{"report_id":"8e64d5c8-9ba2-428b-8666-d0c5aa586162","version":0,"status":"done","tags":[],"date":"2026-06-15T05:49:42Z","url":{"schema":"http","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":0,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"title":"1win Casino \u0026 Sports Betting | 1win Nigeria","dom":{"size":974107,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21497)","md5":"ae6184368ec09da26da16409157055e8","sha1":"9f2cb303aaba6934c19a171e4ffbecf279d38534","sha256":"86b3752b123f0f586d2405b5ff2370f029d9889a358b99879f68c5af6c80838c","sha512":"48a5d5864ee2ff05fbe9e3f22672202a09e25732bb79e34b8cc955c503603f8843d0360d648553b2ef4c32e0103e4514ac666a1ccc26a4ba0b3ad5e9cb178320","ssdeep":"12288:/vTnOwBu9shSaINm4BJhT62np3XcAuDqVII:36UDjI","tlshash":"1d253a79ab20b03eb9378ce67799634c2024e526cd234aedd65493344bcbff31296b15","dom_hash":"domhashc8991edd0865c2cdbad4663964ea730c","first_seen":"2026-06-15T05:50:01.096329Z","last_seen":"2026-06-15T05:50:01.096329Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":0,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-20T05:49:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.lab.amplitude.com","ip":{"addr":"151.101.130.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1996-05-09","domain_rank":23542,"first_seen":"2020-10-31T13:21:39Z","last_seen":"2026-06-09T04:46:39.453552Z","alert_count":0,"request_count":2,"received_data":36421,"sent_data":2250,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"analytics.twitter.com","ip":{"addr":"172.66.0.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-21","domain_rank":6366,"first_seen":"2013-04-10T19:53:18Z","last_seen":"2026-06-13T16:43:10.045493Z","alert_count":0,"request_count":1,"received_data":1586,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"script.hotjar.com","ip":{"addr":"3.164.240.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-01-23","domain_rank":7765,"first_seen":"2020-11-05T16:23:46Z","last_seen":"2026-06-12T18:05:21.478878Z","alert_count":0,"request_count":1,"received_data":233822,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"1win.ng","ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2021-12-27","domain_rank":251240,"first_seen":"2025-03-06T09:01:45.039235Z","last_seen":"2026-01-15T11:55:44.147605Z","alert_count":234,"request_count":235,"received_data":5110173,"sent_data":406068,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"optimize.v3.bundlecdn.com","ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-07-24","domain_rank":3006843,"first_seen":"2025-05-18T10:30:17.412331Z","last_seen":"2026-06-11T08:17:40.950077Z","alert_count":0,"request_count":11,"received_data":37157,"sent_data":6658,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-gateway.top-parser.com","ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2021-11-11","domain_rank":4893400,"first_seen":"2025-08-22T07:27:49.02506Z","last_seen":"2026-06-09T03:09:09.557644Z","alert_count":0,"request_count":57,"received_data":103376,"sent_data":37562,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"static.ads-twitter.com","ip":{"addr":"199.232.172.157","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-05-26","domain_rank":6404,"first_seen":"2017-01-30T05:00:15Z","last_seen":"2026-06-12T02:10:33.230576Z","alert_count":0,"request_count":1,"received_data":48655,"sent_data":451,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.hotjar.com","ip":{"addr":"3.164.240.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-01-23","domain_rank":6122,"first_seen":"2014-11-01T05:14:27Z","last_seen":"2026-06-12T18:05:21.592792Z","alert_count":0,"request_count":2,"received_data":31574,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"v3.bundlecdn.com","ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-07-24","domain_rank":2867515,"first_seen":"2025-06-07T11:34:20.833779Z","last_seen":"2026-06-09T00:03:24.244353Z","alert_count":0,"request_count":1,"received_data":351,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-06-15T03:14:34.947232Z","alert_count":0,"request_count":1,"received_data":831,"sent_data":997,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stats.g.doubleclick.net","ip":{"addr":"142.250.147.157","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":958,"first_seen":"2012-07-01T17:13:23Z","last_seen":"2026-06-08T15:02:19.55185Z","alert_count":0,"request_count":1,"received_data":831,"sent_data":697,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-14T22:29:33.380889Z","alert_count":0,"request_count":3,"received_data":1346129,"sent_data":1446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"t.co","ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-26","domain_rank":232,"first_seen":"2012-07-25T19:09:44Z","last_seen":"2026-06-13T23:41:51.833025Z","alert_count":0,"request_count":1,"received_data":1126,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"libs.smrtwheel.com","ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-05-24T17:27:24.428729Z","last_seen":"2026-06-10T23:58:43.763191Z","alert_count":0,"request_count":1,"received_data":457382,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"ad.doubleclick.net","ip":{"addr":"142.250.178.70","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":843,"first_seen":"2012-05-24T20:21:08Z","last_seen":"2026-06-12T21:34:45.866554Z","alert_count":0,"request_count":1,"received_data":535,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-06-14T22:44:42.719935Z","alert_count":0,"request_count":2,"received_data":1072,"sent_data":1893,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api2.amplitude.com","ip":{"addr":"100.22.108.205","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-05-09","domain_rank":5827,"first_seen":"2020-07-17T12:18:39Z","last_seen":"2026-06-09T04:46:39.41373Z","alert_count":0,"request_count":2,"received_data":577,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bstatic.live","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-09T23:45:40.887372Z","last_seen":"2026-06-09T03:09:10.032796Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":567,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o230566.ingest.sentry.io","ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":0,"first_seen":"2023-11-22T07:35:35Z","last_seen":"2026-06-14T03:35:52.674784Z","alert_count":0,"request_count":3,"received_data":1535,"sent_data":1806,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"flowmetric.life","ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-09T19:09:33.354052Z","last_seen":"2026-06-15T00:02:28.885329Z","alert_count":0,"request_count":2,"received_data":2777,"sent_data":1192,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"img.smrtwheel.com","ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-06-06T18:38:49.251336Z","last_seen":"2026-06-13T22:46:46.476871Z","alert_count":0,"request_count":2,"received_data":13055,"sent_data":1161,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-06-14T23:12:56.924088Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":793,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/handle-affiliate-DnnJyfO2.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3569ef5035180a24c9b89e70d84eeb7d","sha1":"7b41d8d789fba26f376aeb927df3605dc1925c1a","sha256":"b088900d7bef991e989aff6e62c1c3a2376b02f94c109e25d8333358c8c9522a","sha512":"015e14c0db300298085c047b62215a01052f9050f7e64766b668121226eae760863a6aa37ea861f9feb4c211d12155d1a568b341a33e875ea70251126917bfcd","ssdeep":"","tlshash":"7101d0ca15b64cbf0f793ee568053669b9f344cc707a8280305c6a023523e8bcc1e54e","size":753,"data":"","first_seen":"2026-06-11T21:42:13.22988Z","last_seen":"2026-06-15T05:50:01.130039Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/array-response-validator-BILV73Wz.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b422f34fbf25baa4758bd2a5d7166e3f","sha1":"37ed0a0261947e4f92857ceb6e91c89747a64ca2","sha256":"98427fa7c4460615c312693c103a715ca1b1dc4f3dc49234e40e24e48b798472","sha512":"ac750832ca813f1d92e148d8bc6717452ec0d546929d270325044f3daaad7e7814d93705c8f44fd39865a3cd8bbd848f41ac189d8d30b48198eec1cc50fcc9f6","ssdeep":"","tlshash":"23019c2f4b449bbc403a2548ce4f3d344c589fed81e989849cea4b2257265e58a37bcd","size":819,"data":"","first_seen":"2026-06-11T21:42:13.393126Z","last_seen":"2026-06-15T05:50:01.220735Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/accordion-DQA1RP2H.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eab9a4a2dc37394ceac38a264e3543a2","sha1":"49412925fd89521c4c9ae52b0fa66a869c079287","sha256":"eb0e6f780fa9da06423755cfc1a191877295bfc582cfe8f27391e9dcaf5794b6","sha512":"ea907529c07e2c12caa20ece8e95834e01c0988423456191ba55fb81c29cb9071afb44a801cd06bbb16b28d584429ab40193565dfa4ffd2877e1074cb6a17637","ssdeep":"96:Dc1bbI3xMFs8kMCIIGGKk5HVFudSqyzwa:MbIhMCKCIXGKUVFudSqyzp","tlshash":"c491a6357d4886786b27dc3877e81bbc8038c3f5a56479ecf15b952827cafe00856b09","size":4377,"data":"","first_seen":"2026-06-11T21:42:13.376766Z","last_seen":"2026-06-15T05:50:01.112805Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/footer-container-CIsvTw0m.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc452a503fca22dc6e368d8f2411d365","sha1":"bc07caecd27dfb775a20835b20659a2c9f3976f9","sha256":"832f23c24d19b611d5683aa910ca140b5c527ec14ad274560fc0b318b3e8de84","sha512":"682f33dc60b8c17ebe339d8bde4eac6f3c3e5de7689f48037ed46d0eeaefa8fb6293b420875e11eb93d278ffb5fd57753932743847cf47ab4c32dfde6147a3ab","ssdeep":"96:QYHzDnUCcfyX/8gsZ/8Fj0o0vjxTsJh84:QYvnRc6P8pVF8h84","tlshash":"ac813013ee1185708166cdfae162e034567bb17793d1d7b0e2ef9736478a27cc816487","size":4193,"data":"","first_seen":"2026-06-11T21:42:13.352393Z","last_seen":"2026-06-15T05:50:01.255037Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/seo-text-D1EO7Mko.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c7256bbcd8c660894a8dea673110c8","sha1":"4df8acbb15eb36a56db34a99a23298aa73c7278b","sha256":"eef7020d5cb182c0db61b35a36aae3ef9b335670f60ba3da9a9b62bc1ab1bca1","sha512":"5a0052d0abf55354c8ab5537bf720949bc4efd25cf0d92b903d3894c17ac9202e22e33f9ea975d0ec81b377fe1edba4b5cd5a72c599f3ddff54f74949ab2e9ca","ssdeep":"96:7ueMpVhm3w7Dn/whisKO7Gf0U0GceZD5gvpkrRW6/X9JboWT84:CeMpVhHn/whiOGf0U0GcYDgKW+Dbr84","tlshash":"d2f1b791d922d67dc33348aea23b3448b20c9c57df96c7f0d5a50a4dabc9bf11615b0e","size":7797,"data":"","first_seen":"2026-06-11T21:42:13.237123Z","last_seen":"2026-06-15T05:50:01.324181Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/freemoney-sidebar-banner-BO2ivXP1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c15519636c2ec4dfaf8f183ece1d201","sha1":"09c3bb1f4585417ec324bd65d195ea175b8478e5","sha256":"b1ba3530ce561e36a1d7e5e1a318d192389ab66738021422583b9faa6b7afd30","sha512":"71da73a8585c7e6f4eed1d7789595a99095ce6c0f58047ac5f01e9a5958061728d128c1319e99f35eecc86af87712a0a32fa2c6b1915eb1daed2080a5eb6e74c","ssdeep":"96:O/mF7DnMXFoMcA8tdEZ/LgGKf8H1y6DSPdr4S3Ewy/eC:O/mFnnMXSCYdXGYmQ93ER/x","tlshash":"e1b1a5127930a5bc95b71cac1ecd1d71c09ebef9da11cdc6846ead3003f6ad2874a388","size":5458,"data":"","first_seen":"2026-06-11T21:42:13.135583Z","last_seen":"2026-06-15T05:50:01.299886Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"adc8164e4f3613610fea7ad941b8b968","sha1":"f331280efcd3b2cf7ce4521184af683f713484ed","sha256":"d901fab1a40d81f450f602c5b6952293d663034941b71b693647a31d8ccaf278","sha512":"a2f4128af1eec8e2df39c8804209eface75b2fc1d48ef5859cb391847032bedb1c1b85eab0768b0a5f4c936e3e12628325073607eb5e63d28094c7ce75493c41","ssdeep":"","tlshash":"71a0228ff2ccf0fa02cf320a202f0002220f0bca0c0800002b300bc0302b003223abec","size":75,"data":"","first_seen":"2025-01-28T09:42:40.612175Z","last_seen":"2026-08-04T01:13:27.61822Z","times_seen":2719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/error-captured.vue_vue_type_script_setup_true_lang-CAKKD8xl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91f108f7b3aaab7558d8eaebb43eea8","sha1":"643e16e680d033e9cdbe78bfcaf0866c5653775a","sha256":"8446ba48a8b8bd8cdc2e422a23493bb006781dae4fe53b8682c829cf675cc831","sha512":"b6bb23466e55e1d5d031554c999029ad81afe3dbb0159379a5d42a0f96e9b547f2d6dd0a191ad3c8c5cc088786d54cac0b852b5f69f1fb6e9b01fb7f9d564fa5","ssdeep":"","tlshash":"18e0e7087cb6ed764d500d4b5d371570c8ccb8e65637d0c35145607b370d949ce1796c","size":316,"data":"","first_seen":"2026-04-24T05:21:34.992274Z","last_seen":"2026-08-05T09:11:21.996668Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/list-item-BIddQQ8E.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0709eac6dca6ed6ff6dccf8c3ac3ea0","sha1":"f56373d4acedbf0d0170fbd08febca19358f7c18","sha256":"9ef3b8a60e8f915d610121ba8de2db7b9248b77fe5880ebe5f22a8ed1a391f0d","sha512":"cd3fe1b0a6b5a7d61bf6cc02330a7beea5658e94e46379311f071d747e5593afd2629739d133808cc1431132d6d0da1f7d5ea6b2a8bec3740ede68d3b458e162","ssdeep":"192:QqOfY6tK13w3pliM40aka7Z9FAv91P7oJ7ojQL:Qq16tKV2Ab0u/Ol1jSZL","tlshash":"02f134ef9615aafcc8e67423631e1469960cf02be9748ce4f1155b2947cf7e19270b4c","size":8001,"data":"","first_seen":"2026-06-11T21:42:13.246904Z","last_seen":"2026-06-15T05:50:01.194073Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/menu-tab-CBoYEkw_.