon.0c9776d2319ec242e279.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-130"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cRPmMMgi3KqexXl%2BAX%2BPzELEUZl6%2FK8IjEEhr5KbK1d8%2FASIy0QKuiod05QHxbN7ctUvzbkb7HWgiuCxwmccQRjv9YKUBRPVuj%2BqL75zEX6hpy5%2BYS2qzDBey4aMrlyvM79Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76451a8b3568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/kg.4ad89b3a703d225e1f6d.svg
200 OK 211 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/kg.4ad89b3a703d225e1f6d.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Size 211 kB (210853 bytes)
Hash 5908392a2d107a3f7db5cc793b8716ab
ddad89faedc5a2ff7872b69526b282103e2b7460
059ee9448b06e00eee47ca8a059e608618ddcd7e2fbb949149ee0bd46836dd35
GET /spa-static/1.4.1460/static/media/kg.4ad89b3a703d225e1f6d.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-cf4"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b4BCs8X9%2Fl%2F6%2B1ugVwKAqNOocqHYnqnJBEdK97uqK%2FdxmXZECKyH3mdZyZ5sNavqpTLSgJNeGCZj3QreNMogZwtmGg25ggq8PUcMlDPHJjxHCYh5VlVU%2FQsS7UBXUAD5fvm5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc23568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/favicon.png
200 OK 2.8 kB URL GET HTTP/2 len6gyisnhmb.com/favicon.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash f8cbfde8f3484f7a5f02189742f0f110
3eb0cec3e65d6cb0cc2744b5fa57ded1afb6e4d4
70504d4dc047aeac702b31e9290e9f5553e901d07d3844269cd966042988159a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.png HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a279435daf4c28df-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/png
content-length: 2810
last-modified: Thu, 02 May 2024 12:14:00 GMT
etag: "66338388-afa"
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 60322
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:47:22 GMT
expires: Fri, 02 May 2025 01:47:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 199744
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 199534
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m
200 OK 209 kB URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (873)
Size 209 kB (209372 bytes)
Hash ec7353bc63dc756130788516ce61e18b
4931e24af16783079e46ac969f1a6c2b4df6005a
ba86bca6b037e2e81425c449390676593ae7d17f8a955b518bfee7927ac10e8f
GET /recaptcha/api2/webworker.js?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 04 May 2024 09:16:26 GMT
date: Sat, 04 May 2024 09:16:26 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:54:07 GMT
expires: Thu, 09 May 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 195739
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js
200 OK 7.5 kB URL GET HTTP/3 www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (17649)
Hash 85eff967b6703760e0e562179e7ef0ef
a4567db32ae2ea7049209561d2edde3d26fbef88
6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68
GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:44 GMT
expires: Fri, 02 May 2025 01:57:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 199122
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fpjscdn.net/v3/OszY8YxLtMbMKK8o3fGo
200 OK 48 kB URL GET HTTP/2 fpjscdn.net/v3/OszY8YxLtMbMKK8o3fGo
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subjectfpcdn.io
Fingerprint50:73:A9:9D:5E:A5:A2:57:0B:73:8F:D2:B2:1E:8A:5D:A7:FF:F8:16
ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65425)
Hash 3cfb5b0ca6b01cb107147871acf0b119
c0debf52bc9b2f7173fb4954ddfe5961f7b70c18
17759add33a23528388764500f8b35e2301ced7639c4ad66903e24717a58f34e
GET /v3/OszY8YxLtMbMKK8o3fGo HTTP/1.1
Host: fpjscdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: CloudFront
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: br
date: Thu, 02 May 2024 21:39:46 GMT
cache-control: public, max-age=3607, s-maxage=633878
etag: W/"wN6/UrybL3Fz+0lU3f5ZYfe3DBg"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2_dJt-55-RS8VvvtjJKBBDNCSRnp1_EXUu9eCr4bbPtThI28-dMlJA==
age: 128301
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash d5d2399f892621933df8544d9c3e219c
c2c441519b4f335d99d94ce302a5ab0c575d0dc1
dc36a145b0549e8d9b640ba775fdfeadbebc2144bde56fba2e38d2adb288fdb1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1286
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814187.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:27 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 5
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash 4c547c6f2626646dca77e8d4915c9b3e
9b295d1f0e3cccdf2499321949dbdcff4cdf0462
738a4ae2a7d9c0d956613a2e1ce541814e7fb1c492ac30ba82a26d1c16b872b1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1274
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814187.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:27 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 1
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 11e335b77efb58d7f7863cf03d95a52f
df2e41c068ba3f4de221a5343819f3a706477861
0b58a46e08b566bb6c6b1647696b0d1f658602947f1f8d8c24ef90ee0a8c4e7d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 09:16:27 GMT
Last-Modified: Sat, 04 May 2024 07:56:53 GMT
Server: ECAcc (amb/6AB3)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: h0H8US6q-l8W2mR1A9fVBpF3NkIJL6YRExcUCTw5QUQudTqcYdPLYw==
Age: 4775
mostauthor.com/multiauth/ping
401 Unauthorized 136 B URL GET HTTP/2 mostauthor.com/multiauth/ping
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash 737697d239a040bb5e3ad17548ba2e75
ea83e13836e82a6afd8d877b97ce885b2668c288
3924c305d2bf14c93404f904cf9398ff87ff246717dc8830a5b26f4226f33bc7
GET /multiauth/ping HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
X-Multiauth-Version: authy
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Cookie: test_cooke_d86g8ezojzvgggo5oa20aq=1; test_cooke_izfqn1bs8ie7563ycg8bu6=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 401 Unauthorized
content-type: application/json
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
content-encoding: br
date: Sat, 04 May 2024 09:16:22 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type ASCII text, with very long lines (56412), with no line terminators
Hash 2c00b9f417b688224937053cd0c284a5
17b4c18ebc129055dd25f214c3f11e03e9df2d82
1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:09:29 GMT
expires: Sat, 03 May 2025 01:09:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 115618
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__ru.js
200 OK 209 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type JavaScript source, ASCII text, with very long lines (873)
Size 209 kB (209260 bytes)
Hash b8236cd6f4e5e87ab16b8047278c56f7
ff06d09b3687e2e9770c9325ae094bb08a724128
0a58dfa276432686dba854d707d329d5ccfbee43fc859c36220dc6c75c01ee01
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 209260
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:33:12 GMT
expires: Sat, 03 May 2025 02:33:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 110595
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/reload?k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
200 OK 29 kB URL POST HTTP/3 www.google.com/recaptcha/api2/reload?k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 179ef2f2ac282106fa6ccd1388373b22
e6395d035dc4c9e6f0f186de5c923e379857c3e1
01170eea46b7660ee0d257a25ef5e1eef86e62c269496080def2e694feae0cdd
POST /recaptcha/api2/reload?k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 8833
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Sat, 04 May 2024 09:16:28 GMT
expires: Sat, 04 May 2024 09:16:28 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AIgNtRX9dYg28661xeFhhxhK0aXsRNIxwxYHOZBiv9SvncT52AgMeyDCGb8edaPh6_3EM337dyOVDOm9WH14de0;Path=/recaptcha;Expires=Thu, 31-Oct-2024 09:16:28 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:47:22 GMT
expires: Fri, 02 May 2025 01:47:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 199746
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:48:27 GMT
expires: Fri, 02 May 2025 01:48:27 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
age: 199681
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2
200 OK 9.9 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9920, version 1.0
Hash 797d1a46df56bba1126441693c5c948a
01f372fe98b4c2b241080a279d418a3a6364416d
c451e5cf6b04913a0bc169e20eace7dec760ba1db38cdcc343d8673bb221dd00
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:19:38 GMT
expires: Fri, 02 May 2025 02:19:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:08 GMT
content-type: font/woff2
age: 197810
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
len6gyisnhmb.com/api/v1/currency-specific-settings/RUB.json
200 OK 16 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/currency-specific-settings/RUB.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Hash fc28739d241937939fb9835eae942d67
fc404f8e9855a1b1d2dae408bdaf3560b6cdb818
cf42b54a681256d354ebce8d2e1839dbb2bf8b2b81e703c5184da9a0e509e022
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/currency-specific-settings/RUB.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-9ef687b90e7fb905-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814187.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:27 GMT
content-type: application/json
cache-control: max-age=3600, private
etag: W/"280a952a362a82095d1a79d423866721"
x-request-id: 85c1d416d2a073bfea1c43e314d076d8
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
200 OK 10 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 10120, version 1.0
Hash df648143c248d3fe9ef881866e5dea56
770cae7a298ecfe5cf5db8fe68205cdf9d535a47
6a3f2c2a5db6e4710e44df0db3caec5eb817e53989374e9eac68057d64b7f6d2
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:16:43 GMT
expires: Fri, 02 May 2025 19:16:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:00 GMT
content-type: font/woff2
age: 136785
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/refresh_2x.png
200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:06:14 GMT
expires: Thu, 09 May 2024 02:06:14 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 198614
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:03 GMT
expires: Thu, 09 May 2024 01:53:03 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 199405
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/payload?p=06AFcWeA5FCvwbg1jdaaBXet51UntB-R-HbTPbRebIml_lx_0bvlbnitpRQEH5XOWYvRuoGWeii0BWGDovXjNdpVlHP19qObm7z2YjGPITebFpfeWdWHOLoBCJdunv0CngX6CnnCCqYZ4qqSASvZZ9GJuMHorSbIOAEIFs67i-YJJ18xH8PxUviP9xUUKUQGtCiieDBQBYMwyp&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
200 OK 51 kB URL GET HTTP/3 www.google.com/recaptcha/api2/payload?p=06AFcWeA5FCvwbg1jdaaBXet51UntB-R-HbTPbRebIml_lx_0bvlbnitpRQEH5XOWYvRuoGWeii0BWGDovXjNdpVlHP19qObm7z2YjGPITebFpfeWdWHOLoBCJdunv0CngX6CnnCCqYZ4qqSASvZZ9GJuMHorSbIOAEIFs67i-YJJ18xH8PxUviP9xUUKUQGtCiieDBQBYMwyp&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Hash 61dc668b22966b11aec9c6b071fdd9d4
973cfe23624a31ec28cb0cad1b167bac6b61b396
80a01cf0366bedd2be13e458adb53ac8c1f08c1611803ca6d0cdd216adba80e8
GET /recaptcha/api2/payload?p=06AFcWeA5FCvwbg1jdaaBXet51UntB-R-HbTPbRebIml_lx_0bvlbnitpRQEH5XOWYvRuoGWeii0BWGDovXjNdpVlHP19qObm7z2YjGPITebFpfeWdWHOLoBCJdunv0CngX6CnnCCqYZ4qqSASvZZ9GJuMHorSbIOAEIFs67i-YJJ18xH8PxUviP9xUUKUQGtCiieDBQBYMwyp&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Cookie: _GRECAPTCHA=09AIgNtRX9dYg28661xeFhhxhK0aXsRNIxwxYHOZBiv9SvncT52AgMeyDCGb8edaPh6_3EM337dyOVDOm9WH14de0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
expires: Sat, 04 May 2024 09:16:28 GMT
date: Sat, 04 May 2024 09:16:28 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js
200 OK 7.5 kB URL GET HTTP/3 www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (17649)
Hash 85eff967b6703760e0e562179e7ef0ef
a4567db32ae2ea7049209561d2edde3d26fbef88
6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68
GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:44 GMT
expires: Fri, 02 May 2025 01:57:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 199124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
front.cdn-mb.com/spa-static/1.4.1460/static/js/8122.3acbf3ce.chunk.js
200 OK 1.5 MB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/8122.3acbf3ce.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 1.5 MB (1462137 bytes)
Hash 22b7ae04d39041af4eaba9f44c5aa66f
4a3e0e7ac4ca059ae33028388779f5bbb1f9c8b6
12a168569b7056abb42b98b12a3dc236130e15adbc6f07c76a8bb3fb9c90ff5e
GET /spa-static/1.4.1460/static/js/8122.3acbf3ce.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:22 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-8e2fa"
expires: Sat, 04 May 2024 13:11:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 309
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKPVQF5b%2BpYixSSRQOY5nn89g34%2BGYDwiYD%2Fq9L6b4D4XKVXqOnStb6JShAYy6JBF%2FUz1hdhXtjDQJIzmGOM34difKxnNjsU%2BErWldJrdTtOKibiK3am%2FJNk4Lz5h9z7lF%2Bc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7643d9c09568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash accf8810745f737cd1dbc667a6f70367
fe30c9b5dbc440a1340c4a327f1d4028525c1025
1c2fa3993612d9ca4cc95f07e5df0aad91ecfe0413ae906af88b0e24f4b7ff0f
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 936
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:46 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 177
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash 1e057c0694273ce004d9d6d7ea1f3cb5
9b0fa917978ddd83693386ff4659bc9b1cb032ea
a3327e76da7b200ed40e3c50efabf7792a3584e867b7cc438410058deaca7a6e
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 948
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:16:46 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 177
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash b0d8d9add9718ca9ad986f0d057079de
ace72afb815bc7e83f13c5f72e3c035b870827bc
ded210da715752b8aca3def40951863c024f697ec49f5c274f0da8b37effdf92
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1171
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 3
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
len6gyisnhmb.com/favicon.png
200 OK 2.8 kB URL GET HTTP/2 len6gyisnhmb.com/favicon.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash f8cbfde8f3484f7a5f02189742f0f110
3eb0cec3e65d6cb0cc2744b5fa57ded1afb6e4d4
70504d4dc047aeac702b31e9290e9f5553e901d07d3844269cd966042988159a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.png HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-b94444ab13c4efc3-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/png
content-length: 2810
last-modified: Thu, 02 May 2024 12:14:00 GMT
etag: "66338388-afa"
accept-ranges: bytes
X-Firefox-Spdy: h2
len6gyisnhmb.com/upload/images/payment_logo_image/RU/MasterCard_Logo.svg.png
200 OK 79 kB URL GET HTTP/2 len6gyisnhmb.com/upload/images/payment_logo_image/RU/MasterCard_Logo.svg.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type PNG image data, 1200 x 720, 8-bit/color RGBA, non-interlaced
Hash add110018a550bb3c5e21270a21c18e5
66a968d12638c29cfb83ca0f8ad9853b05a0424b
fdc9c897634962f8aa2f73198e33607b546f4b2e27a0aaeed3fb5093aa4e3d20
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/payment_logo_image/RU/MasterCard_Logo.svg.png HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/png
content-length: 78748
etag: "add110018a550bb3c5e21270a21c18e5"
last-modified: Tue, 13 Feb 2024 08:39:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CBF0D4880163D8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 05 May 2024 09:16:29 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
len6gyisnhmb.com/upload/images/payment_logo_image/RU/Tether_Logo.svg.png
200 OK 67 kB URL GET HTTP/2 len6gyisnhmb.com/upload/images/payment_logo_image/RU/Tether_Logo.svg.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type PNG image data, 2560 x 817, 8-bit/color RGBA, non-interlaced
Hash 1320a67b3392ed2bfe9e3734ddfd2d2b
952aa8ceae4362e33e4e7de372694a37bd747eb5
bba0f811185072747208aa5d22793e3fa0c8f4048a5496553872f452845c0376
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/payment_logo_image/RU/Tether_Logo.svg.png HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/png
content-length: 67278
etag: "1320a67b3392ed2bfe9e3734ddfd2d2b"
last-modified: Tue, 13 Feb 2024 08:35:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CC38250C52ED80
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 05 May 2024 09:16:29 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
len6gyisnhmb.com/upload/images/payment_logo_image/RU/credit_card_mir.svg
200 OK 93 kB URL GET HTTP/2 len6gyisnhmb.com/upload/images/payment_logo_image/RU/credit_card_mir.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Hash 13e94bd0f5da0750f11f17fb78245a1d
f1612228f4dfcba24080808623b15ed851554ab2
434c91f52662caaf3888ff1b900c5c2eed7618bf28d5a81cfb4b39f68bb25c54
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/payment_logo_image/RU/credit_card_mir.svg HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
etag: W/"ab67eb03a6ae1b55035e83378d84a0bb"
last-modified: Thu, 30 Nov 2023 07:17:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CBF00FF2DE1425
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 05 May 2024 09:16:29 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
len6gyisnhmb.com/upload/images/payment_logo_image/DEFOLT/6_bitcoin.svg
200 OK 86 kB URL GET HTTP/2 len6gyisnhmb.com/upload/images/payment_logo_image/DEFOLT/6_bitcoin.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Hash 2136a06a4e94f727cec28555d87f7281
588925df24059f3b94ad8128572b56ccd6044ac8
02274a494f765a38a8893adf8c7c377961aa507f8dd145be2411455ea1d8ce7a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/payment_logo_image/DEFOLT/6_bitcoin.svg HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
etag: W/"b39c5d29fc49b5828cec77f8c68d7b8f"
last-modified: Thu, 30 Nov 2023 07:17:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CC3BFE1DE7D9B0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 05 May 2024 09:16:29 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/Piastrix/Bonus_for_deposit.png
200 OK 263 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/Piastrix/Bonus_for_deposit.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type PNG image data, 721 x 390, 8-bit/color RGBA, non-interlaced
Size 263 kB (263226 bytes)
Hash 12711f2dd455f2a62c7f9498ecdb0628
ec5e5ce57681e7e14ea46b1a5dd437b7e9cdfeeb
6970641425e4fb8700df69c7678100558c6a9b6d6d571c0cdd24ee735ac3dba2
GET /upload/images/universal_banner/MAIN_SLIDER/Piastrix/Bonus_for_deposit.png HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/png
content-length: 263226
etag: "12711f2dd455f2a62c7f9498ecdb0628"
last-modified: Sat, 27 Apr 2024 18:15:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding, Accept
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1B3CA6810C45
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ysDl34gz1lLY4PafAcj6BBWnP4tk5YE9YQAYDU3aca0x9kyd0vHe%2BEbWlR1iVJvNXN5rMoLYX92jE%2F6xTSi9MsAatYN2wqyQ5rAHej2zk9iPaetmqHmb7Ph5sFz%2B7m1MXCKN5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764728afe568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/settings.64de7b9afe592b4b614b.svg
200 OK 80 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/settings.64de7b9afe592b4b614b.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 78b954564fa4f24082d1752f70a86a1b
e11c26b01357db80269b7cf2d4c78ea7f2b25312
7928458063f722db614b099e11f72142bb1860864020ad550ef01e8096f5e787
GET /spa-static/1.4.1460/static/media/settings.64de7b9afe592b4b614b.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-59c"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5776
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1C1CdYU7xWEQUl5XsDT0pnLRFuOXRaunrYLcFfWM2MAf7niU%2B4mPVTqBcyvDrbcuXjm6HRw7kVU9MZrKPusWjFv4isZjn2h5k6%2FAX%2BDXpafJu6h08Xgm%2F9NRRoIM7WJwhJQ9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764703816568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/VKontakte/RU-Main-Slider-VK-MOSTBET1.png
200 OK 85 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/VKontakte/RU-Main-Slider-VK-MOSTBET1.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash dba5c688acc94147fc58ac630878fa48
6fe11ad60767583bf959709515c09d00292b647f
d6963fe913b255442a1ee69a4561941d54691a35d4ab49a372606becf7efa0c5
GET /upload/images/universal_banner/MAIN_SLIDER/VKontakte/RU-Main-Slider-VK-MOSTBET1.png HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 84934
etag: "dba5c688acc94147fc58ac630878fa48"
last-modified: Tue, 23 Jan 2024 23:17:01 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding, Accept
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CBC7DD88608A63
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-contentmd5: 26XGiKzJQUf8WKxjCHj6SA==
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Ncdds1ma5%2B7cHlCOeI5r8WTXe4stYYEcQq5cafqo3nBGjKLoRE6m1XkgKT4GZCenLLFCwCGPUZlVZFO0SQpaFbkqu%2F39Dp6O%2Ftxva1pWQMAsOG50RCIKLtNEgS5GCsonUuCcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76472eb60568e-OSL
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/countries.json
200 OK 101 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/countries.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Size 101 kB (101048 bytes)
Hash 242f95aa7526ef31063ebd50d3f1721a
36441e976e1c04a24bde54589d58e403eddfbb6f
416a9b2caa50dc3edb7f833401c377e81f746f4d36622ebc58977b466da202fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/countries.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-b76776d36a2a1b8f-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
etag: W/"3ad0380dcdd7459b76c59da3a6bef91d"
x-request-id: 27165d1777d2ac28bb813da5abd3ea66
vary: Accept-Encoding, Accept-Language
expires: Sat, 04 May 2024 09:16:24 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
len6gyisnhmb.com/upload/images/payment_logo_image/DEFOLT/2_visa.svg
200 OK 93 kB URL GET HTTP/2 len6gyisnhmb.com/upload/images/payment_logo_image/DEFOLT/2_visa.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Hash 7ac2b2fc7517f9fc9f1860cabc2b9127
e4493eb19b177e2ac51633f09faf61cd43634e79
acc33ac9a8684b9b359977b9ed981fc9e7af0fe9d0347bce9aa0f99603bbbb85
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/payment_logo_image/DEFOLT/2_visa.svg HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814189.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
etag: W/"c907d248716371bd5cb5c9be824251fb"
last-modified: Thu, 30 Nov 2023 07:17:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CC02961C3FE493
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 05 May 2024 09:16:29 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/universal_banner/sobyt/S05.04Girona%20%20-%20Barcelona/RU-1-Risk-Free-MOSTBET.webp
200 OK 144 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/sobyt/S05.04Girona%20%20-%20Barcelona/RU-1-Risk-Free-MOSTBET.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Size 144 kB (143636 bytes)
Hash ff75ffe195ba69e2c7fdb28f0e74cbd4
4eb11cd4e8a31602cae876c407492a4cde9389c6
d3e4e2407804f218acad004aebbc4e5c8ad897f4464a444d3ccc6713dec6e02e
GET /upload/images/universal_banner/sobyt/S05.04Girona%20%20-%20Barcelona/RU-1-Risk-Free-MOSTBET.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 143636
etag: "ff75ffe195ba69e2c7fdb28f0e74cbd4"
last-modified: Thu, 02 May 2024 09:40:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CBC11A09B5C48C
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kwFvkUsdoh4msHkTJKm2ciywU3fE0LA%2Bo6YSe%2Fpt%2FvgaWz2KvBCMPe1%2Fi2fqrm7dfpEwnqgrLdce2GlTeAKnB%2B3Wse33wRICP451o51a1FVOQG%2B4DxQ2ZW%2FLfADsFfSiynsK4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac22568e-OSL
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/BNPD/All/RU__welcome_bonus.webp
200 OK 72 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/BNPD/All/RU__welcome_bonus.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash 7f9e900bff9be636656d95e85327c417
6c5d456301f7532e474f026676ac0032fd8f84e8
bbf91bc415535461fbd2baea3ef8ea9c861f2ca7c2d16325629866cd37684cfd
GET /upload/images/universal_banner/MAIN_SLIDER/BNPD/All/RU__welcome_bonus.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 72332
etag: "7f9e900bff9be636656d95e85327c417"
last-modified: Wed, 27 Mar 2024 09:34:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1FB7E3967A6E
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 211
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=89HGFFq1HLyNUOAOa5OIvtcXnJBi0S23rW1ATEa7lm9mzfiKFoebsYvH9DBcTwOIWcgum5GIFtFmQXjx6eDWZKc14M3SmBTPD98%2BB6O01eJN2kpwoA5MAsUslvHLOhIk4kYkeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac27568e-OSL
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/badminton.svg
200 OK 171 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/badminton.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Size 171 kB (170982 bytes)
Hash 87b5da47ddb7256e7df5583af208d5f5
af36a03ac9791abf283d6772a62ad660cbdc5a1a
6154c00dc57a14fc8a421bffe2881cdefd202c5d18d5ebe9335ab71795cf096a
GET /upload/images/sport%20icons/badminton.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"87b5da47ddb7256e7df5583af208d5f5"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB2807A122E49A
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tz%2BbNW%2BD22mWOpnRGSwJOYWUZ%2F6jHKIIIC%2B0PtpGl0WhfLovppc2p99%2F3xIrcGY4MguIOfWo0J7lkg20DAzPc0qcDTPWPjX6bxamysp%2FDZQ1%2BJ0hotOTB%2Bn%2FAHU2zK4V%2FAu5KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d40568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn-mst.com/casino/retro/11386.jpg?3243
200 OK 12 kB URL GET HTTP/2 cdn-mst.com/casino/retro/11386.jpg?3243
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 248x178, components 3
Hash c95d2bcaf38a0c37ef5bd51240c3c2f0
c3153e949e6966f47ba40b8da311e0af8fae25a5
a53fd9c2b86c2a8dc85e36e2b0b937656b81196387deac3e6f6fc179580e986e
GET /casino/retro/11386.jpg?3243 HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/jpeg
content-length: 11935
last-modified: Thu, 30 Nov 2023 06:10:24 GMT
etag: "65682750-2e9f"
expires: Sat, 04 May 2024 20:57:36 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 44314
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S0TO3gmwQg3FsbxE37pTybgTyZ9rbwEGEYFaxfpMUoKmAW7ClfsWxLT4cxmd14dAJMg3eJnw%2BPAnLPYLxlFPehIS25xRmmSxaa36Y4Cj%2BKicaC8pLkq%2FwUZBZLkVuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76475dd8a56c9-OSL
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-MediumItalic.17d0cac04a3f124945e1.ttf
200 OK 176 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-MediumItalic.17d0cac04a3f124945e1.ttf
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumItalicRoboto Medium ItalicVersion 2.
Size 176 kB (176428 bytes)
Hash cf23e1bb619029496260760b72aebd30
e4e31e55d279a9b12c32327a60a3a65c8350e5df
552fa6bfc8f4ad480ba69feb9745f31d77fa88c12826a1bbd3c5eb0beefa22bb
GET /spa-static/1.4.1460/static/media/Roboto-MediumItalic.17d0cac04a3f124945e1.ttf HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: application/octet-stream
content-length: 176428
last-modified: Thu, 02 May 2024 12:18:34 GMT
etag: "6633849a-2b12c"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5776
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLwqG72WnXt4g%2BSoaku68FdpImDzEcVjkR7DY4A0gLQkQrXZ4ObvFEzelnHJDg9vWFdJ%2B8uKght%2BRN5ZPKkDPrujyIW0eB2uKoV1xRRsKH7%2BfbtaLvdZdrapTUh2wSOe0Muu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76475de92568e-OSL
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/table-tennis.svg
200 OK 41 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/table-tennis.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 0c6ff92b7626b24ff8f3eadf15dbec7e
4f383f201c3375ba5e6669df5b2a2b3c60dd8af0
155fdb19cbfc3d39d708a14585d2cd7a5d9d906d67f9ebd2ba26b9ab57f16177
GET /upload/images/sport%20icons/table-tennis.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"0c6ff92b7626b24ff8f3eadf15dbec7e"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1EEBF1DBDAD2
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102013/ctime:1654102013/gid:33/gname:www-data/mode:33188/mtime:1654102013/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDhkw3UTA09HeRrN9myKcnG5PZB6SWcGy1Xj%2FlJAemrxuWRNVs4T9VjitAKhlsRaNYZTZN2sebFUGHH%2BxgvorGND49Q%2FN%2BB0Ts7TTbzILoLCwOYSnm31yrgj3SelOJNjd7kW%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d31568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash 99fdee77e834ff2d59e2a384ed9ecfe7
37aef45f62d2d58cde8058c9b1e88b6a1707941c
9c7d277c989df4e43d83f884565f35a1fde98bfc1e298cede85cb94e35f0f6a7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1178
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814190.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:31 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 6
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
code.jivosite.com/script/widget/config/zV6xlxr9an
200 OK 2.6 kB URL GET HTTP/2 code.jivosite.com/script/widget/config/zV6xlxr9an
IP
ASN #210756 EdgeCenter LLC
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint6A:41:12:C8:EC:EE:63:EB:7E:7B:99:90:E1:79:CD:03:6A:73:70:7B
ValidityFri, 05 Apr 2024 20:09:22 GMT - Wed, 07 May 2025 20:09:22 GMT
File type gzip compressed data, max speed, from Unix
Hash fd4828413ba14bb01ced311bf793e735
cb3817a9dcaf199f36719f3067f5de2473d37adb
5a4dc6a468fb691567aeb706309f6055e9d5e5188ac2b5e669cfa7449417fa81
GET /script/widget/config/zV6xlxr9an HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:28 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: max-age=7200
content-encoding: gzip
expires: Sat, 04 May 2024 10:04:00 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: sber1
cache: HIT
x-cached-since: 2024-05-04T08:04:00+00:00
x-node: blm-up-gc114
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Thin-Italic.02afbda944ad0b9b6d4e.ttf
200 OK 122 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Thin-Italic.02afbda944ad0b9b6d4e.ttf
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type TrueType Font data, 15 tables, 1st "FFTM", 28 names, Macintosh
Size 122 kB (122216 bytes)
Hash bc36d7f436fa7a3800e32da47638afe2
11f24afcbc37d4997ad2714a28635cb7d20a42e1
bf188eefaad591e650a341b892eca7e5e0f94f44fd7c01825c357909920c4305
GET /spa-static/1.4.1460/static/media/Roboto-Thin-Italic.02afbda944ad0b9b6d4e.ttf HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: application/octet-stream
content-length: 122216
last-modified: Thu, 02 May 2024 12:18:34 GMT
etag: "6633849a-1dd68"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5776
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H26WxJ7HOfeTs2JikWBqrRkAJRjPalY%2BfGNtSWyerylyzK8%2FMscGxJe5xQm47CXwNRqbG%2Fvwek6Af8L0f5tf8qNyz7m%2F5kJT1STwRGfZLycRtevE%2BHSUO0vuQk%2B3mpj%2FSlNW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76475ee9c568e-OSL
alt-svc: h3=":443"; ma=86400
cdn-mst.com/casino/game/21225/game_df187ee9de834fbbf02cfb51904d8ccb.jpg
200 OK 30 kB URL GET HTTP/2 cdn-mst.com/casino/game/21225/game_df187ee9de834fbbf02cfb51904d8ccb.jpg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 248x169, components 3
Hash 336e7529e2c8cdaf69e2f275c168df57
9400eb5193f8e4814a7b043e2de2b9f640f95a90
0f2d550ab9a17145bb041cee802e4fa1b11712bccaef01d918f9c69b90b56ac5
GET /casino/game/21225/game_df187ee9de834fbbf02cfb51904d8ccb.jpg HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/jpeg
content-length: 29488
last-modified: Thu, 30 Nov 2023 05:57:41 GMT
etag: "65682455-7330"
expires: Sat, 04 May 2024 16:17:11 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 60793
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wu3HfGSdWXlyPI7JCzLEDmKf0tAW5M0cBsDBeWwpq7QrF%2FZ3y0svCGRRZ7Q5LtNNa1VNlUkaNUeoiF6Qc3bp4KU2lfZ9Amrt4kvn7UxhrUpenITGBwkXzxlWyyyH0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764766e2556c9-OSL
X-Firefox-Spdy: h2
cdn-mst.com/casino/game/65979/game_ab29ed4a3896908de332978a61914154.png
200 OK 27 kB URL GET HTTP/2 cdn-mst.com/casino/game/65979/game_ab29ed4a3896908de332978a61914154.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type PNG image data, 248 x 145, 8-bit colormap, non-interlaced
Hash 78143934a709ca2296ccebbc838cbca9
4040a2487e3881a6f640b38309c41d6bd3c0297d
b5ea9dab66fd7eaa7d3198a927ad1b90f086bfd7506c63165779eb7c8199d6ac
GET /casino/game/65979/game_ab29ed4a3896908de332978a61914154.png HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/png
content-length: 26883
last-modified: Thu, 30 Nov 2023 06:09:59 GMT
etag: "65682737-6903"
expires: Sat, 04 May 2024 16:25:04 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 60405
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vksNzz0q9WKSiA3s3SPw6APijpP7L3m0Zx62DZbCqDcUqYF4ZBweX%2BHTLlWhhfI4zxxkzr%2FlYnVknTqLy4EW94csIw8O7rhWIf1ZhNa0wg9yrW0%2BOrZIuZohJreokg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764766e2756c9-OSL
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/boxing.svg
200 OK 98 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/boxing.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 2ec39f394b6498f966790e9e8547cac4
34dda4c289dde9263a57a502e3b26bcf31d47573
5c5a07ee17b88edfbe378c0ede7c36fd523435b900e9df55fae76cb84ec6eb84
GET /upload/images/sport%20icons/boxing.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"2ec39f394b6498f966790e9e8547cac4"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1B1FF370301E
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3NSCSjhRew9CwzHva9slR4wBf85GW%2F%2Fmg9ZAdf%2BDq%2BEDvhOdXVHQlK56UUPANdvqj9BTVtbSqnQrCragrviPATdOPeXEmP36hFPlivCKleAX3QcRYcBoegCl847s4uToirIMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d34568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn-mst.com/casino/game/35029/game_ed85b9dcf808f288011aab320857b166.png
200 OK 90 kB URL GET HTTP/2 cdn-mst.com/casino/game/35029/game_ed85b9dcf808f288011aab320857b166.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type PNG image data, 248 x 186, 8-bit/color RGB, non-interlaced
Hash ad5eb65cac89c6aa3543adffe248b042
10ae02f915576db9a9f4c5acd17b7d7ec590faf8
cba03754b121b0f036aafa86f211069b0ed33ab4c177731947f15786edf68d22
GET /casino/game/35029/game_ed85b9dcf808f288011aab320857b166.png HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/png
content-length: 89675
last-modified: Fri, 03 May 2024 15:49:33 GMT
etag: "6635078d-15e4b"
expires: Sat, 04 May 2024 15:49:34 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 62076
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E3rIQW9HIjcaNUqYMvlivkVtOL0H9fZlj3bJPylKK%2FES%2FsqA1%2FUop43T44NLo3ualutSnaifBQMENCjD9ggFHhlsUSCc4yAdQ4uhlewr%2B0gfaf1CIO0rLTzJlADPbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764766e3256c9-OSL
X-Firefox-Spdy: h2
cdn-mst.com/casino/game/48525/game_d616336c6a2a35796378abde0e749ebf.jpg
200 OK 25 kB URL GET HTTP/2 cdn-mst.com/casino/game/48525/game_d616336c6a2a35796378abde0e749ebf.jpg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 248x169, components 3
Hash 931fb020d3ecbaef7fc75ba6a45c80f9
52d9097892c53a1157638b832ee0ecd82adc0cd1
9efc4e18b4de3f31f2e227913002f30652f7c9c261b9a47a015b28f2a74607a1
GET /casino/game/48525/game_d616336c6a2a35796378abde0e749ebf.jpg HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/jpeg
content-length: 24745
last-modified: Thu, 30 Nov 2023 06:00:28 GMT
etag: "656824fc-60a9"
expires: Sat, 04 May 2024 20:13:30 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 46391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LESgInlv4rGA7N13LysnZ1tdQr7LNS5yxrtCZALY%2FuByYRgVedbzgf2XjXGSsCT1IuHQbNrwYDsiDJleNmU%2B5TRPWc9ZD4%2BHSEBUIhSmKGPaoDR%2B3oVhGcuSZRy13Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764768e4856c9-OSL
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/formula-one.svg
200 OK 96 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/formula-one.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash fea602800df0be60a0943b62925344f9
8f216871bd719c1b9ff53547e49a00894d724b29
d2b72c1c6df3ced8f26804f080dd88aa988dbffb31d07f968c2a28ff3f630f4c
GET /upload/images/sport%20icons/formula-one.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"fea602800df0be60a0943b62925344f9"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1EEBF28D70B5
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FEa%2F%2B7du6UqG4LjDjJXXHl9tnnUuQbJN5lBPmZWOR0slXgVTXTqnweVCgYNZuTsSpcFfEgUD4M2ICffv0AovMfJmQmi9AdavDKks8ph%2BmxRBHSQOYuuultw3hwOZ09pN2vjkOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d3c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/%D0%9A%D0%BE%D0%BB%D0%B5%D1%81%D0%BD%D0%B8%D1%86%D1%8B.svg
200 OK 58 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/%D0%9A%D0%BE%D0%BB%D0%B5%D1%81%D0%BD%D0%B8%D1%86%D1%8B.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a15549765b580bd9da4572426a58a8c3
8a239776e019e54f396411013d3efac4e4a2d091
6a99aad6147f665b9862c0055bd068232f747a23b7fa7c147517cda7137701e1
GET /upload/images/sport%20icons/%D0%9A%D0%BE%D0%BB%D0%B5%D1%81%D0%BD%D0%B8%D1%86%D1%8B.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"a15549765b580bd9da4572426a58a8c3"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1B1FF360E310
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1658838572/ctime:1658838572/gid:33/gname:www-data/mode:33188/mtime:1658838572/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XsbMiDztgQfIa57DsJTDV45NieBPVBh%2BroWToE7SuvO7oEepOupzCN%2BucpbuLieuUqtBk4QHBsYo6XlxrGpBZgqzUHkPwaSLt4WI3q%2BHQI1ma%2BV2djOpYPGqW4rdyuBRmrKxww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d50568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/snooker.svg
200 OK 754 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/snooker.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 38f2f477f40ae74e4a4d63c6ac392eda
baa917afa00ce158b3ec8e860761abfbee41e467
b858dfba3398ee420a9a245c72be2eaeb512a676bf6ea874a23b44a25f3dd175
GET /upload/images/sport%20icons/snooker.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"38f2f477f40ae74e4a4d63c6ac392eda"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB22D974AFB31E
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2BOlcIReP6rSltbXyRCUICY%2FLh6igqXX%2B8BSoCRrP47lxBHMtWQHQAMo%2Br7pQwKQP3iMQATadhYHDAleD54lzmEfplYx%2BmGtA%2Fdtj3zcvtU1xgiYd6mVep5DTrOoyfCZN0s4ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d43568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
agstatic.com/games/ezugi/casino_holdem.jpg
200 OK 148 kB URL GET HTTP/2 agstatic.com/games/ezugi/casino_holdem.jpg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subject*.agstatic.com
FingerprintFC:B2:8D:AE:33:A2:16:2C:0A:D4:DB:D6:DE:2A:2A:CA:07:0E:00:05
ValidityWed, 24 Apr 2024 00:00:00 GMT - Fri, 23 May 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 640x480, components 3
Size 148 kB (148097 bytes)
Hash 8bcff829acd3a9b22619c9427093b468
f351c3ffec4bebd94a41762aa11ff487f810f8cf
6299b29531c505523fc35717e312b03af91afd175dd992790d6c25463488eb96
GET /games/ezugi/casino_holdem.jpg HTTP/1.1
Host: agstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 148097
date: Fri, 03 May 2024 11:13:31 GMT
last-modified: Tue, 26 Dec 2023 14:02:05 GMT
etag: "8bcff829acd3a9b22619c9427093b468"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: yFWyNfDeZ0I02y3-R-1ai5sGn25_bzYzpRFTYAi4hDi0KAxBMLK5-w==
age: 79381
vary: Origin
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/instagram.5b743c38a3667ac925c3.svg
200 OK 129 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/instagram.5b743c38a3667ac925c3.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Size 129 kB (129368 bytes)
Hash 077d4c113661159c3047085881e2e62e
1bb8a8a2288c8af199c5e6024cc75dba859463aa
fc12dfedc14fbefecab3bdcb3ffdd312309e81c1783d11fdb7c53a8b55e556fc
GET /spa-static/1.4.1460/static/media/instagram.5b743c38a3667ac925c3.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:28 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-3dd"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LUl%2BJQN%2FWEE%2BjUUJd4qrfPSr6xmqCa0Ct%2FKr4g3Vjc98OsVC7wq7k0ycwx8H%2BFvVFXanKEoZN5xlODco8E611f1Fe1S971vKY9WlLzcGFYeMA%2BHV4y4J%2FZHtB1to4CrpfYhT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76465ad34568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/martial-arts.svg
200 OK 107 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/martial-arts.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Size 107 kB (107096 bytes)
Hash 8579e3b77e91a3a6d443c3b4b86a8724
caabd7a0e991bc704e4a11122183b49cddd57ede
59c1627ab4471872dcc4c9b722f8ba93b9bd4a00d1cd0aa0c16c30658284711e
GET /upload/images/sport%20icons/martial-arts.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"8579e3b77e91a3a6d443c3b4b86a8724"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB22F77C16E4D8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t1ysl9tzOK7Qo6j7OijyAzuzipeueQiHN6E2XXPvXmPFsJ8EUoTPk3j3wzeZ%2F11yoglI%2Bj7gBWuYU3O4wDtAYf3w7p20KAL8eo%2FWv0Vzg5mu0C4e9snw8Ti1lit3sBRhCzR89w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d33568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/hurling.svg
200 OK 2.7 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/hurling.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash b9d52250a02e3cff01b5ec862c06831e
5eb540c3c574ede5e52d84e3ef31445a750b12e5
c7e732ccfd479f44356d29b2d2025303ddfe196e4facabf20a6bddb6689cec21
GET /upload/images/sport%20icons/hurling.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"b9d52250a02e3cff01b5ec862c06831e"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1EEBF26C83D9
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NRjLdB9lk%2B8Wv5gR13YNDPeoKi59rstu%2BDgr4HZxgn3gtzr9423OnfRXjHetbfoQmS29Rhtj7CsxkQ490Xpkdat%2FKYLT%2BnNiWwQtWkFtZocXgHPY5eAs3nNPhckqbwtKT2zbPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d49568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
mst.tm53cd3by2.com/yXSUZam/ddwl/mUNXvas/a2awwY?q=OszY8YxLtMbMKK8o3fGo
200 OK 96 B URL GET HTTP/2 mst.tm53cd3by2.com/yXSUZam/ddwl/mUNXvas/a2awwY?q=OszY8YxLtMbMKK8o3fGo
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subjectmst.tm53cd3by2.com
FingerprintCC:A5:45:CC:19:EF:39:0C:95:B7:FB:12:96:D8:5D:D3:7F:D4:59:73
ValidityTue, 16 Apr 2024 00:00:00 GMT - Thu, 15 May 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a394bafc87267e4cc867afa4f6c60f69
fc463ed0878fc7a4bdae675d5f3d6eb11e51fd08
9a785b14f7b180bdb0fa22d9c4e5978db99d7df633e7552f12df5c4da931ff0e
GET /yXSUZam/ddwl/mUNXvas/a2awwY?q=OszY8YxLtMbMKK8o3fGo HTTP/1.1
Host: mst.tm53cd3by2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: text/plain; charset=utf-8
content-length: 96
access-control-allow-origin: *
access-control-expose-headers: Retry-After
cache-control: max-age=31536000, immutable, private
content-security-policy: default-src 'none'; frame-ancestors 'none'
referrer-policy: no-referrer
strict-transport-security: max-age=63072000
timing-allow-origin: *
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/valorant.svg
200 OK 8.4 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/valorant.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash fb1b692a5da30a4e2b55f1545e96c955
652ced88236b9449a0555fa544007395c2cff7cf
c1c109b0a995b58d75f832f2e213fc7c7bef63ec3efbe01c48e27a5c70720d99
GET /upload/images/sport%20icons/valorant.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"fb1b692a5da30a4e2b55f1545e96c955"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB22F77ECE9187
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102013/ctime:1654102013/gid:33/gname:www-data/mode:33188/mtime:1654102013/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2B55lQuHpR748YuLOiwAOjG4WsANB1KIH4dyWkr2EebhxmlF9x9hF3pG9d0z1fdXnuRteNvjDTpGHOj376dCCvCRAzMkS8QNGJXBEHgV27tBWg%2F%2BifQA%2BaUFcZFzwImmLn3h%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d52568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/logo/FaviconNewCom.png
200 OK 1.5 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/logo/FaviconNewCom.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Hash 6ea8f5a29c11ea1dcef6d89ede4c40e6
4e4425e1e8327edc1ebcffbdd8d229ca3e7113b5
476ba66ac9e3656a252ebd3fb70e4cadb797220307ab8c0db7620b88e98f317d
GET /upload/images/logo/FaviconNewCom.png HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:32 GMT
content-type: image/png
content-length: 1493
etag: "6ea8f5a29c11ea1dcef6d89ede4c40e6"
last-modified: Tue, 23 Jan 2024 22:19:41 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding, Accept
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB22C7AFC05126
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-contentmd5: bqj1opwR6h3O9tie3kxA5g==
cache-control: max-age=345600
cf-cache-status: HIT
age: 897
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pIjKlstdw1bpcY2As%2F8btsbojZk%2BLWrSWHsQjJupFVHRdJq%2B98487sWN3nlyQoMbuhMB1EOGrJwuUTnGmVVKKGDUxJLkrqR8HY8o2mnvbOWyz%2BZwILO48Zc8NVEFpQeKhzE%2Bpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7647c3c6b568e-OSL
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/logo/FaviconNewCom.png
200 OK 1.5 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/logo/FaviconNewCom.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Hash 6ea8f5a29c11ea1dcef6d89ede4c40e6
4e4425e1e8327edc1ebcffbdd8d229ca3e7113b5
476ba66ac9e3656a252ebd3fb70e4cadb797220307ab8c0db7620b88e98f317d
GET /upload/images/logo/FaviconNewCom.png HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:32 GMT
content-type: image/png
content-length: 1493
etag: "6ea8f5a29c11ea1dcef6d89ede4c40e6"
last-modified: Tue, 23 Jan 2024 22:19:41 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding, Accept
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB22C7AFC05126
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-contentmd5: bqj1opwR6h3O9tie3kxA5g==
cache-control: max-age=345600
cf-cache-status: HIT
age: 897
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XMXy5wpY3AbJh0uLmLWSVOrLwVguF%2FLps6dZfXoVefqoI4rcfCPDVxBqRzmOv6ogvoC8fPhuQIBPfKTXE03n2Rjs3XAOUVxyigBDr9hJ6g6rTXpzP0KYvgP%2ByPYUKxXukXuqzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7647c3c69568e-OSL
alt-svc: h3=":443"; ma=86400
x011bt.com/gif/test2?&rst3uid=7192452065950433297&rst4uid=7192451982571864066
200 OK 43 B URL GET HTTP/2 x011bt.com/gif/test2?&rst3uid=7192452065950433297&rst4uid=7192451982571864066
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectx011bt.com
Fingerprint00:B8:94:7F:91:E8:3F:7E:83:3C:A3:82:1D:BE:74:E1:CF:20:23:7D
ValidityThu, 18 Apr 2024 14:53:37 GMT - Wed, 17 Jul 2024 14:53:36 GMT
File type GIF image data, version 89a, 1 x 1
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /gif/test2?&rst3uid=7192452065950433297&rst4uid=7192451982571864066 HTTP/1.1
Host: x011bt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Cookie: uid=7192451983133900801
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Sat, 04 May 2024 09:16:32 GMT
content-type: image/gif
content-length: 43
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451983133900801; Domain=.x011bt.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 0
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/squash.svg
200 OK 351 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/squash.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d25aa8b6947e35769969c88b8d9f68f3
40f1661098986c50c99674e2a613306f176d501c
ea51c4e306511f376a5ba136fae16151ba05f6fa905530a67d67a1ecfcb20476
GET /upload/images/sport%20icons/squash.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"d25aa8b6947e35769969c88b8d9f68f3"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1B1FF2BF2438
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvwfP1UzB26UYuRCENrE%2B0YuYYDF1QvuqbErcW4yekeUcsGq9NxYZjdFgHrc15c0HpAveUzbabQP3y7swNXaUhPLhrq%2FEj5dcAFpkN74gkqpCrmant1bgmDHnMUPC4ZRlmGkig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d4b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
node-sber1-az1-25.jivosite.com/widget/status/561276/zV6xlxr9an?rnd=0.16433075113372075
200 OK 1.5 kB URL GET HTTP/2 node-sber1-az1-25.jivosite.com/widget/status/561276/zV6xlxr9an?rnd=0.16433075113372075
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint6A:41:12:C8:EC:EE:63:EB:7E:7B:99:90:E1:79:CD:03:6A:73:70:7B
ValidityFri, 05 Apr 2024 20:09:22 GMT - Wed, 07 May 2025 20:09:22 GMT
Hash 6c900d744a1e8fa6f666fa195f844c59
c31137bf183150abe438d71ef6f5eca5dabbb9c1
e4e9230f61926b0b2de9990359fcc3d5643ffe2f5a7d97a0b49a95e049218fce
GET /widget/status/561276/zV6xlxr9an?rnd=0.16433075113372075 HTTP/1.1
Host: node-sber1-az1-25.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-max-age: 1728000
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: X-Geoip, X-Botmode
cache-control: no-cache, no-store, must-revalidate
content-security-policy: frame-ancestors 'none';
content-type: application/json; charset=utf-8
pragma: no-cache
server: foxy/3.3
x-botmode: no
x-frame-options: DENY
x-geoip: NO;03;Oslo (Alna District)
content-length: 1468
date: Sat, 04 May 2024 09:16:32 GMT
X-Firefox-Spdy: h2
len6gyisnhmb.com/api/v1/coupon/preview.json
200 OK 4.3 kB URL POST HTTP/2 len6gyisnhmb.com/api/v1/coupon/preview.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type gzip compressed data, from Unix
Hash 99ad882c486f43cfab2e9ec5713b07f2
a1705ad9465b3247fcd2373c06929f2bbe1985ea
4749e3ccb348f42ae31476c9100747f0e2ad4be16331b0517f0b268b381a9c7a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /api/v1/coupon/preview.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a5c0422c03e509d0-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
Content-Length: 97
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814190.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:32 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 6262414f54251f91f60a1791d45d9dd7
pragma: no-cache
expires: Sat, 04 May 2024 09:16:32 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
sentry.mostbet.com/api/27/envelope/?sentry_key=4a626086556647d191e62e9bef5eb347&sentry_version=7&sentry_client=sentry.javascript.react%2F7.51.2
200 OK 41 B URL POST HTTP/2 sentry.mostbet.com/api/27/envelope/?sentry_key=4a626086556647d191e62e9bef5eb347&sentry_version=7&sentry_client=sentry.javascript.react%2F7.51.2
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostbet.com
FingerprintAD:CF:45:31:5F:B1:6C:40:B6:A2:A9:CB:37:E1:C4:8F:61:E8:7F:0C
ValidityThu, 07 Mar 2024 04:04:07 GMT - Wed, 05 Jun 2024 04:04:06 GMT
Hash 7b4c1cb285fd57310a3279c028b11b05
8d0acf37fda5872b1cebe2a592170dfa90a4fce8
ae7e834a781ee04727ae6c6371e543bdd85d05349c3b5d25cd3e8df121a48413
POST /api/27/envelope/?sentry_key=4a626086556647d191e62e9bef5eb347&sentry_version=7&sentry_client=sentry.javascript.react%2F7.51.2 HTTP/1.1
Host: sentry.mostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 134853
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:35 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: retry-after, x-sentry-rate-limits, x-sentry-error
vary: Origin
content-security-policy: worker-src 'self' blob:; child-src 'self' blob:
X-Firefox-Spdy: h2
mostauthor.com/multiauth/ping
401 Unauthorized 0 B URL GET HTTP/2 mostauthor.com/multiauth/ping
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectmostauthor.com
Fingerprint07:D4:3A:B9:45:C0:FE:05:F4:6C:4F:1E:98:58:68:64:B2:84:63:25
ValiditySat, 13 Apr 2024 10:46:22 GMT - Fri, 12 Jul 2024 10:46:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /multiauth/ping HTTP/1.1
Host: mostauthor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-methods: GET
access-control-allow-headers: x-client-device-id,x-client-name,x-client-session,x-client-version,x-multiauth-version,x-requested-with
access-control-max-age: 600
content-length: 0
allow: GET,HEAD
date: Sat, 04 May 2024 09:16:52 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/band/t4k.json?
200 OK 86 B URL POST HTTP/2 len6gyisnhmb.com/an/band/t4k.json?
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash 81a6084a1256ceeb9ee252e7937fb145
a0b67920fb6ecc1c455d3a19ebe3ab9030225dcf
aa79bff10466ccce76e5f212a64c5659df420270e7093eacb1b98dae1b0d53af
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /an/band/t4k.json? HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1145
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814190.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:53 GMT
content-length: 86
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 4
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
X-Firefox-Spdy: h2
rstat.rockmostbet.com/band/t4k.json?