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf005e26ed3002a5701b1e6a200a916a","sha1":"7238a8ab7d0cb3fcfc9eb006bab42dc63ba16f58","sha256":"8fce35af65ed4d23b261766b0e55c87b9f6e942bf56c9da05fd41dbb2187c507","sha512":"d0c55064c3151f6f6a06acd25b04ef48acba09e4d35113295640cafa45608a9ec63ec77a7f88ba490793876476707e7ba168f1d3ee0859750d3a98ed5155af67","ssdeep":"192:cBMijHkGZ580NhVk3QTEqnuvBF2qq5qPVhn:cBMui4mAnuWfG","tlshash":"f2e195bdee80e63b9767643e5b1cf0dc814c65358e85c9d9a125e9390fc7be36282306","size":7294,"data":"","first_seen":"2026-06-11T21:42:13.343064Z","last_seen":"2026-06-15T05:50:01.171288Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-category-ab-tests-LHNufiXV.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddf60817720bd6aa220cb413d4e8ebc0","sha1":"c629afec2cf5fabb865f91e6e1c3c82f71ee3830","sha256":"9acc7304bbf0fe3de46e0e9c10f4ee748fa53cbc069c7571e39885ec6d3db76d","sha512":"e6073e2ccc315733435c59000d2e7cbf37639cf7a8206dad760559b5f5306b4d6e347de87746895c878c2f1852411d89871be21d2b7bce37d0252f562ddeb835","ssdeep":"","tlshash":"101132da302aac37a23595c7911291a84b1e63d03477cbe1312d4aeab339d82459ce6d","size":1046,"data":"","first_seen":"2026-06-11T21:42:13.178163Z","last_seen":"2026-06-15T05:50:01.314561Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Dp9rU1ko.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"60dd9c67c97fde574be2a6e9035d08fb","sha1":"8612247ccada30c919bf683b6c917070c6ba16ca","sha256":"f87c944bcd6634be5703fc129c2894ee0c3ce41db40c80dc7afe85d87e64d214","sha512":"8404f7cc93853c8005ae4e94a6f35530ca7f04f8ccf520e377112278aa18e9e11c8f3545f2acb0ec3316485cf4211710b9a50e87ca669216cbe7d29aac1a197b","ssdeep":"","tlshash":"4741834ac944c8b6557e8dd9cae6262445f80b86b851c4c8ba3c0d7852534a6e016fbf","size":2286,"data":"","first_seen":"2026-06-11T21:42:13.13896Z","last_seen":"2026-06-15T05:50:01.260886Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/language-picker-BDDcg-87.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd0e9d8fe504178988093dade51a1e8a","sha1":"35a8627ffc7a6602b8ecb53d409578a8438dd07a","sha256":"2c37986eb9af3180dc7f9933228bb31ac77953ea015f4b814bf98062f1f83301","sha512":"031c087be7d6cc034c0a00adc9d0b46a138c4795a9cb7ca012e3211addb981d42e2352e3c6d382184cfc3e25db14ccaa30bcd9ac8461192b26dc5dd703630335","ssdeep":"192:OWq1wDodjg6wEDvVmkPRE3yYZcEsonlCaPuBsjOwn4lzGFEAgD81TY6DWFxucqyg:OhO6YEDEkZYOonwaPYOnGzGWXxuK5DqP","tlshash":"80321a48b612f639b673590a37b5b84cc1186e368e956ef9db47401403cbbf9d2d3b09","size":11768,"data":"","first_seen":"2026-06-11T21:42:13.46085Z","last_seen":"2026-06-15T05:50:01.199369Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/sidebar-dynamic-section-B3689Q4w.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ab9fa4add3c09b9a8100f4a93ce229f","sha1":"78a0933a65c95dd19049f3c4f9f2df51fddcfbc7","sha256":"bf7888f7d78aec3a92ccfba078ca6d444b5c31ebbbea730488c7b96756d33813","sha512":"67cae02ca6c9fc8bf5e37027c0801a23f85edf6e09f97bb78027d1e9f17ee78570d39b7a21d1fdd91f2cfaba206d3c58a6dd65122b3f3526728719e4d416b98c","ssdeep":"96:+RtJ8LFDnM1ypECTqdh5kujkY8BY69V9LLh4X53JE4:+RtJ8LFnwypEGqdh5kujryVVP4","tlshash":"96b1f843f620b074693b54b7fab9705150349b9852e28ce8e1bd8e104be0eaad5c67cb","size":5309,"data":"","first_seen":"2026-06-11T21:42:13.181562Z","last_seen":"2026-06-15T05:50:01.151435Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-i18n-Bi_QR6fz.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3db2b7364b98e7653ae3712d96dca6f9","sha1":"3126dda54f53ccbcc8b94ba60b0267bb0efd542a","sha256":"875e9e89dbe7dae1f93e89389d507ce3e9e3f07f725c75e194c5f48318d1ea38","sha512":"90575921fd23633f954cfcfbc4058e1885b90bb1ea9e4284bd7c1d123abc8da33d5d85ba122c5a5fa8803663590184f5db7a9d0f536f15cafff53b2d01dbc61e","ssdeep":"","tlshash":"1dd097830881c3707bc84cc0e9201024432041c2732aac91719f01364ba52cec0e966b","size":232,"data":"","first_seen":"2026-06-11T21:42:13.366408Z","last_seen":"2026-06-15T05:50:01.332566Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/lock-Bz-YT4bB.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"938f07fbf177ffc65f9b71c85b5e460c","sha1":"f2a30761916062d7ecba857884567131a92bb86f","sha256":"735f48eaf4ab42bacf1c63bd928a8e7ca45311a25bacb44d45da6fdf1ae784f7","sha512":"5169315856915983fd74193f6c3b655fdbf464364eeb8c106eab1f4cf856d8c756a8633ceef12aacbaabf249280f56084f35a11c8539fc600f3a541fb8126a9f","ssdeep":"","tlshash":"892123e65338639c846be43d8a3fed88430e94bd3f2a41e40e1ec374909e060e507874","size":1113,"data":"","first_seen":"2026-06-11T21:42:13.446303Z","last_seen":"2026-06-15T05:50:01.320569Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/phone-input-e954s37t.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e31eeb6e419d9637229ad0661a6a01","sha1":"a9ea65c4aca88d78c3704695998b14f2f5d5ab6e","sha256":"7a2a9f004f8057f97821bfd3c4b17127aa78d4078cd4d1e7f07f69f5426ff745","sha512":"266cf3c57f3b020c24817de36e6783bcceeb7e94617d0d9d6050b131c25c50f6dc6b8575b3a63e2c5bfef3caa1f1abc2cb30cb6cbb57ad90c1128e3b3ed63f9e","ssdeep":"1536:wcCOe0tNo455wjcQLgJWrKRDkGtPe9UTQMR45O8m3RDJvftuqWNORBE4n9Sm636s:wxOe03o4PwjawUUMFlvtBBX0rq7SFB","tlshash":"0bc385b77a40ab6775b13f18cf06e28e9fcc8c92dc98a08c9be7d9db1950821607d715","size":129684,"data":"","first_seen":"2026-06-11T21:42:13.455281Z","last_seen":"2026-06-15T05:50:01.295486Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/switch-CIz6NCCH.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"de897f50ae11206bda82aa8e8e21d1ea","sha1":"75b7a81b4d38ceecd054cd24596ae432763129dc","sha256":"9ca8c386c36beddc6efa75fa543ef2ab8337b56b83a4a37de7388eb66aa89c66","sha512":"0e5f35a70d8c34ae0c4894dbeb6b87ba52badb89d1795512765d2ee12d841449204d3c479672c7578693331b0b1bbc94dfa1a0d524ec9936b94694b2e9c33fb8","ssdeep":"96:yZr3ZAdL9u9vVvioT9Scfvb2xiGA6//h8Z:yh3ZELEl9Scfvb2xe6Hha","tlshash":"c59174b77215c2b5ea222235638fd88cd85452760c1d5eb4f4dec035cfe69f66e26e10","size":4624,"data":"","first_seen":"2026-06-11T21:42:13.144893Z","last_seen":"2026-06-15T05:50:01.098538Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DRg7FJAv.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef83be97c8d8cded7efb9d0b2f7edf0e","sha1":"4c9c284a7eeca8d6fc91b64046a2be5d02ec63a9","sha256":"4f9568000853130a37e55ce7c0692dfac5b2dfc11ed8a4b034188d0f87aacc60","sha512":"d11d3b854b3eb8d49cab81246c3eaec2ef19ef855fa8ec0a5424051c96c66c759f5481cee48c41e1a8e0b9a1869334994f79cd6750af651f1c79a5274e203fd7","ssdeep":"","tlshash":"e2c02b3118ad2ced3cc105ccf105407d4e0a25cf619061c2ee8ed303d8d7014643e820","size":149,"data":"","first_seen":"2026-02-13T00:10:19.580155Z","last_seen":"2026-08-05T09:11:21.980687Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe4c42f0d6f31ef18e9267f07d5daeb6","sha1":"feb62a8f69a323fdfaa7c40515f153c95cbbe70c","sha256":"61d4f650185982d0903c61786e408bfb1440f934d75a5ffbe526c609bd5cd7ca","sha512":"13f2d87acf724b714f9abfb208fe05ebfc3adb1a2da869987471a3202d9c18a7bbdd3195d04aeb40e3fd84c041d731f91aa2b10e07122b6cdab9d4246d353236","ssdeep":"384:EmyuJYbE47auTIvSVAgwCkIR+8Uh+bGLZV1jBS0QXTvLf5vrtN6YF+joxJ:9LJYbEyxIs5JR+j+0g5TtN6djoxJ","tlshash":"edb2e8ce7cceb9a9136230f50d5736de647bee84e4685504e220e8e0f970701aeda86c","size":24866,"data":"","first_seen":"2026-06-15T05:33:27.469654Z","last_seen":"2026-06-15T05:54:12.782249Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/wallet-BPdiJ6lb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4007d0040a1683a0458f3a33d0fdfd7f","sha1":"3578ff6821026d7b6d14a54ad38d66c29ac17874","sha256":"d767d53d3cbf12e0e2d1a6e55718af4a84153c604ca45714cc4ea1488e195faa","sha512":"aeaba92c5360d1d96de7d4f245420fc4ee3ab3d1840871f56260a4073f51668594823393475ec87d2b29e1c49e9d17dd6dc4243b77f9965a057dbb8515c54896","ssdeep":"","tlshash":"72016bfcd2492a5e1b1b83788b2c78f0431d14bc371a46909a5f1271a08a5b5cb8f9a0","size":807,"data":"","first_seen":"2026-06-11T21:42:13.36119Z","last_seen":"2026-06-15T05:50:01.309965Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/adaptive-balance-Be3KAU7v.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f06f71dd9cfc0d1529f9527d0e97fd03","sha1":"675def3a3cfcccf642376df17a3b7bb31af25c65","sha256":"d03458c760f00fa8a28b1a5813d34c017049d93cf798af21d34182d7d713ff03","sha512":"883f4882edf7058a1882a2e8e915b77978ced9b21788040134dc4f0f9171a10200f56b77ea32d92e27d72ffa6ae0b86c7cd039869e3f2d8ce32140c0ea9c2f08","ssdeep":"96:02onDL07gDSIfFUan+Sp4C8woXAkYfIpZeURC0N7JoTiHyA1R4HO79Kg9P9n09F7:02onDw7gDSMOy4CoqgfxsadIOJuO79Kp","tlshash":"eda17230b77a60bcd372580641a89499f626b324f35f44e7933e802d179fd6072e6a6f","size":4785,"data":"","first_seen":"2026-06-11T21:42:13.223847Z","last_seen":"2026-06-15T05:50:01.276174Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-08-04T01:13:27.600758Z","times_seen":7490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-modal-ew4v3wp_.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"35ddce5e570c6316542fdb400bf98808","sha1":"7a04dbceca7b1b2d4b45cc91fa6a7fa483dfdc22","sha256":"553a62eac4a7106fa261583f289a2c0f767e67f4c630a5060c6cb4826389ad3d","sha512":"f01d77129f02162e19fbcd5e540a92ff26931227976f346916f2f18bcde435e0e6e145f153a841e011884c05164bc895bd9f038f1a21676fc7b798a4bb42f042","ssdeep":"","tlshash":"44210f9fce69aab5020be95ac89187be973813e0d15fe1a3906d1b5822673c2421bc1c","size":1230,"data":"","first_seen":"2026-06-11T21:42:13.252184Z","last_seen":"2026-06-15T05:50:01.128712Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/merge-translations-e1i2ANTe.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cca8f739006bb78699ce31a75ba801a","sha1":"f00e64128e0ecc06d99d67731eff0ce3635c19b5","sha256":"7f49f6e8c38e83622f71779ac4ce7110410ef999f37f260e68d615ebe2180f3c","sha512":"d4618560c60d241ef5dcdd57c58081e1a3683ec648a4ba1892a6ab0c4c4a11b034d8f24be68bc1059bf0f380a5f49c274a54099cada85ef468716e380b54511c","ssdeep":"1536:azk8UoSoBHfbEEYfnwY9YHQLhDoSMbDsiEPLah:a4xYafnwY9YHaD2h","tlshash":"ba933cc3bb5421f99bb61dd5e910108417369f14a82bc4e9b3be1de9128dd80b3b7b36","size":91877,"data":"","first_seen":"2026-06-14T13:48:35.249191Z","last_seen":"2026-06-15T05:50:01.102144Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/badge-base-DeWzFzwQ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d314fc9dbc554da47f69c8909421c1b","sha1":"ba8b631147a7ee1069ebbb7d07a27df56f8a452a","sha256":"8db6831977582a02bdf076019e5ec6feae6b44886b39dd95399979c46cf3e32c","sha512":"e14ea95a3086f5ea7fe6470c140cd59904a05b95a30d13f2d40a8055baefa319a257cbaf3a0a57a6a1e2d60b9470a47180aba5bcc53b42b3b69c818ef22440fa","ssdeep":"48:Qbgk1voUFzP2FOkyuKwGHRqbEMEYtqi95+3YLceVk4kgyVEB7wzaaDMTM9LlP:Q9voUFRkynHuj6io0NvYY7ULP","tlshash":"8bc1c04de752d579ff331d9bfe1db0a8c008a8f989251fe9f1120c195adadee2203649","size":5742,"data":"","first_seen":"2026-06-11T21:42:13.222843Z","last_seen":"2026-06-15T05:50:01.333037Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/avatar-gwTPURep.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8269618dd7ed4ce55eaceb9645bd85e2","sha1":"68aa387bb1172f0d09134e30dc04a74fa4dfdb56","sha256":"755f3f0f81c4ba784ec95d3f18efd2b3cde51eb794ceb7b6a809541aa5622d87","sha512":"b1c16a670ab40aae0b08e4c4ab03ba0445f4b5206f42c8b4bf3145c021a471a0f98fb3209e970c60a030228b5dba43e6e4d50fef93a6c396cf9ac3d6cb178575","ssdeep":"","tlshash":"c5517212bd148678aa179822ca24f3c0a08c51b5d71e3a56fd7ece7d8bc46eb30d66c0","size":2848,"data":"","first_seen":"2026-06-11T21:42:13.26118Z","last_seen":"2026-06-15T05:50:01.261756Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"2e77efc47c2b9ba07665f9931f695b2a","sha1":"a84789cf2bdff4f8c3c36b0de2bc059ed9af450b","sha256":"721a95b8f441fce6bf9b721af91f6db4b58ba27c4083ec3b8af2466ddfa0c998","sha512":"acebe99753ec01bce1cd515d7f1ec73d34971f9df084f54f906c59be856b08a7b3cd30120982cc7123c8174943e3ad3b5f44f62144d8efa4aee14da411a134f3","ssdeep":"","tlshash":"92a011caf288b0aa028a320a202a0202220b0aea0c0800002b220ac8202b002222aae8","size":75,"data":"","first_seen":"2025-01-28T09:42:40.633284Z","last_seen":"2026-08-04T01:13:27.606239Z","times_seen":3995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/button-RR21fBtg.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1229b7470547cca5f0d754c90fe292b1","sha1":"0d0d189db7cae237a2a06b8adcdf14f2e08b3ad7","sha256":"9015087d73f2f1c4ab8d383652f03fcd22321346c53461d7aa54f34f88e6e820","sha512":"e73f332c35d28173dd110e84dacfa4a8a27d31eff55529ed860bc1ce91b2db747a4b7c53457978b09607e84dd35f512fc9bc4badb7689517f7a4c325f4b58350","ssdeep":"192:nR5SEuKfJYgMK1blJwyzFq/8vhQxYupqyzO4Jwg8P:nqfmJWKdlGz/mhQxYuVO4JwrP","tlshash":"cb42b6aff600f53dbf939509531ea0ec920ce8b59e155becf41c999806d2ee16297307","size":12834,"data":"","first_seen":"2026-06-11T21:42:13.295823Z","last_seen":"2026-06-15T05:50:01.294599Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/icon-box-CT8v8WS1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f49c2ed30f1630c14bc0922bd8c4a815","sha1":"f3d5b4b6edcf0a4d2c50667828265753bb2871a7","sha256":"d2de5a7a946a1ff621f3ec39747da460c9213d42000e22d99836b5ae19fe396a","sha512":"fdf323ac0968d78834e2bc62d1ade837feeed67956e1b3015660553adf7ad8ac27c03352c2523a32fe7713b1b1582de699735dd286700b5668f11e1cd46c680b","ssdeep":"","tlshash":"12212422dd21e2387379044bd721d98bad5451921fa02cef8b769c395beca1b2305eec","size":1442,"data":"","first_seen":"2026-06-11T21:42:13.23347Z","last_seen":"2026-06-15T05:50:01.154494Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/betting-DOEV8t8G.