200 OK 86 B URL POST HTTP/2 rstat.rockmostbet.com/band/t4k.json?
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Hash 1455dc8f1b68af40cd0282b6217ea0e5
a97d97c40ba5d0b5e2e02a152012c2d3f7218875
c054b5e78b87ab8d5f3ba8fd7161a48aaa623f17141e87c17fdaa2618b1d7607
POST /band/t4k.json? HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 913
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
date: Sat, 04 May 2024 09:17:12 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 7
x-xss-protection: 1
content-type: text/plain; charset=utf-8
content-length: 86
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/5717.07393324.chunk.js
200 OK 51 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/5717.07393324.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (50745)
Hash 071648260a048de924bf253d89a923ad
49dc762511837279431d29d07ac8a5f0b4ac6084
a70ddecbc34803b94a1d006e97a00c01d4ee6769901350fad5cfdc4d19c4cb4c
GET /spa-static/1.4.1460/static/js/5717.07393324.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-c686"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fZ%2B6%2BZk4M9dt6nPbyH5REMQ5PUTuoHZ0ek9a0OCH1x7kpmS31go%2FAhjjlyb8Qzd97Gbpc11wjLLDbWJRtQ8mwLjzm7UQxj6R%2F5PbZ%2FxE8iCm0FpkDFoxxdt278TYwH%2F4aomP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f5df6568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/t-backet_mb.svg
200 OK 2.5 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/t-backet_mb.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 45a16b1fc3c4232fada88b6e35cfab54
5d9210e2cc653c9cc1e1a6ee6c0f266e9fb8828c
eca6436d98f25bde8732ec7945b46b208b85c866da2e30ed648f5082e1c523c2
GET /upload/images/sport%20icons/t-backet_mb.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"a76d0a6444f6ebd393ca691173a2886d"
last-modified: Thu, 30 Nov 2023 07:18:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB22D9767085A4
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q5iDh6cq4pw4H7BWCjitcOyzkV9Z9qGkx%2B6aBu7AHyqOoR3ZvAqofhyFsp7D9DomYJ08L4tWHu6%2FBcCmDC%2F%2FsgPRSgp4lZTdaTuRROAybrH1%2FWtc6PZFMxPX6KH4zP8L2I62Mw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d37568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/pe.83c26459858b4334c435.svg
200 OK 73 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/pe.83c26459858b4334c435.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 23591f9d72b1e3ad2652099518e98f72
f9bd0381541c7d3094b7948a93810d10c772ee45
e0468f05eddaea5fb78d8d86440a580cd9cf5f27baa3e2ac4f229b4423abd7f9
GET /spa-static/1.4.1460/static/media/pe.83c26459858b4334c435.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-11ccb"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AK0xaR94NohSg3taZ%2By%2FVr4g2t%2F8tE5haqRq6xgJFPassaf8uC4By4b6vHZDnsMiLSiZhB3bLvs%2FMPQ80rdSqtC57TV8Rlg%2BhOyj%2FxfkPv5A3YqDr%2FAsR993lKFM2Mk%2BLkR4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dec4f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/baseball.svg
200 OK 987 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/baseball.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 0e28140d1394ab6d53ce5b6581cca377
6d29ff4a5a20ff794d6a64d92be79cb483ee57ed
9ea1bdbe6f5ced551f7b07330d19740003b9b8ccba07ff547fa4e1ae408fac2f
GET /upload/images/sport%20icons/baseball.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"46b260ddfcd732c35720da4a047829b7"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB22D976BA78E8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2iEeR5vMQjuoFr%2F25xDDBvWIpx8hIgq8Xb0TYXcnsw0WzIvMvxzfUkP0lp5JC2XUXBSukhZJWVo412D2ieAFSxAR%2BGH6OlGOeYWC5DmzleuknDSk%2Ba8esDwJOFxs89BfW74blg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d39568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
200 OK 109 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
Size 109 kB (108717 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:23 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1a8ad"
expires: Sat, 04 May 2024 13:11:18 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 305
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KYGMuLPBj6knaEISxSIppS8JM3kSPwPWExkTqQvb1IEYTd25N%2FICzfViRouo%2Fgzhp1XD9C2PpCrOZ1vuEd%2BUWBS8grPrcWpA3KbtGjFZqWqZCqrQDsWNt%2Fzu9sP2wgFPdzCY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764487e4d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/am.36fc7db319e532bff785.svg
200 OK 231 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/am.36fc7db319e532bff785.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a7a10f1da96b115f8e61d169fb7da571
08104b26aaeed70adc8072c8fa9e470d233d48e0
a6fea2d7a923b1ffa8a3c59141784943531e312f87b6566f418bc75ed201b4b4
GET /spa-static/1.4.1460/static/media/am.36fc7db319e532bff785.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-e7"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keBZfVbF8jslxgpZvPLGISOdzs1YXb1FwVb1okqyhqR9fQh%2Bb4E%2FhFqMhF%2Fzjz%2BaGI5w2SzPQ%2F%2Bs2aHvKxLTukPvKBhp21dTyv2IOR2JDIcCIAvqDM4JzMBJFZBGoI5GthkP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e2cb0568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/aviator.6a7a570cd22e468ed44b.svg
200 OK 2.0 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/aviator.6a7a570cd22e468ed44b.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash c74ed5aa5b8b0ca369881640d55a6d9c
a475d2235065c5c295b4f1d0f4a50e16f431c02a
2f5452950006ebf76707460ee081f1fe40b56c516da44b709f46b7d1e43525a2
GET /spa-static/1.4.1460/static/media/aviator.6a7a570cd22e468ed44b.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-801"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HvRjgdAza%2FHu15Dx2c6RI8cnrwv3ZQF23yAf7ybMTlqfRNRMrDvOFVIpl7NeMbJqVuD0Y89fkO%2Fo2raVg50XvVIKbhmoaxtaT5cm5qyZuhraRaW4Zj5bLVKgatPexDNY8Tux"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e9d22568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ball_star.519f9459c5cf72b2260e.svg
200 OK 947 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ball_star.519f9459c5cf72b2260e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 991b64d23bae2ca56ade3c9532424026
87326fc6972187a2f96a79df01cf5b0765d400bf
bcc3f9df179e23392726cfd994f9fe142cadef4964570c5cebf7ab40e413ba4e
GET /spa-static/1.4.1460/static/media/ball_star.519f9459c5cf72b2260e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-3b3"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ApysLVUrM%2FOWrjkSkERChPEzsE0PHlzvutL2gWKH5eagHAFQOpnVm8QeDx4Ib5h78Hw%2BdGM8iq7auRwg15FO2incMfypeaaOnjqIlWvU6BbX8i8zXHAqrOS9eB999cXuK3YX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764508f96568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/allsports/sports?ss=all<r=0
200 OK 12 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/allsports/sports?ss=all<r=0
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash ab15010c596a19d1218c970728a54ecd
db53cc88e18e570e7e0fe8b99f6ce50b82a15621
3bab043b6536b9636f7acfc367201d274e7cb251a2affc49d5fa6d1818d7f9e2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/allsports/sports?ss=all<r=0 HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-abacc4992703c95d-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: d6300c745cae2ee401ba7cf4a71be55c
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/gift.4e1ed5f86bcfa75e6cc1.svg
200 OK 1.3 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/gift.4e1ed5f86bcfa75e6cc1.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d7bc03259eb36491e26b0f780ad196a9
193fba5f9e479890663ba4d5cae3c8e263552be4
cc23687b34897eb30d13f39b55aa1e6782f4b344f53233875d3013348c693f2c
GET /spa-static/1.4.1460/static/media/gift.4e1ed5f86bcfa75e6cc1.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4f9"
expires: Sat, 04 May 2024 11:40:20 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YiczXrSgrK%2F0MghAcyiz1QnvKg%2BqjXzoR3Q8i2kE3RqJEoF8A1M0bR6tgXA37UyhoSYNCZG50e9VK9tP%2BwAwIvhA1%2BD07qgal1b4afmpe6DRDd3DanDh6AaC%2BkDtK2kFZvlU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7646e8e3b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/add-bets.8a9129de05d1bbfe8ffd.svg
200 OK 2.3 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/add-bets.8a9129de05d1bbfe8ffd.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 1f53c31e85915347bc80fc35882d3628
4f79e08635d4b2ee392f8b1467d7bc7a08ef78cc
34940f7cd8521e3e6d56d047c1b671691d9227d66360219007035f1c6321701f
GET /spa-static/1.4.1460/static/media/add-bets.8a9129de05d1bbfe8ffd.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-8e6"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2F6%2BRXG3ufheGKEO6LWUrDU5gPqjoYop3CPHwBNvc8kITkdjaVl0NpDFoPXQG%2BS1723q%2FdcHSKgSi5%2FL%2Fx%2BGdEmNJIhu4D1bUeNn7almF3WtzIjqO9aV3W9drY0fW6GTXoZx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76451a8b5568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/timer.0bde209c7bc54a57730e.svg
200 OK 362 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/timer.0bde209c7bc54a57730e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash cb52a79df9fc02d96a6071978b942036
3d3cdb4cea431458bb16334b56f3a54fe0459028
730c8a1cb54e31925621776cb47b392e73ee3c36eb8fc9b5200fa65b8ca63727
GET /spa-static/1.4.1460/static/media/timer.0bde209c7bc54a57730e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-16a"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5776
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B0TtkewSLE0xbK99mvaXNyjYgISd5vjgUwe2AFsj8y9fr%2B%2FAWywlGevO2O3qB8TsnR8cHDw4tTFU0TblbIqgBG8n1W%2FZhJZ8oE3ByBRqfTN04BngioWF04Wp3vrKo7bvYsNa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76470b8a9568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/1981.4a9d4944.chunk.css
200 OK 36 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/1981.4a9d4944.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (35679), with no line terminators
Hash 4f378a686a3273135d76858f2919a74a
272500623014b036c1e963157108b199d218a324
d4dae2d1848af2f74845c4bdccc89b0b7d32c14769e8c40a093f330ab80f773f
GET /spa-static/1.4.1460/static/css/1981.4a9d4944.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-8b5f"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0KIsZsfqehHUCTV5Kl0VceBSZJbZm5VfssnmLEFxtoL2kbSgfxkT6CUIHXMDUFaNcrX7piZ0XovZjTbephPtWJcCkzZ8ewWCFECySkMKvnGTa3cjTTRyYYiivEd8M6H4tGA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b3959568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/co.4c87d079860a09479706.svg
200 OK 289 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/co.4c87d079860a09479706.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash e63af85740613656d04ba0dea9667134
4516020d51b5699c0485fdd4b4d74a1e5d32f36d
533a941263852531c7c80d430cbad0402f49661a3669896bbae70b625afc6933
GET /spa-static/1.4.1460/static/media/co.4c87d079860a09479706.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-121"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2qO5AzKbk54nMii9tsQzGAurCM9uUICouWBwFeAl20SltSNsUWRvsm7ig42NUZjXHDsmgOeH7M5yU8xzCWIOB1MT59jo610mOy4B25lveFLxiKQKhFzcv7KdFErNfADe7j1u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dec45568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/eg.c6ff8d6c3057865a32f1.svg
200 OK 9.9 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/eg.c6ff8d6c3057865a32f1.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash bb28375e81e89cd6613a519ddb609a86
47ed02d1fcede0ecda5720a1ee8bbdfb2f03d458
c41cda1b34e55be99eec7ca5532d584e969af70140b625e338d096399d80b824
GET /spa-static/1.4.1460/static/media/eg.c6ff8d6c3057865a32f1.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-26b9"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pfGEwfBbJyyDcFZB5YkI12EEIStOCgxHMXdY8x%2B7ayxnSbXbtZgNjIBxYOMPlKxnOpEQsyDKdVEZQuUtCZm7r5JjU38O8HfNo1XD6ZRv7hrJaoPWvMVDnLI5J7MLq9uvF87o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c87568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/tn.8b09464a7524dff3fa47.svg
200 OK 733 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/tn.8b09464a7524dff3fa47.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 91439b67654547513510413937e481ea
981c2c4f49494bd4ff8a34e99532c3397d1b43a2
f653aed34889e6db416f6b7c98b80f29be1756ea8d357f387245f8a6cb0907ad
GET /spa-static/1.4.1460/static/media/tn.8b09464a7524dff3fa47.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-2dd"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aKgs2N%2FyV9GB0hz9MOXseWJSXzwzUslnLfgvJMWWM7ioBf9nLguoUwXsmf6AxO8pOTRdC%2BQfE%2B6jGE%2BleG8UV%2BmH3Z4QKAHBgsUEKcQkz2JT0Ns8jTSLWRFVg8tVhqWMSIuF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c88568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/apk/check_version.json
200 OK 98 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/apk/check_version.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 81b9762511bd8a3273a395a7f6a6aa64
49e36a87251fba4ca514de0d0c7651e47e42de6d
0c9830a8cd4b53e5712961ebf62f6f6572c33ff0d1aeb800b3d6ab4a7f835072
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/apk/check_version.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-b830c8a60f658655-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
etag: W/"fe3d1cad71b531eda199de24ed283b5c"
x-request-id: 4444a5f5cad734de55a69d8656bbc84f
vary: Accept-Encoding, Accept-Language
expires: Sat, 04 May 2024 09:16:24 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/css/9336.591e821b.chunk.css
200 OK 38 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/9336.591e821b.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (37634), with no line terminators
Hash 7e29951e904648b6eef9f73ee306643a
af8be939f4f66abadad05e3c9b4e3dccbfd4947e
8f8b09dc6be5a0df29c094d3bbe3e620ef3ce34a03e57e264f5abccbbf6755ba
GET /spa-static/1.4.1460/static/css/9336.591e821b.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-9302"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wHT5EeWQUh5YebtEcOcQUaZBG6CtCApnaETCoKkLpqbIbf%2BFLCh82cEOoeAkRsTG%2FUMuOrm%2FEKdkQeccFgCOJ4%2BId6fQwZXLH%2B59lnf0OGQnO25hzisttwDzW3ahw2QtyJ4M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f5e08568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/9561.ad7f175d.chunk.js
200 OK 29 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/9561.ad7f175d.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (28719), with no line terminators
Hash 50350184b8df96b568fe5ec72805f7ac
e96fc945d03f2330ede4b675cae36316034f1f86
a192935c16fbe9729465726a54b4be52cdc09f08be200f0c348f3e986c7e6b1a
GET /spa-static/1.4.1460/static/js/9561.ad7f175d.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-702f"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hp1UlR2L%2BDPcFQfTeucCqy6pIyyPgU%2FNf2SzM4RjbT%2FztjmY%2FW9IvbH8ugYWeNacqrfyzb8jPQvcAffREXazLCOfike8s2IainCsg1%2Ff%2Bva7hhPNvByL1pvTFfHywXx4MKVJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f6e1c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/telegram.060313401e4899c5fe38.svg
200 OK 217 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/telegram.060313401e4899c5fe38.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash fcb5640a576ac6d105374798cd1167b1
c28ece68991fd1f6e1989ed570df43e79b627ece
5f798d8aa54bb39441e2f02a55b49fcf434fd87fff6deaf94b5021af5acf3943
GET /spa-static/1.4.1460/static/media/telegram.060313401e4899c5fe38.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:28 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-d9"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DIQoXtW06YISidyQK1%2BAQX9dqNuscKfZA0NozXYTzxkv4L%2FJ1k9iI7u27fk3O8XUOS0j6Ou4ZW3RL6pDU5%2B9yYeK4f4txuBTIybUAKSgcGMSfstdipJj3iEfzwOdqCyeEit7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76465ad2c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/iihf.0cf95ffca4cb651cd906.svg
200 OK 4.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/iihf.0cf95ffca4cb651cd906.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 082ab50bf3a4d65ff112ed8e9fc6fe56
967ee01f2a7f1018db0ee57e69b9cec8a52adad5
04057f79a7f7abf992c45169b2f69b9089cba3b2b4052f73aab93b83586ecb50
GET /spa-static/1.4.1460/static/media/iihf.0cf95ffca4cb651cd906.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-103b"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oxnz5fDgiEdySibY76TO3qrh72xvEW3GL7piyQiHigQxwN7GO5yK1iGjhgrsRwJLtTbCFOl8UHpMqnmL7c%2BxFpVnQt%2F%2BnRuvPilOiuZlATdtziXhW%2F1HSTTOSujyxznLtFHP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ecd4d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/tennis.svg
200 OK 651 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/tennis.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 2c9e49e2e9273cbc9d2975cbc4f13b01
47b916a46365ef88771ea80c25d1bd58a9950a16
726ac4713a177ad2233e4ad0aaeee3e56e5375df8ad31ae2040a6aec4c8691df
GET /upload/images/sport%20icons/tennis.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"0b0d6f7e86a350f3e512f3305927c908"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1EDE78E9443F
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102013/ctime:1654102013/gid:33/gname:www-data/mode:33188/mtime:1654102013/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 961
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFWvWqvf75SVgoWou1AHN9DwUJVKoMBHumPAyUxDEnqOi5RXs4SjfpOr8SOZf%2FaiBOyyXQl0iQbVdhEcNMgqOjYu0W%2B4mbnvsbiJDSBo0xKLL2rqaTaGc0dPPKOkuos3rS4s4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac2c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
agstatic.com/games/evosw/roulette.jpg
200 OK 95 kB URL GET HTTP/2 agstatic.com/games/evosw/roulette.jpg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subject*.agstatic.com
FingerprintFC:B2:8D:AE:33:A2:16:2C:0A:D4:DB:D6:DE:2A:2A:CA:07:0E:00:05
ValidityWed, 24 Apr 2024 00:00:00 GMT - Fri, 23 May 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 640x480, components 3
Hash 9d54aee7b72d0670530408b10ee9cbcc
2ed1f016004e9fadea2dc1a6b63e2e7166735b63
277a9dfc169f63582b26340ac7f520dff101e2b260970e78f3b3c9c0e77f666a
GET /games/evosw/roulette.jpg HTTP/1.1
Host: agstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 95329
date: Fri, 03 May 2024 10:55:23 GMT
last-modified: Tue, 26 Dec 2023 14:01:45 GMT
etag: "9d54aee7b72d0670530408b10ee9cbcc"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _mNT9HKDdTdTf_aOuPZDVVkN4o7uAl0iLQzmqawCvAAoWC8BCzarPA==
age: 80468
vary: Origin
X-Firefox-Spdy: h2
agstatic.com/games/evosw/bac_bo.jpg
200 OK 106 kB URL GET HTTP/2 agstatic.com/games/evosw/bac_bo.jpg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subject*.agstatic.com
FingerprintFC:B2:8D:AE:33:A2:16:2C:0A:D4:DB:D6:DE:2A:2A:CA:07:0E:00:05
ValidityWed, 24 Apr 2024 00:00:00 GMT - Fri, 23 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Size 106 kB (106355 bytes)
Hash 8a82d3bdcb4b7f75e3c488a7307b25f8
42b073f118c9461c0ec50955e256665fde75623e
51002c0288e9e7b817dfc9ecb2ad2ade8f7d4acbb52e7b62feb56f024dfa5ec8
GET /games/evosw/bac_bo.jpg HTTP/1.1
Host: agstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 106355
date: Fri, 03 May 2024 11:37:33 GMT
last-modified: Tue, 26 Dec 2023 14:01:40 GMT
etag: "8a82d3bdcb4b7f75e3c488a7307b25f8"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7sUaaDWAdBIJXHL9t7zZjNrX_EYjVEZIjRggU2NqCOgn2E171z8LRA==
age: 77939
vary: Origin
X-Firefox-Spdy: h2
gba.lnabew.com/api/features/sdk-37XKiQozDmPb1Eb3
200 OK 6.0 kB URL GET HTTP/2 gba.lnabew.com/api/features/sdk-37XKiQozDmPb1Eb3
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectgba.lnabew.com
FingerprintE1:B4:D9:65:5D:E7:6B:CD:F7:67:CE:41:D3:D7:29:0A:EE:B1:DA:EB
ValidityWed, 06 Mar 2024 11:29:12 GMT - Tue, 04 Jun 2024 11:29:11 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (6717), with no line terminators
Hash 8486cd19013e905fc2e33bc2fb20d38b
d71450510ac11cfab935db5523019d584ad39da8
3c5ede0f408812c17a30d1ed93a488e00f87926790b50bea7e6fca317b3a159a
GET /api/features/sdk-37XKiQozDmPb1Eb3 HTTP/1.1
Host: gba.lnabew.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: x-sse-support
alt-svc: h3=":443"; ma=2592000
cache-control: no-store
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Sat, 04 May 2024 09:16:22 GMT
etag: W/"175c-9Mgw9phgOn/M7TMEkGKomBTSeRo"
expires: 0
pragma: no-cache
server: Caddy
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-powered-by: Express
x-sse-support: enabled
content-length: 1723
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/ar.5a7c09af30ea06db87f1.svg
200 OK 3.5 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ar.5a7c09af30ea06db87f1.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d7c08979ef2a9ddeb036c5926e54bc68
8814bc42df645389e3b4d4801c4a40e67f9435ae
0769d6fbbfd76146b28633eed9309e2d627b0d24913a2e106777a7db2b29a794
GET /spa-static/1.4.1460/static/media/ar.5a7c09af30ea06db87f1.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-d91"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W29qPZaQiYxAKqdH2q%2FcZAbCe0uDcTqt33TJDx9tWUkvYCVQVBPB3HnYuQSalO%2FQgVxdmSSuIT6RDCB3LA8BLg3HY3s5ZVMeV%2Fr2mr%2FV2mELtINiQi%2FwzRvTgImjdoJ7mGUd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e2cb3568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/clock.ed0062116c2768cf4cb5.svg
200 OK 307 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/clock.ed0062116c2768cf4cb5.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash cd3eefcf29a772820db4848d041896f8
bdf686297a5dd8ab70bb7d2e8a0bf9a9a953f5e4
772d3a2ff12894b975d5c40ed1d3192b58e6261671b848c10352f873ccb8609c
GET /spa-static/1.4.1460/static/media/clock.ed0062116c2768cf4cb5.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-133"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tNrlt3eSGVy5HU4NkIbP66MLfypwp6mTLrWBKz2yxXMf%2F06p%2FeegGIbsZN650XxsvsxAn4QDlqHTIE9%2FA%2FSvcPeu0nSZPhiUW8citvDHsk6vPVaRyIsq9yfUIzrFZGnUMULl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76451484f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/lacrosse.svg
200 OK 1.7 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/lacrosse.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 1abfa082f994ee25a90c3a7b139966f7
48546fa89acbf83d0aef31b06e1d1d61c67c4ece
2158aad0d5248e0c9819b3210da06e60641a8c01e3dbf059e4af410909aee839
GET /upload/images/sport%20icons/lacrosse.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"51374eb9b52982e1b092802ca7a31188"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1B1FF2B23A73
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h08mlqNTxOBDFsxRcmAQ5nqZ1maDjbGf%2F7hdKMcu1rnlmvqxOtDZeF3cdmeTNRYuaN4HWXWG%2BHtUz2h5IQgwY3k5%2F1WYwkC2BskK4taYQfgBg%2FFifwZ0rZ0N6C2wqQwM1pG95Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d4a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/1640.08dbad12.chunk.js
200 OK 27 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/1640.08dbad12.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (26674), with no line terminators
Hash 50238b628be9639f346a716e30764e5b
77788dff6d4963502e193fd641d14011f1a2fe4c
d733a139677f64094d8c2f4b27cb1d87a9ad3774c9be429f36ac6a235a08cfe3
GET /spa-static/1.4.1460/static/js/1640.08dbad12.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-6832"
expires: Sat, 04 May 2024 10:45:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WQNt%2FxE%2Bow1mXxfEPrjdz2pVYLMFDPcLPpzvjYp2hOE0w6fnA5qM7r96DlmLO0kJHDoTiZ5VNtrC7eoBOFv35PopLLEqpDTwgAE8P4WhOHu4z%2BZ8BsNDRJ2gRfBVFMMCa43M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b1919568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/9207.f0dbf499.chunk.js
200 OK 975 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/9207.f0dbf499.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (999), with no line terminators
Hash abc66296b7b8d8fc11c7cd278997c678
4b20a3e2ef4cae3aa22f12da7f0929103ca0d6c5
ad42dd91204a0742e963bd75d436f39f72cfa770347cd70f0457b9c82aa55a2b
GET /spa-static/1.4.1460/static/js/9207.f0dbf499.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-3cf"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UxqibvBacfqa0NWXCnO6YayhsNk0hRLF2Icjo4knlbuwT5aHcNSCMANnjYcuNhNapjLg7dcemDEESaouSM8euLDd9Q4XRYixD0CVp%2BofsI7iJh%2BhQqRVrETH%2BnS4Eg1ggviE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c9ab5568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/propeller.be3c4d819a6fd35fd49e.svg
200 OK 1.5 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/propeller.be3c4d819a6fd35fd49e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash cd7e897d9c60867ce46e235251ec6d30
11061407bf8ce37134167e6eeec2ae6811efd4b2
4014688b53f55efa38ddd6451fdcc62beed86bc8c24b65d923cce0b3766101ab
GET /spa-static/1.4.1460/static/media/propeller.be3c4d819a6fd35fd49e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9980.bba4e325.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-5d0"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=by2%2B7xC%2BWkLpZXUxG5ToHeLn5gFDTqjxyqsXLGaarsaPAJHPUFL0JaGFLwsKR5FCwL6AryN%2BR0K%2Bu0oiv4W2192qnEsvwJsKcRVYozFmn5pHV%2B0pIWZ2OGjPrb0zXEjhWfbK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e2cb8568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=80MQgyL4LpB4nkkIsI%2FKspNtDBrvFNUOGAJC0lKmaj7gu6%2Fvt8q%2FeuQPDdhYCY5jqhM5s3aFXVOsJ1YLJqiF4LTd3gg98LgxlWGh26peGRXN0a0X17SKEk5br30jtYt6BI5G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764770fd1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/upload/images/sport%20icons/snooker.svg
200 OK 489 B URL GET HTTP/2 len6gyisnhmb.com/upload/images/sport%20icons/snooker.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type SVG Scalable Vector Graphics image
Hash d801f21f65fde49188dc9c147628a131
bf90c5f31acd36f7340f17b277f0d928cf7cf205
958f1d0397bf0d12cc320f58c8bd392a5494e0460aa1390a2eeddfde4112295e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/sport%20icons/snooker.svg HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
etag: W/"38f2f477f40ae74e4a4d63c6ac392eda"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CC3D88970BD200
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
expires: Sun, 05 May 2024 09:16:26 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/7031.20206f8d.chunk.js
200 OK 2.3 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/7031.20206f8d.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (2352), with no line terminators
Hash 7c05f079a52e52cffaf95481d1a6496e
7812cc025d8c5a98199fea1d4271404a62dc9995
1384acb6dae87f86477d755e1b98a10812c2d2cb741f751a5ad0b6ad4edc4050
GET /spa-static/1.4.1460/static/js/7031.20206f8d.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-8dc"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=psCnVFLsrAyryrsifnP8qzJjGOdsTTyw4%2FDyfHSqjUGIRIb5U5LCV34h5FTJv6nBtctU7GXlBSEw1oEW8ShxbavNafwhtx3iWPiiw7%2BX4K9%2BOOlAKsgH14RmlGvTDdXZUQxp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b190b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v2/settings
200 OK 896 B URL GET HTTP/2 len6gyisnhmb.com/api/v2/settings
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1012), with no line terminators
Hash 1ed8cb6d1f0fa71a870196874ec88b6a
4cfa16f46b3eb319e1a90631aa7a7a97b81a9f0f
f68e4f98a7a32ec0ccebbdc8cbb03547bb770ee817ed7a63e1d6e94d8bbb924a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v2/settings HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a9338b9db93b3fba-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:22 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 194860a593c610c032af7c3f3c69ac10
pragma: no-cache
expires: Sat, 04 May 2024 09:16:22 GMT
vary: Accept-Encoding, Accept-Language
set-cookie: PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; expires=Mon, 03-Jun-2024 09:16:22 GMT; Max-Age=2592000; path=/; secure; HttpOnly
lunetics_locale=ru; expires=Sun, 05-May-2024 09:16:22 GMT; Max-Age=86400; path=/; secure
tz=Europe%2FOslo; expires=Sat, 11-May-2024 09:16:22 GMT; Max-Age=604800; path=/; secure
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/9336.b64fdf06.chunk.js
200 OK 72 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/9336.b64fdf06.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 7d1bdcac716fc8fe30a540b47b0db9a3
02acf8cc165b49327311e298fe51e61bd621e5ec
4d0595ef59ad1354050dd1ac3c5450bda46314cf016ca752e3a3affa12716bb1
GET /spa-static/1.4.1460/static/js/9336.b64fdf06.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-11a86"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rk%2Bp4Q1%2FoYnuzpjNm3htsVV%2BZjoi2%2BndHJ4E1F1QqOXw5mius7Im1Gp%2FftceiFkQpf9yxUEbUM6IMtHwQ9NxIvMDczg0fwl2kgkBeXqtpcXbDFyKXLiC620Sr%2FerAriCdsFP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f6e12568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/double_arrow_to_left.5bb5d1c651b2aa3d52ef.svg
200 OK 438 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/double_arrow_to_left.5bb5d1c651b2aa3d52ef.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d4b2cbb5577515dbfa272de0c8242080
87919b0bdb040af457a6bc64e86c407a67e2a63a
8ebfe2a5e0d693d8bf9725e16d2510fd563019ebfdf758c02c91a1f67ed1feaa
GET /spa-static/1.4.1460/static/media/double_arrow_to_left.5bb5d1c651b2aa3d52ef.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1b6"
expires: Sat, 04 May 2024 11:40:19 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVMPa26k0HVgzqkxxgUVX3%2FZPGIiYNtTNaRDW1PlobeezVc37Ny7WWff0IiHo4%2FB5j6p6HFX2LZuZZ7k9uW9dsBKzwc41YlAE4FuEsZAlnfs60biQKNing3fLWr4MfhylI4A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7646e8e3e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/749.f7795922.chunk.js
200 OK 21 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/749.f7795922.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (20965), with no line terminators
Hash 547e7fbd2b8b2f0aa7b4a3583532e497
6398c532c1a0aa65659a73281cb73647eeb61552
59fc48a1348a3256a9833d97c8cb362583439f5624bc84dc42d43c9454f6d321
GET /spa-static/1.4.1460/static/js/749.f7795922.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-51e5"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rEXQ7kO5LPJA0Euj0D0tuc0bImOAKTM3c8d7oZ4FQgCAmXaMdV%2B1v4Xnvi6vtyY1drq00WaB1CBG%2FkCDBrl1hP963c%2F1zlhrv8hfodZTUcMfctCSv6y1MmTU6MpOt8UCo5lX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b4970568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/gr.c51a52c416ea428fe41f.svg
200 OK 1.1 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/gr.c51a52c416ea428fe41f.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash c48d9fcc3e0a61ec90a47d2e3fa234a5
14a1739a8d89e8e2c9f80d20db174002c18b600d
98dbdf5438c4398a84a77637baa40db362276d39ac063453d5f60616f2e77458
GET /spa-static/1.4.1460/static/media/gr.c51a52c416ea428fe41f.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-43d"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCMAt6k5ZuZocUnToKmSPenvhgOm2iiLzvxIC1qfjXiDFKN%2FXxjOXxlMIMmTh1DeIakObEWM8b4xFL3FX%2F%2FhNE7DJXLvRMobeAvbiAdCAFvqhj%2BrkSWftbPYvevIflE3P2Kf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e0c7e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/vn.25540177a9e64be64b71.svg
200 OK 498 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/vn.25540177a9e64be64b71.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 22f87978660af600224571fed43998d0
db73e1e6841a2c4e8b8d2d1b1386bca19e40fde2
7e5d60b6486314e5a1834557528bbb4d4c35d1ddf322023d35b76f9a46945dee
GET /spa-static/1.4.1460/static/media/vn.25540177a9e64be64b71.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-1f2"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vK8Frj77wQ6jq2ax00ytVeQDOO6EoCChWILchLfCs3ymF4XpO7CZrxBnTt6Lpk88NZWPAGZEaMAIm67IMKC2W%2FTiR912ha%2B0mLZ0wOutICoc9qqDbndXeEuwVtL4P9mQmNMm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c9b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/esports.svg
200 OK 3.3 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/esports.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash aec05cd53ff76de13a097c0c019a1e0f
19bb6d72a4612a7a6b431ba0b72fd6ac91ecf50c
9a959140646ea5f644a1e8bc0822b3a1ef07d3b2d21ac077b9a4df9d3d944e3d
GET /upload/images/sport%20icons/esports.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"92ed1dcf038dc9ef3014670221a7293b"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB1EEBF28B68CC
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnd7P%2FJmK5QoufqEDEBOSLDZIayqZ7rTYYO%2BhW9TB0YedD9TEmaviw7ZXE4Gpom0MUjTMJ9H%2B%2F8oAPJ0c1ENixfl%2BbLy0dsJGjSF7jMPdlaQPBmXEozA8m5JF6b6qbZNK19SGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764740c90568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/lk.93412c6fbb52d5bb809b.svg
200 OK 11 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/lk.93412c6fbb52d5bb809b.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f54e1ef96c3b7670cd8de1ffdaa7f085
138826e2252a3b062f7fa96a15370e25757671f0
379d62d2296d30d484a1c0469582d3a95736284bcdbc58e9d6bcb4f648836d1d
GET /spa-static/1.4.1460/static/media/lk.93412c6fbb52d5bb809b.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-2bf6"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GcAf%2B%2BiLQlA8OYSx6vRBOmGjWBGNwshqFPVZ%2Fjr13ktf9d9BgJR7ompsTRkcMPMaVpoJRJ8JbFNdM0k7d4e4Lv86grpaVjHXyAyqUEWLalSqr4ogXs%2F5Hz3kNSDYti3TofDr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc17568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/uefa.43bb94060ac38772e6b9.svg
200 OK 955 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/uefa.43bb94060ac38772e6b9.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash b900629224754bf7bb5e6acd4bcace26
150e4e81899a18ab26413d99d4ace6d8e95fa5dc
822e4c9264d1d6a7ea158afce584ae021a73ac17202b31a8f081ff41f6d613d5
GET /spa-static/1.4.1460/static/media/uefa.43bb94060ac38772e6b9.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-3bb"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z5x4l4Kc2Y1xbX6MTnQnKIEu%2FiloeICZ8TerGcpC2wAsFCkKc8kurz7TiL47ZT29PT155ptoQYiEFNoUanvSQWIyrcQlVKwVAHSzBQHwu%2BCcZsNAh%2F3y8izHBzZv8C81M9Yb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ebd3c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/live.bdf07da00821651ab5c7.svg
200 OK 625 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/live.bdf07da00821651ab5c7.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 28410695852cfcbb4ca527aa51a8dbde
c17ed2061f10df77b484cd8ed9cadfd2bbb20e98
c20d7704a71642e1d0e0a77eb3ccd0a3ec2f61c7fc52016136c08f26d3e1bf0c
GET /spa-static/1.4.1460/static/media/live.bdf07da00821651ab5c7.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-271"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hArctzvK5ORBUyh6%2Bixcv8XKV1Hcmk2yOAiXe6FnT%2BiB2N3hjdG%2BT1wTrIiyHHbe%2Fb2xe0%2Fh5oGaJ8A%2FZpCt8mi%2F7w4ined5uTQVHp54MKs6oKSEzhC%2BgAx5qvQX58Cglq8m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764508f94568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/de.11d88d2b77e6abe5ebb1.svg
200 OK 221 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/de.11d88d2b77e6abe5ebb1.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 5fcec7016f7025e478111ffec9f92d2b
55e67f498c4e8e471b7cb9b74797844586fab501
1d4751866ef944cc0f053c9188d1443c9d979e894a49f35a428ba09e53f2d3f6
GET /spa-static/1.4.1460/static/media/de.11d88d2b77e6abe5ebb1.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-dd"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmRwES%2FhZ2xdok%2BzjwJiOW0hNg4EnWOWUKT1De8PWX8Bp1DE3PrqUL3uC%2B8zY6JsCD0Rs%2Fr%2Fg%2FWNHcVR1h6urU3jNcFfDJUWFPFyPBJt%2BG3Yeb06TSIwhCOtoZopejfaEeWM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e0c74568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/A04-05.24_Cashback_Tinkoff_Sbarbank_RU/A04-05.24_ONE_HUNDRED_PERCENT1_RU.webp
200 OK 93 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/A04-05.24_Cashback_Tinkoff_Sbarbank_RU/A04-05.24_ONE_HUNDRED_PERCENT1_RU.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash 04a2d679bdd31bdcd9d2e3dc9e82ebe9
f9b8a8c5459b3e3821b0149af5e32184c4cf796d
e54338cd777d398717e208ff7637205fcd1ab415ed3c6cc6f32e0cf8b2fc9673
GET /upload/images/universal_banner/MAIN_SLIDER/A04-05.24_Cashback_Tinkoff_Sbarbank_RU/A04-05.24_ONE_HUNDRED_PERCENT1_RU.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 92564
etag: "04a2d679bdd31bdcd9d2e3dc9e82ebe9"
last-modified: Fri, 12 Apr 2024 09:51:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1FB7E1615745
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BXI1VME3O5Sh8ucJGXqkrFLaH6YnllMTZTIpgR7iL6zutDZN1D9AjuPCbIxyZJBXsJ1xOJ3qWWaNkCU1nIMQ9oPiHPVwQcGYHivs4SBibNAiqYfpNEHGqb7ZLtPurNDj7yLTFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764729b0f568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/kw.a3a60802b9df1ea679ac.svg
200 OK 507 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/kw.a3a60802b9df1ea679ac.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash b56139e231ce0521d50cd937955d0639
7fa0cb996682efe59800ec785a51acbcf7dae8eb
a22fdb682b36526402b7dbdfb2eda7c132bbd49526a935ba586c9d46a0480459
GET /spa-static/1.4.1460/static/media/kw.a3a60802b9df1ea679ac.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-1fb"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oemSaF8mhPeXDOd1pr9iuwEQoo20vBhCHlJTsr%2FS2ub5lG7Nz1MD0AWGhSDfKYDNccrs7w3dYTGyumRmqFLR6AXe%2BVckiCmO7kckzgVBKNRTjsrtrZiTCGY%2FPYGa7Ok3R6Ht"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c95568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/field-hockey.svg
200 OK 1.2 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/field-hockey.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 1b59b5109341967e52d31da39f74e0bf
9ee39eaa85affffea3659b012bdbd6a1035b0a89
4ece71708358342a4ff02cdca293cb0a9a02ec610c46f63b0b50ddc2cceae0be
GET /upload/images/sport%20icons/field-hockey.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"ead4726e642f8b6863a5894a3db2f179"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB1EEBF25D6281
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5uOE4Sm8qnF4aEHCXykSz4s4%2FksAFX9omJbfB452lH%2FHKNFK%2B%2BjSvHjGgx6Jzh%2BZauzKDL6pGHzIahqsef2Q7WJml%2BMXoK%2FeyfCtateuTEw3G38QFSIZ86MXcY23h9QQ5YaF7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d46568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/security.c624e909c15c4313950d.svg
200 OK 237 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/security.c624e909c15c4313950d.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f1764496505ea4f5d03a956cc10b42d5
6d088f1a2eb4ea2cc1368d01cf1b7a357df03912
decadfd7f32a010cfb50de80885aa6c01019febce09bbdf1a71550649335d95d
GET /spa-static/1.4.1460/static/media/security.c624e909c15c4313950d.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-ed"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rcU6x1mOrgGsqK%2F%2F0%2BaF%2FHIiItu6ZcphO3vl9BBszmtlOOid0zwIx8VbVTeZKicyyAHwG7ZG94mEFJWOANVvw0hcs%2FcBxVGzYC%2BU%2BGcKh%2BWJauWuzdL21rkBGNk5NRGQVWuA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e7cfc568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
200 OK 389 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3444a15490e7c6ce78ea7397ef0c1431
c88d5148a111eaa55686fc3357485f9a787fa675
5bfc5920e65a65d21287ec1f0d0e56b63299ef7b166e72cd661e8fcbfcb76bf7
GET /spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-185"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K5hDI%2BLl7XjGJ7mCooiWPJEAFekwLd3Cx%2BRY3WUKrY7SE0h%2BlxBdrmn82VTRmS2e9h3ajQjOKeMaLEGNW6z7SExq%2Fl8K0xdnSHglKRsMKxWn0oMSmLc5EC5qsHk4EQb4YYcG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e8d0e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/fiba.a120814ed8498e141c1b.svg
200 OK 580 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/fiba.a120814ed8498e141c1b.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash ceaba0ab8c8438f8b3d78d6a6c6d4c97
91798576fedf6871d3746e5b9dc27eca3a40a540
9c4527bf56e87d0ad517cf17b30a5c45404dbec1c75ead61d459c8a76785f659
GET /spa-static/1.4.1460/static/media/fiba.a120814ed8498e141c1b.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-244"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2BU9KmdvxkHWOPXMfxeVbk5bcK1oYBFojfPYF%2BDoWEDT6hpCcPUuCu3rZ31JJnw3aiPp3bxF25KFy2YT0UOSSdXvQ%2BHlxtJRsnPwghh%2BQgLoknH5TnLx2rpKVIy0wokXyK%2BL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead35568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/8798.bfb20c35.chunk.css
200 OK 24 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/8798.bfb20c35.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (24498), with no line terminators
Hash 3759dbea221caa9b4c5482e0c900462a
0df6c42325f20d0cec70d978a0cd7254fbc4f0a9
205c1d3aeab0cd18024862b27dd63690e4a47bef4ee2786a5d4e8a8fc7a701e1
GET /spa-static/1.4.1460/static/css/8798.bfb20c35.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-5fb2"
expires: Sat, 04 May 2024 13:16:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 20
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FwoSeFi5yu7INI7h9d1N4wD%2BO6jGDl0NSYFhvq4eLIZxDO3N6CC%2FwFo%2BLmvhDBmlX1EckLLwUeqPWXL4qzXFt3XUecT4dyDeYfFvVy376E6tQ3eXZp1RZ8MEJPQeN9o0Ur8i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76451989d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
agstatic.com/games/evosw/top_card.jpg
200 OK 129 kB URL GET HTTP/2 agstatic.com/games/evosw/top_card.jpg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subject*.agstatic.com
FingerprintFC:B2:8D:AE:33:A2:16:2C:0A:D4:DB:D6:DE:2A:2A:CA:07:0E:00:05
ValidityWed, 24 Apr 2024 00:00:00 GMT - Fri, 23 May 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 640x480, components 3
Size 129 kB (128576 bytes)
Hash f8a39a2c0e2e53db89017528f1657cfe
c5f5070ac284b063c0191cda4ecffbf2750093df
d68a9373c964d95ad62c7705a89b27d9980ef369d4f0ccb4a02c3345525b6312
GET /games/evosw/top_card.jpg HTTP/1.1
Host: agstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 128576
date: Fri, 03 May 2024 11:37:33 GMT
last-modified: Tue, 26 Dec 2023 14:01:45 GMT
etag: "f8a39a2c0e2e53db89017528f1657cfe"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 0EB8VFL3UvGAb7tvswXbemGsiovNj0jfW3y1EtZdSDMXFRKz9MEyMA==
age: 77939
vary: Origin
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/triple_arrow.ea71882e83af233365b7.svg
200 OK 676 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/triple_arrow.ea71882e83af233365b7.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 79ea3646abc18b35e0bc6c4b660817b8
28e3f93481f0cf2b5a2d601d607fa018f4ff6516
fecf0b8641c50e09586c7483ab8b7da50972e1b2e44c4c3e21ebe6502c045c31
GET /spa-static/1.4.1460/static/media/triple_arrow.ea71882e83af233365b7.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn%2BdyjbmTWoPUj1i70N6CZ8SeMnVx2tBDhNmmffMQoIAN6HE5mVjuamvTCYoA%2FLpe2sKbowjPGAb5kZx9B68xFh5v%2Bv8wczRhsGZq6Or0VDcpMV6Ruzyv1lKU8EJtYAfJL%2B0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764767f42568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/websocket/credentials
200 OK 260 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/websocket/credentials
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash b96c4cfa9ce399a82e6517305cc61097
69053f6c3cabfefc693b80822d5c29aa9bd44c52
81064f98308ed35f1a51cde7790ad1ac613166e8a47694b5083aa2ebb8a91892
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/websocket/credentials HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a20212bccc2a8699-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 15a2920df1c05a00fcbdd544ab27fdd4
pragma: no-cache
expires: Sat, 04 May 2024 09:16:24 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/cabin.7fb81ea829d8ca7f9c7d.svg
200 OK 2.7 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/cabin.7fb81ea829d8ca7f9c7d.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 53ae048a35c662d791a20936b4317ec2
48b92b520ce45d36a4eeccab93d07d6d588fe698
a4b793c56e944c8bd7111719a0c630a928842d5c60ea1d7d437cb96eff2534e0
GET /spa-static/1.4.1460/static/media/cabin.7fb81ea829d8ca7f9c7d.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-a5f"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O4uQgT8arAyjkX1%2BCq%2Bw13%2Flc1MDTMRgmf6NW1seMaCJQtJDBQnsITOlhYULa%2FoAnigZIc2%2F69NO1mqkfy3NHhB%2BGZn3%2BuMPVFdxEMfqYU7gYLx87%2Blt5er472JXiy3ibkk2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e9d23568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/%D0%A1%D0%BE%D0%B1%D0%B0%D1%87%D1%8C%D0%B8%20%D0%B1%D0%B5%D0%B3%D0%B0%20%D0%B5%D1%89%D0%B5.svg
200 OK 1.9 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/%D0%A1%D0%BE%D0%B1%D0%B0%D1%87%D1%8C%D0%B8%20%D0%B1%D0%B5%D0%B3%D0%B0%20%D0%B5%D1%89%D0%B5.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 88b85fce54d8dc721d473e8730f14efd
777a2675cb0a25f8c785b237b74021ed451da472
2ca6d1d39d497aeda97f8f8e6f8e9d0e701ac40bdd92e1abc336a6266f74496d
GET /upload/images/sport%20icons/%D0%A1%D0%BE%D0%B1%D0%B0%D1%87%D1%8C%D0%B8%20%D0%B1%D0%B5%D0%B3%D0%B0%20%D0%B5%D1%89%D0%B5.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"582b207a9b1ccae490a074251fecd8d2"
last-modified: Thu, 30 Nov 2023 07:18:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB22F77EAE61CE
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRzmjjV293w40A3xgPm%2FE%2F3JEdTuYMO9WsbOtA0M7mx1weBjlmMzjhAeI2Yprm%2Fk7GxRmB3u1XPkxPLur5TfsAWl0F32aaXD95nx%2FhvBd2KvJaobxkKntHVzTojPnEzwVkxsOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d4f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/1151.c1ae6cc5.chunk.js
200 OK 20 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/1151.c1ae6cc5.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (20478), with no line terminators
Hash 86479478b31cb43f6825258ae6d29217
c8d8bc0603a00f6fca90b2acaf69185a79ceac96
eea6dccc03a83268561609b2a20059fed3492e9ce9acc7a031b3236ce45a837d
GET /spa-static/1.4.1460/static/js/1151.c1ae6cc5.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4ffe"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3yGbKXZmY8ME9F3x%2Fj7Xcv%2FfwjA2kB7n5JYV0WNezg11uKwGu2diqljjCY8BDSXXbt0QzN10%2BJ9eoQOaVrVdYWyndozwAd3aM6uNRp8PrtSZCbwcvQSKJEOjVc0uspXyS%2Fmj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b3951568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/house.443c2cc7f0bf720a41a1.svg
200 OK 366 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/house.443c2cc7f0bf720a41a1.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 65765dbea080cf4ce0ef82238ea2d20b
0ad79a61e2637b614e4409f9e33e9e605bd5ed0e
8a2b2a34cb115e58a0b94bd53bf85e77352bc2c6020b4b5caebd5964edf494b0
GET /spa-static/1.4.1460/static/media/house.443c2cc7f0bf720a41a1.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-16e"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M01AcSE1%2Fg63zhcVY5ngtR%2BxUgI%2BVKRBsM5F%2BxLIxqV38gIwt11PuWxPDX84wOfl%2B%2FXXkDvDAwOe1wfyuAaKKrbhqZNvezRQIMm76eD2uI0DWtd9lSIrljNu8lmJpPBihrY%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764514849568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mst.com/spa-static/image/sport_logo.png
404 Not Found 0 B URL GET HTTP/2 front.cdn-mst.com/spa-static/image/sport_logo.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /spa-static/image/sport_logo.png HTTP/1.1
Host: front.cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 04 May 2024 09:16:22 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 170
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3uJW%2BceGWEjVDIbOwG1b5QtB6tdKiawghzR9GV%2FtnlNfnxW6zQyz8qJVyCY%2FnSi2vTzKKKdcLlfL0qT2tSHXZqELBhNMj4bjNxtQ%2FcHthCGhL43xgZnmYWz17PVGkgL4%2FVjw3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764409a1056c9-OSL
content-encoding: br
X-Firefox-Spdy: h2
len6gyisnhmb.com/api/v3/widget/get-list.json
200 OK 143 B URL GET HTTP/2 len6gyisnhmb.com/api/v3/widget/get-list.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0a4fd6d2d3ecfcc83e0d87efad210e4b
921022de1f2a9900c92fab866b1901c75643a70c
d6184e68715de64884a2df84156d648f15606d6dcb9b574f42b40506dcd98be9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v3/widget/get-list.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-af944eb684d0a980-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: cf12c1800f83a2c0b276e7daeca3e096
pragma: no-cache
expires: Sat, 04 May 2024 09:16:24 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/by.da99aaa559633b439aa3.svg
200 OK 6.1 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/by.da99aaa559633b439aa3.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d81bf5c3432d529023c99c9b5aaae172
08d5b413fb3f215d0f48a20cbf9abf9e8f47e724
1bfa56a594b31db9a3c357469d07d010b2c32a40eac7e5a178b848d6c70b01b5
GET /spa-static/1.4.1460/static/media/by.da99aaa559633b439aa3.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-17c6"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2FrNJ0sIclVN5LTKfah%2Fl6v%2FVmKz9q%2FsuJUDfwmkQmbXsrjfWBGSPv4QyHs1fpvTABFwI6GdBUCKvxyIVm%2FGITiEIBBtrdY7PeAr0lHjr45o1rLAK2ctUyfw1gxknbmJJo08"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e2ca4568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/android.dd4e4ba3ee281d0c0174.svg
200 OK 624 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/android.dd4e4ba3ee281d0c0174.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 0ac4c5ffd0cc8107b89f53a6a39fcfbc
c234a9f5d9f92e71aeab4b4ccf279231d0991161
dd39990cb77626ae78bd984224daee81e2b29d6d9646538cda7480731f2ee955
GET /spa-static/1.4.1460/static/media/android.dd4e4ba3ee281d0c0174.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-270"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QgtuWNXgRm79aeiQfueUxkoWlPT2iX4R6EtonMZgcveSKMCM5CblR4daIGH4pjS7oqwMsHYZYnNhUMcpO6IUoFvfQC8q1ZruC5sO%2FxLeiKEpeItNDklDcWnOFBue24U3787O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e6cec568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/futsal.svg
200 OK 572 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/futsal.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash c9c01a37dfd47f32fef506e36efb2f03
1d605650364e808ab2febc1064efe4bca2a5f098
5b527d7801afb924d2a5809c8f2c8fdd81f81c3b244de4c6bfb0a442c6610046
GET /upload/images/sport%20icons/futsal.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"b2501eea1e12ddd2e9962deef1fa4fd9"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1B1FF397218B
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5OGLHU1221jJG5tY7vdm0bXAbK5wW7ThJig4w1Vh1z3xwRKyKPwa92uHpAGin77at4NnnMmOeLaozn2PKsgooBkAdDQTtzq7ASFSMTfqn4RefpQbIpq7Pj2%2FcZ7Ve%2Bdst6SSwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d3d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/darts.svg
200 OK 803 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/darts.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3bf20fdeb2a03c0d2464bcb0f87594b4
34454744fd156380dbf062d2aab1df508ca56eeb
a3bd8e3893622adf67af7beea8e981911c82a0f1122bcf1a4ae1ad23745535aa
GET /upload/images/sport%20icons/darts.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"413465be1196d1a375d3ace31262b59d"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB22F77C74BDAD
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rVl0kwnAwyPpQtF6Cl%2Fp4ci7R8RDfLMXgZugDwbx0hj%2FxkeRS1s3itTHZlTuzqkqyR6w7F2EeUNCr%2FJ%2FOmu0AXT6p8AHMiVX7joL5nCprm29okVlE0CezU%2BcH20KkOddabNHnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d44568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/velosport%2020%D1%8520.svg
200 OK 2.2 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/velosport%2020%D1%8520.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash ab200e78c5157bda59be054494fd7b60
396d28928748302037b55c3ff1c0f4f57f2c47e1
f1e2382701fa7d9e4dfde034c6bec64a601170f1538fce7cc6879d97ceb09a3f
GET /upload/images/sport%20icons/velosport%2020%D1%8520.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"5f2b108787374790285c7c6af790e79d"
last-modified: Wed, 27 Mar 2024 06:33:13 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB2807A1932D1B
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MP76bKrfYkUKqetRhcAMksB%2FbyqivOohRrXACuadLjyz8x70OkXoSOvK%2FP0p6TgxtjEBt3cLd9MXeKQV4EtjPUI6Jc9UWeuO8AnG9EDJxROblDsV2UlQcYjGfzsCtT%2Bi1b6GAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d4d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/2845.714066cc.chunk.js
200 OK 516 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/2845.714066cc.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (534), with no line terminators
Hash b7526268e7a369d0e996bca0d76dfe6c
de0afca65fd172cc415482ad9f8cde892ac51b69
1fe5f3b5846b734c57b3e5f67296b3c9467604597f1c0d76492d14283a224410
GET /spa-static/1.4.1460/static/js/2845.714066cc.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-204"
expires: Sat, 04 May 2024 13:16:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TVMvl0408t%2FPyYZqvmdHDmvyomIhGb2cD8KZkqugtw5Ke5CsAEherNdbOL9bDd3a0LC9s%2BOkjtoE1zRhBTIsySeLvPCgZJgXFiqET2cffV0xc4jSm98GoI9zblaE3aLD%2BTuA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c8aaa568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/hu.7ae2a1f04ec537fbba4b.svg
200 OK 276 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/hu.7ae2a1f04ec537fbba4b.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 7e797a283085b403f55bb9f6e5b97d3d
ca2a1ef951f7798b2af6d723a29a9aaa8860cb08
1c73db9f929e74735bdc69f6fbbd9cdd9db9bffd8b04ce69b2cc75f61255ff76
GET /spa-static/1.4.1460/static/media/hu.7ae2a1f04ec537fbba4b.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-114"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tgGLzGoWC73dyzIntPVkHAxtQetwnuIdMeUeP8rqjXyOZmn%2FXi2nFN0t159NEcjBRGnDrtiESvZ2LwbUK%2FSXoCMQKxZ73XcXT45ykWtTx5FLuCFnzxWnk1IAfR8%2FLYGbedcx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dfc62568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v3/payment_logo
200 OK 328 B URL GET HTTP/2 len6gyisnhmb.com/api/v3/payment_logo
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (365), with no line terminators
Hash 380c95bbadbe4352889e018de618d222
cdb30e3f4409fc190aeb9d8c36ff0e6ddd37b71f
a567c17f1f8204ea9ac199eab72bc5ac847bd56442556dbf7b6781b0c30b836a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v3/payment_logo HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-ad2f23da4f4b1b13-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 75abb82a01fccfd84e63c9b9ba2f8146
pragma: no-cache
expires: Sat, 04 May 2024 09:16:24 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/beach-soccer.svg
200 OK 1.1 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/beach-soccer.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 55649ddf1478d5e264bca24c0a8448b3
81923981c1c9fb438a70b0edb0a35754fab9de4d
f4582dd8ba3625ae8ba3d5ec4d3bd230872533f70cfc7d8ad2c04f5d201f2bdb
GET /upload/images/sport%20icons/beach-soccer.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"5a17ab6870849a3a0d6386285c64d555"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB1EEBF41D5F17
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C26BIsvh3G%2FKxO1NO%2B5g7%2FgQrzN19%2FMn5a%2F5Sa%2BMJDBGBPBFlcFI%2FouWa2ZquRjEPBF1jgyNmVwwyw2S05caRSBx4LEe%2FedMpOdJSBrDf323X2fnJeog2%2FJG%2F%2B6xey22iObqMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d42568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/3334.63b131a0.chunk.css
200 OK 12 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/3334.63b131a0.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (11946), with no line terminators
Hash 65e5467b405dc96b6ec02a5873b669b4
1b6dc054523d4399f3af60cf93aaa830e7e24720
9bef141e82c76f9ffa06e6e032256ac1cc6879effc06931d632c2ce76707d909
GET /spa-static/1.4.1460/static/css/3334.63b131a0.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2eaa"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0y0sju4Lid9a7sSlIaD5NHnoQcZ9yS1uTmLTnE%2B%2BdfttEHEVH%2F1MoeIFbvj0ugUh36iUuJwbqLmmPXSiQWcOlTVo6Qt5rxbKslS5pg8JL%2BefuVKS8Z%2B2lOl7VJNRS1kQuX2O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f4deb568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
code.jivosite.com/widget/zV6xlxr9an
200 OK 18 kB URL GET HTTP/2 code.jivosite.com/widget/zV6xlxr9an
IP
ASN #210756 EdgeCenter LLC
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint6A:41:12:C8:EC:EE:63:EB:7E:7B:99:90:E1:79:CD:03:6A:73:70:7B
ValidityFri, 05 Apr 2024 20:09:22 GMT - Wed, 07 May 2025 20:09:22 GMT
File type JavaScript source, ASCII text, with very long lines (17637), with no line terminators
Hash c187ea619c2028554c6e93bc3a8c99fd
9047b2351bc2389dd84edf455151800f9db31cba
d2daa1ce8a682d60052f125ad10fddc233bbf081e9c0d9bc5580e71e697cb624
GET /widget/zV6xlxr9an HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:28 GMT
content-type: application/javascript
content-length: 6056
access-control-allow-origin: *
cache-control: max-age=7200
content-encoding: br
etag: "661fba80-17a8"
expires: Sat, 27 Apr 2024 13:05:37 GMT
last-modified: Wed, 17 Apr 2024 12:03:12 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: sber1
cache: HIT
x-cached-since: 2024-05-04T07:27:15+00:00
x-node: blm-up-gc142
accept-ranges: bytes
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/aussie-rules.svg
200 OK 920 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/aussie-rules.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 0f928568fe7a2cc58adee56dacdd7f8b
d54083748ffeb39ffe349c0b77977771ec11d220
378970e6365ed0363f4b27d53559345d080e5e00c3c31c2de34a1a913dffd5b4
GET /upload/images/sport%20icons/aussie-rules.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"bbd39c49e182ab2bf3e740d0ea68ac7c"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1EEBF283797D
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XGURwPqlLZWORj4ECxpfbu3Hgk2htMCBLyG9JznB56YKGqihDs9eHkM%2BTYMru%2F3BYAfep2CCYOImOBcNAxp43KmVVKezANM6lu767RNVlOlRahzDDaTsuOdDAJ44Te1VV4ld3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d3e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/odd_formats.json
200 OK 593 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/odd_formats.json
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type ASCII text, with very long lines (706), with no line terminators
Hash c458916f4a4a7cc710f5699229b71460
88c47c2a0f46071ea92e597dddad758048f907ce
85214e8bce6051dd79429bf7dfbfebc8019f98e5d9de7836701eb1812502c835