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f5f517390851b6a53c97ca40c46eec","sha1":"c52128b9b22522916554df7bd9d1a02f58bddc26","sha256":"536c1035802d3505e1b1ca47820db5d7a0995f478e66e87011fb274ce8b05794","sha512":"3dcdecf2325a22f592bc1710507e5a13e6d369635d3100a1a20bc400f4ebffbb92e3175b28319b9dd3ff833bf7a66ba67c992758a8b157130c501d6f66837c98","ssdeep":"12288:Q3o4ho8U32SPkXX5T33NNo75cgVSsPgik9bQPVeohNt/aOHpH3okSe:Q3o4ho8U32SPkXXtHNNQ5cgskgikbQPv","tlshash":"14d45d0f3643753fa77f44f194790640731c9a25a6b388d9e1afcd2a1bea9605263f0e","size":600579,"data":"","first_seen":"2026-06-15T05:50:01.321111Z","last_seen":"2026-06-15T05:50:01.321111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrows-scroll-view-B_NWtfcp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a33f4e9fdde39e33a4beb9e5ecf9179","sha1":"573ab5f57ce4097ae4cb39e98e62dbb6c7c872df","sha256":"9bc3048fc159faf0bd1c075e4e8c60971ffd11dd836fdbd22d49aee8fbf6f722","sha512":"76d1990508502cb77feb8e77bf14f18db9b0cf136d5b80057d6a6ef987db0e9f3338fc7fc117d489438ee7df0293cf9a4e1a19d0b01bb73cb0f25e62cfc0296b","ssdeep":"96:FQ2U+IKxbgH4TV1Px3VxR0m1OPFWaOxDOh/DdDZ/DU:FQhb4JLZ0zPgaOxqRJRw","tlshash":"3ec1ec76eccae0a866cf9239d915431b11d91ebb5714294ad8bbadbe07d0fb8013d30d","size":5884,"data":"","first_seen":"2026-06-11T21:42:13.324439Z","last_seen":"2026-06-15T05:50:01.124974Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/support-row-D3YLR-dm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3665f834dbe0b9b59c87449fdd2b7eec","sha1":"2f3522f2aed14202d84121efd1e965124b51a43b","sha256":"bef8310c7d97cbd0565233744a43ed1b4965677d81d10019c59e42e572a230d2","sha512":"702acce02ddb2aeaeed695d5151cd70848c256d85001f15e6f0d196153da4fe9e78b5fc3b7dd969ddd456bf703e90b57dcf19ed72e09499ac3c6baad1799fe06","ssdeep":"192:hnbv5NXinIfNDnsRBNGnIxM0xBzBmcxJaXAKPObVFqm4:hNRinqtsFGnIxM0/aXnPORs","tlshash":"7902d742ee745eb4813b0c6bf41e14539464a61acb89c9e8e0bc87f643f6cb1c13db16","size":8734,"data":"","first_seen":"2026-06-11T21:42:13.195576Z","last_seen":"2026-06-15T05:50:01.253825Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal.vue_vue_type_script_setup_true_lang-Dg6ukzuI.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a60daf9cd61c0ba3642c5dae8934448","sha1":"8dd063a1c684468871d55445f2840579bc0892e8","sha256":"bf24b38ba5e0000cdaa9b904aa9297c7772fe05356f5957320ef012346ec8984","sha512":"7d66c372b318ff27728b3db66b5edb0c2e5fdafdad04aabcb3951db8a85daceeaf5f006db587b1b3599afbcccd8a867d1e3867dac060aa8942d4baac6f2552c6","ssdeep":"192:n5Lzu262no18JOkP0Iz39IbUi8EsEBgp0YRMDbjK7NJI3HuH4D5zPuCPNwwP:n5LzUk3JOkP0Iz3tZEmV6vuH4ZPuCPNF","tlshash":"c542d787cdfc9a31497f9047b279cf10431c4a5ae2216c9772b89ebd0bcbd991191a7c","size":12181,"data":"","first_seen":"2026-06-11T21:42:13.259694Z","last_seen":"2026-06-15T05:50:01.291261Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-bottom-DVL4AW7L.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ea005451474ade5e95cc9acf2f5883","sha1":"e8b6afbfcb93225f6d6212c7bbaa38fb4c522e26","sha256":"f4c01c25a4df8f6cd43f8cacf9f61bad5c69986e875bf453b0240d878aa56b76","sha512":"9cb2003577ec78170a1c1343129df81c7a2d696314a40b133490923cbdd304488df649849e3442c8eef7e6b032de33b69877a10068487b3d0d4580904ca95686","ssdeep":"","tlshash":"3ce061b810485df980228734c22e0c8503147faa3f8d40e15a1e5d3b41c32f0b84f635","size":394,"data":"","first_seen":"2026-06-11T21:42:13.367265Z","last_seen":"2026-06-15T05:50:01.13364Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/install-BiNbFxZe.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d8f88f9249842bc5e01f4062de1434","sha1":"ddbe52b2ca3e671f14f549a437beee1521c19454","sha256":"bf16ba3444ba2d2142d63064ddf11088c050ef523e9911e25dbdf5d88efc1ba0","sha512":"b0ed5b0755c8f1dea7a01e359ac279a7e35544241a6a77ad789b14e9ba88058321095ee982e71eaff9f713337c6383dbb9c5e32bfc315208f3c82d2b11321966","ssdeep":"","tlshash":"c00190fd131806bd88c75bacd72f8e96131a4c5b3b8958e04b1f9735955b4e1e64f120","size":753,"data":"","first_seen":"2026-06-11T21:42:13.375887Z","last_seen":"2026-06-15T05:50:01.170605Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/menu-section-item-tab.vue_vue_type_script_setup_true_lang-Dv5pG7n0.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5302e79d39ee75c569222515caf36794","sha1":"fcdfd61b8ae8c0c9e0071ede1da2bf8eb5e3ce86","sha256":"d12b6ee5310b4799e742a9096d9fde8e873832d176cf2f6360e9cbc6b708f0f5","sha512":"a083cddde260f56de1bcb84795a7c0efc070dda74a63e373c3a8c7b9b16ba1dfa29c62ffcb9a2ee9dfa3213d673da2f1d73963dccf96ec6e29045d655fff87a0","ssdeep":"192:17kItwALEZJwRYepwIvzmorQsg7ww27CrayWjKw+pWptpeYwdwbI5xcPTRAqI5PY:1752AAVXKQNENs88mbIrsI7pi3","tlshash":"5a52e697db65ba34273f2497ed1910e8c104532fce894df4f97d56680bea9f2e64030a","size":13792,"data":"","first_seen":"2026-06-11T21:42:13.481235Z","last_seen":"2026-06-15T05:50:01.150042Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-08-04T01:13:27.600758Z","times_seen":7490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/experiment.esm-fQdpNBFK.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b9f384393c4f36e5180c09999cda546","sha1":"2c52605d6dca814b780684901f0ddce4002aff53","sha256":"0abce1a68a9123f363329c976b0b088aa8d8a247ef9f9515140794852ee64b28","sha512":"98d697e48d9882478e33a98f926f200f460bb434e7747abe5ff608ac2283a80cf6f09b90d95d45e258b5feac5b0f1e60c66114a770ae54f60eaed0055e44a72f","ssdeep":"768:l4nGqDBiD22WeoCSKAuwVazRqmd4UQIFOFlBjY9mqzA0mmj7n+VD1ua/2IaDtdYo:+nGqViBS1uwVyw+sFjngII0agAoq5","tlshash":"0063f8ddf1cab4354396f8a8d02b0416bb3f3d18d90c81b8f52ae6d23eb9545412bb79","size":70217,"data":"","first_seen":"2026-06-11T21:42:13.281776Z","last_seen":"2026-06-15T05:50:01.310791Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/app-install-widget-BNv9f71I.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"54d13e176cb97bb9100808ff1f85436b","sha1":"066c450de2f3569571f6e9d181cb1906e88cdd90","sha256":"4df0ea8ce2e631b75c2f5ee646d0d25eea951e7a1537fdc1a4eeee831a6763e4","sha512":"20a15ef455940593926a6f2725415181a4cd2b5f51ed48d1db878a108c5de44535c713ac4665fdc5f8e7ca7cc5e11560936e104f46e252d0dfd6deb12ae315d4","ssdeep":"192:rnbIRvN+xtBSOWuk4nkm39n5ExHZrqF7LsvP9T5rv1BhdF4:r40xLSOWuDJWx5eJuXThdu","tlshash":"81229612d91908b642799ce6fd56e4e001e2535a4241cbb9b8ff4e3423c6db5c1abfb2","size":10498,"data":"","first_seen":"2026-06-14T13:54:17.974472Z","last_seen":"2026-06-15T05:50:01.115641Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BFMUjEch.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae40d214ee61dcd902e6abcff8ab7efb","sha1":"0f53fbd4d52f7c4f6c69a4d1316499f0240431d5","sha256":"a45566e9cd63753b90b28157745fb06c6375816d9b0106668782a59d81a19df2","sha512":"57a67334cf9872b0bd53b45c99f82376ce7a2f1a8462727552cf918ac3c87f76530909db888b70ecb908996604fcf733967dd4f3f8f7b1e5d04f2ed804808751","ssdeep":"","tlshash":"8551724a5f85acf5047d8dc8ee6264e159f14341e111da8cbe3a4c3c35a1cb2800dfb7","size":2519,"data":"","first_seen":"2026-06-14T13:48:35.252304Z","last_seen":"2026-06-15T05:50:01.23566Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/gift-9SNQZ08t.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c45d4b43950f53faea6f87eb78dfc40a","sha1":"0728c91acfa40ddb3e442bc93db2998b96d5411b","sha256":"06f46a7dbc16b587d9452367b41c327471023d22f46d81e125d569051ba5b4ec","sha512":"698f65a0fc953943cca264dfb781b0038d34d1ff822890a8d5a029fb30bcda53e67e46866ecae0fffff94efa85c65e98194e399e4f006642f99edb036dd9935c","ssdeep":"","tlshash":"672135e02360dbac1957e65acf38bee0525f159a37a5c5c10e8ed7b901d78b0f40a804","size":1242,"data":"","first_seen":"2026-06-11T21:42:13.232624Z","last_seen":"2026-06-15T05:50:01.137953Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/lazy-render.vue_vue_type_script_setup_true_lang-XVdMy2YD.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3feb76578592a26b056f2126d5a5251","sha1":"9bbf3b78da95c9819d9ed23697d51ee98708ed1c","sha256":"c8bfbde27283b12e5a748806316c684b9dbc00e88718fcd3447ef2dfe735ec12","sha512":"ba0b2af9cd7c0af56d7678f7fa20b17ff854021e7602d811dbe0f5bf58110202d2f8289bd3ca252aee3ac7b97dc211b145481cc519f8b477469db107c3df5ac5","ssdeep":"","tlshash":"d801200bfc19deb4e4541bdbda26b92487461b9e0badf8a383ef038e538e405110c709","size":768,"data":"","first_seen":"2026-06-11T21:42:13.435809Z","last_seen":"2026-06-15T05:50:01.279685Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/sidebar-dynamic-section-DtFGlEJn.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"78db84002eae8861089f68e443611e10","sha1":"5600ce178d43c5cbba42b64cbb85d211df9a45c7","sha256":"a37eebfded0dea38cd2621173e721d313783129f27389315fd5fbe4d6553ae20","sha512":"04353f76a22609fac8070b6a83996708dff46939c9b6cb2987b2ce64ff2db0534a38ab299103f59f0228c09ad3c768130c3e5ed93f0b6bff565dfb48d5ce2c49","ssdeep":"192:UmrfjIFBnpGQd3wXX+tttQGoIAGwkD/kDrG7iowwp9Lv1:vMHrTWQTp","tlshash":"5112c90ae00404391953b6f6ddd880e8e11a13b9e3d646e2b9ff8e390b2adece571157","size":9476,"data":"","first_seen":"2026-06-11T21:42:13.383985Z","last_seen":"2026-06-15T05:50:01.281012Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/giveaway-Bx0c57Wb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"92ac5924cfc82285dadb7a1bdb5cdc78","sha1":"3d4e91e4d42044a2f15265d53af4415f0f8fd077","sha256":"bd90c4be4d40c2e28a97bc5f039e39005c6e0e1bfa893f62c23cdcb062ec545b","sha512":"be2470f5400018203ea0846681130c0434b00b53f5c233609bc93db0d380b1b124e3acbcbc5c0aa883c8b6754ea15cda2cb722126e4dbe413f2a4965788f1d12","ssdeep":"192:snX8CN+oKCTfAY4RZYXMt5ITMqltaMJR+tvFTQ575/5n5K5J56PB7kXTf5+5Y56f:ssClXfABZSMtgjJ+BFpGsJ0iLe","tlshash":"41329502bc8c1da403fd4ed4ee2610e081d44731a66cc4f9babf4bbd7645d9889e9e79","size":11556,"data":"","first_seen":"2026-06-11T21:42:13.362248Z","last_seen":"2026-06-15T05:50:01.227485Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/billing-xa_o0RKS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2028a691fbfeee935cd5679b76b0901d","sha1":"f83353c08f3da36416decbcf30aea1d8d3e131a5","sha256":"ba1da5c5c4ec6205166b749b76f8aa1af755184c830235540edfab4fc1249099","sha512":"adc804d66ce7a99a9c835b5934e99b1311282138f10f0ce6226883b613f7b6d8333f4c922ff3099fd107eb5fd30de470462b9c3b4c3e045f25e268d68fa9522d","ssdeep":"24576:0WoSE6jWVqUqgZl3kltPeHcNEcFRnVvxV5kIgGIvsTsjBQDbpi5JcVS:noSE6jWVqUqgZl3klheHcNEcFRnVvxdi","tlshash":"6d158d007b54b4bc4bfba25c20a85519727c1e65f012c9d1eebe8f290bd6db24176f3a","size":886098,"data":"","first_seen":"2026-06-11T21:42:13.289345Z","last_seen":"2026-06-15T05:50:01.31816Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-recaptcha-DRQDabdY.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a180d43ad8e404bedb40cb0e71b38536","sha1":"96f0ce29d59cc09e02e3a67060b8afd3a4ef2122","sha256":"a0372f572e2af8713b4fa37865f776e20db9fa4a864f5c94f479510619076b18","sha512":"7522eb9f28cf847fe6b70936531c8ee7293682c181413aade1d5bcde5c656a5bd298080f4054e0823c09eeadc824f91ab44c1fbcc22c1cc0dde206388d2026e5","ssdeep":"","tlshash":"0441b51741a45bb60c080a43b07da3d4f77402a9f124588472bc4e7ab39eec2c69bf99","size":2088,"data":"","first_seen":"2026-04-24T05:21:35.188562Z","last_seen":"2026-08-05T09:11:21.938965Z","times_seen":613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/checkbox-DkVHYUgW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"84fa4eeba6b4d4b578855fab7440e541","sha1":"42ef4628a4be9dce61006082d3c01d350a942b10","sha256":"3cb40624ad6043f8db659c2226ba73654016840c23c356b216768bdae17ed170","sha512":"46194a80b82f5f35d5c2ea82f3e6b3d5d4269a5866408cf96bb96783ac161b199bd7805484953b4a794731c9324e0a542101bae65cfe8d4bc9e639a2d91d1f0b","ssdeep":"48:BK9tX1vOvMT01LG1mqOBjsXYl9l9KOCyqe7LsuvN5c5SDtNrbvIbvBzeNsexeGh1:Uv1vmQELG1mdFsXYQaUs/EI+G+8Vzo3Y","tlshash":"9cb1437aad11a47a6d37753a6738b24f4139201a8f221ebd93d4c0394ade9db730790c","size":5182,"data":"","first_seen":"2026-06-11T21:42:13.143683Z","last_seen":"2026-06-15T05:50:01.312684Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-token-sale-server-events-rndEk7JV.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"369623c9b3bea90b3a05e5aea3216061","sha1":"90994f93ea025b682abed9a6debb2983fd86b869","sha256":"cf612292861f978b05a4465c2371181d5ca105246710a40672d22ba9d234a2db","sha512":"b0991802023aef205fbde08069849cc5a921b282a1636c07a4156ef9f38963a1dcf6608710beea5ce470d4ab0e03be4db643fea2c6d1e1f0986141cc52f0bb83","ssdeep":"192:5tAabQJofC6MOfZMNc61CTQ8ITBDO3vjPjZjJO2b:5trbQJZ6MQ658IThO/jPjC2b","tlshash":"d10298408d42b0387ba2ed69d770c0b86c511e04bc7ac7d6f91e0e5a6f5348676bea2d","size":8249,"data":"","first_seen":"2026-06-11T21:42:13.337977Z","last_seen":"2026-06-15T05:50:01.121235Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"28e0c6d6063a99772e7aacdefd2b744f","sha1":"0083c223a06dcb1eddb67e3200915bb2a5e40b7f","sha256":"edfa3e76e8b69df99d552e25189eba14dc8b37b08e6252dc16c905f840129c34","sha512":"efdf4a55388176710965e0acc9e8f3cad5c08ec7f7ce275c57ea4dec77132acb861e50778941073b148812a247b9a180d6af845be4eb1dac5d6684fcf7cb6369","ssdeep":"","tlshash":"31d023d475e2b0f89da2009dc5bf370f38997300074cc4547122cb09741c47b9a15a9c","size":227,"data":"","first_seen":"2026-06-15T05:50:01.354956Z","last_seen":"2026-06-15T05:50:01.354956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/email-input-CJbS3w7r.