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/odd_formats.json HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-bc9442e90ec36286-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
etag: W/"20a38d1f96b65c665ef75281603581a2"
x-request-id: a4397cf099247d180c185802d7aabe6d
vary: Accept-Encoding, Accept-Language
expires: Sat, 04 May 2024 09:16:24 GMT
set-cookie: _odd_format=decimal; expires=Sun, 04-May-2025 09:16:24 GMT; Max-Age=31536000; path=/; secure
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/double_arrows_to_right.54a618bf8611f814c943.svg
200 OK 427 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/double_arrows_to_right.54a618bf8611f814c943.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 026f50522667831e1692d94448b4a95a
b6e1e965adb9f98a388563e149245a12d0972947
605eb291b378d5ed79065998c3140f806f0a4be203c859c29e40fa601d0e0522
GET /spa-static/1.4.1460/static/media/double_arrows_to_right.54a618bf8611f814c943.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1ab"
expires: Sat, 04 May 2024 11:40:20 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CftQAm%2FQK63itLH3HdZ%2Fyza2hN7SD2FGkONYPg7M0QBIGOaN5xE8ZjTo5r0RdKrCk1B3JY3OvCBariOZVWMqScA0%2F35E%2FHxn4nS1DywNq7MDXq02Ah1YDjN%2FQ63MGXVC5O1l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7646e9e59568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fZoHZubhG5XvXgWTtvrv5TigC%2Fz4TptqnN0rkCwCRKk%2BDFlrowmz8koStWAPK63KJgRFcz7Xz%2B0TUpVeWo5Pz%2BWZJySrzxpM7LPej8gimYLrxvRNN4V%2FIB0FaQKnTqnTmTS0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476ffc6568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/android.dd4e4ba3ee281d0c0174.svg
200 OK 624 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/android.dd4e4ba3ee281d0c0174.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 0ac4c5ffd0cc8107b89f53a6a39fcfbc
c234a9f5d9f92e71aeab4b4ccf279231d0991161
dd39990cb77626ae78bd984224daee81e2b29d6d9646538cda7480731f2ee955
GET /spa-static/1.4.1460/static/media/android.dd4e4ba3ee281d0c0174.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-270"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=snDLhmDuDQ8zYePjVe5VldxkVSH5dBEvhp9d6HH1b48QHtumvfWupP1Qiq5GOj1MwVdllH%2FZ5g6DS1kK%2FT3IH%2F4YaYEB1TL2E8B0prsjR0lL7L3UUMgyP%2F1MIsVeOOwrvK1u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead26568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/counter-strike.svg
200 OK 3.1 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/counter-strike.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash df2de70c21140d95d0416d32fc5e5197
c17b756722dd15be54d0e13f581e0d501edae124
61098e7367c8c9aaec8cae5ed2b4b794e8e008f53e678ea522aef20ec05b6b1c
GET /upload/images/sport%20icons/counter-strike.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"8fc1052b6b10859b5a93e0f6b0be249d"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1B1FF34B8C5B
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FToZOzslCx5eu1U%2B020UWK280iHSRkTTAyBPLw4v1aVECl%2FHDQA6aRCUjRfxoBVQoaFfrZBhub450%2BxPS%2F8MGrXyl4pvW4mBeSDCZ0kmc0es9RFPwHFEnfeTgBSnh9wxBVgOFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764740c91568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ru.f760036294e1fff52a9a.svg
200 OK 290 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ru.f760036294e1fff52a9a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 8bc255c4964aec05c6b37cd9829df956
4fcceffa561dac4bdd60b4328d2de7f65af9deea
f7a3b9075712676245523967350248a0f5d00e52a9c9fd4d6601e75d8f587993
GET /spa-static/1.4.1460/static/media/ru.f760036294e1fff52a9a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-122"
expires: Sat, 04 May 2024 11:55:08 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 4876
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h5SM5ahW8a5SWRX2iuDp0rFItbg6sTmy4kwS68XgB5eH%2FtYTvr1F%2B15P8PDnhkhZz8iqVTeBmBLOUh6fBSwME0dIBvSxwHvuEiIE78Q3%2FtgAxlSB50F5cJS0zqw7byZlebSR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc00568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/cz.1b3452b8ce83987fb494.svg
200 OK 232 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/cz.1b3452b8ce83987fb494.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 69f414443aaf4943c89cf73700afbaa2
a43faa392ef768cddb79015c992efb9817207a84
d79b712ad282bb991f6d441cfaa993c45267b37045ffca90277c5ae0d42d7fce
GET /spa-static/1.4.1460/static/media/cz.1b3452b8ce83987fb494.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-e8"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s5KvfZHNenXG%2BPilkiC3lP2Tcj7cfUWIILN7k8k%2BpqrFJP8pHKd76PZNlFgJ8DD9TPBk967%2Fow%2B0QgXzWeJL2m9c0%2BtfI%2BeUwVQ07gbcC5%2FzqB6yuiDeLPzzvMRuc26u76KQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dfc5a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/apple.cbf1481204d20150372c.svg
200 OK 533 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/apple.cbf1481204d20150372c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash bb359828eb503954e0a104388e976808
0ad189c7689b8c8e7a2e54c33cb0bc62911dec47
67834ad87855ba9457191ecf7792c72fd29a9f84e3a333334d75f6e3ffb0f564
GET /spa-static/1.4.1460/static/media/apple.cbf1481204d20150372c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-215"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ILzuhiN2tz%2FuMjOsTj72AkZi0pz4EMoPYBpANJPbjZ6LnjAZp%2BwL4Y0N1GwGqMuDp0sq3sDJNx2A6ZSUpK3fOxmTCAWP78kVSyTGTckzDiFU4GjDYMzZttFtmKVA3NFYZZdS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e6cf2568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
200 OK 47 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type HTML document, ASCII text, with very long lines (38639)
Hash 131fd24ca676cb8d55d3d7d0392b904e
42d4f74928f54b7e6383b8dcfc7edcba148f3ec7
bd3de593422ef372d9b30ce1f8bf6b71d49b296ce2c07388c7c3340780487716
GET /recaptcha/api2/anchor?ar=1&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j&co=aHR0cHM6Ly9sZW42Z3lpc25obWIuY29tOjQ0Mw..&hl=ru&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=inline&cb=ml82vvewr9gz HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 04 May 2024 09:16:26 GMT
content-security-policy: script-src 'nonce-kv9E4m9QlFIaoiwvar0Yxg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
upload.cdn-mb.com/upload/images/sport%20icons/league-of-legends.svg
200 OK 2.7 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/league-of-legends.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 63709fe141250f526bf5070bac81a018
9614f6306b3815b95bf493cbba32bd4924afd044
1b9f2a527907aaec8d7c821503bfb18278cb98fcf27383c2bac60f18fe3f5d93
GET /upload/images/sport%20icons/league-of-legends.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"3a40f6c16fee122888f38e65adae2828"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB28079FB8515C
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ow6n3mhxgFgG981ke2224FWrusvgUiZBOXGZlkd%2F%2BkThNoCnqUep%2FyjtscqeW2e4RiGHRXipNyA7DBFy8Lk7tivwlIkcxqF%2Bbe0IXo1ki4a8EEDXznFbAy9KBNjIVTQgATOxFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d51568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Italic.87f3afe16a8c3c370634.ttf
200 OK 170 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/Roboto-Italic.87f3afe16a8c3c370634.ttf
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoItalicRoboto ItalicVersion 2.137; 2017Robot
Size 170 kB (170504 bytes)
Hash cebd892d1acfcc455f5e52d4104f2719
65f3f6a7e1bd2fa6f2df35e4b07775d7f1dde4f0
99e4a85061136e99e052929ed0d85e36384fba5c34b773139a8f64339c609943
GET /spa-static/1.4.1460/static/media/Roboto-Italic.87f3afe16a8c3c370634.ttf HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: application/octet-stream
content-length: 170504
last-modified: Thu, 02 May 2024 12:18:34 GMT
etag: "6633849a-29a08"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5776
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=in5AmrF3rr%2FTLvNgadDS80t4qj1A1fJAl5d0DM91t85uKM7BYtn4pQ%2B5ujBrYvcmOHzfHLekzzhhzs88kP%2B1eslELTUhf%2Bs8knyM%2FFVpe3v5MDUdJXTQ%2BGEC5BNQa0wKa6qQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76475de90568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
200 OK 389 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3444a15490e7c6ce78ea7397ef0c1431
c88d5148a111eaa55686fc3357485f9a787fa675
5bfc5920e65a65d21287ec1f0d0e56b63299ef7b166e72cd661e8fcbfcb76bf7
GET /spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-185"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJL9e2%2BkdGkVBxBKNOU4cRyAGsKVgZB7dyog1FOJDKJIglJHwrEYiruLNXwsM1GwO%2BIP08FTLL3NGRxUXoXnDYkCALVLVOhcUZLPDlbnZwi6XN%2FGdxXEsRAU%2BYNSL3n9AKai"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e9d1c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
eu.api.fpjs.io/DwmA/JNZ1Dz7/7?q=OszY8YxLtMbMKK8o3fGo
200 OK 96 B URL GET HTTP/2 eu.api.fpjs.io/DwmA/JNZ1Dz7/7?q=OszY8YxLtMbMKK8o3fGo
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerAmazon
Subjecteu.api.fpjs.io
Fingerprint88:16:BF:78:24:5B:DC:12:F9:B4:7B:4E:20:49:53:0F:CD:6A:FA:5B
ValiditySun, 26 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash bb8e1c296c6997899bd11dd7196092e9
9de7b3dd2d3c43a4baf8f1ebe06d7c786eec96d0
ab2ade77466259836e3a9c5c5f5896dd5b194ec6cbed3dd79b9c77b32a879193
GET /DwmA/JNZ1Dz7/7?q=OszY8YxLtMbMKK8o3fGo HTTP/1.1
Host: eu.api.fpjs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:27 GMT
content-type: text/plain; charset=utf-8
content-length: 96
access-control-allow-origin: *
access-control-expose-headers: Retry-After
cache-control: max-age=31536000, immutable, private
content-security-policy: default-src 'none'; frame-ancestors 'none'
referrer-policy: no-referrer
strict-transport-security: max-age=63072000
timing-allow-origin: *
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex
X-Firefox-Spdy: h2
len6gyisnhmb.com/an/lib.js
200 OK 89 kB URL GET HTTP/2 len6gyisnhmb.com/an/lib.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /an/lib.js HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:21 GMT
content-type: text/javascript
x-frame-options: SAMEORIGIN
x-xss-protection: 1
access-control-allow-origin: https://len6gyisnhmb.com
access-control-allow-credentials: true
access-control-expose-headers: Content-Length,Content-Type
pragma: no-cache
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
set-cookie: uid=7192451982571864066; Domain=len6gyisnhmb.com; Path=/; Expires=Mon, 03 May 2027 14:10:16 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 0
cache-control: no-cache, no-store, must-revalidate, no-store; must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/css/1006.17fe5b69.chunk.css
200 OK 3.5 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/1006.17fe5b69.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (3524), with no line terminators
Hash 30032b717e8a3ebaf3b68ce31d104cc9
51a6b45256164b4cababa525a7a7f696aec8bb63
1be54593547bc630b76603bd94371359eeb52087d8dbf5641e87da9655c52e1a
GET /spa-static/1.4.1460/static/css/1006.17fe5b69.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-dc1"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SDcpZ5%2FBJY0TWT9Q%2Bbqdw5aIKGESBlyqpAqmmz8jzrhlocZ%2BUr2Ye9kZ2nESW%2BaN01zMGwxTyVsn0mZ3cn9IcwFMNId%2BhWbHKTJIML2HVnwnDJnNt8UzNjTcXS1Y1Sh9OsPY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c4a4f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/gaelic_football.svg
200 OK 1.2 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/gaelic_football.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d8e5cdf80f83fb78bf419ba8b9a43b22
44ac528ad3820d36e71343608a2e797de306a36a
f12614be0def36672b301b410bfc15b290d8df41a6cdc7c3b9371a325c469fa9
GET /upload/images/sport%20icons/gaelic_football.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"53b66591a764ce940e22cee4a3f9b3c2"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB2807A178B6C2
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZZWbCUBEkOqTiN8L9G0dDNR7X6n20jogjfJohpNsm3d0QdKxpA5BQ9X3LuvVjQvEuznPgGzTVPr7OZw3qvW%2FFHVmPYlOhBcUFC%2BX4ClSg4IUpxh%2Bbd6UXMSPezJQEmlD0ds8NQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d48568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v2/translations?locales[]=ru&domains[]=messages&domains[]=promo&domains[]=validators&fallback=1
200 OK 16 MB URL GET HTTP/2 len6gyisnhmb.com/api/v2/translations?locales[]=ru&domains[]=messages&domains[]=promo&domains[]=validators&fallback=1
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Size 16 MB (16539114 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v2/translations?locales[]=ru&domains[]=messages&domains[]=promo&domains[]=validators&fallback=1 HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-b7d15c9cf6501bf6-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814182.0.0.0; _ga=GA1.1.1202729926.1714814183
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
etag: W/"a1476d22f8faa8f4dba01c801e2ab1a2"
x-request-id: adecc9a3d6d34d02ce23d1c81c175c81
pragma: no-cache
expires: Sat, 04 May 2024 09:16:23 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/fifa.238dbb2593c042f46387.svg
200 OK 310 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/fifa.238dbb2593c042f46387.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 2271c8bbbdd95ce7b5d6d29c7cf052ee
6d1f29b12b078548008caa4e1e0bc467f2178ae2
f9069c116a15ba3ca6af122c22d6846f99a5d5631c2a588e7488763034398a7a
GET /spa-static/1.4.1460/static/media/fifa.238dbb2593c042f46387.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-136"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9rrbDfYyKmKcNqOPUuH3yvaY5EAJ0fFCgNYnSrdoudmFIjBf7iFMrWaLEP518AU1CdOoDuGh%2FXhA29zJK567GmFQDHk0DEdT6a7sNAuXikyWypwDATfqnkoB5%2FIrb19mOpmf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead30568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/9184.895e720f.chunk.js
200 OK 35 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/9184.895e720f.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (34592), with no line terminators
Hash 63ea44c0c67d811199d83efbb8afb3f1
8bd3d2ee905cba54415eac1ac92a0f4591e76c5b
5bc4f2024f8af93b489257c0cfc09d780114c956c5d3bd6d205a46d9660dc427
GET /spa-static/1.4.1460/static/js/9184.895e720f.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-8720"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rzoy0K3m5Efs7Yamf%2BO%2B7C%2FjdGPlH2ryGXX94rt4TZfwdsRZh4wHTxB6GJYMYJJFC3SS%2Fs%2FqWKozHcEDQwHcmKlcyG3nVkCgTuKgL8wn5mU%2B1mXvwz7SnoUlM3XPsJGeTmGC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c7aa1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/uz.ba79d2974850ade2d036.svg
200 OK 1.5 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/uz.ba79d2974850ade2d036.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash eb9dc787cab1e62f3b2009ff1441ec5c
6e8f0e878197a63de5b2a1f1e02779e746a92064
a5ef53c3440deeb1e05d88a605ab8c1299c353710f6b1299a3dda8b09ba651df
GET /spa-static/1.4.1460/static/media/uz.ba79d2974850ade2d036.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-5ae"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KFX8bNw0iQvw%2FLeNJWC70y752d99ADQmCjfi%2FpM8EJ6%2B4fJGjfzTSWdQ1VrJ8HnVZeS8MG%2Bh9y%2F1W54cYdu0xM6EHKMgSPY%2Bel0QmDT88mB6aFPHcN45rLYRHqjItueFwt34"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc06568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/763.43474140.chunk.css
200 OK 5.4 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/763.43474140.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (5406), with no line terminators
Hash b9d2c0781b656d971717a0bd4cd1cbe5
de13eaaf870ea40b86a3d03762704a54d1635b40
3085b833dbf962aee0338a61840f238b53a3ac40d45ee1a93b443714c29f6405
GET /spa-static/1.4.1460/static/css/763.43474140.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1519"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ior%2Fwswzj2LBtjM3uVHEtuX1xTyi6jNOB0u8lo0E4rrzgNT4Lo%2Fxe5%2FqPegjcpP43V%2Bf10c1jHjzeOnmruiFIva9bJkEBF7o6WTXAaZrFeyrMead52yxAyGaM33IVexESOwV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f6e1d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/casino/games?page=1&itemsOnPage=6&platform=desktop
200 OK 3.7 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/casino/games?page=1&itemsOnPage=6&platform=desktop
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4217), with no line terminators
Hash c64c9cb5791df7c2c2d7fb0f32c822c5
5d12b62cebc8f5fd08d363d8fe11a67ad6f41c03
4b72568245cd2a526f4194ad3e7931b4a3511c62c0e10055481cd044be1b868f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/casino/games?page=1&itemsOnPage=6&platform=desktop HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a442f20ea8ce4bd8-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 2163aecd2df5a5aff9f05adb057e3947
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?onload=onloadcallback&render=explicit
200 OK 909 B URL GET HTTP/2 www.google.com/recaptcha/api.js?onload=onloadcallback&render=explicit
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File type JavaScript source, ASCII text, with very long lines (909), with no line terminators
Hash 0a0f356d65a3ea356a4820aeae12e203
566ca30321d46025dcba369ef11944423cedf29b
de316fd6f3c6ddc0567f56d6ba8e0e7a38c521c002ec05715e418e25eacbecb1
GET /recaptcha/api.js?onload=onloadcallback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 04 May 2024 09:16:24 GMT
date: Sat, 04 May 2024 09:16:24 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/3106.97d69f02.chunk.js
200 OK 18 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/3106.97d69f02.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (17829), with no line terminators
Hash 1925ff9cdd9dbc9b959e01dabc1986e8
2d2dd1a0525d5a12550bd1064a9431c73faf218c
eaa97ffcce55d964d4a22f49033d63f6906b02c00ac10fc52f6cd67c8c31232c
GET /spa-static/1.4.1460/static/js/3106.97d69f02.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-45a5"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0jyQO31bCrKgTIBk0JzMkSFgr2uA%2BIge9jBreTXEa4EYTSjr0KmX4od0OLo%2BzX1U8Si3XRwzUF40eUtQM1Dw%2FqPPZtg8A2TXC35OcSXN7XUSXduHznyrhxKZgvmhMULMpG2X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ccaf9568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/no.266dbd6fc3e66414aa3c.svg
200 OK 321 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/no.266dbd6fc3e66414aa3c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 4d1dd94b0f4aea449999ebdf40d3ddfc
93d29329d50d30ef1a1f5a7e393abaa7a74e3909
1257ad41975d079113e827e26f28f3207142944965163150c61241e2bb006d9e
GET /spa-static/1.4.1460/static/media/no.266dbd6fc3e66414aa3c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-141"
expires: Sat, 04 May 2024 09:48:46 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 12458
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WSW8I2cpwdMqf7sPWNX2FkvoGsWF9mcRuKcfRc3btZHIwdbupGdxApTmqNyDISO1cJnIh7X6tiXUTUMN0CkvGJ4iuZSkU%2BDYwitxFtreUcwFMd0yAo6%2BgRnznbQW7DTsTTA3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e2cb6568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/rugby.svg
200 OK 1.1 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/rugby.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 211b8b4173651e6cef1473d1fdc6db3a
a1a98536ada851926e47de1792329e28609aff9c
bdcd5e9a5c31db6d07d0e011d56c6f84d1b80a3fa22005614c520aadc6585745
GET /upload/images/sport%20icons/rugby.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"8969bc970bcd178e5f24667197c3a02c"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1B1FF1ADA0EE
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=knIWTnC92HYiLNkM24VDMTjAp%2FvISZuUc6qTd9VTqVR2jqpTN5d2NCYIzy%2BFlqTs%2BeVkBTCdeQsl79sa4pgvVPLs%2Befv2yB0rwb6Ft4Hry5%2FUo9RRceXcHflT%2BIvHjCduaaTNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d3b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SXz0W0Za%2BZidPYSjMG%2Bc%2Fq1Q5MOaL0K73NQQG%2FnvHRQyKYkMp1rE9rbzfD2P1fGnEIyXL8HWaX9Hi6HUHT1Vfr3LdFlatDnf5EH45qPqIrJIjg0aG0AOaJUmztqfXticSFi5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476ffbe568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ma.3b79aff17ae55b760333.svg
200 OK 250 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ma.3b79aff17ae55b760333.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f34c64ebea680c8996d1e9139997ebea
1c3c32bd56e7b5a9242b821e78617f8e991bd39c
c5579118caeda34c212db7f37afeedd2982eca63c3df7c4b9f90fe5a0d51be12
GET /spa-static/1.4.1460/static/media/ma.3b79aff17ae55b760333.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-fa"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qyDLIzxTLG2ZPuxGmHuovCZ4tkuW7NZXGc895koeOTz1MDZ%2FPxg0%2BOFmUuwJ8qm27rT3sNPa3dLxWENNz8narcp2%2BQMnG42VDGbouB76bIT3JyjB4jpJAddfY0sY6wQUrD57"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e0c82568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/sa.dbdc272cb217fd407ff8.svg
200 OK 10 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/sa.dbdc272cb217fd407ff8.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 135d0c86322f6763fb5631794b8af510
91394b420999bd3fb75ea94df03bc86f26ce2d5c
639ee1c158b0b61e8789bde27ae64edb246afe63cb8999e3468ca88c344927be
GET /spa-static/1.4.1460/static/media/sa.dbdc272cb217fd407ff8.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-27c3"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uqO3aWlBK4qIolJuO1Np0kfTmxEB%2B%2BKMZFZCMxn7BfAgVpuau1fufuJXY0a7gdJ1glE1E92q2JMUzEydb0naVGVEAV7%2BFCO%2BxoD3tRfl6nLKU1qMBCVMqhIlHXD%2B2pzdt6ai"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c8f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/t%20kick_mb.svg
200 OK 2.2 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/t%20kick_mb.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f21297344ff833083244a3326c28550c
2f03232701bf13eafddd1b438ede2669ed6b3d4f
a22afa4d459b3ab64f0d07615ad837ea918fd7b2aaaaa50205aea06d9d08a07e
GET /upload/images/sport%20icons/t%20kick_mb.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"aa45a5522b886c53e8b64e0e6db4001d"
last-modified: Thu, 30 Nov 2023 07:18:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1EEBF46B9C07
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IoViaM%2B1Xhn4rbzXhy7ZYiT7Gvfl2%2BRfYA1%2B%2B%2BthtZgEZILAiVRjutuk0vwPXi6RQXmkwpeuOnjbq6h4HvnnjuODDuL%2B5siU%2FcrURymVnqHivweNACCsb2D%2FlKdB7eJAMJKA%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d38568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/volleyball.svg
200 OK 1.4 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/volleyball.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash fde5777eff994697cfc7f094dfc261c2
a5bcfb8ff4295de32514bfd324ae431809bfb385
2fc8a6146d7e777e3614316d9804f093c6a33d760d3e84362c869bb6d20858fd
GET /upload/images/sport%20icons/volleyball.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"f4028dee6c7ef23f8c2369961f68b3c5"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB1EEBF3942AC2
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102013/ctime:1654102013/gid:33/gname:www-data/mode:33188/mtime:1654102013/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Xta%2FjVVBCbOkAJ5VgQACV3S%2FEIZq6bJuR5frMqgQ9%2BITtkTasKmn%2FxBH%2BAYHD5W8rhFo3XhMQaIkdTGogqI0rdtpIpw9cs8VDuTVksa2Xv93cwPAyEsZnO5GmKn959LpfQf6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764740c92568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/749.78ecc555.chunk.css
200 OK 31 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/749.78ecc555.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (31290), with no line terminators
Hash a90fabf7dbd4cace6b99604b45be51bc
13ff49f7d105310936512b0c73a368b89e872af1
91bf71ea11d191b68121d98fe983f437634c2633595747bca8e5f4f3e12cf6b2
GET /spa-static/1.4.1460/static/css/749.78ecc555.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-7a3a"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H8qapJ74uyv3aE2LfELcm%2BDVYgFEkZPVqkagmmSPm3oR%2FC8vnXy2p0oZGF8aQth8aqQblgQ2CusZlFM%2FW1JcT65hSaHwEb6eKzSYPNQn6MqQWhMkIZb7ecKN8QNK9OEe7YIP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b4969568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/2415.773e3880.chunk.js
200 OK 10 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/2415.773e3880.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (10381), with no line terminators
Hash 0e1fccdd457127fb804df78858861d36
289be02b8a6e507e943cf1dd9d6ce7cb26b54e68
d16ba31e363a37158aab9a1e32386049c20013b84250f8952f892d1956dced29
GET /spa-static/1.4.1460/static/js/2415.773e3880.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-288d"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HCeJtYoyqEO8s6O1W%2B%2FVs4%2FrmtUSdrYRZVyJmowQ%2FvwfXY6m0dgoghHVCLqNnfVCaPRMu5oYM5yZrlcTQV6Nj%2BLI5jzahflt1d65HlxqzM9NbrvmGG0VX4FIkbnpvwr8Hz%2FV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7645198a4568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/fire.254c3e5dda44853c03fd.svg
200 OK 848 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/fire.254c3e5dda44853c03fd.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 38400c65eaebf471089903f4a0ba863b
7abc97bd736fc81f4b409c56dc835d38bcfa97f2
452d75d60be5929e7d92209798c8e39c87af85f50ff43d39d59358318d33bd23
GET /spa-static/1.4.1460/static/media/fire.254c3e5dda44853c03fd.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-350"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D40R%2B5l0I8V8zaGIjHL50aOGiYj4Kz3LFeBzwkkphzsrbmYHr9jeSen1lac9Ej7tWtO%2B7Na2QKBUZ1kP7giXAnbC7obUhv8IXVdT8%2BDko%2B%2Fn45d7sL%2FLtO2H0sc6bsE0LaX%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76451a8ac568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKgBl5x4DlYBHwrfliiHGpvlAAasNL1xt61CubJ3CdwhP2TBEYIDb%2BS2GEp8S5rkRkiOqU9Inlej42p%2FIzZ524PlfbAGYH33WcaelPSP%2BbO1fjZ%2B3jOtamKzH6Jy1EWROT1E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476efad568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/9841.b9d1be56.chunk.js
200 OK 342 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/9841.b9d1be56.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65459)
Size 342 kB (341602 bytes)
Hash 6c060fc68917f6c5d204afffa70c36b3
7c3e5e721693f7f247c63c88905fc8cd984f254b
8aecd4aee03088c58a6af8462b2d4f0329055b790a9a6e6190a6c604874bf08c
GET /spa-static/1.4.1460/static/js/9841.b9d1be56.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-53662"
expires: Sat, 04 May 2024 13:11:18 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 305
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7nkZse%2FqVDGsKaNdgT%2FK0uR38PjP32JpmUSg5w2xkmaeGBIWxNNp9XLOI0u2VU%2F%2BW1l2qS12AM7opY3MVJz%2Fut2RtyZXLDdkaxeAE4e7PCPVCDU210iYlpK%2Fo3H5831PIZ3Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764488e52568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/footer_links
200 OK 142 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/footer_links
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash e95ea955005c54435f0fec73355c5b62
09e232455d03de8f05d197643f428cf38d9a6322
76f55c73bf9abd6c25cc220659138caaac0d0651ae5e51fc3cd162497717afe6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/footer_links HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-b55ddd81f7b2c19d-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 3dc47db60f525dc236e4ea69541cbb83
pragma: no-cache
expires: Sat, 04 May 2024 09:16:24 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/css/436.11401859.chunk.css
200 OK 111 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/436.11401859.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with no line terminators
Hash 888ce7cfff17e6d51f340286c9f028ee
a12d6b17df7d44283c6091b9b72d9626ae26d196
596faf4a56cd93b94a84858ad3c54c3bcec5cfaff81d17c26d5a36c687510f57
GET /spa-static/1.4.1460/static/css/436.11401859.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-6f"
expires: Sat, 04 May 2024 13:16:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CZgRtomDHBvDQimATdHKF8MpAWgXAwBnR575YJyELZq%2FFB7eUAXkoT%2BY%2FfSW8fAhLQ40iicX6Kx9QSYeaiqipkpHHBKC123TlgnnXRUadcipBvdZhdv7t52HEwdmN8ynPHzP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c6a87568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/2845.33c6a216.chunk.css
200 OK 9.6 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/2845.33c6a216.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (9612), with no line terminators
Hash 3c242e280a517dd21796293e237c8bbc
9d3d5d4e53e53c1df8d83f5eddc260f060e3432c
8542a3e5ff767d0ae8669843444093d30f0e9c492266c7c71d56bc4f3189e0a3
GET /spa-static/1.4.1460/static/css/2845.33c6a216.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2582"
expires: Sat, 04 May 2024 13:16:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BClobTn%2FzBnhoWOCi7xZ%2FhDdN2T%2BtkVHTbytO%2FKxZITglxUnJ2S6u7r0XonelVin%2FV6g2QWqXAPZYTFEuUUGbfSKkQSxVH%2F7C1rbeuvqf4loxArU6jEnq2DbvHqhUBdnNRtY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c8aa3568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/timezones
200 OK 48 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/timezones
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash f00495339a0b5ad14abbb3702095552d
38fa6787f889414da1db7c0f94dce20255c1571a
b46a1b7b5e3efa32ef7983dc883a42b309bcf3d483566c63fc2bc20c9d2f2eac
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/timezones HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-ad12c88651bd17bb-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
etag: W/"f00495339a0b5ad14abbb3702095552d"
x-request-id: b4b636d2ca4140aae3623b42f4023685
vary: Accept-Encoding, Accept-Language
expires: Sat, 04 May 2024 09:16:24 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
200 OK 330 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3657e8d7ea960099d85b41066581a142
4e5132ec708c7afb269ad627c40d12e0f7e434d7
b9eff9c3cdb9c872ceebd2d90a0538a37eb3230e29869561c79e872e267cd983
GET /spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-14a"
expires: Sat, 04 May 2024 11:40:17 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5sJMjoLVQn9IMeW1yqNgUjqTB6SkTEi8%2FZf%2BvpPFIhOfQYYxMug7fgcN3av9vvvUqWSv7xvixr9ewTMuh%2BKCz3NcYWcgqIasg4bXGaqKOsC28N%2Bnm8XMhgWm4aOKHZ6vNr6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76457e827568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/ice-hockey.svg
200 OK 679 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/ice-hockey.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 23e908c8ef60229f294d38c050a8e192
b588d405fd4bc56f0fa67a57f2970876981d3848
29e7cf876c6b6f8677c048d4c89276acc19eb06fe7a1306c1f6b82e48bce1838
GET /upload/images/sport%20icons/ice-hockey.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"10d425894ae12d10290eddcde1d131f9"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB22F77D5C2397
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 1524
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYlaoE91WolCeEQhYve%2FOfFplYI9PCvAIeJJgosnkZ3%2FE7Z4ZBuBfU64PifVOCXvAAlis%2Fr%2BliChXyAgkhybG2ixllHKweGafUFMnZqIYQW6PDTl5EJJWisv4AeVBUoHrLLeDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473bc2e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/7232.c5a49fb3.chunk.js
200 OK 1.1 MB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/7232.c5a49fb3.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
Size 1.1 MB (1127810 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /spa-static/1.4.1460/static/js/7232.c5a49fb3.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:22 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-113582"
expires: Sat, 04 May 2024 13:11:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 309
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dcPI%2BlYF8SAdypHFwy6wD%2FyVA3fe9Viy4V7a4zc2qXS%2FWDP2ah%2F4ZO3N5W9zRro9vWVPuLkQB2yBBWyYJS%2FfzGjw7rH74SHaAxtVob8IJVge1XXds7ItAlvcrVdD%2B1fqiTSg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7643d7be7568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
microfrontend.wol-prod.com/widget.js?v=1714652040430
200 OK 17 kB URL GET HTTP/2 microfrontend.wol-prod.com/widget.js?v=1714652040430
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectwol-prod.com
Fingerprint95:28:9F:84:D1:0A:C8:8F:33:5C:4C:25:94:40:AA:E8:7A:44:FC:C7
ValiditySun, 24 Mar 2024 18:31:01 GMT - Sat, 22 Jun 2024 18:31:00 GMT
File type JavaScript source, ASCII text, with very long lines (16709), with no line terminators
Hash 8b78600d67b6ec41e3a43832d3a6cea7
a853c9657be83c055c4e87383059a9c1a5e61f93
d7bf7de81eb644ed982fdb00c946dd4601a9268b092c97b372c2682e408617ec
GET /widget.js?v=1714652040430 HTTP/1.1
Host: microfrontend.wol-prod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 11:29:39 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"66337923-4145"
expires: Sun, 04 May 2025 09:16:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, OPTIONS, DELETE
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6EWd5NJzwPDxBGGAP5ItmBGzKBrXbMvdYsmYdMEbDnrgtNvEz0GPEYzC8npUcJ%2FVEqjVHdgx4tf%2BXqge%2BtDTCAYGOJHq4z7B1BdVeSc2jrr38O2SBNe4so2FcFd8ql89rPjTknha1cQRQ8QLhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7643db8a4b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/in.e626d1bb4e16e732e1dd.svg
200 OK 1.1 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/in.e626d1bb4e16e732e1dd.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f9e16d2ca15c9e4944b2a9284239bcec
dd2e28ef3bb0b84086793d1cc84dee907c8665a4
3d49104198bb752261ce1b52e16f4f4fde0177c4a6b528c4d3e3c912b9d0abd2
GET /spa-static/1.4.1460/static/media/in.e626d1bb4e16e732e1dd.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-440"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x5c9EFslLoGCe456NXforgXOx8f7dHaMZjMc2tu%2BsC5%2BnhoDg2KabW0%2BmJCXnX77LPJ11WrePm%2FEu4NpSQ8rY0v0SwxR2H0WwaiJ4XbxVTTxcozkaYN8dThhDRJn9uTcEU3Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc0f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/upload/images/sport%20icons/soccer.svg
200 OK 586 B URL GET HTTP/2 len6gyisnhmb.com/upload/images/sport%20icons/soccer.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type SVG Scalable Vector Graphics image
Hash 1a6d8af7357d2a2d19617860550d8c38
1e57b4f0c31e86c7294b19496f84667f61258088
3c774e9fd645258135e754bb72c656865ef9c788c721e72714f279b191062932
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/sport%20icons/soccer.svg HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
etag: W/"956c4b55e9fdc0fd0750a3175e37c09b"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CC080B47C4C01B
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
expires: Sun, 05 May 2024 09:16:26 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/audio_2x.png
200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 11:32:19 GMT
expires: Fri, 10 May 2024 11:32:19 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 78249
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E7VOfR%2FlZeox6nnv56dWVS7%2B4%2BLJAD03L9024YSUO4HOw81naO%2F7gpba1M4kNNJ5xn%2BQ%2F8MRl1EaeDvOBry%2FHyQvtKVkvN0Wkm554BbAGclbaNUSly%2FzVwapBAeF4B%2FT91pN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476ffc4568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/casino/games/top?page=1&itemsOnPage=6&platform=desktop
200 OK 14 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/casino/games/top?page=1&itemsOnPage=6&platform=desktop
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash 8db46791725c05a8c107cb750bd7276d
70214798e81fc7196b73dd569f056894395ff489
b375a183a96a4623107f3a123b31d4e9334ce2df42d90efce9e3f5c31ec83d18
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/casino/games/top?page=1&itemsOnPage=6&platform=desktop HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-950fd95a40028ad9-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: be3e33126ce8ef0767a60c11809ad18c
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/basketball_3x3.svg
200 OK 1.8 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/basketball_3x3.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash b934a7d93903b4e16cc1063239284b2e
ed15948deaefce103b989fb9ebf7c8ab1bad4f33
8467456b14f3a9d3241e0c4500513475d1153d416e9bcba23e06be29b348474d
GET /upload/images/sport%20icons/basketball_3x3.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"d29de6c5affd7a9a1f9d29165355a067"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB230571D5135A
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pCkOysBbvtDYY8fu2ltuxa%2FZcKXX39B%2FmGldZQnHKRssJceKqNBSEgRH%2FrAcJq0%2F9cnvQ9neN2lKC9SoU25O5bmvZv53oj%2BsP%2FGbKqwHTCg0Tb46meJltBTyDEr5wjeJkrFSnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d3f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn-mst.com/casino/game/10422/game_e8a6b6176c5a30442559c9687394d945.png
200 OK 97 kB URL GET HTTP/2 cdn-mst.com/casino/game/10422/game_e8a6b6176c5a30442559c9687394d945.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type PNG image data, 248 x 186, 8-bit/color RGB, non-interlaced
Hash 6660419fa31c28cc6691e875747fe83d
5118e98b3f4a3adf218604592bf2aaa13e4cc887
9532457733ef70cfda7aaac64112b4a70c0f3b4c6417f4fd403a54724b37eb3d
GET /casino/game/10422/game_e8a6b6176c5a30442559c9687394d945.png HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/png
content-length: 97015
last-modified: Fri, 03 May 2024 15:38:44 GMT
etag: "66350504-17af7"
expires: Sat, 04 May 2024 15:38:47 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 62979
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2B2ct5sb5NEVzrK6wB7KFgZPaW26yrkIUrw5YsHTXRy7%2BNfKt0lQYAgcCQKjt0y%2B7eHeKoQd%2FmaT1QYXtKCS5HdD0WXoC8wSSTT3JAGzAnm48yvg9%2FRkIchr8VNrrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764766e2356c9-OSL
X-Firefox-Spdy: h2
len6gyisnhmb.com/api/v3/universal-banner/list?position=main_slider§ion=main+page
200 OK 12 kB URL GET HTTP/2 len6gyisnhmb.com/api/v3/universal-banner/list?position=main_slider§ion=main+page
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash b703955b76096c850494942fc757c914
c74ccddfb42a73445777ccd0b85fda69bed34e3b
96d5ba3d38fdd9246a212ec5c64501f70e376117d8515b253d4fc98ac4a40fbe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v3/universal-banner/list?position=main_slider§ion=main+page HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-970d6fcf17f6d1cc-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 3e63a9547c25f55da2156da2da0972c6
pragma: no-cache
expires: Sat, 04 May 2024 09:16:24 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/triple_arrow.ea71882e83af233365b7.svg
200 OK 676 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/triple_arrow.ea71882e83af233365b7.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 79ea3646abc18b35e0bc6c4b660817b8
28e3f93481f0cf2b5a2d601d607fa018f4ff6516
fecf0b8641c50e09586c7483ab8b7da50972e1b2e44c4c3e21ebe6502c045c31
GET /spa-static/1.4.1460/static/media/triple_arrow.ea71882e83af233365b7.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QMN99RUmssGCKNrFck5OULYQYEVUminN7EcPw%2FAlFXYshtVGnupX%2Bh%2FSZ6r75JIwK3oyLJUKt475aIH27h%2BQM6rq3pny5WH%2FoaTlD9TFychPbtVMZHr59MBOxh2zzOT6LupL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764759e40568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
track.abdsp.com/pixel?auth=d799av&event=visit&uid=undefined&affId=126916&site=len6gyisnhmb.com&ln=en-US
0 B URL GET track.abdsp.com/pixel?auth=d799av&event=visit&uid=undefined&affId=126916&site=len6gyisnhmb.com&ln=en-US
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?auth=d799av&event=visit&uid=undefined&affId=126916&site=len6gyisnhmb.com&ln=en-US HTTP/1.1
Host: track.abdsp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
len6gyisnhmb.com/api/v1/locale
200 OK 1.5 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/locale
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1898), with no line terminators
Hash 2a2d88a3af37142d4147f4dfdf8a1e78
b4554a1cee376ccc84712201c59e2a3808215af2
6d7b4eb41085404c26ac5cec90143f66851dac1ebc171ea0f65558a5e1178596
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/locale HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a9f317ebf9cd861e-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/json
cache-control: max-age=604800, private
x-request-id: fc53c907e5c5f3276fd70e3ab9d5a4f2
pragma: no-cache
expires: -1
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/pk.0e17f31b0f156316ef20.svg
200 OK 684 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/pk.0e17f31b0f156316ef20.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash e630d92ebef75e08d929efe7d2926833
24ea16476287fbe8d231721762ae21fa5cce949b
20c92a468c60d1f28c76835957bfab240b0dbf09199b56864e41e24e98a3db40
GET /spa-static/1.4.1460/static/media/pk.0e17f31b0f156316ef20.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-2ac"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ejirw3HIatNUYGFoRksb9oyNzotHkhKI67vNxkwzJ7zVtStKGUyNJ10sNF3J72AFDlce%2FdLQq9bjpaDnQozjf%2BjzfswPbgQhTN%2BbI75tJ6NvYrr%2FcMQmaZk7xIFBpmIHTyu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc13568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/np.f7885aa646996a2aa6e0.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/np.f7885aa646996a2aa6e0.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 12c4e357d12ca2e200a554ed1f7736c6
04d6383f0d03d38d8107998a94ebaf80727ebd30
e63b58e1601f186978299be9d5b1ae79e5d160f0879970d6b1b22c681307f562
GET /spa-static/1.4.1460/static/media/np.f7885aa646996a2aa6e0.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-4a9"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QtyMN%2BVUUqQSGKD3iF0EH5G0K11qRsPuO4IM1bIDp4Omz%2Fu%2BotZsZoOYavudeq4j9e4v6DB4uboEXTpGKGqUWj5A7uUJeYLW0Ry6XNGrPTiwN27NN03b3xNi2Im2cAgh4MlX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc14568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/floorball.svg
200 OK 1.5 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/floorball.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f1dc4b7c1c777e4318755106ecdbf7b3
fafbe13865d232978cb81a08170ccd0fbd6e99b3
f570fbdebbff3514845de1b49e3b42af84a3897b3389361f3c94471c09f5d0b2
GET /upload/images/sport%20icons/floorball.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"1b3e4afcb149354d41cfb9a5d317fa3e"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB1B1FF487CFE7
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPGOMdIO9sORACqL1VSe2LGmTr7c1RdrUDSlclc5Oq6AL5CfXJtI%2FM2EN309H%2FPx6fY80n6djH4SxYjK7NSGhpBNCMaFRZifuQ8WBaZucLWwqkVaMZO6mpoEKBhzPRFzK5LT%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d47568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/logo
200 OK 354 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/logo
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (398), with no line terminators
Hash 98429927243b04fb658978f94e5a33e2
ff2efec548114a43f068479b929ba63ce8853131
751560883b536484202538edd86b8329e145bdc011a9ca3497c8e27c3a4092e0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/logo HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a2201c29512d5975-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
etag: W/"700b79acaa2b8e3e49d50986dbaee065"
x-request-id: 6bd85794c24a9b0822ed378b5c4743f2
vary: Accept-Encoding, Accept-Language
expires: Sat, 04 May 2024 09:16:24 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/nba.a786b1cf389f34eddf1e.svg
200 OK 1.9 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/nba.a786b1cf389f34eddf1e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash ce8ae04505fe2a57720c892ebc26e7eb
dcf9d203e4f7bc0a9da37c1b1a6782975c64e539
8ec30abd130f244ca085f41a7c45b7a5a2a02be99d0769c28164f81de61eb1b2
GET /spa-static/1.4.1460/static/media/nba.a786b1cf389f34eddf1e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-793"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F85CivRCsUcl2UJ585SIbkMfsKIIOqiaP%2FSHIaCnMhrkyt5I2BNSdQVwGjGI5LLh0j6E0CPzB%2BVWM%2Fc6KD7DQ8ERfPtJis%2F2wHkGDGybcj1O%2B7yba8y5i4moiAJQcsJU3as8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644edd5f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/pt.5697f2973616282e4c76.svg
200 OK 8.7 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/pt.5697f2973616282e4c76.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d8757cadead3ed4a26ac2011c55e050a
35f8185f287c66ecdf31780fb2feb60389dd21a9
76a4aa2c218941018dcf29cabda254778cd74a7480c5d423e14585814ba0a6a3
GET /spa-static/1.4.1460/static/media/pt.5697f2973616282e4c76.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-21d5"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzlxsvEEz5tvzXZCjHkaJboqgBciO4fo8VTI53BeUiEwrV1yoHlDlAQc%2FgnbgezrSYULoIGTXpVIpIALj5SaBSRevww7l%2FTCUEcpe2XMl%2F3e8wbgNFF5yUlS40ERBIUHNG%2FG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dec55568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/tj.e97716cafb6e3b770d5b.svg
200 OK 1.8 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/tj.e97716cafb6e3b770d5b.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 354a4648c19c8c1bb0378017e88ae1bd
258c445cdebac632176ec1effc9d431d49a69ccd
c59090625c530a16a2670ce22c62d597c8363aea32887aeb9bcf7f87299f8e12
GET /spa-static/1.4.1460/static/media/tj.e97716cafb6e3b770d5b.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-6e7"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NnltnH8wH8xLVKj7zJNFUuYs1teLBDE8M76vOsU9Se2gwiT%2BuFhXUUxBSNQuQ8Tj7AxsSCibmAsUYbFsiNlBdPG4hys3hkof30hdib9vnX2xUf1%2FTN7VbYwf%2F%2B8jMG0EFxf0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c9e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/3334.c8a41e73.chunk.js
200 OK 18 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/3334.c8a41e73.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (18158), with no line terminators
Hash 800c19e5ec4539b69cf6c4d7e80466b5
e5b725acb8d85bf5feaf42cd74fd0ccfa04ef474
d862572695523e285378ba56b3fe9cf9fcaf1f8284b67e1dbabe5f0c8b8e420a
GET /spa-static/1.4.1460/static/js/3334.c8a41e73.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-46ee"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PhzCRGjDXp0D8a1gcU3oYS%2BKT6HcKgtGkfgkLPHXnhZtb7ftbcDg7L5pWfgoB6dHL5Pe3TJp0Ow9jPio1v3Dbotth6NYxNFg7adaBfarwsGwqPQeI3LqDfgOvXNSriGRvDuz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f4def568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/clock.ed0062116c2768cf4cb5.svg
200 OK 307 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/clock.ed0062116c2768cf4cb5.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash cd3eefcf29a772820db4848d041896f8
bdf686297a5dd8ab70bb7d2e8a0bf9a9a953f5e4
772d3a2ff12894b975d5c40ed1d3192b58e6261671b848c10352f873ccb8609c
GET /spa-static/1.4.1460/static/media/clock.ed0062116c2768cf4cb5.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-133"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jY7nU91US91q2t99FGfARdyQtFaCuNByncpFg3V54MzJwtmAVgsc%2BHMy361Tx3kPgAc32ty3%2BOIOnt%2Bok%2FrCBzSzFubnggZbIoF3hUmjxVfCIlbI%2F3OHYQ6VI9KsYy1ZzU%2FC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76451585f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/upload/images/sport%20icons/cricket.svg
200 OK 1.6 kB URL GET HTTP/2 len6gyisnhmb.com/upload/images/sport%20icons/cricket.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type SVG Scalable Vector Graphics image
Hash 022e651b1037f9a46bd324f5d7b6f245
ba044d2da640ddedf63db615b7ea4b0c00a261ed
9d1092fec616e8bcd2c24457a3230331431f8f75bd8c426e977dcd2e9b30ff13
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/images/sport%20icons/cricket.svg HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
etag: W/"91fb1bf9fb8fd030a603880d6503966b"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CC23E290C234BB
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
expires: Sun, 05 May 2024 09:16:26 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
200 OK 4.2 kB URL User Request GET HTTP/2 len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
IP
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type HTML document, ASCII text, with very long lines (4347), with no line terminators
Hash 7b8ba261746637fd9277ccc36efb8254
05cca88f2949fb75fc3890ce1df2589b65b7b9fe
8cfe3a51d4ce94054d2c301c508d36f61e381b580b37a5518cd8b3d8b0e196be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?cid=4259899906&pid=126916&sip=0 HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:21 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/th.2ca3db46e2b26412705d.svg
200 OK 288 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/th.2ca3db46e2b26412705d.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 55dd217baf61e7a2815d34050a47ffb5
25c20b5ce089b24c5bbb92ced1a213df458a0976
95e593f882acbb12fcffd4c9830c60d44c3fea07bc8b1a34cc607b20a41f976b
GET /spa-static/1.4.1460/static/media/th.2ca3db46e2b26412705d.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-120"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8do9I4HA%2FUnj0e%2BvJQx3frGp13mu51cBCeEKUFRfNdhnfPUTKhtgUprkXo3p5ZzZvZjwv%2FIn0t0C1kIg3r9SFiSzftBww20J5bmdr2a1e4Ca4zBfr6JQOCCSJgYbSD%2FjapuP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c99568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/close-button.a13778e35e3080e47bc4.svg
200 OK 205 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/close-button.a13778e35e3080e47bc4.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 944ebf0ac938afbb7ed8954cbca980c1
77db374ac1effb4cd294ad2d57473857ac7a1142
8db7bdfdcfa298a9ca62a5a3c84685990660845c2c36e9fe9619234f54f2793d
GET /spa-static/1.4.1460/static/media/close-button.a13778e35e3080e47bc4.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-cd"
expires: Sat, 04 May 2024 11:40:20 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TVaJQD6K%2B6yxW8Ry2F4rGMKF4BuymKBzqZKmEJt%2FyCHr6L13EDzLBbrE9BpTsFBoAWEdMHHKY4zYgmlPBrJiLhLL4tBBte8YJxt8RN6Cx312N53xXxiiiIHhFb6gj%2BPI%2FN%2B5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7646e7e35568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/cricket.svg
200 OK 1.6 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/cricket.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 022e651b1037f9a46bd324f5d7b6f245
ba044d2da640ddedf63db615b7ea4b0c00a261ed
9d1092fec616e8bcd2c24457a3230331431f8f75bd8c426e977dcd2e9b30ff13
GET /upload/images/sport%20icons/cricket.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"91fb1bf9fb8fd030a603880d6503966b"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB22C999EE5E5B
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 1598
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2FTsygA86cOX1zReXTNV5FU2%2FwYESw5kYANTu8JXW5qvgif7jUzK1kAnutnExfDnJLhCuu7qS92Pm%2Bll%2FWHaQjQ%2Fnfkwul%2BQA0hn8nUARKwS5pGO3rdu1cdDfHPtdpf9KlwIaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d36568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/wta.94528375d8f792247dca.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/wta.94528375d8f792247dca.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 66f776a5f59d261b59f5afd8089cccb8
e49e4b0808fc205317780e06a9c5e549974775dd
d0455d0b575b3aa14fa3b1f674df6dca7edabb45486e510525de4f24b2c49495
GET /spa-static/1.4.1460/static/media/wta.94528375d8f792247dca.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-484"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TY64f2sDFvnJv0EkUvx0zq9wd74ZJ9Cf7GEFe7aSski4lQyeQVIAvR9kdlDstcgSckQcUUhPZjzyi4mpD0k7JDxgyj9z%2BTyrRE9OORiky4vKRiGhqIxoBJhzHjvxE6tOBDlA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead33568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/3314.6a18431a.chunk.css
200 OK 32 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/3314.6a18431a.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (32424), with no line terminators
Hash edbfcd4cf1c92171b545c431a396b450
f544f9a571f0f7534e3d252bc51531ca9db94cc3
847e67279f022f4dc87e3f280ea35038300fb9afab8b02be9aaca7f85a21c010
GET /spa-static/1.4.1460/static/css/3314.6a18431a.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-7ea8"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3oPf%2Fbobj4rVOZmfS3OO3UfGq4Aop4D4fsiHV7gT9bl%2F1AfMFv2Bo5yhQfLjOzgLXjfbtCSxoxtaRW2XkK%2FQw2BK5SJL05U2PujhlroXOtFdSwpcJxfF1S3TRcciEiTRGHh0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f5e00568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
200 OK 389 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3444a15490e7c6ce78ea7397ef0c1431
c88d5148a111eaa55686fc3357485f9a787fa675
5bfc5920e65a65d21287ec1f0d0e56b63299ef7b166e72cd661e8fcbfcb76bf7
GET /spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-185"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wX4K3mpaqN50q1JYo8HmF9%2B2BsEfuUtZLkOZx5EpvvIHGxT%2Fm1QS9ZukkxTLS%2BdH7sp3Zwexve9FdB%2BkHrY5WQoFbTR0EQzsCZ6hWZIrMKqx%2FYnpb%2FcA9TBPJjdmeGbBSJE0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764514859568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/9980.1a968a92.chunk.js
200 OK 88 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/9980.1a968a92.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash c74e38c6e768b78cfe9df7bce62b1ff7
04128bab57366b10f93617ec5e6fa694ef282aa7
eaf339ed8d7a755bb1cf113782592e2ee502d7d125ba5ee8a094f7e986015313
GET /spa-static/1.4.1460/static/js/9980.1a968a92.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-155d8"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UquzyZiqFHk4F9JXXjvMsJ%2Bt6AgAO0TfHh7fAe0%2F8cj%2F38CmI1ONLd0WNB%2FKuux62HAeWmIPQbMR8ZSLMQ%2BzNKCoKwAyjSv7JRDQQ7wEnpgh%2FIXj6NGZQz85hjp5Ziz7fMzh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b2927568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/vk.a532de177fda21dd8f5a.svg
200 OK 594 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/vk.a532de177fda21dd8f5a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 07b3f9969ede0f83771678f8b8c83fd0
8f62b5b4d08b0d6811d2ccc021f209f3b2176cb7
4f3692fd0571d886af016fbf290743bd8cd2bd47a5edc11d56872e574c6acf14
GET /spa-static/1.4.1460/static/media/vk.a532de177fda21dd8f5a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:28 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-252"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tsidFRvVj7yus7OhrvYpx9nKHuH93he57lGwto%2F5jFRHAiMweMTdyxLtEtaALekp5PovBsz4ZkiIYkEfxathr%2FaqE4GGThi%2F7aQIWuoaYGsfDxKywu1px23TRFR84AS2c43e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76465ad2a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/A05.01-13May_madness/RU_Madness.webp
200 OK 84 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/A05.01-13May_madness/RU_Madness.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash 05a0a8068c6f71202261ad0c692be9f5
d56cbf2c7b6f16ac9e1fd87e148f669e8ac0f0b8
b09fc88076cbce6f9e5e483482f4819273be1a6d2a9dd7cdbdfde1c03ee3164c
GET /upload/images/universal_banner/MAIN_SLIDER/A05.01-13May_madness/RU_Madness.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 84398
etag: "05a0a8068c6f71202261ad0c692be9f5"
last-modified: Sat, 27 Apr 2024 09:06:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB2B0B4DEA5CEA
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A6JZyoqsT5KUpPsJQwawkOCkhViOcjt7%2FKTIVoaAjpvVMgNRql4giJDc0GW%2BsSL9lFNK610qEhy9JDclmPaTfuaOXozA90AfeIG%2FgBzQfh44t%2BaLiomczsOT37Q%2FwRhsncLAFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764729b12568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/6825.a97dad2b.chunk.js
200 OK 413 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/6825.a97dad2b.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 413 kB (413027 bytes)
Hash 3d2b729d8e1ebf4b8312e790af809ee8
8099fb9ebae1ca0e5fe9642044a8bef5ab1687bc
77984b59c7987621ef342f0b70af3be6f38f28fa8147b71d90df5ab3e7799412
GET /spa-static/1.4.1460/static/js/6825.a97dad2b.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-64d63"
expires: Sat, 04 May 2024 13:11:18 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 305
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yo%2BThUTFlyY9%2F8oFXZy%2FxqD9t0oTc%2FcGvV9GBfJpX5VxTREiXHnOQJoEmfRqKWd5G6dUWmukpg7OJvcctErOA6z%2BCkjFHqeFVo2AykK2HbRWJLCp89YZFUiRhBt8ZMLRStS8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764488e56568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/3106.c4d11114.chunk.css
200 OK 7.5 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/3106.c4d11114.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (7474), with no line terminators
Hash 5eb4a5c56712fb35580c878b326caf22
e3f3588d6bb72219f3797ebb921ef44697f55b8a
70858845eb559abc69e41ea3e94a6a560a64b13469acc724267a62014abaf374
GET /spa-static/1.4.1460/static/css/3106.c4d11114.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1d2f"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uHWKaOTUFLuTemb1VsRilgdt9gmpfdB3aEWIQi5wSc9nPS8LV8T1F42tBPxgmde7sDcW6VAnp5XID3ZKXFgjVKUV9brVlTup26sVNdz38yEqnwBwPbJI273%2Fj7dVi0OqkI8n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644cbae1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/Victory_friday/RU_Victory_friday.webp
200 OK 92 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/Victory_friday/RU_Victory_friday.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash e2975b1c7c3f7f6cf20eac6995432370
8c24f008c5b29f2ba19984dd2ad1a5ad45a97f38
bfb9ccd86019515d94111d25c3c428550de71c0e4db6748acc8d2330ccfe2b35
GET /upload/images/universal_banner/MAIN_SLIDER/Victory_friday/RU_Victory_friday.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 92034
etag: "e2975b1c7c3f7f6cf20eac6995432370"
last-modified: Wed, 27 Mar 2024 10:27:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB1FB7DC722F3D
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 211
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7tAna8laTwUJNd76UL1zbzqCBciKqLiqvioVV1xLQggdjZVxajFgUDl0QiU6smpkxJ9jdq%2FPibvv%2FT6uIGNbOijPzcKDxapwkpJOrTId4hJSijy3NYy%2B6cOv8n7Qrc7z8f%2BB3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac28568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZQpP1PC4Rejx%2BcxJYvfaABZAWVGEEbTmPHrSIWtSK6vexpSz4mQOcGgFg3SyM7VfXPil8WFcdAEmvhs9MPhAhSXQB885V8n3CfTrEiO8Xi%2FymophRDwX3YULleGmxiNGOS%2Bt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476ffcb568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/nhl.af1a458aac77218cad9d.svg