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"be7415a1a4ffc889161c1fd4eaaf09e5","sha1":"28f3438795864198d7c03d5284c1a48f760c6e2e","sha256":"769b8b5bf5f8a889f581b134b6317f0b691251324e8f958b81103392c3ac9700","sha512":"fba7a22805096ae35c0a3ba52f2d06dba0218c5505bf245ba6926f287bbf7736a26da643202bbddcf8e38f2708eeee03cd4b2d5c86ffd9508bcb5c2b3185e5c7","ssdeep":"192:9TRJUxKqMsLfNRG69IzbrxQ+DfEZQdgYdWvHrwB9m92A5DCj2LNtWPreo5KaxQub:9TEAiz9InrjDfEZQm5Hrw/Mh5zbaxQub","tlshash":"5532d75475e5edb241d708d82c3f780ce47a6d352258f4e0f3af8ce12e68a4590b6d8d","size":11248,"data":"","first_seen":"2026-06-11T21:42:13.459913Z","last_seen":"2026-06-15T05:50:01.289753Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/user-CC2Rg2SE.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fed62581a7f4086726c920c6f110cfcf","sha1":"717f9ffe97b6b73c104f3920d626bf3796e5819a","sha256":"0b7bb585e279ba95898a1122201ac4ad136ae10d54eda61ecb01b667145ebf20","sha512":"5f619a43189cadd6ea33e9ef4116acad85f4bf38fff7e4e1631dc402be2f7c55654b802edbbfcafc3604b6c4d5a285083fd0ba88806ab12f94b091eca31351f3","ssdeep":"","tlshash":"74f059e80191a8dcc5a54d7eca3e18950b59b8ac3b4584c0d73ee9f78aa40f0c09a226","size":521,"data":"","first_seen":"2026-06-11T21:42:13.344196Z","last_seen":"2026-06-15T05:50:01.11671Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"94a09e870203a5556774efd16699ec72","sha1":"ee6b4761fa791a096343464c2454856e295b2efd","sha256":"5db4994a10b5afc213510a63dbf1dbda0773b2d99a38758e5e0c1195619e794e","sha512":"3ba84c05f38f55fa04029f26cef188af26d5f9e30910ec381a112f4741ee7f46a78b46f45fe730bcaab034701ea26440ba056a8cb3e374ffdb9114a502812af2","ssdeep":"3072:PufxJTEL/fJSxRuCa22opUrFuFl0adRnZKBapjpN3NpnQ2oY8DGY3v0TlvIMBFSo:WfLTu/wxc22oqrrEZZpjoGzvIM3PpHh","tlshash":"a944f6c471c2b16247a355e8a03f0109f63a2954784dc498f22eddda3c77c8a967bf7a","size":264086,"data":"","first_seen":"2026-06-11T21:42:13.245864Z","last_seen":"2026-06-15T05:50:01.195244Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/base-input.vue_vue_type_script_setup_true_lang-CxFBSRCk.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f71db266de90b4a941c8aa2641b47309","sha1":"537775e4a15b8c2f5883fb27272433f53c0b74f3","sha256":"1576a422bca9342190823d22f013314bd15372473a59fde2edc2029ffbc507f8","sha512":"8a345479d578c0549feb82d399c4571d34d138daf3410ad7c589107fbe2d0e1ea706d7aa1bdd529298db31d74abdbf14cdcff9141c0c260db07c2b544dcfdd7c","ssdeep":"","tlshash":"0f51fa1f565c64730d9bca9af8ef50609a18a36962c000f058cfc6301faded0c01ef92","size":2841,"data":"","first_seen":"2026-06-11T21:42:13.219585Z","last_seen":"2026-06-15T05:50:01.259856Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BdvwEW_2.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a764f4bb6164443e8a042d9f88bf3b03","sha1":"ea410b3fea7b4ff925c65742c863d85cba272ea4","sha256":"cb1f31d8969c42408908a839d935962ebe5dd1c91008235ba708ff3699680f56","sha512":"8ed9200f468649b17d73385b3499985cdbf2b69c46d604b8c8d639f9c2ef3301a0999f7f914355984ecb166961c9cd4a4b3a27aa53b4cf891adc570eba009b2b","ssdeep":"","tlshash":"c2012b49e5fc96b8c9adc0db6b114493e5b432c6fe34c8904af65d685e805c253ba849","size":716,"data":"","first_seen":"2026-06-11T21:42:13.430563Z","last_seen":"2026-06-15T05:50:01.114069Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-server-event-BYTo5gKS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fee7df0d7d0c994ca2b68c876a59bb0","sha1":"e1cfbaa1c5ef9a5848ad9233bde52e29dd8757b9","sha256":"5e792d082173ca992a656c68990a3a298b792fb9d6e23bd7c8c1741b794cbd03","sha512":"c7d62fbd1fbcc9a3bbc7f22990acc041c68088fb8aefd3da18b22f14005bdb5b71b0c2ed1a83e0b385f42f9b45bdd10690bc6789cd881a4ddbcce399bcc11441","ssdeep":"","tlshash":"14c08c1b0c82c0b438289898ad11442382a9338933228ad8082c4a634a2f0e2c40fc6e","size":159,"data":"","first_seen":"2026-06-11T21:42:13.228512Z","last_seen":"2026-06-15T05:50:01.207207Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/games-grid-BwfTPZZh.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff33c02f4c52cd4e8d6afd096b4650e3","sha1":"0bfb83f0bbd74355df0b72b9783de72fd75b0dc7","sha256":"f386fd17796ba6ef3b02dda422b8e3d560efe9d424533758cee8c3f9fc0ef5d0","sha512":"3e98081fc4990603774f62a429ba7cd283221a0b7947bba5aa982332fed1a1e60dc8cf9ad0e2cb317c7abb02ab275b9558bd96c34ec15cc146582a95390cf606","ssdeep":"96:kvGLAQgPAn7eiTO6jijilpilyoi6iPvMlpltXIZqun8lNlGXk9IkZolLlWH/uyxP:kvGLHqA7eiVjijilpil3i6iHMlpltXIK","tlshash":"f28190573a26e7382c79a1fe5837f19c724865265e7789c416f2919f0bc9ef2002af0d","size":4188,"data":"","first_seen":"2026-06-11T21:42:13.156017Z","last_seen":"2026-06-15T05:50:01.105406Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/result-empty-BPeVQhUx.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"620c0d613f380ee72a4a1b418c8f622b","sha1":"049ac07267b2bfebd9412284c91be40c1482b580","sha256":"eb94968d029659c8c8a028dc7e37d18a4b6b0ea367f15ce0b09bfd2acd9b4aa2","sha512":"548f02bf375d31c70a148b3ae0cfabe47982f33e9d4ea0b527f7d0584604daee87002776be5549172809397c2722ae36952ba7223eb406faa8a56c443123d4e4","ssdeep":"","tlshash":"cf511385ee20e36cf5331c167b2a601cf048f55e469baaf8d59a864c47dfde2170cb46","size":3079,"data":"","first_seen":"2026-06-11T21:42:13.346059Z","last_seen":"2026-06-15T05:50:01.278442Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd22d8fd4a73783be11431f9ad1888ec","sha1":"28c51247c1f29bdbb5b46a4fd686b3787e8654be","sha256":"49f42365c0217583f4eca6a1bb2d91d1fde99dfec09d0d4132acd826cfb1da35","sha512":"8c39faf4082f619deea37b5a3b0c0e23b8e3305b9355187da56de6048067f089dce9dae97833e52a6bc398a823f891a4eea4de1198d3a69f6cdcaec284b1d151","ssdeep":"","tlshash":"19e07d662d0c5c679aa01a7d42b7c20a34d3158034d50f61c2ca9dc03932ddf401be5c","size":323,"data":"","first_seen":"2026-06-15T05:50:01.355947Z","last_seen":"2026-06-15T05:50:01.355947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fc5548165afb3d4ce3a49412a44ff925","sha1":"ed38e6b5bf1416c8b1899b99cdd9eafe3af7c9c6","sha256":"7091a3b990495c11e2ba9809f170a4b92d026a3a6179f56aebe55f442eb82bd6","sha512":"1fb7777b89a4acfe8be5303905730d950bd99c3edfcac92ac634c329601309e6ced010abb55fbc42d69e2c124862ad2e8ae185152d642685fb7e2b8b086ed258","ssdeep":"","tlshash":"e2900298f483319c410d215c2076d015157d558199088d00a37104955438109a569b54","size":48,"data":"","first_seen":"2025-06-23T00:10:28.622802Z","last_seen":"2026-08-04T01:13:27.601658Z","times_seen":3384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"7fa004aac5b324faaaeb21a2268798db","sha1":"12ac70d4b571872b7849926b643c34679d981f12","sha256":"9c8ea5f3b212440bb43f9fb7a71c7c9217673099a9c96cc984565ae226b7f304","sha512":"bf1304930741fce5f04d1db6d6b83b0fb32d2227a15c35fc536babe62e93f70215f15f6cb2a25d0f14b9192120a2d7596201472e00adeb14cc7da7ccdf21709c","ssdeep":"","tlshash":"a2a0118af288b0aa028a322a202a0002220b0aca0e0800002b200ac0202b20a222aae8","size":75,"data":"","first_seen":"2025-01-29T06:33:24.949615Z","last_seen":"2026-08-03T00:12:38.793848Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/setup-window-open-interceptor-CCPDkxjO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"06ca770ace95eda538bdade033286624","sha1":"edfb5304d8018edd36618d06c4ad3ff5fc87cc93","sha256":"1a02d319db33a5bf4342012c82ace159fa711b052b2265ed773b353107675efc","sha512":"0130333235745c9ba6b84a73393bd0b21f3a976b9944dc42a4a9c525c5ea5b62e25f4037aad804834ef60b2852e4422450944d7883d05e7f4fd7d5a7985ea130","ssdeep":"96:tS3vWIsBfNavKA6niajJ8VCjWnjpCtBT91qbstSRfmSJTgZdXgkR0l:tS3OIMfNaCA6nvtbTmx2X5O","tlshash":"dca1931dec79b57806b554c9b070a1615878abc43326e6d0f5af2ea8a06fdc35223f0c","size":4679,"data":"","first_seen":"2026-06-14T13:48:35.232924Z","last_seen":"2026-06-15T05:50:01.117599Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/support-Dcq8VVEM.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e60d2183c17f528bf64c77517b5177","sha1":"04cc21c851f4d68769908198854a113d4b12aa14","sha256":"2ce698470f67433bc7b185c69e20708612ff60216b757f200212d57885a5699a","sha512":"bbd7ea40a42f4f9b9545e8847e20b1c79021a4af1187a52d453c5e2a05a888d9e2879c557934b029a236c9416894420cbb93e87b30af07141116d3419a7b13e0","ssdeep":"","tlshash":"0e01cbef526c16fc0923c6258e36f9101f1d60aa374a82e1074f9fb243824f0e81ba10","size":705,"data":"","first_seen":"2026-06-11T21:42:13.298065Z","last_seen":"2026-06-15T05:50:01.185374Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CpuHaY1f.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"01d1b7279ba5b3d923caea8b9fd5084b","sha1":"31a273fa827442f8d83c3c529c06ae5f0aa4d9af","sha256":"2fd31e901df621bb81ce6115dead8ff4b9083886d72de7b8e4112e8347b697fb","sha512":"356177bd0a2dd9cf4522c9278f4ecce2940382102d052c19856b4ef7b63d917766ab29394305b0ac1bbf3fe2a199af45734a4ca5261b1ddb5f718dfbfe7e2a8b","ssdeep":"768:2aec8fcjLdLu+Ab0cHkr4krEWJCER8r3wV/t8ccibLT4zfYBUmDTRueWp0mSUhPP:Vky+zER7Z7ShqsbPXSpev+oa3Wuq","tlshash":"e2c32b70fb51a4bce9374c02f7dd1088706c6b5aa502c9ecd6a9512a0ac7df713e1bad","size":129348,"data":"","first_seen":"2026-06-11T21:42:13.470974Z","last_seen":"2026-06-15T05:50:01.13054Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/presets-DJXlYNNd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f170672636e9c4148d0f7b9d1fff89","sha1":"aa0b2b995e14fd6c2c7707a84895f6c5e46c1e99","sha256":"4dafda231cd672f65e6e8b3544f12cf8d3607e1967be1a5ee916cb71fd51fddd","sha512":"815d066b71ee0e49cc8ecd1367be976d4d9f69a95174004d4cddc2fe29761c91120c3db3f10eb381992007092810c2d62644cdb350c8af3faec717f0e1310a4c","ssdeep":"","tlshash":"d3b01207019109f0012b32882bf07d5204c0cdcd32fa10b084180b050346f244099f82","size":103,"data":"","first_seen":"2026-06-09T11:00:46.243042Z","last_seen":"2026-06-23T14:10:56.489752Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.hotjar.com/c/hotjar-2606090.js?sv=6","fqdn":"static.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.164.240.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4167dda96cb387f4c1d94532d32cd235","sha1":"8d357f8f59749fb96a44eeaa0f6fdf11d959cc4a","sha256":"1db8c03097737b61b0d7e3514fabc3ea462f8db38f7565055beee2366c37d785","sha512":"6c80aa411e3e6785afffb08e4ede22cca24cf7106c30e81d2b0944375a9c89f86d2b9d1336b3511f780a5b8cfefc2a34140d2f19ce82cc5e12adbc0ed643db0f","ssdeep":"192:dbnOPb5tmjHCzN1vf89YbBXTRnXtjC3XnWBeDNCpRlNGoWvCuCKVCX1SU:dbnOPmj6vf89yhttWCfiAujVCXcU","tlshash":"4762b588b2d5b0f84af39416847fa70bb23e291614089454a2dac1d47daeddf9223f79","size":15156,"data":"","first_seen":"2026-06-15T05:50:01.114596Z","last_seen":"2026-06-15T05:50:01.114596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fc5548165afb3d4ce3a49412a44ff925","sha1":"ed38e6b5bf1416c8b1899b99cdd9eafe3af7c9c6","sha256":"7091a3b990495c11e2ba9809f170a4b92d026a3a6179f56aebe55f442eb82bd6","sha512":"1fb7777b89a4acfe8be5303905730d950bd99c3edfcac92ac634c329601309e6ced010abb55fbc42d69e2c124862ad2e8ae185152d642685fb7e2b8b086ed258","ssdeep":"","tlshash":"e2900298f483319c410d215c2076d015157d558199088d00a37104955438109a569b54","size":48,"data":"","first_seen":"2025-06-23T00:10:28.622802Z","last_seen":"2026-08-04T01:13:27.601658Z","times_seen":3384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e225e788a5a94e440538950d234394","sha1":"a9d485746dfa67ad6e6ecf25260d59a7102041af","sha256":"8e2e9679862cd4e113f86f4ce63cdd0e41918e37f15af52c202ffa9e51be3ea6","sha512":"f1267b09a109b18b4f85f0fbcad59fca1a6a0ccd47d3f6a33d5734e6cd97ce0f93aa1105d41e2ca4139662c97b2e1a256193f380693ff9be263d7f795fc7b333","ssdeep":"","tlshash":"07f05485f858c1889537017ad37bcba8559000072d801a234452c4e53c3dfcf46838ec","size":483,"data":"","first_seen":"2025-08-30T00:25:12.164782Z","last_seen":"2026-08-04T01:13:27.600196Z","times_seen":2956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/x-white-DUVQ_yKN.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bad9778aa00496b09646180766a7717","sha1":"395bc211e3d3ddc41338c5550c94e85ba12a1ffb","sha256":"d4f437d7d945d20795ca82ff07f908b79875f6314529e92692a2660bf68c92eb","sha512":"280f3f14397158e6003abb7ad5a82fb0216df47d6d73c7bf81919cb8c7edf852fc62cc9895b086c81a945e7496cff04d009c2201005953180ca3618a87b232b5","ssdeep":"","tlshash":"ebe0abcb208518b187680e88e26c6ca5495029dc278e96c29a0a945392e90d0789df6a","size":412,"data":"","first_seen":"2026-06-11T21:42:13.426109Z","last_seen":"2026-06-15T05:50:01.233555Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-zI75IRDE.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecb4ae5e290185804e2c68eb0cdbdf6d","sha1":"8bdc5a101d94a776ad6a46c4126feef7773b6069","sha256":"18205869b768cf069846a675bb2f2d146856dd0ea4c86b16e5c2645e40fbc211","sha512":"ea6c55a157e6cb1dac933af4d988dc8233ba64144ac8ae99103698387f499cad422020fe1bdcb5c6db76de4431aed978c105fd5a4145bba5b5653bc4a5e3bc97","ssdeep":"192:l88nYntqy/mB+7XcwUKmalvVttV+aq8RxxF0KV4ir7skKHFpNHlnzHCkHOXO4XHA:7qEZ+zJxlvtV+al37PsgReCp2AHYobjA","tlshash":"9592851b4b005a7502fd0ecc6c16359144e08b09b569c86ebf776efe746ae5c80b1fba","size":19860,"data":"","first_seen":"2026-06-11T21:42:13.298948Z","last_seen":"2026-06-15T05:50:01.337749Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-info-ySrUA4Fw.