200 OK 2.1 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/nhl.af1a458aac77218cad9d.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 32c5e5dce9986872067aca3e5c687503
9cc98e83140ad625fef36330b0e44b5bdbc39e3b
68033e371d004fee5967a9f804d09144bde944f5779aa83318c8030cd2c42b5b
GET /spa-static/1.4.1460/static/media/nhl.af1a458aac77218cad9d.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-81f"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abRE%2FH7TWbn31KSQpJgcgcqhddeNYkcS1ye9ywkTGV0rIdCD%2BTCDaOICVM%2BZJftAV9mqBkilFOHnciJzc7aZDomSkOVhuDmvvH3g2pmflRtCfkYj%2FtcSGjFNhIMbTUyNVam2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead32568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/763.5d2ed446.chunk.js
200 OK 6.7 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/763.5d2ed446.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (6801), with no line terminators
Hash a2e30ab15de99be12f2b831c3dde4c67
5a221bd1368fdfdbf5f17c44af59579968fc5b56
ec31b399b89799b01becd0542033052e6aaf10ce5b2f2d3d7617fe708291d858
GET /spa-static/1.4.1460/static/js/763.5d2ed446.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1a07"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XDagcO9axJ5ztx9%2F9VtXpvZSphhzdlnmseIDtTB3PpbnfHYjnLG6HBI8srZeIxwbFXZ%2BW6QJjNpC6uaH7EeSS26jnkgUCLah%2Fb0%2FQkAB3bFfPMNyNKnyS1md0IfDy4zFShDN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f7e2b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/search.628993403998d6163ff4.svg
200 OK 263 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/search.628993403998d6163ff4.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash be582e50a93d8a3d14fdb14c81f35b34
6d1bea74d5ad58d4c0a124e87c2de7d8f45974b6
e32d5547f51d3bba916350e0601a97298e6806c280c4800b2eff91387de09e30
GET /spa-static/1.4.1460/static/media/search.628993403998d6163ff4.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-107"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ImM4RJX55wY3UNSXuSV00LcrEi1155QglCTzH%2BfUyKUtsbh9HsFiKJiLgKHphJEQbTXLyWbgpDC4jpzBxMUU%2B7I1Cq7VA7VFwVW3hHITLi0vLtImzDp7U%2FdxnSvac%2BKun%2FGH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764508f98568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/74.972370f2.chunk.js
200 OK 11 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/74.972370f2.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (10593), with no line terminators
Hash e81b9375de74ff319541745b1d9d7a57
0a58f709e11f9fdef7fde4d23c52dfaa0a1c8fb5
9776c55e6d1a63d11460c4fe34811e18a953566070f12b39dc527f4c7fe9bcfe
GET /spa-static/1.4.1460/static/js/74.972370f2.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2961"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uagf3nrVJJYbU%2B2GcM5Dn6f9lKGrNv0lQYTwYjSMLJLWTnk4GqlbX4d7qhP8yLsDZox9WQGWy%2FvuWmENE29vU0Owhl9mxMv5HhtD2S7wkjEPGxmoRLg73LywNfcSMnIsJqDQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac2a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn-mst.com/casino/game/39279/game_524f1e8565dce377dd124e16b61d2563.PNG
200 OK 41 kB URL GET HTTP/2 cdn-mst.com/casino/game/39279/game_524f1e8565dce377dd124e16b61d2563.PNG
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectcdn-mst.com
Fingerprint4D:A1:09:0C:B8:2C:19:D1:9C:4F:9A:8F:28:BC:3E:3E:8F:AD:84:C9
ValidityTue, 16 Apr 2024 06:15:23 GMT - Mon, 15 Jul 2024 06:15:22 GMT
File type PNG image data, 257 x 228, 8-bit colormap, non-interlaced
Hash 70c847e36e39a99112a6aa3390542035
6ea6226645118b6833ffa84529c134d79fda950f
0c0b740d66108a5fa2f9a42d5d890a71313fdbdaaf73ce01d8bceb5fd180f8ca
GET /casino/game/39279/game_524f1e8565dce377dd124e16b61d2563.PNG HTTP/1.1
Host: cdn-mst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/png
content-length: 40796
last-modified: Thu, 30 Nov 2023 06:09:01 GMT
etag: "656826fd-9f5c"
expires: Sat, 04 May 2024 12:59:07 GMT
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
age: 73044
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LzwdTgpzD071LhwaShUk%2F9%2BevUU9NfprWrqb1rM4TYcqgYxdFlIVSt%2F651LRbCiBhfK5qECISt05si8cXXA8gFl2nSMstgjsJgurDpnNBrGrt6kWbsbcL%2F7B5ZXggw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76475dd8756c9-OSL
X-Firefox-Spdy: h2
rstat.rockmostbet.com/lib.js
200 OK 237 kB URL GET HTTP/2 rstat.rockmostbet.com/lib.js
IP
ASN #24940 Hetzner Online GmbH
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectrstat.rockmostbet.com
FingerprintE6:73:BE:80:71:82:78:1C:16:B0:7C:C9:F7:36:67:FF:8B:C8:B0:A9
ValidityWed, 27 Mar 2024 11:01:39 GMT - Tue, 25 Jun 2024 11:01:38 GMT
Size 237 kB (236698 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lib.js HTTP/1.1
Host: rstat.rockmostbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://len6gyisnhmb.com
access-control-expose-headers: Content-Length,Content-Type
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript
date: Sat, 04 May 2024 09:16:41 GMT
expires: Mon, 01 Jan 1990 21:00:12 GMT
last-modified: Sun, 17 May 1998 03:44:30 GMT
pragma: no-cache
server: Caddy
set-cookie: uid=7192452065950433297; Domain=.rockmostbet.com; Path=/; Expires=Sun, 24 Jan 2027 23:19:31 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-response-time: 0
x-xss-protection: 1
content-length: 236698
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/5790.626abb32.chunk.js
200 OK 38 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/5790.626abb32.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (38289), with no line terminators
Hash e2afc9489468143136e0d61848d43b14
72754bf541cc912b1a9dd24e3d9cd1b1e45888b5
e8a416b47574c8895b662663c0e0c27bd5902f8394aa118f89bbeaf95120ef4b
GET /spa-static/1.4.1460/static/js/5790.626abb32.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-9591"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GKmij2GOBnOCHwQ7fMAJCEI2OF6gvq3b2eiJ0FYh2rxYP9HQw8ZXphVY4avZDdksI%2Fhsat1JD%2B6dCYkIFk0vZKQqSDwxKfVEBjNVslugJeIE96mNvp59mTHzl%2BDYQh6CSVPN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644caad8568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/kz.f528d1705766032d8237.svg
200 OK 11 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/kz.f528d1705766032d8237.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a19240f60581e10a25ee91cc4c00c3ed
61614d14dbb829fcc871cb0230f082063ec3a163
af4496d258a36c41ce92d7713c7206e2e92ac6037c6dcdac687ba815e74a4f49
GET /spa-static/1.4.1460/static/media/kz.f528d1705766032d8237.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-2c97"
expires: Sat, 04 May 2024 11:13:10 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 7393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2F%2FMhsLHMWeNiEwPSlT2Tnm4HWco7aguDyzxOMmCdbLI%2BCL6U8gGqe8oI1obIlUwGPaYSbG6d0oP5lyaEqiWtpyCty7HmrXacofG4QNgQQXmGAtJye1irfHmkmTd%2BJ8GMwxK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc20568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ticket.9d3ff525663056151300.svg
200 OK 981 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ticket.9d3ff525663056151300.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 00f15bda6433a62e50a36bee342c5bab
08e4e39fc8b8f9916dce591a019e3a60de2c40eb
0b8e0948fca58a1de944988549538d52ffbe1dfaebc5d899497df325535950d8
GET /spa-static/1.4.1460/static/media/ticket.9d3ff525663056151300.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-3d5"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rvdaA2lfAvRr79wQBmfvqr73YJzNd2Nn44J5pr5Iwf8QBXGIucaGCtc4gBHyhHklQ4FipKhB4TUw%2FEajIHF8mYP6WJOO%2FuHvW87Bhw33Ewwv%2BhZR2SK8sxDwIICjB%2BhfELep"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e9d17568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
200 OK 7.4 kB URL GET HTTP/3 www.google.com/recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type HTML document, ASCII text, with very long lines (7675), with no line terminators
Hash 1347c66cf9493d37e5d9e37f785a648d
1f268484c0fa5e2160be85857248d7a543af0c12
9060e519bd6d8e296afd1358e4e662d124b86991eca9a9356911394f065db171
GET /recaptcha/api2/bframe?hl=ru&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LebvnYUAAAAAPjaNA0gcHaUffLC2Dek6HUqQR5j HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 04 May 2024 09:16:27 GMT
content-security-policy: script-src 'nonce-kIM-TUoudEYIV8t0WYNFrg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
upload.cdn-mb.com/upload/images/universal_banner/sobyt/S05.04Stuttgart%20%20-%20Bayern/RU-Bayer_Leverkusen-Bayern_Munich-Risk-Free-MOSTBET.webp
200 OK 94 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/sobyt/S05.04Stuttgart%20%20-%20Bayern/RU-Bayer_Leverkusen-Bayern_Munich-Risk-Free-MOSTBET.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash bb3568d21ee40289bcf8a29b5d9f9e1f
072694996b0de7f7cdcc62a4287d13568275f248
08602e37b5e4d3e6d854c5b71c5e57e28206e33c9778ea41df0ed1bf5fb4e432
GET /upload/images/universal_banner/sobyt/S05.04Stuttgart%20%20-%20Bayern/RU-Bayer_Leverkusen-Bayern_Munich-Risk-Free-MOSTBET.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 93480
etag: "bb3568d21ee40289bcf8a29b5d9f9e1f"
last-modified: Wed, 01 May 2024 09:17:36 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CBED469DC10198
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vm%2B%2BXno0%2FqDq7fFFwNxEnuHejsqScTQFG154FIpWuWsrG1icNI3gz8%2FxB4oYR0ha2gPpHf5TtusAik5jqWsWVXFJR3NSDLe02Kwu9yeaE1M15A%2BfC5D%2BQ6RQxjhbeiDfswfo%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac26568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/br.b3663866f502ec386f0e.svg
200 OK 7.7 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/br.b3663866f502ec386f0e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash cc2cf818df01b26a9a30efa6739a9ed3
1c6556b4b00a22c0000b4cca53d4cf36da2dd0f5
8a4751e483f00e87730ae58fef47e0de6d0926acbb7c27a23fb3021548c66790
GET /spa-static/1.4.1460/static/media/br.b3663866f502ec386f0e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-1e06"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8OwRlwPAnTZVSAIbS7pUQJRcACGTaDsj0T%2B7iWoG0k9Ua8nlUsREnW6j%2BQ%2FWfvqA2E42VufZozDXh6w6LgI%2FQfhaftSk0gB%2BLsGC%2BPo1ZClXm4NgrExho1feJNDGgDevOg5E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc26568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/cup.848113d2996325b9da03.svg
200 OK 482 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/cup.848113d2996325b9da03.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 692c03f7c16c49c297b4e39231f2c939
928562318dbef353f6065d55f053618966f69669
6619a8537db907e8c8ae331421f45d85fbdc1729cf4582144a4d28d5ae62aae6
GET /spa-static/1.4.1460/static/media/cup.848113d2996325b9da03.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1e2"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XnXszPbXCzSByvYRyGYq0A5TPevEefA5%2Feg9RKxTCmzIXXcDTtmXK6s8ghGyL4sw%2FLHUxylyEH326L%2BO31ywW26PXwdk8X8HqNtkra3TzcEpGF76IkpF3QXTncYM6cHSYKKi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e9d19568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/7936.e565918e.chunk.js
200 OK 14 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/7936.e565918e.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (13686), with no line terminators
Hash 64106fbc9fc4b9e733f51caa422e51a5
ac4903d10147971b7205423ae683fb7ee202832f
562e553211b85e1e5a5c7283f727f28f6a3fc67fa78eca47e4a37e9171775619
GET /spa-static/1.4.1460/static/js/7936.e565918e.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-3576"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1XTpPons2izQqCydY9mxY9tdyrsSiEDxR1Ic8rARVRFI9LpcK4nX7tEOS5SNQPAOXre2HObUMWiPd38jRJfpzf5zu3wXWLv9G9X48Frai%2BjPiU74a7Mp6d6W9EEGDOs4kRcM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764508f93568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v3/user/line/top-list?ltr=0
200 OK 72 kB URL GET HTTP/2 len6gyisnhmb.com/api/v3/user/line/top-list?ltr=0
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash b512cacc764d0d0b85b04f9de5c71c58
d8fb8c02db792de20af5645edb8df3fe5217b61b
212c0e848a382e3ddaf2ce7ebd21d925b508680b874ec472b3ab459d46b24370
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v3/user/line/top-list?ltr=0 HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-a594981b9e292cac-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 83f28a47d12d438bd1c32be5e25920d7
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/ua.2dd397cb920452449aca.svg
200 OK 238 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ua.2dd397cb920452449aca.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash c012f45c847acf92a4ff97934ff9be73
367580f70b7b610331f0445a6ebe7c1768ddcf6f
294c1bce7c271513d4bc962b679105f8885a54b72a9b240412aafeb885593999
GET /spa-static/1.4.1460/static/media/ua.2dd397cb920452449aca.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-ee"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkI4vs3w36%2BOehttNvLAPCMs%2FwQ2ZaPHslzNlCViBA2VGgBQC5lNkpd9N6ZFnNiXScs45ZyeArYwExs6Z2R940MJPIpl%2B5CGcJM9HNtysdgpiNDd9EKKxBWMSfin%2FJW4yP0G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dcc1b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/waterpolo.svg
200 OK 1.6 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/waterpolo.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash fd84e41bc0d715b432bd8fb25f3376ba
ba4266a75f8ee70eb81847d1064839fe5f06d8e8
d6a6fa13f0a3bf77af4c163bcfdf532e400dd0f70796036f63ccc387dc9bfa71
GET /upload/images/sport%20icons/waterpolo.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"fd559e4ce6f266199c8dd76b826e8435"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1EEBF44E3659
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102013/ctime:1654102013/gid:33/gname:www-data/mode:33188/mtime:1654102013/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rf5RxbTWYxoh42ZsWXNvAUkpXaU4wIMBv4prkjnqjSCUrt5z2HsMO8Ng9dlv4Rr0TgN3L6Yd%2F%2F%2F8WdI3J9vMX8FxybcPe5olT3x7wivwrKazk9DA%2B2C%2F1GszFbHTxfBDi98LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d4c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ae.23c174705b39d649ba43.svg
200 OK 262 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ae.23c174705b39d649ba43.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 83b0a4ddc590e14ca5c12412a4a0a23d
0ee49626edcbfb7ffc68946900ebd28ee17e12fe
117ebbaaffba92775252a77996260cf1ce524e287a8779f15b8b9370e2ef0bd5
GET /spa-static/1.4.1460/static/media/ae.23c174705b39d649ba43.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-106"
expires: Sat, 04 May 2024 12:00:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 4571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwgzEsBjb6i1BF0UhJKyjg35xusqHKE5zcuWiii1Or2HR2QtGKWHwdXeccB6fLQV1%2Fte%2B8iAwrj9Nb2Szkcsw%2FLzlrfkNw%2FO1nggHkZsrP8SoMg%2BNHeyS2BIGj0OjTqHxRED"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c91568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/az.84126238074d3c3c30b9.svg
200 OK 498 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/az.84126238074d3c3c30b9.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 46be94246c1c70d0605daa4c4440fae9
be52b50ea9e1ee11f9bca22a9f8c988c212fa20f
9dfa12299405d8ffb7ee797baf049b63d886fc25f301cb4b356d4c0d5ef9e634
GET /spa-static/1.4.1460/static/media/az.84126238074d3c3c30b9.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-1f2"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z3EAwI9jREb19iQBlDY5xBtEMZ%2BQKb0L15SA7cp1gHqrlH%2Bo0CPnCWEbFVgPyKxNrZW4QRroAt6vbP6bZ9Cx0I86G96wx9VogNVbnpYVurRqhUpcoc%2FBTjSu3o8I7J6aHzTn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc09568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/apple.cbf1481204d20150372c.svg
200 OK 533 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/apple.cbf1481204d20150372c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash bb359828eb503954e0a104388e976808
0ad189c7689b8c8e7a2e54c33cb0bc62911dec47
67834ad87855ba9457191ecf7792c72fd29a9f84e3a333334d75f6e3ffb0f564
GET /spa-static/1.4.1460/static/media/apple.cbf1481204d20150372c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-215"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p8WdsPF2lEaxkJMcYfO6oXrmyU%2F3PWSDjUtFoDbTdD0yIcPiTPM8QZPVcqplimqf%2FaR3XCy%2F2TfBXEjE2KJeTwlhilBiYjr1PQGHHHlEd0lNLMulHs0sGV9MyqJu%2FVy8%2BJZF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead2d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/news_background/bg_ftb_dec_2.webp
200 OK 2.3 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/news_background/bg_ftb_dec_2.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash 05cba90b6b3ae89384aa1fde760a5a87
8cce1e281bdfe4f8befdf7b07c483adca78e1ee5
372dd136d2cae845d9d89195dedccbdf5a50f85e8d32c23110c14cf39fdbae71
GET /upload/images/news_background/bg_ftb_dec_2.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/webp
content-length: 2252
etag: "05cba90b6b3ae89384aa1fde760a5a87"
last-modified: Tue, 23 Jan 2024 18:54:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 8a26abc7832840f9308c123e3beca68e9010663e53438356460e6ce230b3fa9f
x-amz-request-id: 17CB1B1FFC67477E
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 2748
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nW1PQyDvhi7AVbaqK3shpGgQelCkTZTSnk%2BBXQv%2F6qFxHgNtZalnw5WZGbzmF8HLyKOTwYtcI%2FQybShIAd7vwPatukrv4JBLxvNfAVQXHsJyE%2BPt%2Bz0itKy4qrzJdOtr7AFG6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7647909d1568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/tr.c3d773f3ebbea061e963.svg
200 OK 575 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/tr.c3d773f3ebbea061e963.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash acead8953a32d57822dc477cc163e873
f561c1a64e4531d18d97409e08873682728652fd
02056d39c1758a6aa365f63de254f9e81fefd7d827a76b4450b51921412a34af
GET /spa-static/1.4.1460/static/media/tr.c3d773f3ebbea061e963.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-23f"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4DBocD%2FzVYajLn%2BYjRIYRWdvLprzIPXrNrPjSlKk3tHBZoo9KNvLSyXiekS7rWjVlDfxME6kPfDw3pDAu3wpJnZ7LnlK%2FnOHoQTfdp6X9myPsi%2FMf%2BbtGMbj4VGy7%2BSKH55A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc0c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/cart.6bdc2f8b70001f0b6061.svg
200 OK 1.1 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/cart.6bdc2f8b70001f0b6061.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 6d72ce80a19f5e2d0e76693783a5d59f
a6d2434b92f2555eef036814cb93fc5f65df6937
cef08acafe17bb28ee2676ef2a7e9e7331df5a0477fc3fe10e78aaac5940fb1b
GET /spa-static/1.4.1460/static/media/cart.6bdc2f8b70001f0b6061.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-42c"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VOPqVFm2ddWn4gjphWWduX3gX3YzfawXW6KJDgfffdzPTVYWAKgErPYZuTIeVBbqIWgfXb64W%2BuFjMObBd6B0DQPxFuPgNEqMWz6DOIjJJvI5IOwn1DiyBBaL04QxtOc5Lta"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ead25568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
200 OK 389 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3444a15490e7c6ce78ea7397ef0c1431
c88d5148a111eaa55686fc3357485f9a787fa675
5bfc5920e65a65d21287ec1f0d0e56b63299ef7b166e72cd661e8fcbfcb76bf7
GET /spa-static/1.4.1460/static/media/arrow.1642161383ba75cfc57a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-185"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ohKJjpjIFJHi8yZGx%2FSOWPBWmcmvwd%2F7tgDn85xp3l1uXGlUgW8B0kTWyB%2FZWM05q8hrtN%2FkbRHN2vU%2FL9ObwhBn4Yhbq7gMwCAUw4JiUr%2FFJBC3hWKbHI8VdMF1kENYP9j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764515861568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/2415.2f49e63e.chunk.css
200 OK 4.9 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/2415.2f49e63e.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (4957), with no line terminators
Hash 4f6408825810cd3ff0e58a8cb0c4d8bb
55a5bd2a07e3fe7859818a4e404523f451509b09
bbecda7ee4366573fb5f10770a6153ccf8383c8f05aea94cc6b6f8234bf98f4e
GET /spa-static/1.4.1460/static/css/2415.2f49e63e.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1354"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CfrHvNc%2FyhS5hCZ5aeq2WEgL%2Fqe7mvFM3Hi2%2BBsdlbY1nvEXiDZtj9KInt8hUyDci6YtljZaLWO8NmWxgLPSJ9uB1lwYF0HkUPNdHjxx9%2FQqvVuEuL%2FhB%2BTeZX1iKUmpeIs3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7645198a2568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
200 OK 518 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type JavaScript source, ASCII text, with very long lines (631)
Size 518 kB (517649 bytes)
Hash e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 199214
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
len6gyisnhmb.com/api/v1/user/split-test/stage
401 Unauthorized 44 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/user/split-test/stage
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash a173e0aa1b314ac44f6323644d6d5eba
188969a7226b7b7e004967fe78e35a8b93f4f4d3
eea0a5454fbfceea68c399e901a4cab4efa36ee45285fc64b23d7ad27543345d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/user/split-test/stage HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-acc55ec269f1c813-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 401 Unauthorized
server: nginx
date: Sat, 04 May 2024 09:16:23 GMT
content-type: application/json
www-authenticate: Bearer
cache-control: max-age=0, must-revalidate, private
x-request-id: e89a37d53fb402507e436232e0e79b12
pragma: no-cache
expires: Sat, 04 May 2024 09:16:24 GMT
vary: Accept-Language
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/Promo_Risk-Free_Bet/RU_Risk-free_bet.webp
200 OK 79 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/universal_banner/MAIN_SLIDER/Promo_Risk-Free_Bet/RU_Risk-free_bet.webp
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type RIFF (little-endian) data, Web/P image
Hash 751a82bb6076550c186886d4ff14a7c2
592eb57c20f869ac3db746d80bd05a90ff13079f
515a49ccb31da476a15c960d80702d280e2a5efcd0acd208bbf788a7f9f4cfef
GET /upload/images/universal_banner/MAIN_SLIDER/Promo_Risk-Free_Bet/RU_Risk-free_bet.webp HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/webp
content-length: 79076
etag: "751a82bb6076550c186886d4ff14a7c2"
last-modified: Wed, 27 Mar 2024 09:58:12 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB290579D251A6
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZTwlhdgyjutg%2FwhkPh42tAaCoWHoIu40uigdkChPt2KHWaLOt5K3%2F99hR6as%2F3qWiyaz1GubIoNmFFRkpIW95kfNc2IhP6MY2tFvbcMrv6c85QS5KL6wURNdyMNOXyKs5c%2BwnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764729b1a568e-OSL
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rwgdqs7f%2FWV1zA67J33w23daTTnI3Imt6RYuepQO3F%2FsUp4xlNTRfWsmGJuXwnnGfw6fKAB9%2FxpZytnWdzKkCYOunf%2BlkvWZnugM7n2QaZdj5xGru%2FgQrXyIkFAjpjiww8fp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476efba568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
microfrontend.wol-prod.com/wheelV2.js?v=1714652040430
200 OK 17 kB URL GET HTTP/2 microfrontend.wol-prod.com/wheelV2.js?v=1714652040430
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectwol-prod.com
Fingerprint95:28:9F:84:D1:0A:C8:8F:33:5C:4C:25:94:40:AA:E8:7A:44:FC:C7
ValiditySun, 24 Mar 2024 18:31:01 GMT - Sat, 22 Jun 2024 18:31:00 GMT
File type JavaScript source, ASCII text, with very long lines (16730), with no line terminators
Hash 0e904b0c98f534ea5ea39a5cf0158836
75341dd46e4519b937508687db34ef8939d91e92
53a1ff95d4ef6a42ae211d9c8789ccbb7f197b568be59c2ce85841ea7b0a33c7
GET /wheelV2.js?v=1714652040430 HTTP/1.1
Host: microfrontend.wol-prod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 11:29:39 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"66337923-415a"
expires: Sun, 04 May 2025 09:16:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, OPTIONS, DELETE
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VaYeAGq8eaGGrkcLYsqKd%2BC%2Fc9NxexCDPO2a0G%2BoDtukwePZCS3DybD6sXWIRwQ87%2BMND%2FRm%2Bw3MrRclbd6a1l2wZmfTmPnaqNm%2BEBqrWzUIUAM5WVyKQtM8bEqAiHctorxGMqyoQ5wYRIo6qA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7643db8aeb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
len6gyisnhmb.com/connection/websocket
101 Switching Protocols 0 B URL GET HTTP/1.1 len6gyisnhmb.com/connection/websocket
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /connection/websocket HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://len6gyisnhmb.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mgxr+ta6ARwnKajP6pHjpg==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814183.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sat, 04 May 2024 09:16:24 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: +FpU52PsEfQLu5tfOc6TthZd/Ns=
front.cdn-mb.com/spa-static/1.4.1460/static/js/1006.a3495223.chunk.js
200 OK 6.9 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/1006.a3495223.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (7025), with no line terminators
Hash 1bf5dda1a5d5ca65e34359d867176be0
25227ebd235a5c6340bef5c577cf21befe1dfd80
ed5fa4fdeff74287a7e9b7145dc77d4891b7fd10269e706ff709c43a158c3e54
GET /spa-static/1.4.1460/static/js/1006.a3495223.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1b03"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BWMyj7bW8z3BazhZKKqnHdZiROGm0ONJTO8f68lwJWMvDb0fvBusA%2FOherzlmvnYJsi57eWdWBPCSBRd7KUXhgJYIyAtd0LOLKKOFUEPiGmSpzU7boENhjWAkH5t5P1fB%2B8Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c4a58568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/ca.102b45b24a03abdaeae6.svg
200 OK 708 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/ca.102b45b24a03abdaeae6.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash ff51ab8c4d9d978f7ccda8b743da2b59
04ea3e2f22cac2bbd1733d3dfecf9b6b50572156
eb5b1cb16fb6936cb9fb68530adbe287fef007f9066bd246f411b6e36afc0fb6
GET /spa-static/1.4.1460/static/media/ca.102b45b24a03abdaeae6.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-2c4"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OpPn%2B1SmyczM1nYuACD9TcvqmYlAMI36kjaCoe6ZPsfFJxYd2TeG0YuVlE5JfYYivi1VxysQdm%2Bd1awjbyf%2BvwbjkMfhOga%2B3CLN1IFjHwwAQDuWy897p%2B%2BR%2FR%2FD0%2Fodsqh2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644e1c8d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/8798.5e6cbbd4.chunk.js
200 OK 2.6 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/8798.5e6cbbd4.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2668), with no line terminators
Hash 2d91af1310dd9e803aa67c2e682c3627
cd90d38f4c6a7967adb37afc3e728635f3cb5bd8
ed4222d5411da18d74d11140cf3a1052bde4bbe75535f97ff617a77ca511ac8f
GET /spa-static/1.4.1460/static/js/8798.5e6cbbd4.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-a16"
expires: Sat, 04 May 2024 13:16:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 20
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TfrLy0xv79tS%2FIyIuyGfcxhJivC67oxiGr5uzNhjq7W6lHZGpM1ZSPtb5lduR4FEk9smE4fLT6B7BnYClSr6%2Fn3vfuUz14cYboIfZyFxhgBswCk0Y8DTOBI7Xn4k6KaIW7%2Ft"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7645198a0568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/74.f49de351.chunk.css
200 OK 12 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/74.f49de351.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (12027), with no line terminators
Hash 6ec27f71c411df2616d9061f5dfd9bd8
4d2d5f1a62d79c67c7a2b83bc734612b0eda682c
85d13c53cb803ffca793db6697ff518999ae4a0aa0ee0a1351e356de19bd784c
GET /spa-static/1.4.1460/static/css/74.f49de351.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2efb"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sC%2FV28gAdT3FSl3VJPLcVewLLW1JAhcSL1E7ra2H3zg1jOIBbXnMPMX%2B9851Id4cRU5V2mg%2F6W4tp26WHO0YUMOhCw2rLqGhPW%2Flb%2B9LDO949TLqO3rLLMX49nFg4qk1UTyn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac29568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/mb_wrestling%2020%D1%8520.svg
200 OK 4.2 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/mb_wrestling%2020%D1%8520.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 28a7a96338889cb479a76df296eea939
438231b697cf56b8a16956015411f0abe6a91b96
b8cbf6a38649d57ff54d8b7cd41f028244e2e0144a29256a4effebe9d78055cc
GET /upload/images/sport%20icons/mb_wrestling%2020%D1%8520.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"3de1505e09f8674b7c7cc8133455a3f1"
last-modified: Wed, 21 Feb 2024 08:24:51 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1B1FF173CB26
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4w0I%2BYzC5Kip2v1f00YYLo47PxRifPOyhLpavg8QuY4ceNt5sujWVb0x3WchjHb274s5P8u7IeuTUOvpmjwgyXFRO%2FLW7xJTZMAja1rykKDOmPdYHUJ8iuYkTaj59p%2BrZzNlUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d35568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
55ifc7l6dfa8odwmst.com/nuhs/0/wbjhnt6d06uct1213tgvdv9i/PropellerAds/%5B11%5DPAD-pop-RU-mob-andr-SCPC-bl%5Bpop%5D
302 Found 4.2 kB URL User Request GET HTTP/2 55ifc7l6dfa8odwmst.com/nuhs/0/wbjhnt6d06uct1213tgvdv9i/PropellerAds/%5B11%5DPAD-pop-RU-mob-andr-SCPC-bl%5Bpop%5D
IP
Certificate IssuerLet's Encrypt