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8464301c7da6dd2c8fa306e775a2d826","sha1":"56b47efc41c0a84cd64514e5a48eca496b3eef3e","sha256":"09db6bd7caa901cd85bf3fd886437b2b9fa255469a5140cffd9ddba92f467558","sha512":"8d464c1266866ff27f03d7ae3a6d0f4197e22f440186454c52989d0367af79ca69bd7c26365b371eff5c70553117fce882d1d9163f584aed6db8b7da8860f3f8","ssdeep":"","tlshash":"c551a5c57eb8d3b4647f0417a93fe949610ce52a83377ce48078893c07ebca2926864b","size":2761,"data":"","first_seen":"2026-06-11T21:42:13.400119Z","last_seen":"2026-06-15T05:50:01.142243Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/date-input-BMCrtSxN.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1b6e8eec132bd64c466511250e20725","sha1":"ea503858d457ef5e1117e987aa8e4fb7eb097dbb","sha256":"3151d53cf86dfdfe3bb506e4b93e5ad0b754666310061b36a1ac3d9de0b3fe09","sha512":"42283ee98287ce619ed3b8df51eff5c342579a0771440d4f6a25c7e1c353d47c8e419756ecceeb0d491dd08e1609c163665c29875f671fb8a5c540c0440d3e6f","ssdeep":"96:rmm+JWUuf39DdEyTgQeKuQ2Rz3UYcW78BePFj4:rmm+JWUuvhdEyTj12lEYZ78u4","tlshash":"e481b68175f94df607b24899f0ea9460ae341baa619a81f0840d8e6507ffc84c66ff69","size":4156,"data":"","first_seen":"2026-06-11T21:42:13.184661Z","last_seen":"2026-06-15T05:50:01.118102Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/vip-badge.vue_vue_type_script_setup_true_lang-DIhxBap6.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"38b20db8dda7db973c6ea23521e1b515","sha1":"f705382b2184fd8bf9a57c679fbcad4835cd5966","sha256":"214a57efa7ec4240f689cef13b986f93ecdcc5f6f5a391eb5ebc9f3e203e80d5","sha512":"527fa17b01a77e6ced0e5cdcb6904bb3a862cc61d7b033fa2fcb5fddfb4e766bb02c721bad57c6524fdd62baa4e693936b9297538d1413dec28d0d1acad7641f","ssdeep":"","tlshash":"46612454f7b0d2d5450b9bf9fe3b64a011bd38ba9bc09d90b3d27828dd9c0de58058d5","size":3390,"data":"","first_seen":"2026-05-24T17:27:32.502333Z","last_seen":"2026-06-15T05:50:01.29883Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/video-CuiRER70.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd2753601c381fa2aee22a7bc17d31a8","sha1":"deabef9fe0747d963174c580d45c7072d1ed0e9c","sha256":"a701ffa10fce1db2bfc22323629215ed2765efb74ea5dc9386c1d63dd12725b1","sha512":"09e69f2461b43ab092503996aa23f9433f79bd2c31267081a0586cf4c670f14dbba632f36581fd3db7b5e62b4e08f2f6bcf56156b6a0ab86dba3d5c08dbf821b","ssdeep":"","tlshash":"602186262c93c4f416ed248b9c38a551e6e061b593a261a0c1fece3e83f4fd4441fa84","size":1117,"data":"","first_seen":"2026-06-11T21:42:13.216204Z","last_seen":"2026-06-15T05:50:01.204076Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"1baae958998549db61a10163ef574580","sha1":"09688d36799756333271e154d095ebafb307857c","sha256":"aa80561b1eefe257e6b19c7dfad2e8d1ea7cfdd2ef141c3fd7cc6e44111c4dce","sha512":"d84a7b9e6cda04d550ac433c545981489c4014cb8b67467aff5689a2be71a6a4871c68dae47a52ce22fe9ed1869e0d85b4950b52bc20844a1c6f8e8f4d3b29a0","ssdeep":"","tlshash":"0b900298f042300c5001611924270015113d45c89d040902aa402141d41418c9822d44","size":44,"data":"","first_seen":"2026-02-04T00:12:56.265058Z","last_seen":"2026-08-04T01:13:27.605602Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/segment-control-CtvxQ7JX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30693b6466fb4c29bef012a157ed8bf6","sha1":"86b7d09e38bf7f8c04761b9c472ea724af10b6d8","sha256":"892c573dcbfdc4adf10e971017d76f1d66dae9a305a378a9ffcb32f4fdfb6d3c","sha512":"ae1662eca5c380157927765ed92f1f9e08903da1f4d379412cd4ea50035488e06e403165adb26620e09fd7c20b5b87b44ff8644b92721d636bd6de4268342543","ssdeep":"96:6MOwTfNqJyoTaXDOXhryZSn06Cc10UisuzOKRoOmfWyhBkpDFdvpb4eIYdwqhjAM:6ZGMkO/z11+OKPcWMBkpDn5jpwqLT","tlshash":"2cd1ec99a8f0be3765b7880fab3cc0a09439f6b4ca5591eaf0787f2703d9e44411fa05","size":6353,"data":"","first_seen":"2026-06-11T21:42:13.428932Z","last_seen":"2026-06-15T05:50:01.307217Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/mf/shared/vue-router/4.5.1/vue-router.esm-browser.prod.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2781220521a4fcd110b2b96ba428dae4","sha1":"015173c54c2c61906f8e7d0d9b1ab517b22c7a83","sha256":"7d1df4187a17235bbcd73c99dba604535d39a5981b6c02925dba67cc5288c65b","sha512":"f9beedb9ea22753545a7e949c7973dba931abe14b295810a5c51730a125554435edbcf0b89d79cf47f51cc75619129e51dffe07c4ae1662006e0967fc7e108ce","ssdeep":"768:Prlz9I/lIPM9HLpuR3ilg6EJIFSWgudF2Sygtq9xiPrX9/AQleZK1LVyPCwVMwIL:h2lz5V/Sj0R99","tlshash":"4cd209fe7245b0265be60be750bb2111f0764ada348d9590b26cdcd73c339d882abf19","size":30418,"data":"","first_seen":"2025-11-13T13:04:58.751813Z","last_seen":"2026-06-15T05:50:01.172715Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-C39cDCPl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c65ab41237afe887683344c19bc1e62","sha1":"2af14e907a11d0efe9616845a5c12b4ac2ba4a48","sha256":"2ad172e75630ba133fcb4c645d0f69a4facb4b06edf5294f8d26871f50333098","sha512":"252a77bd067ce644b1eb6b5dbcbf50e67b1228ec158b0e10bf6270f86222e0848ac95ad44d5cecd31ffc8d0c018bb4129c0360e05a41badc5f48fe4d6acbe050","ssdeep":"","tlshash":"40f0278d64a8a3b898ed81eeab51c493c9f920c2fa35c54087f90d284f911c753abe0d","size":502,"data":"","first_seen":"2026-06-11T21:42:13.478546Z","last_seen":"2026-06-15T05:50:01.251455Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16795866810\u0026cx=c\u0026gtm=4e66b0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda19956845600973feaa94cd70429a6","sha1":"5a71530a9dc616b29d1b157d1c14e59dfca5c916","sha256":"cb2eed46a01cb54d47e59ab6f971dc3bfa8a78ae6bb31e024419b3a52044f6b2","sha512":"bf9dfb90e06ca295ffd3911201c76538dbe5bed25bc13d76ea72f503c16c872a297be61f2749fb1abec0be93b3820adc3d26bc770670d4daa7931573ab15d7b0","ssdeep":"6144:6EGqA25aa7p1u+ZUL8DPEBMdv8HuVgNhXB3JWOHhYc0AH0:Rh5aa7NZw8DPEB4gBDy","tlshash":"239408cdb3d674225393b478903f018ba57a79e2b44cc899f189c8e42e7469a4277f7c","size":429581,"data":"","first_seen":"2026-06-15T05:50:01.121723Z","last_seen":"2026-06-15T05:50:01.121723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/socket-io-adapter-D33fnrtS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b0bba8bfe817e394f3bb2b6aa3dceb9","sha1":"34f4ae3fe53cc48cb259d2ac0b50db9c65f89765","sha256":"01450e61cf38606afd8a122c4ef25dcef4f5fab8b6dbda673fd217f15f7d784a","sha512":"60cbe6474c2ecc57e02a9b1a8c87e30a3d111a7fefeec7759c8326e363f8e20aab2981cbd98696b386d10e46334b00baf07ffcfaab296fe42bd1f29828eefa42","ssdeep":"","tlshash":"e711dcc626b662aa3bbf20ee286080446500ab74a741438d3f1c1fe1d03f5d4e49bbb9","size":945,"data":"","first_seen":"2026-06-11T21:42:13.348539Z","last_seen":"2026-06-15T05:50:01.328096Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BQURsBDd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b5dc49c2674473f0b25e921c1a94f67","sha1":"222304ae5d076983b4c449fd53fc28ff9a2f5f8a","sha256":"c98af471eebfaf674a4cb9cc943d46711ffa6bbccdac0952440e0b85ff578f1a","sha512":"e23b919147988be1988c8a7f890322156f9c41a7441692c6bfbd90d365332d928238cd1621f98a3193c60e0fd86c87993319f30b8fd27fcdc15dbb45640bd79f","ssdeep":"","tlshash":"d8417087508209b1426c4ec8de521be01ee88b47e068ceddb83b9c3a3260dac5026fb5","size":2117,"data":"","first_seen":"2026-06-11T21:42:13.381261Z","last_seen":"2026-06-15T05:50:01.200398Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DupEwSM-.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"359722c89812645de57850b2874290b6","sha1":"9d787739030473fd5a399f510089314a2e5b54b5","sha256":"f70eb8db5fb31d04f93ea8e9c28f760b5d2dd4bc2c4932ce6911f6537d65c781","sha512":"5f0f198b783daf6e649f59720faee8030e9c317cd59a08bd4063f86eea52d2ce77cabb5025a36878b6494b62b874869e2c190c103c535c7e7536b06133514785","ssdeep":"","tlshash":"4b61630219460eb542bd0cccac7031d2a5e48b42a121d4edfe319cb675a7de9502fff6","size":3355,"data":"","first_seen":"2026-06-11T21:42:13.253106Z","last_seen":"2026-06-15T05:50:01.148214Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-D41BR_HC.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd5ed40fcf9e2ee94a78cd6d29df70ab","sha1":"4dd0d757017611c4fd71f186c157836f221bb56c","sha256":"863c846731063df1f6f98025fa5855a72096c284507386ff1cf08327a97b3245","sha512":"cf6d6af9a3fa2203cb16acda7f0b0328d75b0cb1c60049e246870298587cbacac29e872b8ca1f4297e3500b0019fe7164f60a9f2288b045bcc1443da85ba7175","ssdeep":"","tlshash":"5de068b38443c6f93a3e44b8c944940218e212a59784c376429eab21265a4a6d00e50b","size":385,"data":"","first_seen":"2026-06-11T21:42:13.22509Z","last_seen":"2026-06-15T05:50:01.264335Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/mf/shared/vue/3.5.26-p2/vue-guarded.esm-browser.prod.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"400c04beb2994088bcad3fa58c77fc51","sha1":"5f99f5802285dfb1222bc76d124b1b83fa682468","sha256":"78e73e11fe3ebf5d78b9fbaebce7ecd858f3931fce7047d55f8136c9e01aafd3","sha512":"073720fc135c6241a03b078643ea82c3a3bc752c2878e0bb8d402b5845d3ca995aadf44e49e52f05967b05873bebcf1802d13a6a7369be1b829aab291d00eb4d","ssdeep":"","tlshash":"9571eeaf60f724710526d03e97cbe41574b94633664dd8e8b59e42181fee128c6e2b8f","size":3574,"data":"","first_seen":"2026-05-24T06:38:59.55628Z","last_seen":"2026-08-05T09:11:22.039099Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plugin-feature-flags-CvWg03D8.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"94ac2249a7ed3ce17b0432762a6236d4","sha1":"1c5c20e3d8c3c45b015f96ae0bdcaf378120e65f","sha256":"d01efce77c1e8e015db9119b8061413f02d94b5c1d56fcd33dd84142ce4402b5","sha512":"efed215478126848d1119ef4a21d86a25108a97e364fda6148e589cca4c79b8c398e20a56794b87de38e29227bb3051359b46838437146f517d9ebb4d00fb390","ssdeep":"3072:leWqdkQ9T8nbsE/kT2/wYFe1RsUI7UVpysK8q1K9nOwBu9smk:lRqdkQ4MOmvfKXK9nOwBu9smk","tlshash":"5114f9c8f69ab471039794b8d03f1106f23e3d99641c8078f66adce52db9a099137fb9","size":193836,"data":"","first_seen":"2026-06-11T21:42:13.294413Z","last_seen":"2026-06-15T05:50:01.128187Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/title-XJy6U9Qw.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"103da70fbef883913e259a2217a0b852","sha1":"44919da97f73eb9dea197fa409644ae1b75f9784","sha256":"45c3d685f27f467da3782820332e37afc25f2faccdec25a1a03ff8928d08cb1f","sha512":"188102148d0e836edeb7e2a0b97014c12ac7f6655ea62780e865cf355339a660f241ff3058421d867a130d51b985dd939ba7a28d854ac5f7fed434ede6e6b51b","ssdeep":"48:XHZZVrD2F8daeZ9J594xs3ewXQj/9OVO9u3QSzV+HI+d5Ae9uDuE/RlXWfBfn9MN:X5H2qZisOwXs/wpEHI+c6Epl24","tlshash":"e2914f06be11e03cf6332c563b697448b048a85a5fe25af9d1eb965e5be28e18300f45","size":4318,"data":"","first_seen":"2026-06-11T21:42:13.368982Z","last_seen":"2026-06-15T05:50:01.112263Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/page-heading-bDwiMowF.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"68702ecb1a028fc0e4febcb8a68ac306","sha1":"888ecf3af4eb06c4f9a7c1a5e354971bb688b34b","sha256":"bfc0090210eef103ff3c48a8c33b71b7b14a95f23a5f42b4dea373d7acf5f035","sha512":"9ef2504b8c135d815d299192bde242d3ae945734c76489710e2360805a853dae316a7f38a8d0ca0720e8141593df2dbf071f14c6d961ac669b3b018d87373e59","ssdeep":"96:ssZzjRLGshsqvwSsaWgXzCxjkn7cNz6vXDjn7cNet2vTTHpF590/4:ss9drhsqv1BzgjKyq7y/pF30/4","tlshash":"35f185496e20da3cfe335c50375a3a18b08c9a2f961197fcb8f78b6a47c28f18750749","size":8187,"data":"","first_seen":"2026-06-11T21:42:13.287153Z","last_seen":"2026-06-15T05:50:01.285667Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0bc94ffb326504ea8d6506d067aabfb","sha1":"e34dafbfb3df1191fdc4932b1d2ea3c70b16c9b7","sha256":"9282004e12a5b9e80bafd35ecffd48c92ac0b1d9d2846515d2f8324efee92925","sha512":"914888f53046d5a44117f762d515af6b9da0639e8cbfe428929a06ef1dc09184e621aefa333bcbf9641a2d158c3fbcd42f20d9018384767e51f2a1486200b3d9","ssdeep":"","tlshash":"6dd0a7855a95a06c6dd200ddc16f734a297a63100f458022a512ca493c2de37662379c","size":237,"data":"","first_seen":"2026-05-29T17:46:45.355352Z","last_seen":"2026-08-04T01:13:27.619887Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0bc94ffb326504ea8d6506d067aabfb","sha1":"e34dafbfb3df1191fdc4932b1d2ea3c70b16c9b7","sha256":"9282004e12a5b9e80bafd35ecffd48c92ac0b1d9d2846515d2f8324efee92925","sha512":"914888f53046d5a44117f762d515af6b9da0639e8cbfe428929a06ef1dc09184e621aefa333bcbf9641a2d158c3fbcd42f20d9018384767e51f2a1486200b3d9","ssdeep":"","tlshash":"6dd0a7855a95a06c6dd200ddc16f734a297a63100f458022a512ca493c2de37662379c","size":237,"data":"","first_seen":"2026-05-29T17:46:45.355352Z","last_seen":"2026-08-04T01:13:27.619887Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/welcome-message-widget-Dw5FkXMB.