Subject55ifc7l6dfa8odwmst.com
FingerprintFA:65:ED:2B:08:33:4E:1F:1D:7A:22:1B:A0:02:E6:22:8A:B1:4B:E9
ValidityWed, 10 Apr 2024 04:45:36 GMT - Tue, 09 Jul 2024 04:45:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nuhs/0/wbjhnt6d06uct1213tgvdv9i/PropellerAds/%5B11%5DPAD-pop-RU-mob-andr-SCPC-bl%5Bpop%5D HTTP/1.1
Host: 55ifc7l6dfa8odwmst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 04 May 2024 09:16:21 GMT
content-type: text/html; charset=UTF-8
set-cookie: TID=4259899906; expires=Tue, 04-Jun-2024 09:16:21 GMT; Max-Age=2678400; path=/; domain=55ifc7l6dfa8odwmst.com; HttpOnly
location: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
gba.lnabew.com/sub/sdk-37XKiQozDmPb1Eb3
0 B URL GET gba.lnabew.com/sub/sdk-37XKiQozDmPb1Eb3
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectgba.lnabew.com
FingerprintE1:B4:D9:65:5D:E7:6B:CD:F7:67:CE:41:D3:D7:29:0A:EE:B1:DA:EB
ValidityWed, 06 Mar 2024 11:29:12 GMT - Tue, 04 Jun 2024 11:29:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sub/sdk-37XKiQozDmPb1Eb3 HTTP/1.1
Host: gba.lnabew.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/event-stream
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000
cache-control: no-store, no-cache
content-type: text/event-stream
date: Sat, 04 May 2024 09:16:23 GMT
expires: 0
pragma: no-cache
server: Caddy
strict-transport-security: max-age=31536000
x-powered-by: Express
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/css/5243.0e833323.chunk.css
200 OK 295 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/5243.0e833323.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 295 kB (294852 bytes)
Hash e0de0fd286ac21ef77e0ed91516cee56
3390930e6ea27018e7ebb3c17eac5651b91a859a
cd72427720315a3f8a2ba7da62800f599a77f93a310c11e5d7b2a87886d7f5cc
GET /spa-static/1.4.1460/static/css/5243.0e833323.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-47fc4"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YbMDpEy6%2BygWsV5PSI%2BxYL5i2El1ojFIWTlt%2FCj2rA%2BBNXcVevCzXg4Bssldf8GjRGtpNgWmUgviZsyinIfW5WHOcE22cXod0hLQ4XbMNopaH0QqkkpCBaCQeemO5GDC2V4N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c5a63568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/7255.a168a449.chunk.js
200 OK 10 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/7255.a168a449.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (10099), with no line terminators
Hash 64cebdd25ca2bae938c866136935969f
f05cb76fd6d1bed11598566635938dd05841d935
2af7328e61b8f5a0743f9afeba56464c828d85db89ab99393a899cbb975c2409
GET /spa-static/1.4.1460/static/js/7255.a168a449.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-2773"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Drpr11Il3UpfOjtSwybXGwzy9nCnZbQ5JxNoU6JBfTQLV197uNZ9%2FrnIT0P3ehnzveq%2B1YFP%2FPLsSffKyotOdJjwCNP03OOiVo5GAWCdIdgtANrde%2BPXw0HSe21ac1V%2Fk66R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c9abb568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/7936.eca33942.chunk.css
200 OK 5.8 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/7936.eca33942.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (5823), with no line terminators
Hash 505c21e7d3c1bcc6806ae599380c4246
34f28ea1d9ebae9a31fbb14c86cd897dab35025d
766a3ea014a3f9dbe4c33d192e364465599eb69983e13bd8de67f2b691c2a91b
GET /spa-static/1.4.1460/static/css/7936.eca33942.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-16b3"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2BcHdD5mgJl7nIEjO0l1fAYmb2zFa52jRzs0AMtp%2B6cv78RKwN5a08Nn4wz5mSXkvwh8x9g4KxwBPmmnkh6YbV4q8oPL7NB7ax12CJe%2BZYmNNQvoW1g%2Bsycc7HBemK8BsOkf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764508f89568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/casino/games?page=1&itemsOnPage=6&platform=desktop&productTypes[]=live_casino&productTypes[]=live_games
200 OK 7.9 kB URL GET HTTP/2 len6gyisnhmb.com/api/v1/casino/games?page=1&itemsOnPage=6&platform=desktop&productTypes[]=live_casino&productTypes[]=live_games
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (9314), with no line terminators
Hash 6aeed51571ca05684cd6a6d59c7dc0ef
bad1949d10f3845b8d572c73ec875ea3d1407b66
e1c852bd00c2edeaded86ef6d727cac9e3229fcbb7fda05bf2dd46384a493633
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/casino/games?page=1&itemsOnPage=6&platform=desktop&productTypes[]=live_casino&productTypes[]=live_games HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-9445e7e6077f1781-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: 6be0d264da737652da07eaf938f2199e
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
200 OK 330 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3657e8d7ea960099d85b41066581a142
4e5132ec708c7afb269ad627c40d12e0f7e434d7
b9eff9c3cdb9c872ceebd2d90a0538a37eb3230e29869561c79e872e267cd983
GET /spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-14a"
expires: Sat, 04 May 2024 11:40:17 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AbhxEa3m%2FmM3zoOhxOhuG38qRQcyA33TkmoF7826Hc3%2BGPjCVcOHC9IcR1%2BA9o9W2SqJoVBlKG%2FuFPLZUpM879ynImnSFU%2FSyQC06NuoyPsAzTEYn3jOBdNzr%2B3109ZGGhwp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76457e829568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/soccer.svg
200 OK 586 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/soccer.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 1a6d8af7357d2a2d19617860550d8c38
1e57b4f0c31e86c7294b19496f84667f61258088
3c774e9fd645258135e754bb72c656865ef9c788c721e72714f279b191062932
GET /upload/images/sport%20icons/soccer.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"956c4b55e9fdc0fd0750a3175e37c09b"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB22C52D286DFB
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 1653
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E7oVcp2ks4fad3%2F9dtgwEntBIThGXIy8UtmM8S0ig7G52lylM8TiuL11GHQpWZUBdaHPTlT22oofYzECWtDNbBeFi%2FahcSzaHIKsjLHfS%2BOCEVdmFXhjFdkYBMhczB5n9759GA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76473ac2b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/handball.svg
200 OK 645 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/handball.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 4e6e22d2eaccd4c17f18365633067754
f5f7b4d46faf0f0b3dc8364310ec93ffe37a24d9
37134e795f1e4e13b8ad834fc3f1807fedc0e4bb81f7da27fe62fd6044276d60
GET /upload/images/sport%20icons/handball.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"7566bc428fc40372cbeb65f736dd5218"
last-modified: Wed, 07 Feb 2024 08:42:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: d9f9c3a4ae1ee6a8dbb2d3b306070026e56ac66c25360192e0f990b84c8e2bf2
x-amz-request-id: 17CB22F77E2FB83A
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mm4jEnxNu3h0STTRXim1ZdPs1a6Xz8RRL9OGHNojkpX%2FbOQUIDzl01%2BdaCEF1X9A9zcHWgvSTZ2KkmxOTuDTZ9Up7Jl3j43bEkUXPCPOH0ju5yThy1Q0nWIR2wGPYpEFo638qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764740c93568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/star_circle_filled.2920f5def289f1e3e1a5.svg
200 OK 304 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/star_circle_filled.2920f5def289f1e3e1a5.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d3dfaf69bb64203a900e76c898e82351
39b98b953221b4b9da41354d96c1de1c74e56958
58f981d724cdd47c8d20b37c47bd3ec597da89e5dd8d5b4302ec1c1b7b3c091d
GET /spa-static/1.4.1460/static/media/star_circle_filled.2920f5def289f1e3e1a5.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/763.43474140.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-130"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5776
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GK8FuFax%2F2xee7NQWooQupvDjhh%2FGIFER9DqFrnDr2%2Fty5GCltWVamLRrP6ed2r%2F2j4r1wxUeIq6L16irZn%2F%2BvXhbl0%2FaXktddQ8wUnhhM35GF7AJyK%2FE6z55wAPRQ8Lm8lu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76475be77568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/mx.05c8d69783e68aaad2f4.svg
200 OK 90 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/mx.05c8d69783e68aaad2f4.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3aa223c8cc48eba75fbb57fcc20ce7cc
991d84b1fb4422a08c80851c237d279d713bc331
b67b689c0045cb4e8a4d5a439adbbf4c471cc090cbeb7ba7b2aed0eeabdbef3e
GET /spa-static/1.4.1460/static/media/mx.05c8d69783e68aaad2f4.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-16189"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QqCNIr1Iy90kbxKvikhQjzPionFq2tp%2Bjm4N2O0coDYDSFkkPpFHOv1WvcJOQFfZs1gV5lE6NrrKY2B5dk%2BwGr0VfKRDrJ1pbhyZ6zxB33%2B3xEXxaze%2F%2BzQUWN3W%2Bj3DML3g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ddc2a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/gift.4e1ed5f86bcfa75e6cc1.svg
200 OK 1.3 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/gift.4e1ed5f86bcfa75e6cc1.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash d7bc03259eb36491e26b0f780ad196a9
193fba5f9e479890663ba4d5cae3c8e263552be4
cc23687b34897eb30d13f39b55aa1e6782f4b344f53233875d3013348c693f2c
GET /spa-static/1.4.1460/static/media/gift.4e1ed5f86bcfa75e6cc1.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4f9"
expires: Sat, 04 May 2024 11:40:20 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vXuMoZTzBza0%2BxZspN9ckq4PNohNXJBX0wyJvWXO8bsKfhLK076tbnpnRQTbxGzfXJrcmh9JlBMY7iUZDk4Bg3uaNtdQoIkNGiE7DjkkUHYL%2FE%2Bl4l5vyasZufFSM2Gkye4I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7646e9e51568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/%D0%A1%D0%BA%D0%B0%D1%87%D0%BA%D0%B8.svg
200 OK 2.7 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/%D0%A1%D0%BA%D0%B0%D1%87%D0%BA%D0%B8.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 19eed67db6191ba34409ac5ba4688cff
55b6cb0f00ace2a9ed74644d59cafee6fa0f880e
3342cc2f509b6a1013f6d48232bd661a886b7466b6858776b3364476be2c6778
GET /upload/images/sport%20icons/%D0%A1%D0%BA%D0%B0%D1%87%D0%BA%D0%B8.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"5405435cd7429debb041b72333d2d547"
last-modified: Wed, 07 Feb 2024 08:42:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: a1fa336c2fd2dc07ed124b8a56fe646ff71a960ff9616c4268e18a83b1883276
x-amz-request-id: 17CB1EEBF44B9A63
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1658838572/ctime:1658838572/gid:33/gname:www-data/mode:33188/mtime:1658838572/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RGqQpi3tg%2FLdT3fLhJc1T619xuuZPpYCk04Rc2H72%2BDWw2glPM9nqDm8dWz9E1hPiRRH2JUf6xHyuOqSX%2FhaS7e4xBse%2FMUtsx3QExG0f6SATufXwHi7j50Dgzt2bxOVXRj23A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d4e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
200 OK 330 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3657e8d7ea960099d85b41066581a142
4e5132ec708c7afb269ad627c40d12e0f7e434d7
b9eff9c3cdb9c872ceebd2d90a0538a37eb3230e29869561c79e872e267cd983
GET /spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-14a"
expires: Sat, 04 May 2024 11:40:17 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2FNHAREM3diq%2BxWbvWJ08uKrhFH929h9k8mh1XiA2h%2F7s%2F2i%2F1uRklTUMvn86sNdrSFoIp3QUedjA6RbOXXt0cn6wmerrwkfXNMDC9VQZ%2FJEJzIuAJAnFrGwrynFtiun5oas"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76457e82e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
mostbet.amarix.com/images/mines/logo-248x178.png
200 OK 57 kB URL GET HTTP/2 mostbet.amarix.com/images/mines/logo-248x178.png
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectamarix.com
FingerprintCE:09:59:61:5A:99:F1:08:6D:7D:8F:97:42:C8:FE:17:5E:05:1E:89
ValidityMon, 29 Apr 2024 22:17:17 GMT - Sun, 28 Jul 2024 22:17:16 GMT
File type PNG image data, 248 x 178, 8-bit/color RGB, non-interlaced
Hash 0aa7f371da968144d24d0bfdabbc0014
f7d40cce30e6bab7135a243f246eb4b264c3aa3c
4793ff9e46e70ee0651faa6aff07f367576eb7d0932f986a6b61274918e59bf5
GET /images/mines/logo-248x178.png HTTP/1.1
Host: mostbet.amarix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/png
content-length: 57340
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding
last-modified: Fri, 26 Apr 2024 12:14:39 GMT
etag: "662b9aaf-dffc"
expires: Sat, 26 Apr 2025 13:57:52 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 320301
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJNyKr3ZkeBb7VjHuM%2F0aOwCz%2B%2FCQ9rUgTIJZGYz%2BVerm6v0EMvEOe6tGSPNs2PiUkOFg4ZGWhebmml4q7Pb5ACb45feFEicYIu%2BdRH7oUySgo0IO2e%2FgHcruISAMyyTlBitzK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476fb030b31-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
front.cdn-mb.com/spa-static/1.4.1460/static/js/5243.17ae915b.chunk.js
200 OK 91 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/5243.17ae915b.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash aa6985647ca1f6c68610b21d33da6e35
1db2ec6fa5822a4ec235da6c44570027f8981e97
2e6083857aca29b0cb3a3bff3839b194ab506a37a7a8fc054cff4dd243aa30e1
GET /spa-static/1.4.1460/static/js/5243.17ae915b.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-163d3"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oOBwIEKvr2GeXysqDb0qIkEtEM2Mil9YWNalRIar2%2BMuKE77lfnS03XELQO3w34BUiCIkEd%2BsDUFCtEa8x4FtzpWJ5yug%2FhAclYvpelnaDGYXnlyF%2Fzwcn5gw4IKks1ZhKrH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c6a84568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upload.cdn-mb.com/upload/images/sport%20icons/basketball.svg
200 OK 756 B URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/basketball.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash f04ce1289843463ff5592821ec2a6696
983bde845ad68c89179491c11f015121a29ece71
d315e06ed5ee340e4160e1edb34f1a536d06f8c1bb200bcdab684072941795bc
GET /upload/images/sport%20icons/basketball.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"36bb04b1b885eaf911605243b4be3987"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB1EEBF3C54AA8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 1524
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bih%2BXX%2FBMqW23sHQ6%2FZbmTvqvmjtZTjHVsRRf3YTtCC07at787jVN%2BF06%2By84cKMv%2FEpJaAMlwNB%2B7m4tmBfTR1IZ2OaHC8XnIk8glTEluxWyahLu8J%2FhmIEd5FKcgwYWxM3Vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764740c8f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/5790.d7999147.chunk.css
200 OK 32 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/5790.d7999147.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (31939), with no line terminators
Hash ed42f3268777ba9f3b042589f95c3bee
5e532194d6bfb7881ff4f9f3a0d9e3bc9c624493
299151a5f9a8e36f77758fe3fa391a751191af7d740290eb08645ad44c4c7ea3
GET /spa-static/1.4.1460/static/css/5790.d7999147.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-7cc3"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nEEAzrs0uqMiN403Ne2TH64toYfXnP7VqznzwNuu1%2FGJSFA%2FPCWcGOMsTc2llUzbJ5Xp66wUY0j%2B6bC3t4tXpTCrZ7LcH%2FXs9N2%2BqMO9KMFyehOYHlR7aoG25w%2F1HApM47qH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644caacd568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/pl.9400273de5d060652ce7.svg
200 OK 222 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/pl.9400273de5d060652ce7.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 0a27bccf5ac89b90c250b9fa53e20b1b
558aae97c74af8e13b9acdfbab0f26ab05706310
35abe11e19e86cf4fc18c0781f4b9f8843d420cacd6f89178ecb205b68d2a2f7
GET /spa-static/1.4.1460/static/media/pl.9400273de5d060652ce7.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-de"
expires: Sat, 04 May 2024 11:00:36 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 8148
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vZraZOcYPZE7Dcti5dSNoUypf2IEUTJsgrGvh0gJkcpfB6C8XHsIsb7iu6SrkADxu8Ni%2BHoz5m1Q3qBswxYW8wWDZeLJvXA2H2XYOPcbo%2BSXxSO2yUkNVpYF2r9IpJzIlP2Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dfc5e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/3314.6bdd9802.chunk.js
200 OK 52 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/3314.6bdd9802.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (51594), with no line terminators
Hash b4e8e205a05ce6df944f638b117792af
75dc37dc20a75d0e5515517be5970feec3b77542
e037d3c81d38ac4b9a1d429c1e73c3d0bae5d000399d63143326c918983f75a0
GET /spa-static/1.4.1460/static/js/3314.6bdd9802.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-c98a"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SrjGWeiQYg1x6rRErIjna29ISDfPE6MWKIF6lvcpC%2Buvde05B2zhHOYGzCYf%2FW4ApZbtXuEvhyoa%2BRwvUQdbdAUpf1FzfqALkcfg0nauvLwO7xqY31rSc24%2FfdJtu28%2BUTpj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644f5e01568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=15d01Bc0QE65bPhJtmYWOjj9GNSb5dg%2FvUeuX2JLnoezjhGehxKdG2ecX4Q1dV8%2BjQ%2FNXFWIDvYguzON9soPfFS36cUQ2k7c960%2BOjNwe%2BLyUVUV3cYFkN7wQYFj8yuNJrPJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476efae568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/9207.b0fec86f.chunk.css
200 OK 576 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/9207.b0fec86f.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (576), with no line terminators
Hash d2c1947db851cdd62da066ce6b23a977
3deb9de023858e2f46a8d6c179ee29bfc1a8ddfc
e2d912fd1a6b5f49f9567d12871ec650c039ded435ef959c0e4b3a598b72c09a
GET /spa-static/1.4.1460/static/css/9207.b0fec86f.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-240"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VeAZWooDBnBFLQ7QuiCpYneAuK4wqGK6H9oOlTF66cr15Ww3CaRImUkMN%2BmhCXOG9QqhfiPtjkqA8a%2FskebSh7ybAQy0jEm4A3zoqP%2Fl32%2F86350fmfMqOq9%2BfF965sb9sb7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c9ab2568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/gb.35dbacd736781608964a.svg
200 OK 541 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/gb.35dbacd736781608964a.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 2dd9c12465888299e96b452c0fbb832c
05ce6f07353a760a137fe8bb779041e5cf55ac34
c4ef0795d273b6a4000420ef3791d3c441c00d4b281c218392fc391d10875dfb
GET /spa-static/1.4.1460/static/media/gb.35dbacd736781608964a.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-21d"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S7IIstrEDr5C3HHoQYsLwC8rMV0Y%2FLQFG5BBfK%2FrTGXW6QXKMg%2FvNm70i4rdwvo2Bzw3IYblOORW2ijGynQE3fBQuL71P2nvuE5YLLPRzhIaJcClEuKAVwc40yLUVuRQEeCy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dbc04568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/cl.303f56a616afb6bae962.svg
200 OK 574 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/cl.303f56a616afb6bae962.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 94a11246c389effac15bc92b1fee5dcf
d4d97d09a5ac31159b10a3881a61ac09df3fb3e4
33d56bffbcd1fddc4b6047628934be9007632384047012c1b6c7b4549061ee6f
GET /spa-static/1.4.1460/static/media/cl.303f56a616afb6bae962.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://front.cdn-mb.com/spa-static/1.4.1460/static/css/9841.9e832e8b.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:34 GMT
vary: Accept-Encoding
etag: W/"6633849a-23e"
expires: Sat, 04 May 2024 11:40:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znjmImAlnBET%2BPUFuYrpeLZskFhVrNYeGCKXzGC%2FbJXeuKhxvkKNMTXZQcgs3kRCNHttO98%2FGl2nGiUc7CpZAh6hlP%2FtoJsi%2BYG6wZoFQzIJ8h1u7bpa%2BjiB4yN%2FMBgcVDon"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644dec58568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/atp.d6b0e58f2cdf6e4ee9ed.svg
200 OK 4.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/atp.d6b0e58f2cdf6e4ee9ed.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash b32b73e3188cba75cdb7c01885d4a588
93983550cfdabc12a340342af50c84fc51f60a88
93d7c4df0ab0225f649fd57bc075d5e19e6b560be76f82ce0b1a3cb376a7effc
GET /spa-static/1.4.1460/static/media/atp.d6b0e58f2cdf6e4ee9ed.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-106d"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dd8sU4q0eXK9ASxRWotOh5dJ7vjqKWW%2FYpqNatr3A10dcJO5DWlknlzyO4CrUMjafFpprfWqg4293k7mRuYc9LQdGiTH7aRQt2AP5ZhtLoY3bXdy%2Fm8qRGDpfm1VxeaseOPT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644ebd3a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
len6gyisnhmb.com/api/v1/bonus/first_deposit/info
200 OK 59 B URL GET HTTP/2 len6gyisnhmb.com/api/v1/bonus/first_deposit/info
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerLet's Encrypt
Subjectlen6gyisnhmb.com
FingerprintAE:DF:C8:2B:CA:BC:77:01:65:F2:A4:72:C7:D0:E2:A1:6C:2B:28:C9
ValidityMon, 08 Apr 2024 09:19:21 GMT - Sun, 07 Jul 2024 09:19:20 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 244bafb7d36fb74595576ce553133442
49842065690aed64fd4aa670823c2eac6bf2a7d2
1aa33698594f13f59561fc08eef6fbee953447db06fb8e6ff1c31a56471da14e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/v1/bonus/first_deposit/info HTTP/1.1
Host: len6gyisnhmb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-name: mostbet-com-spa
x-client-version: 1.4.1460
x-client-session: 0ry0fm2kjl3dpr17iheh
x-client-device-id: 6rw0libp8kl504dblqn5
X-Requested-With: XMLHttpRequest
x-client-platform: desktop-web
sentry-trace: d1dec91f074a4f119c999c745d24b0ea-ae405d308b716e9d-1
baggage: sentry-environment=production,sentry-release=ac071454f23abee2b2f672641b72b1b7434659b1,sentry-public_key=4a626086556647d191e62e9bef5eb347,sentry-trace_id=d1dec91f074a4f119c999c745d24b0ea,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Cookie: uid=7192451982571864066; rst4-uid=7192451982571864066; theme=desktop; PHPSESSID=c7ie0nmk4bbhj2mc0tb4m50pfl; lunetics_locale=ru; tz=Europe%2FOslo; _ga_9Q6VE8VYRH=GS1.1.1714814182.1.0.1714814184.0.0.0; _ga=GA1.1.1202729926.1714814183; multiAuthThirdPartyEnabled=true; rst-uid=7192452065950433297; cid=4259899906; prid=most_partner.4259899906; pid=126916; sip=0; _odd_format=decimal
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 09:16:25 GMT
content-type: application/json
cache-control: max-age=0, must-revalidate, private
x-request-id: df10c72326f7e4b60f425f37f508e4a2
pragma: no-cache
expires: Sat, 04 May 2024 09:16:25 GMT
vary: Accept-Encoding, Accept-Language
content-encoding: gzip
X-Firefox-Spdy: h2
upload.cdn-mb.com/upload/images/sport%20icons/beach-volley.svg
200 OK 1.8 kB URL GET HTTP/3 upload.cdn-mb.com/upload/images/sport%20icons/beach-volley.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 6d0a8f5613138f5bb1bb852f4e8da19f
e02aa980027d87e736f95eb267c71a3df90e0be7
7bb509d66289e51c0b8c53fb9ea06a0fc4f0582c02c987a3694e1e9a2f264b4c
GET /upload/images/sport%20icons/beach-volley.svg HTTP/1.1
Host: upload.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin, Accept-Encoding
etag: W/"cc7e3b9c6b7b624bfe84fd6cbb11bbfe"
last-modified: Wed, 07 Feb 2024 08:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-amz-id-2: dd415372f9275fa27ae6f25745f52935015e5cbae0f0830d7ff3657b3f08e8fe
x-amz-request-id: 17CB51E5DD8398AA
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1654102012/ctime:1654102012/gid:33/gname:www-data/mode:33188/mtime:1654102012/uid:33/uname:www-data
cache-control: max-age=345600
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2BfyuB2k5WA7oOnxAJ5kZVFRsdrxTtfykAqgbuMCXvymq9mS6h0%2BhKGnLJsui%2FqkF0fDAbGbqe32Zz8jPiewEQNXWSUL7uqEMG1zFr2%2BBimJYcrDVDs0%2FgBI2tdKYnaamQQexA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764749d41568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/css/8122.a7a9cd60.chunk.css
200 OK 84 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/css/8122.a7a9cd60.chunk.css
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 37259455002a7519525d1a8255ac19bd
7bf4625c507aa267a00118393d12bf64960e691f
c760ce0b61624056b94af8aab6ba5004d4e91aa49ba0a419c0b1636bfbaafb0b
GET /spa-static/1.4.1460/static/css/8122.a7a9cd60.chunk.css HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:22 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-148b3"
expires: Sat, 04 May 2024 13:11:13 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 309
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h6kLQbEona0BzgBMdh9iXZVRt%2FqDSogEUvuPltwDz%2BcpBt%2B5i9vNbCCs6qxqubJG8Sih8%2BnLkYknWhTah3HdO%2B%2Bh1iYqszsvGIAPQE4UCK7QFlPM0Xd57xywl8mYlDWdCv1o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7643d8bf4568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/4805.e52e0403.chunk.js
200 OK 22 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/4805.e52e0403.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type JavaScript source, ASCII text, with very long lines (21612)
Hash 85fbcce6535ea4e2ab9d206c44685158
dc7a509068c66082fe524fcf9c11554ff62a9cf2
a7a8c1a91e534ea372b5ee06cd401bd2109497f819e59fd5b005e0fad315bff4
GET /spa-static/1.4.1460/static/js/4805.e52e0403.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-54b9"
expires: Sat, 04 May 2024 10:45:06 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 9078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ezZjB1qR4wYilwtvenSIqOXY1SKrbDoIlRxiqSmRt5cu92bk3k7qbnSNXuk60AfOKPMXFykeBKga4%2BCuyTYbVRot1X7yhu6kgY9XOqjk%2BgoXGzCFlg4wbm2gGuMky5%2B%2FWj4S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644b190f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
200 OK 330 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 3657e8d7ea960099d85b41066581a142
4e5132ec708c7afb269ad627c40d12e0f7e434d7
b9eff9c3cdb9c872ceebd2d90a0538a37eb3230e29869561c79e872e267cd983
GET /spa-static/1.4.1460/static/media/back.5f91ecc918075b33253e.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:26 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-14a"
expires: Sat, 04 May 2024 11:40:17 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wphXK0QQgdyutbLCzml3O7AgT13%2B4r8ZjDLOL184popgFH0TDYVAnLArCYQX%2FujPO%2B27bjtPTGahF07gs0WyyBiuxWMzKZ2LoQO8nMgUGoS0T%2BTPzP2qlrDL7W7BLacr0mlO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76457f835568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
200 OK 1.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash a864edaabd0f132dc3c5f373ea19f307
4c3c81ce941ac833bedaa41a5054a05a087b6cf4
9da353c643c46b5cdd38b125a9cb643a0cf436d8bedc85ccec3ca94e0172dba3
GET /spa-static/1.4.1460/static/media/field.d2ca7ec12cadaf9b1f9c.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:31 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-4a4"
expires: Sat, 04 May 2024 11:40:15 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5775
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CIKsXOOChiPL7t9ZcrQ%2F0YcJHqybPHwUyWdCCXMocT9iT1cYsHbdYAerDHgHUCMruxVXPEfxyvl1PiruAK8B%2B6hi9ylS92a8KeGJ6vrAY0EoH57mIEV3TRhiP3zH0%2FFzsbjG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76476ffc2568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/js/436.98648afd.chunk.js
200 OK 5.2 kB URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/js/436.98648afd.chunk.js
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (5235), with no line terminators
Hash ae79e60e938f5156faf2a58f1459173e
8ef8891e8601e0bb9463f3748a9283faec55d89d
0fcb52d689f32cef959f5fa2328e18d3d734d0826553deebddb81396b6788ef0
GET /spa-static/1.4.1460/static/js/436.98648afd.chunk.js HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://len6gyisnhmb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:24 GMT
content-type: application/javascript
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-1437"
expires: Sat, 04 May 2024 13:16:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nuTSNWKamYTQiexwobZrmwQEuhgscfN8E0w0l8A%2BXTyQLYUS%2Bvps0Wy4G1orGNyJRmdr2x4zNHGWUuIXlSB8f2G%2BXFde1GanNPZl3jhLj5JLVmRSRLs6BeOMR3dROnY9NbzV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7644c7a96568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
front.cdn-mb.com/spa-static/1.4.1460/static/media/close.9b33d3e4ebfcc1ed5ee0.svg
200 OK 250 B URL GET HTTP/3 front.cdn-mb.com/spa-static/1.4.1460/static/media/close.9b33d3e4ebfcc1ed5ee0.svg
IP
Requested by https://len6gyisnhmb.com/?cid=4259899906&pid=126916&sip=0
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-mb.com
FingerprintBA:14:C4:AA:34:D0:BE:AA:B2:D1:F8:45:6E:A4:71:3E:DF:E4:A4:89
ValidityWed, 24 Apr 2024 15:58:21 GMT - Tue, 23 Jul 2024 15:58:20 GMT
File type SVG Scalable Vector Graphics image
Hash 7334692bf94b232c31ab6cc1d1a511b7
5b69fef62ad079e86e6f1ca329fa369b35ff111f
4582af05609689867a52f72f41208767c6642419fb48a5f641a41a6339b0bf6b
GET /spa-static/1.4.1460/static/media/close.9b33d3e4ebfcc1ed5ee0.svg HTTP/1.1
Host: front.cdn-mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://len6gyisnhmb.com/
Origin: https://len6gyisnhmb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 09:16:25 GMT
content-type: image/svg+xml
last-modified: Thu, 02 May 2024 12:18:35 GMT
vary: Accept-Encoding
etag: W/"6633849b-fa"
expires: Sat, 04 May 2024 11:40:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 5771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3UC5W6hDplTd22YT%2FR9sUimCIVeCKL8J5SSIgDFM31P4LI5pSE23aJC1gGtAUui6PR4BQxx8ea%2FJW0rL%2BjyioZHPxSNkDqim2R2U4%2BCwGnjM2LYGmqUHGAB8Ltc1XYV3Dn%2BT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e764508f9a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
143.204.55.95
104.21.3.14
185.26.99.196
193.17.93.93