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"221f01106a36f0bfcfa9c6606e301780","sha1":"619e83bd3ce0fa7bd39835f2e3f4e104ab373543","sha256":"28e3a42dbedfd08ac6294c1cf42c86aae773d2fad8e339d5bffa84b99bf14253","sha512":"8f7245b78ed4b507fb2bbf009a2d1b3f5f8bd45de3f4e230d0d54854af1d4f217c34239d7e0264c7483959f838160328d09d8aedb96f97ff03240cb4cc00be29","ssdeep":"192:+EjCGtMnfFkeJwZHko0RmiRCD80vnWlTkbWauyAOwACKR2yTig:+EeF9NJwZHvYrCAmATQduyAOwACKR2qn","tlshash":"8812a342ee989d3d81b7055ebe4d710c1568378aa9627dcadc3c0d7103ce8f926a3bb5","size":9520,"data":"","first_seen":"2026-06-11T21:42:13.226478Z","last_seen":"2026-06-15T05:50:01.197007Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/custom-html-wJnABmzc.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7f35a7c32f2e11d23d5cd014cde584","sha1":"6b80a591887467f635a4e6d2826183418cea95c7","sha256":"311190c20a810211cba1246133507f571a631ea2328257ef0af349b775229f40","sha512":"3a8df668073c62d00feb858d3cab71e26dbf7116791543f716e1257cabfff7df6b436351060205ade0874a7c6aea3632a7df07835d85019f0cc72cb5bcb027a8","ssdeep":"384:Z17/0gCBRwvZDWj8WUMsP2s1J8WJT5DE9WLcLw8gqCVAccR9eTXomnaFwk2Eev++:Z1j0gCBiKj8VMsOs1J8WJ9YQLcLw8g1D","tlshash":"4cb23c69b94569b74fdb41d8a47b5a0ca1bc111a700cc450d6cedcb628fbf89206bf2f","size":23530,"data":"","first_seen":"2026-06-11T21:42:13.119954Z","last_seen":"2026-06-15T05:50:01.256794Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/messages-D_WCSePY.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2169f1c45f520d73ce56a7a97c35de5","sha1":"9ab2be8dbce3c0f686fc0a18e9b5567b0ce27856","sha256":"ce40a6636e33bc803e77d835ff8bf7f64573da44587e59a0a2659f2d82f58250","sha512":"dbb57d5a683f02eedf49b7406da9dae77dae3ceb76d7d56d21427e1469240903ea23b2315e147a5ed3be19dd32b0ed2ae6de65893d55fb89ee41ba2b3ef8a9f7","ssdeep":"","tlshash":"07f041790379296cb163818cd37808108b0c049d3b8ec8cc1b2f8e628326ea0cb0fa35","size":586,"data":"","first_seen":"2026-06-11T21:42:13.29718Z","last_seen":"2026-06-15T05:50:01.272593Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/progress-bar-OB3KxIsm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a8b50649add758d5e7261698dc80511","sha1":"069ceb642507021433d265e1af6ca0ffa1d4b15f","sha256":"f7e9bd9927cf8da50e8eabb901ec7f2c73f4ee72a7902802008790168e403c87","sha512":"77e1c116ec453375064747a25edd0d8776c14f1a350d65c71d8fd9252afbf711fd0fd31d070e781eb5fe63eaf465d33693fd36fff70bc5ecc83a30166bce5230","ssdeep":"","tlshash":"3c513d95dc255078b49e581d0bd480c4a268590a863feea8bfbed16883f1fe71d5b3e0","size":3087,"data":"","first_seen":"2026-06-11T21:42:13.188131Z","last_seen":"2026-06-15T05:50:01.125797Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-history-favorite-ab-test-WxjjdUFp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6325b6e7a76876e4404e16dd67896f4a","sha1":"d1c2eb6def794e3492d643a77de193ed9284f1fc","sha256":"ea27172a0d75c0540f7dc3d2f33cf094cecb4f1624277ef499284da087092aeb","sha512":"92d6a77ef653550d6f0cb7aebf6640d98703e7e4a012440a682ef17b7b84168f96254ceae1e223b42d1921fa0277850a959db859fd96cb34803c86f4e01e24e0","ssdeep":"","tlshash":"5fd02bafa86452740a478899f514883692594bc4735dcbe0929d16240a8b590c03f81f","size":273,"data":"","first_seen":"2026-06-11T21:42:13.182519Z","last_seen":"2026-06-15T05:50:01.106016Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BkZBUjIo.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9288b3bff163efbdde5108bb632467cc","sha1":"c758e81d560d37a43ae6cd198c743056632e2ead","sha256":"31da4c8eda95166c4263fdbe22ffc5cd86a8202a83a8fba453641b6df87fdb0b","sha512":"94622ad5c1381008c2fdb806e6ae89394e427a3153b0828a9535eddfb2ad8eb0ee2b7d6a74d7898c746518a4b04a9964857d8df0f6028a860853bb812b9f115f","ssdeep":"","tlshash":"fdf0753935f5408043b528fd40051131ea331a987c0df1d1f30c09bb9f5404085f39ea","size":524,"data":"","first_seen":"2026-04-02T00:03:41.742429Z","last_seen":"2026-08-05T09:11:21.87612Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/get-region-by-code-CYxhYg5B.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef54af25afba19e741169f154f89f44","sha1":"3a962a1a0ab43a6c2581a8f0248feae40c56455c","sha256":"ebc220e944b156a536195f9f1aa40527063214aa24c7a14bd519c84fded8a882","sha512":"27c1896a3bf262eb458ec5b35bf2995a0aa4cc121411af155a1264fb2e9247f71a078b66560d12c5c11b6bfdbde7ecf7d001e3941c0846a4852173e804bee6ae","ssdeep":"","tlshash":"83c080463d11255143b1197b0a5e4db54869a408394a4791b11d94c72e754b115dbe0a","size":168,"data":"","first_seen":"2026-02-20T00:06:55.063189Z","last_seen":"2026-08-05T09:11:21.970502Z","times_seen":1010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-08-05T09:11:22.036818Z","times_seen":10671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/tooltip-D6lNM5SO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"61c00aaef1f07dfe3d8a2722ec9ef739","sha1":"4a5532b1ba8e5650634d90de6aadfc85b872e56e","sha256":"420a6f71baa4cb69b5376280b96fdf6cd9197c7553cec16548bb51f8109827cc","sha512":"5647df1e4d498267d5316c3aafd17047aee1a4c62f3e43a736146ac54ffadbd5946277af7f50fdf47813e1f2eaa1cf46bf9fb2d56560813f4f04b44064e70343","ssdeep":"768:UFCuD6yLkkc7kf5PgLfqRWUYmAv6cUYActgt7eUrxUnlCApyfaF18rMhDsQVy60t:ANLkkhmjqRC1v70kp0Wih","tlshash":"d4d219d471a67065637f4697907b420eb3360650320f90a0f27daa9e3c76d6253b3bbe","size":28387,"data":"","first_seen":"2026-06-11T21:42:13.417249Z","last_seen":"2026-06-15T05:50:01.28922Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plugin-form-builder-CvTriPPd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3d03fc15662464fedca87f37ab55124","sha1":"3b8a11a8edf3baaced07033a3e5245cda93a4a46","sha256":"beb04816d8ba6dc6127d4079f5c55c9a3d7b3424c2b3edcb1a157fa4c9f461af","sha512":"f7b6cad0a48e4a86579edd9f01a10b6e6ede0b6d3f9f0f15157aebeca717f5dcee7aa570bebf4b6a3c4b8a6c9963527655cbf8ff461f0da21f72ea0c9cf667ea","ssdeep":"768:Jsphgt7rjtTrOsOfJ8VCmvNa1PxhzDiyR8NqhxZR5:JZ9TDE+pla17Z8IhzR5","tlshash":"a5335188cb65069cf877ab9cb40b7821163a7f63f6ccc2c0bcdd4b6694d4ee19160799","size":53265,"data":"","first_seen":"2026-06-11T21:42:13.40377Z","last_seen":"2026-06-15T05:50:01.143537Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/web-vitals-BV2z3ijk.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ec3367fbd30c5359861352e080586c26","sha1":"a9c73c897d73b9312d87bc5e780717a83434f885","sha256":"1909b30bad1921f4d418f3c73df730f360d59711460d0b9c4bec59ca5d813a8d","sha512":"4cb076209333577688bc09a85509018406a1d151a7890704fbbf3c451dfaf11432c05595e7f0215295e385e1dd77e51f4d3f9f7f49d148cdfd4d8a24a5344156","ssdeep":"192:gSnzIhtK3cLtr0bjXRi/rbL9JngBZUxPBUVsuEaV+:gIzIzKG90fRinppTxw7T0","tlshash":"b4d182ecfa48753913a7b1b6d07f520a633b66c034054489d23ddbc11d3988e566bfac","size":6206,"data":"","first_seen":"2026-06-11T21:42:13.214404Z","last_seen":"2026-06-15T05:50:01.220145Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/page-container.vue_vue_type_script_setup_true_lang-Ex_BvB15.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07a390cbe204fd73c59f1d2e369d978b","sha1":"3001fa536a35522bd79ac0f9ef4f5d5b05f1f63e","sha256":"70352b29f17d1245dfb04d3463ebc6fce9e9dbc78a1abdd5f002a1447d855edb","sha512":"f2eabee54f82aec209d334509b84fe9c7cef54ea334740d2272b0212b97c453e6aa9f052c3d32bc0319eb33298e47c65f7c2c8bd90a5247c955c987c541e09c2","ssdeep":"96:hi+UTpv+cT70bofvbMaVP7lD24l2fPyvDML:hb6W0Ab8bRuTL","tlshash":"0191fc229fa0ecbda97e39ccc63f70aae74c857bdb0558d3d24cb22a07c75a8654441c","size":4609,"data":"","first_seen":"2026-06-11T21:42:13.411384Z","last_seen":"2026-06-15T05:50:01.327616Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/fortune-wheel-floating-widget-BsWLnToq.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4e8bf6d4958d597c6ee62e54739b326","sha1":"ecbcf863414035883867fc968a209f0c75757cf4","sha256":"afd3556aeea63b3171b3a461a291de5098982a61e3ff8c9bf047f2130fab9045","sha512":"987c34fbe3427b0a2328a0a9c5a6007764f438ad2deb205a3db9f6b38ab321fa0c593d8abf65bc5d3306135d800f736015f638de9a9f36c0f4c84b6698e9d34d","ssdeep":"96:Jnse4Dnh4FMeipXj8HdX+mnGS4i0yTmVgDM8py83XefQOWcVHLsy2VdsASzjKVfP:Jnse4nh4Ffipg9OmnGSx0yTmVgDM8M8z","tlshash":"fec18631991046bce1734a8b7e832211601ccbefe8068edea76c679645c78e5437fe1d","size":6022,"data":"","first_seen":"2026-06-11T21:42:13.197572Z","last_seen":"2026-06-15T05:50:01.317414Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b4a838d591fa0d57feaa69732a3c71b","sha1":"ae94900cfc7285431f9205be3b974071a15c56b4","sha256":"d25e79bb7d1fcd7c9e41a67589e78e90c8a1f217851054998b6cbe3ed2c4288e","sha512":"7ed77c6a7809c813679b1e5d1acffa843ed498e811a13b69bbd397a0dedc6af0fe7be7f015f7587bdfddfbb4350035634a2897b7da76e2e16478811ce33a0ef5","ssdeep":"","tlshash":"6f4198327e5698b80dde29adc92f334afcb41a1c8911e0909294fdd03cb9f33957359a","size":2394,"data":"","first_seen":"2026-06-15T05:50:01.370282Z","last_seen":"2026-06-15T05:50:01.370282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-path-based-route-matcher-CtMt9cs5.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b96f521dc1b8aed59f2128c314ca278f","sha1":"5bd5ecf61b8b4ab0679b960629561a742873b5b1","sha256":"ff928bcc105dcbddc2c8a7065990281315aef194cadaabd473ad6eccc92ee78c","sha512":"9ba99f77565ce7e02e5b1b606934fe858b18669ba005bb0eb568f18f5a23b2d83eda1caca2f5a53923519b7038fcf5834d56a28019ba985feba14989b7e5aad3","ssdeep":"","tlshash":"e511eda425e794608b25df8550305433e4296de83506aac0f9fc5b32ce17d83a47aead","size":952,"data":"","first_seen":"2026-04-24T05:21:35.035254Z","last_seen":"2026-07-28T11:58:30.686771Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/mask-input-Ua9sCGnA.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9bed1a5b9137f20be00eb8498d7276c","sha1":"bd050b1b15ae0b54022c0910833fa466d8936685","sha256":"b4d0b9bc169cac55a56e500204dd23f35ad7c41e416acdc3204f31c168ee5f9f","sha512":"41df38e1e235d519878cf99e20c087539c4f56a39f5d9d20112a98ba873b27d80514e126de828c9e23ad5d07b0e934df6ebda0049e82f68cc8c3e4ba03cebb7e","ssdeep":"","tlshash":"9771b412759c60730bbb8996f0fbd8a0ad649358e2f114e1089ea8281badcc4c51ff96","size":3556,"data":"","first_seen":"2026-06-11T21:42:13.278151Z","last_seen":"2026-06-15T05:50:01.307903Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-B7nUddwS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c517863e3bc24276f0f7d01dc9d467","sha1":"0cce8ec4897aad29ea423df22bd693df3957fb5a","sha256":"d472824a9792c7068c2d49f8f2834c0603148ca242ef04e00498504b9d31c432","sha512":"76884a21f2f838dfd3b4404064609ca882952486a598b975ceaae8e31514f23a126ba2e00115d8f14846ae5c4a9e6b22f20d45d0472dce96642f2ec2c03dd878","ssdeep":"","tlshash":"ab81b612985068bd126d1cc9de2a21d276e20b91f125c0edbe3b0cb935518d0942effb","size":4010,"data":"","first_seen":"2026-06-14T13:48:35.263057Z","last_seen":"2026-06-15T05:50:01.217032Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfc01b3bd18cf8a72f4289a9d2ad868b","sha1":"3bac717b1ceb7db8517b243c64a7d7aae6442ea8","sha256":"5f5ac36d4bebdeb1b365b4fcdef3eff8e04c3518545331b5653fb1356181a55c","sha512":"9f084e027e78ede1ab0e79fc5973f1282f766e2fa97e6c9a465092a907404e3f3b610eb1f5ef54d650f90af8bbf575f2de4d5ab6e44b6934a1289573f2669285","ssdeep":"6144:McqqAww5av7p1u+ZUL8DPEBMdv8HuVgNhXB3JWOMZo3ctT0:l45av7NZw8DPEB4gAHO","tlshash":"e4a409cdb3d674625393b478903f018fa17a29e2b44cd898f18ac8d42e7469a4277f7d","size":467986,"data":"","first_seen":"2026-06-15T05:50:01.293719Z","last_seen":"2026-06-15T05:50:01.293719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DYbkxAfE.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e1e9c9d8bb3e07121ef2a9f3fe3646e","sha1":"1136684397a40a9092cae35808f58ecd026697d1","sha256":"6bdcd42e784681a6be7a467809b807ae16f1c5cd642861306d170dc3707555fb","sha512":"69d8a43035d3db324fd99c3c1509ca240cb86126db1d6b591a970cf9e07b58a492b6e30b75c848b1f62fefc857f0656b52f3dae15a698a0acec1221dd6506595","ssdeep":"","tlshash":"6541854a4a012af1102d4dcdce1850d259e64bc2ba5acdccf82e5f795983dead027f36","size":2182,"data":"","first_seen":"2026-06-11T21:42:13.413325Z","last_seen":"2026-06-15T05:50:01.176025Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-scroll-container-CUwYcH3v.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b94ba601cb414b3213841a0da31f07e","sha1":"a6348b04992de13c742a7d451d086fe5049ea105","sha256":"d3db4a03592c658e8d83d7d59919c458fa0e0f61dc27f942bc0067d6af505ddb","sha512":"20c1a18f1aed0e025d39355550eb326d86c3d3db8cb3799240883f87a18ac7be2a6d844d4f67508842a671ac9e9d02cd38a9dbbd33f8b3634f00f8c7e61e124c","ssdeep":"","tlshash":"5d211e671940a03857bc5dc7f8aa0500a6f103d77332e4e4f46e5e625a67bb3b2bf606","size":1392,"data":"","first_seen":"2026-06-11T21:42:13.131547Z","last_seen":"2026-06-15T05:50:01.204676Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-theme-Btwoj3hW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6993b14b3ceb08d61cff4ffb85353b67","sha1":"4cf3aaf4a0d08ba1281b46cf310bc48f110ca3d0","sha256":"ddd59f6082eb2667d307338c6977a29baed8fc7b992c066cc183c67589865e77","sha512":"a052bc6aeed4e1e429217cb74b752ea0058131605e8f55fe58b4ed3c8a67591c3279160ae320d5544c9c1c71989589002f225ff9a3c9c4c268ef40118d2830db","ssdeep":"","tlshash":"0df00ef1ab78a93812200cbe933055a2fe18259db7629151e13998ce1068c0083b2f74","size":505,"data":"","first_seen":"2026-05-26T00:02:55.156535Z","last_seen":"2026-08-03T23:19:56.563634Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plugin-server-updates-CmWmVcng.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"577736777cae2079b05d5f0ca15045fa","sha1":"c1152b9adb56364d71198a2c313103e01a454e5b","sha256":"a15b93c8e3a657baf3617ded0f60b4a220dcf1339716eb10ec8e26451e2e2505","sha512":"21d09c91c9104a0f95225650ba0087a6bfe43d29e8b63a8058a107c05c66c85731786fd2828de27f4b5244c8f860834c323e9385dc61af8355a7ab3b72a82aa1","ssdeep":"","tlshash":"3e31c66df5d660b752eb1d9ee83b6830ebe013947056c4b0a33c24d60da65c0e5f5f09","size":1860,"data":"","first_seen":"2026-06-11T21:42:13.372071Z","last_seen":"2026-06-15T05:50:01.324785Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/currency-DJIdQx_-.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"01edba3ed698bf628a3d637863baea34","sha1":"87cd1ea0023cd2bb8153045a01bb0256ff1b9d47","sha256":"70fda426605936651080c724323ff9e0e1776c9f3c5513b9cfdc429fb092465c","sha512":"246036171caad8efe1c77e7b98a721d5c0d554df06c0007c23b84f10e18b951ddfdf8ac30e7011faa0a7a75367b610dbe12e634982a583b3dd4e20118b08d029","ssdeep":"","tlshash":"dc31b692ee11e2b0a1260c8bf92cb0a4d0c861f71625c4f4d1bece2c83d8eb94209f85","size":1648,"data":"","first_seen":"2026-06-11T21:42:13.374428Z","last_seen":"2026-06-15T05:50:01.298138Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BqgRudU_.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"669ce595ba5c5650172f557ae36f2f72","sha1":"c2b07a8e3f4b0f395b0c54be60eb98f3a8115f62","sha256":"999e7c536e1901a1c32107df5987f52c449250eff34694b2691d1f1bf38bdfcf","sha512":"ae38bac5e0fa26d50276518969064a66e750ed21c537f6219f64bee2b77037ac11027feaad497348d8313904ab149090026934a0a71859ca1a79af8b83fb24cb","ssdeep":"96:j21kk35GwEnQgDedfJwejdUuieZV+/CMlUzjYF:i1kkp8nQgDiwXeS/CMlUzjg","tlshash":"4fd1b5d6e54621d586791ce4eab8068f11b05b91b03ac9d5783d4d7c3243e11b92bf3e","size":6262,"data":"","first_seen":"2026-06-11T21:42:13.286087Z","last_seen":"2026-06-15T05:50:01.146883Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/progress-DwnHxklp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca4bfeab756926e252f150235bd04abb","sha1":"b922732c1cd622f9e575f28f9aa90fbfb8274434","sha256":"86a98a214abd48f446e7c442b5632908baf4b3c2b807e4804275c0d60b1842dd","sha512":"260c976dfb0d6e170ad886cb7056c54f51cebf5ffbe8401e59ca89cc1b42f562f8804cdcf2041fd4e757f1fa2498676d8698cf96515b181842e15300b73552a4","ssdeep":"","tlshash":"47419a80fd35db7869330c1b5b3b40642244b17d571fdcd88f5e8565c7deae20908786","size":2049,"data":"","first_seen":"2026-06-11T21:42:13.231794Z","last_seen":"2026-06-15T05:50:01.140336Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"1bd637e9a11ba35abebd964595fb0cb8","sha1":"b184a249c13f9d04811457927dc17c1c55ac7696","sha256":"21fe7e8d8d9777f24df0ca7e9d9994f94916c22eca7cfff6b64a142e6051d7de","sha512":"7767e5d77a4699be29a906bdcff2a3093c82a7a8da9c673398ce55b95cd4fc3a8f46a36a4359ebf769168b8ef4d0dc8f1846784cdc0a2951e30164d4797f9b70","ssdeep":"","tlshash":"aea0118af288b0aa228a320a202a0002220b0aca0c0800002b200ac0202a002022aaea","size":75,"data":"","first_seen":"2025-03-19T17:35:39.297904Z","last_seen":"2026-08-04T01:13:27.613256Z","times_seen":1532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"b01c9d9b3c9cd49d4f1a79926e27b043","sha1":"e3811cfff7116c0cb2f4a960acedbddcb3c5df59","sha256":"7e8cdb7f7d2e310134e4e82ea625d7270865a28a3541183956ea1896f95a8293","sha512":"6598e67bf845c34225a42b037cd094c8ccf3f7d5160f44cba33f7c0d2f1bc0efeded874de062097474a1e64001ccfdc875f02eda8c859ca1fcbe4196bb7ad425","ssdeep":"","tlshash":"6ca0228ff2ccb0fa02cf320a202f0002230f0bca0c0800002b300bc2302b003023aaee","size":75,"data":"","first_seen":"2025-01-28T09:42:26.515813Z","last_seen":"2026-08-04T01:13:27.615706Z","times_seen":1706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/widget-types-BUsI5A3L.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"12fe862c5f8dab33f0c13a2ee0f009e2","sha1":"026dc29d91085adfe97153ba7b3746b5e5663323","sha256":"522ec64e9563c6a09eb5f18edb408b0126c225aa0e1733e652c1cb2416ce1724","sha512":"abd3c44b52c89092abc55baf2618d70a907e6819f3fd02646e609088f702c459ddfbfbb599b36459c91dd478c4ef9293c06635596117f106a8bd4c0414a2f4c7","ssdeep":"96:TnSfGcFb8DrBATQu/EV+I7RCYWn6fejoFGAcJYACNMjvo6fr03bPbNEtR+YcLDiR:7SfH+LNLDitan0Yq","tlshash":"58d170b005a46027c1b698889f7a2e1257c43ba5e8c75600bd5ff4c76bdf8e0e2023de","size":6645,"data":"","first_seen":"2026-06-11T21:42:13.391411Z","last_seen":"2026-06-15T05:50:01.155249Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Bc-LNsfl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1d4c12e45746d92faa420a41fcbec99","sha1":"402c22b23b63e7e113952a7ab09a945b2df1738b","sha256":"72cba5c3fd684a4bcd007d37c18a5525b4889c12de2561552f0993e504990eed","sha512":"74696889b2d51a3161720875c941733e92f08ec5ca9962480cb842774b14fbe9098e631e88fe14ded4653275f534f1122eec70e7bc8036356bbb39de84ebe180","ssdeep":"","tlshash":"dbb02b0b0882c9700a070c857e008402a32862100321ebc4a45d17101730483430f00e","size":123,"data":"","first_seen":"2026-06-11T21:42:13.20815Z","last_seen":"2026-06-15T05:50:01.29265Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/search-input.vue_vue_type_script_setup_true_lang-Da2AB6GW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb476f2425f2a1f3c9bb3cd69bbccab7","sha1":"958c033235accf22490f66193a9417bcc0f04fda","sha256":"9b31303d31a42611ba95590164ab439387af9b5e8f7d5bd1b9856f89f7f440fb","sha512":"4be0c35ca4e819db49bce8e4fcda4e1dca432969c0597eb918a66c5fb2ebb1abbabf200f18b551933e3c15de28f9bc3de3bd8f8d65f2266e19845e4ef7f1125b","ssdeep":"","tlshash":"620168120900c37737504cd7d767b06b4964107f27410de089d8d56557645f5ec3ff65","size":676,"data":"","first_seen":"2026-06-11T21:42:13.409516Z","last_seen":"2026-06-15T05:50:01.265121Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/flag-0TSrC0PX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36aa154f4f2726fc22f8d225fcc758be","sha1":"413b96a78d74c96c9a043539813f82a73d3aa673","sha256":"dbd80eea1deccdbd35c7a358340a2b3ae26a561d8c9cc74ee69cdfba20b3880f","sha512":"a060631ad16883ba92802c0c4cba6935d22d6f04f94a62792c1f83555cdf9bc5ca199bb6dd896f7eb8fe25286600196dad98568b953b0a8fdf4c4394da5383a6","ssdeep":"","tlshash":"6721815b0e03c1f4256f48cedd3790a0a2c810666b6494f0c2bdae39a711fee401a988","size":1242,"data":"","first_seen":"2026-06-11T21:42:13.373626Z","last_seen":"2026-06-15T05:50:01.328545Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-08-04T01:13:27.600758Z","times_seen":7490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/infiniteQueryOptions-Kf6x0a2l.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36074a4ad1ee712f187f8a9017574356","sha1":"09e567f710fc27c5a03f2396ae8dc1d9a88cc989","sha256":"146d9737b192711c6cb3ac1635aa88f9e409e813b163ab4d9b5ef6aa7243bced","sha512":"3732bd7f8aba0a9448ea0d35aa4f5c6b7c26e41f98e3b727e700ed02d4ceaf0d728136879946d18004f9ca8284220d60c15fe1a081d68662c628ef344290958c","ssdeep":"","tlshash":"c690044530c170745111313445377c05d114c45cc5d5d735c104454035100f0531fc0c","size":39,"data":"","first_seen":"2025-09-20T01:00:19.497611Z","last_seen":"2026-08-04T07:42:36.547581Z","times_seen":2950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"51177c872812f1868f908b4f15bf8d5c","sha1":"3e179b58e8575067602fcbeed70ebda237b241c1","sha256":"7388fee7cc98daec8cf1c41f797c236ba2b30e4016802d9204fc0311144d6c77","sha512":"77e2c638d9c76f4760f74aebfe2e8aef75652945548c5a643855d2b313e2a4e4d0feafdfd527e5433f4c50cf4bb83dfdaeea701455d56e348e143122cb3a023b","ssdeep":"","tlshash":"ead023e51875c930759c015751b9e7dd667120907731e300d1c9cc6f5e31ed304f155c","size":217,"data":"","first_seen":"2026-06-15T05:50:01.374769Z","last_seen":"2026-06-15T05:50:01.374769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/cdp-modal-uZy190cm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c14d9d75159ec308a2d19a5adc0dee43","sha1":"492ece2df6c4794570dca29fd551efec8dfd951d","sha256":"f813fc70dac02e68e54b19d349ff9626a334181a113611818babddc3a5a32e02","sha512":"e22b0e2e2405349f0b438d97c1f83a55ba1849edb715040aa8e5f70d83e33050996a605f4f8d3cf9a2c66546ce63eff4d0da03300341d58bb60b82fcb299cc32","ssdeep":"96:0P7Q0wO2r2K2ghtgFy9xdWJ7FNLJHKkOZaLmc2ZXYYAAz7bjNl/+2P:0zQ0wXibghtgFU7WB/zOILm5zlT+2P","tlshash":"b591a48a7ffcf079682f8897b11f5819e308b99c4563bd9284f8096d1bc1ce79454707","size":4352,"data":"","first_seen":"2026-06-11T21:42:13.342223Z","last_seen":"2026-06-15T05:50:01.124387Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/conditional-BBCxolcm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"99eedf2542e057cecf63ef17fc31061e","sha1":"08c2ab6cd16880fffb51f356639df9461a218381","sha256":"711b2374c3c35d2012a7ab00aec8e8da45ce51aa0ae62f617dcc5aa254c34f58","sha512":"00152f3ab1738c4b79ecae9921d190d71d4f6f8c65051a030af92daf0b614a5bb1352a49a82869223ba4f327f1ccd67cd61fd9300174bfed6b1da2115af65144","ssdeep":"","tlshash":"b731ded7e6ce8491c378e8d1a1279120f0287d76387cc5e4d2ba4d3f9811956e07ba3b","size":1638,"data":"","first_seen":"2026-06-11T21:42:13.379506Z","last_seen":"2026-06-15T05:50:01.129213Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Cm-9mgDs.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ed1a2148d016e8e86d334195d6a7f3a","sha1":"db160bcf99deec924ddc0c73387571234fbd353a","sha256":"546399e8e16b2dafa10165dc0e736efe9288c2f33e6667712cc8b6d1ca14aaf0","sha512":"33852a1ae055de29d5846e36e2d50dabd674aae639112c93e82d7430e4d958ea09b8314495408d958a2aeb498f91156e171b592af4a2dc56f329521b9ed26562","ssdeep":"768:fCLMU+8Jt+q82aSwId45nCGGGOuuNIUBhi+EugJUIfg9+COH2K8ZpblRnQs2Aqqn:fhUhn9hK8ZKswGH","tlshash":"d4333a81be506168133b1c98ecda415017a92f147007cafababd2d7926cedd9c1b6f37","size":53412,"data":"","first_seen":"2026-06-14T13:48:35.25022Z","last_seen":"2026-06-15T05:50:01.27405Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/button-_zqq3Qiu.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b7100f86f13d3d9d92055ad5e0e1f7","sha1":"6069483b6c29c1c5171b411d2aac2ac94c3f6d34","sha256":"fbed11055a3cf3601f62086a652d5dba8db395f2ada26bd3e087907b8ff06d47","sha512":"8a3ea5204218bc7d3341e995e1d040e8bb2e0bf21873e83aac1dae71dc028dd85b273b3d402dfc18ffc9a9f11998fee1b49a164d6a48186a70331f6174e6db57","ssdeep":"","tlshash":"e1114257bcb64770672b000f143ed161b588f5bea36334d006eec9b997ecdb4841e589","size":1092,"data":"","first_seen":"2026-06-11T21:42:13.16287Z","last_seen":"2026-06-15T05:50:01.218084Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/cup-CsUNi6_d.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d4868b6e3551cd11fbe2910f44fcb62","sha1":"27776d641d4d9a4c7d6f1adeeaf0e0f239ae2196","sha256":"979b4d71976369e1149e9bc96060364e56e40456e28ec9e9d845250747896729","sha512":"d746e75415da5262d0ebcaadd1da4bf7c620ace0ecbd32c224ba833760b20e5a16c79406472c040ca9b1b36aed161cfee591acf84a0aa51b2729c94c6bc686a8","ssdeep":"","tlshash":"4001b1ee3729a1ed561ad80ece29444c934ea4f5371a51c40d4ecfb5070f4d1ea07930","size":813,"data":"","first_seen":"2026-06-11T21:42:13.280378Z","last_seen":"2026-06-15T05:50:01.205233Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/seo-content-CsSc9G_w.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6dbb5d414ab91ad7956bcd0d6ee4f01","sha1":"eb1930e7f6bbce5d55091891b0dd31be2c745771","sha256":"3e79c356d7da2927563888e831b7f00a572d0e1a561bb68deba0fbe0688d3071","sha512":"ece191bbf6a251be6114001649a44de730a34e1e876462706534c4638d0087622b470aca681382aa352c0e30a00dd58d86a804c5a2a01af9bee3581b427f1311","ssdeep":"192:o79SJvSFgDr87TTWv+vJvIwI8AzviIPtnb+o3cTYbub4+Pk9+PkL+PkU+Pkg6CNI:04FSFer4TTW2RwwI/zXPtnb+ocTY60+b","tlshash":"bb12ed74bf31b068ebb34d59772ab85ca529fd1a4d4543fcd5ae460c87cbea20380b16","size":9098,"data":"","first_seen":"2026-06-11T21:42:13.439014Z","last_seen":"2026-06-15T05:50:01.329707Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Ca-mT0K4.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5c4634f5ba8b2e552e7bb28106d61f53","sha1":"7f6c325db4947bbdf1e3d4e32df43e55f28200b2","sha256":"aec405c7e900100c6998137b9e1aba1ee9e82489b4a83c635d970991d24bec8a","sha512":"b8fe1aefaba92a2a3e96b25cd61381cfdf3686bb074e5d6e897ca9bcb80cefe2c843bfcd7dbaf43fb62a812bbb1657ba709e928106866437789a988b04ed7a7e","ssdeep":"768:yrXmoWWn686GmYA9KE466/wOMlr1lepypieIf/PfYNiApMSomZlI6Hp2iH9zyvwX:qmMJhUAe","tlshash":"2203e9c4b251506683d2e1a380b50203f32995547409859cbb2ceeffa97deca7277f76","size":41376,"data":"","first_seen":"2026-01-15T17:57:30.741409Z","last_seen":"2026-06-15T05:50:01.131082Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-C6liJRz-.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d5c01ae00936f27fd3821e3ab99d8fb","sha1":"886f050d00be68a37c1564ab084e31fbd107862e","sha256":"b64526735d22339e11286052102fbf7f97a6c468805e78ae941f7171ef8b2042","sha512":"6ad467adecae6768c98ee19e3ec0c38d98143fdfff0c8e5a7e10fafc9ecd93b688470340223e7bbc6053d91df2b6442e05655559f7a9536f26dcd715aeaa8d33","ssdeep":"768:kmMV/TLFvc3vrJS6FfiZGLu+2jMM9v/Ik27vMwgktCu2bDFL8V+8V09GS2A2J7:k1LMv9kwMuU8V+8V09Grf","tlshash":"f8b24bc2b131627817b785c3b6261584b4549289b980d8f8fa7f0e7812cfdd2e1a6f5a","size":25359,"data":"","first_seen":"2026-06-11T21:42:13.240862Z","last_seen":"2026-06-15T05:50:01.137276Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/star-6NorSvIp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc4deecf942777c9bcc2b78c1369fdbb","sha1":"e0e6dff137746e77d8739566ccc2da810bb6084e","sha256":"2ed292fd99f67b518ccd08070ae758bdf1020fab27fa5b27d1a7eb2180e487d7","sha512":"c254bfb19b94104129f80a2d71b1eb5dfa2908a6e1ec0f04218e87a00f58e266d99869ee53db721203c0b322da8f23afefb5f137b234f9f41fe7ea0bb41394ce","ssdeep":"","tlshash":"9a01fee614685bbc8916d24987379510130ee8bc374ac4c29f4fd37680c74a1e507d60","size":675,"data":"","first_seen":"2026-06-11T21:42:13.221062Z","last_seen":"2026-06-15T05:50:01.213775Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Dk8VhSIV.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f63f1df007c31b68e3fb7978b4dd01","sha1":"2451bc70744586c09ae10ff8369424f811a19a1e","sha256":"149379789569e6dff10717607efc9a85996ca070229e2d01bdd52e76adc08c76","sha512":"90fb02a455388b7a9107c31330d0a1599c4c4a43e004183dc99a729a04d7c9a1965e7ba8c3e6aaedf5cdefcdfeb0ee970a02fa83298399e4b84d3ee71f6ab359","ssdeep":"","tlshash":"014133025ec45db2951c0ecd9d1a20e159da5f01e514c89ebf724d3d62b8cad901af7f","size":2176,"data":"","first_seen":"2026-06-11T21:42:13.242653Z","last_seen":"2026-06-15T05:50:01.292107Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-header-C_rOLoaX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65c08556416e8192e9b2bc10a19a48f","sha1":"ca0f34cc4f713d72d8232bc6e2d6205fdd9b4eda","sha256":"76dca63e19201dab674beada92cb0a39d2b19eea926d4a9b38305c3ea64ea7ab","sha512":"922b2be4fad871cf6fc917ef10778fa98a7c6e7d6d66fc4731a9158044b24e174a2afa91af7db803d4e7860878a9735afa4d4738f5db1e53232545ad118e0e98","ssdeep":"384:xC1o4STfxhNZrVNP7PbPvpzpvpJAtelAsxU:xoo/T5hNZxNP7PbPvpzpvpJIQAs+","tlshash":"1e624fd1ad3cb63cdabe2417f2df5c14a668e23e84559dfab93d014f03c05b1a2d8686","size":15452,"data":"","first_seen":"2026-06-11T21:42:13.389474Z","last_seen":"2026-06-15T05:50:01.325264Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-languages-FygAD77f.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e7eaa7048f06939411e781eedc50169","sha1":"96a1a15cda385ff624f9eba58a474dda9c99d8b7","sha256":"b9a360f57a92e705763add3341c354e8d0375f03e481042a8e77804a3560cd4c","sha512":"1358c038860c6aa3cf9866c2fb879175db5c7d80fadaf9003e0f2c1429319d4c2842760621f84e6e217a37b8f542edf316af35cc53fa4a57e933b51ac5d8a907","ssdeep":"","tlshash":"6d31b9a1d1876f7fe2863bca9c80165404580e0f222f8ff9567f4d4a140ab7c84fe936","size":1594,"data":"","first_seen":"2026-06-11T21:42:13.166515Z","last_seen":"2026-06-15T05:50:01.335879Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CP7zO4wX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4235f616cf0c0cd01bbfa3f51dec750a","sha1":"4e18ee1bba7f738e8dab658c8ac5a0415c687f56","sha256":"30145423c125d6b92ca31026815c7a02e154748d0bd44a29e4325bbf184dc028","sha512":"3adedf7b3955f1d63bd947f5b2d6b3f7fdadeda8043c101d0df46be325b4b0ad12a4952385b2f64ff906184be7b977c8ace4f4e97fbeace959c0f34fdb2ae86b","ssdeep":"","tlshash":"cde0f1b78003c7f9287f44b0ce2cd88296e106c20781c3d251ff6b511a670d3401e10e","size":420,"data":"","first_seen":"2026-06-11T21:42:13.13066Z","last_seen":"2026-06-15T05:50:01.201513Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"df790ee3adc73e9be1b07b62ea0074e7","sha1":"c055409cf6f378ce64bb86f2b98fb82102e25740","sha256":"eb6f9121937d5633c4319aa8f5b5e861af1ce0fc63b8a15b7e558291cc954746","sha512":"30c79ca8ffbbda2dee038a8fb46aafedba9e86f0f1998e03b5285bd5b714d11c9ff6c9a29fa6336f54d257d8add1cc0562a2eb074d5caca630b528d079917718","ssdeep":"","tlshash":"01a0228ff2ccb0fa02cfb20a202f0002220f0bca0c0800003b300bc0382b0032a3aaec","size":75,"data":"","first_seen":"2025-01-29T06:33:24.955578Z","last_seen":"2026-08-04T01:13:27.598886Z","times_seen":2960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/define-widget-BAvTujtf.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"03e1de2845c0b028ff02b3e5ef8e528b","sha1":"8e2ea741fa744f7bb59d2143edc99a2d51cd60fc","sha256":"91b4211ef8a09d3c771796106321a810547844f32b5edeeac0115966497cf17e","sha512":"b26e2fe5fd12422e900bb6ecf6ee6442673122130427645ca889c9e14b602227942f9f6565577132d65966d4be29f950fc2a194b24f2cf7f5bf192d0ec7e056a","ssdeep":"","tlshash":"cfd02b29eca450b858007d410f28e84611dcfcb7bd965590a246a8e98bc91924d2186a","size":261,"data":"","first_seen":"2026-04-24T05:21:34.806088Z","last_seen":"2026-08-04T07:42:36.592878Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BOqbfn6j.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d72c9bcbc9dc1f3adff6cd9d7ac2cd","sha1":"bb584585c8a3bbfd32141d26d92606a3e597ab33","sha256":"3be914d6bfe62618f97bbe88f1175ba1bfe974038059880662ba714ff255932a","sha512":"57e49ce19f82e5ee2e9fdefd02c301104fb915b5d4959248fe83ccaca647ac713c4165cd30b5919b6ce009ddbbe30d988f122c6c781f043c3c5b470976532c0f","ssdeep":"192:3a4nruUf+znDP+UviahubT0MV+B/z1djvHqh61i5mcME1RrUy:NruCjUviahuDV+BBRY61i5mgGy","tlshash":"f012b640a095297452be5e88dea480d086be4b12f430c4edfe3e0d3d79d7958a1b7f76","size":9363,"data":"","first_seen":"2026-06-11T21:42:13.437039Z","last_seen":"2026-06-15T05:50:01.273268Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CmBrB7Fs.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e43365be1f7b51de2656c451b4a960d","sha1":"325951eaf45846fbb4ffed6d6425156932a5b3d2","sha256":"e3c388314f191def1cb9f02f8157ec8b678e1c79b2678675c18759fc05960c2e","sha512":"84388592685a31a0dcf09ed38a822c04541dcd7806c40a9f4d2a5955937765e81a06eac397ed6339189ad7df519f9e5f51726a6dbf1cd2fab1b1dc6d6ecfdf0f","ssdeep":"192:lpthnwzVy/2kpRNiZqwOLtIqep7qQvqEq+P4eaFsPHsmr7YnnGA/6IFouGr/kWhz:rth8M8q1+qeNqQvqEq+QqN7Ytje2NPH+","tlshash":"691208c21b001eb0526e4ccddf6e11c918e25faaae01c0ce3e7a6e7970468c5d613f79","size":9889,"data":"","first_seen":"2026-06-11T21:42:13.305579Z","last_seen":"2026-06-15T05:50:01.198784Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-footer-DVbZehuP.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4209d871016f135ec9cf9ac1b8f306b","sha1":"ec4d74cf01d3994fa24fed89b5f247fce0c6c2a5","sha256":"f1642356c9fe724c9e80e1580cad58100673a33189b251b3abc21ff5dedb8994","sha512":"274b42416da57d5d70e2aaaddad58893ae7d6cf29633bb9c8ac258f1676437fd187cd57d5bac6a1967acc63bc0d48620e026b2fbea0fb619950aea34ab5de7d3","ssdeep":"","tlshash":"e421d04e7ff491f8484f9087f63f9f9892a4a4716a91b8d1983cc43e0bc69e740c2758","size":1269,"data":"","first_seen":"2026-06-11T21:42:13.168271Z","last_seen":"2026-06-15T05:50:01.262527Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/main-A_yihrp7.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc546d3751ce66e70864e50e60ab048d","sha1":"224ff967bd9946e9595c1e49ea4f0ec49c48f50c","sha256":"e0594ab5b4e4697a7861ce732f1480423da5c5b96d76ef8d77cc0cce302d606c","sha512":"7e763c6563369e2c6a0ddfd6cbdcc2b17d30be9981864fdceae8f03845c89d5e277f2d5d84b7286079db8eb60667471bc44794dc3acdd4c7a8b849b610331deb","ssdeep":"","tlshash":"b301f7d8b1a8937888ede69dcb528493d0f421c2f665c890c7b50e2c4aa04c753abe5e","size":722,"data":"","first_seen":"2026-06-11T21:42:13.476295Z","last_seen":"2026-06-15T05:50:01.224885Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/useQueries-hQCRIoX5.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a21cee6801fa5775f1be5404155f3042","sha1":"77dca062a02138b8afa43425881b169038df4be8","sha256":"666e4f9cbe963b064e87672a712eca82b553b04f3d0f54ee2339ae98818d959d","sha512":"e5e453d074f0d4ff6022c834a6dd1c16aa9f99b2fa3984cceccbc047c088285be4fa6080c32e30569b9798c03bd9a9c3126a6e95aebd553e587f774aa9bd6cdb","ssdeep":"","tlshash":"b251524bb461623677a198d99c398066a31d6e0d700e40ecfbdd5dcb69438cc6a72f3a","size":3033,"data":"","first_seen":"2026-06-11T21:42:13.405229Z","last_seen":"2026-06-15T05:50:01.202806Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/control-BZBpiAJi.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"92f8ec0d414d0493da6c169d6b1e7ba9","sha1":"1e1e8a1d5a9352aa6655c0bfefb636ffc39534b9","sha256":"2cda4923efb9617963dbabb9fc4b3ed0487241526378be4e81ce5741c0eabf43","sha512":"b8d3f6b659c91bdff695419a52ee76dbbc7f20407d8e5a82e56940b3cdcd60d0cc2658c6a5d4ed8ac8ea9ac00a6139acf50a60964ac9bd297ed029fa84cb5f35","ssdeep":"384:kgR7uAikJHv2HPRVSVrCr7u5qACGArbr+:kMlqPRgZ0GT","tlshash":"9552a57c6eb07f39cab7c45c7b0ce5268a51d324de1b1686e720b83b47ca4b16263751","size":13867,"data":"","first_seen":"2026-06-11T21:42:13.234352Z","last_seen":"2026-06-15T05:50:01.259001Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/minus-CyjQ7M4e.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9af71e3bf366a5848e0a96089d676420","sha1":"cf54df07f2a51bae1ebab1c4da3f36e03cecb151","sha256":"7988eb0ae5fa40bba9d27fc2bfef63000626f4b98fee9613bbc0eb704937d127","sha512":"47cdad2ce922f8bec4dbb489046bd2495173c0822c45391c1e0d1e07a083ffad265974d198223980f3837ace4b10162f08a93b114a1c45b844e8cd1e747717e1","ssdeep":"","tlshash":"cdd0c2a901882ff48526c668c22d18a14a154efd274d80e4570f553643aa0f4984ff39","size":279,"data":"","first_seen":"2026-06-11T21:42:13.333849Z","last_seen":"2026-06-15T05:50:01.113422Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-08-05T09:11:22.036818Z","times_seen":10671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/more-vertical-DaIU6j76.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0486fba0a8c70bf6cc19dc890329c4e8","sha1":"fbc368a16e8d5d2c8af53e0ee27f078fbdf5b1e7","sha256":"4bfb8f468fe3d6de58fdd0bb42e71ecee87925111a3a9c6711c6205ba43d67d6","sha512":"84918b3a578c779246f0d86b6c6551a58fde1b2b5fa3d9e43f51de191dd4b81d00af2989eaaf3455625a60668ffe1316e1feacb8af49680be69919bd9b8e71da","ssdeep":"","tlshash":"9841d0f8039d29bd90678724db195c50030915b7b68e84e09f0fa23b82835e8ff47538","size":2167,"data":"","first_seen":"2026-06-11T21:42:13.438064Z","last_seen":"2026-06-15T05:50:01.231299Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/content-load-error-CsiDyHgT.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"245153d35fc171f77d0bc699bf567403","sha1":"9489e9f5dfc72c465c50358aab1dace15499131a","sha256":"1fcd8adb2c94e5e3cbb1d6341c8033e432ef73d5c163f2f3d83b5232582421c1","sha512":"ec388f1c4b6e36c00fd2d744b0a41d7383d655ca8a10ed9150420e9dcb5eb1e6a79fd5bc3b2763085cffaf0498be29afc97768ffbe338409218c30ecb840c92d","ssdeep":"","tlshash":"d25143a5ef64e139f7734c4f2f2a7008e444d16b8523e5f8d2a5460c89c6beb07a4b09","size":3014,"data":"","first_seen":"2026-06-11T21:42:13.32029Z","last_seen":"2026-06-15T05:50:01.296041Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-08-05T09:11:22.036818Z","times_seen":10671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CWRkmb5n.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9aaba611945f5be23a12393d71684bfc","sha1":"7f7fbd72a35f7edfa23a8e7c33991ea115473e5e","sha256":"d9790d14b26cd801c07dd83a79c14b4a8e9f9a5c034419e2b0f7d884c92f06ee","sha512":"8a9efce2ee36d891c9a15a3c899d449b01587369d4e59e1e9bc3f3a8353b7f6100beb100954a9a039913ecae9932804c2f673827efe35bd3ec9e2db37aa87675","ssdeep":"","tlshash":"ee212744e978a7b8cabd429f2b025083e4a431c3fd34d45167f51c7c6ed4581537b94a","size":1380,"data":"","first_seen":"2026-06-11T21:42:13.410539Z","last_seen":"2026-06-15T05:50:01.202108Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/social-button-BKYvO_tW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d524e4d2461cb54ac0919fe70b2c6874","sha1":"e0c22a8a5677eb132f7b05410b81297a542acd97","sha256":"b89df2563dd6baedb540c019606fcc1741defad330451dbda49a1d15d525902a","sha512":"be91bfbecaa26d0f86f7466be425d87235c2e7849c7b754ebb5fd5a5360c7d3889fa5f2f2e9ce36ada8de3a2c111e909ac236d15346a8f933cb6a3fd1ff6b4c2","ssdeep":"768:dhcku4mku4/2BvqId/tbLOzsJCDMf3Zaw3Zayd7I4:IF4mF4/JE/tb0BMfpnpX1","tlshash":"133375fca320926e29074ba5ce255185074ff6bd7d550aa0671cdf38f6cbeadea47800","size":50160,"data":"","first_seen":"2026-06-11T21:42:13.37861Z","last_seen":"2026-06-15T05:50:01.216371Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/calendar-CgMJWzmw.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"be85c8c15fd80bb8dc33d1bc5fafce0a","sha1":"7bf44abeae229e539e111cf77e2ea7848d55c6e5","sha256":"800c7293bffaef0c13b7e360aa1acb24d0f924a828374825f920f1cd53608d38","sha512":"2663867be8177bdfe455985f1393f46d93205ab1e2016da616eb6bbecf34cf4acc76b69968da8d9883fd144f1cc46eadc964091bfdb1cc5d894b8f213fb72b04","ssdeep":"","tlshash":"3321eeb2571cb6ac46db23bbcf19fca0834498e83207a261d38e57d5048b156ef0f905","size":1168,"data":"","first_seen":"2026-06-11T21:42:13.392201Z","last_seen":"2026-06-15T05:50:01.208354Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-src-to-imgproxy-picture-BKtU_dgb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8270ed5e466c906618ba65ba569c992","sha1":"82354df3b92bff61a52595041c3b1c46406a445d","sha256":"9ec88554212bdfe211ad9aa597fa8ba47a7a8262dd749adea1944cd0bca64ee1","sha512":"59b42866b8abcba826a99c03e9c182f13c25242b01b32f8b73a10b07e3b1dfa1ca9953ec4662f534c8df676cc97c55a8bb5647246fcd59420c4830ecfe320c87","ssdeep":"","tlshash":"8701f1aaa6c5d9b4e77044e8d2318022f13c3e42312cd5d1f57e0c6fae39592c026c6f","size":797,"data":"","first_seen":"2026-06-11T21:42:13.235734Z","last_seen":"2026-06-15T05:50:01.230755Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Chi_Ep2Z.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eab9dcebcd5e6939a654d21cf26b135","sha1":"4a5bbdc2a0c5b83200dba530430b952d452592c1","sha256":"11048c089886bc5bc73dfaae1288b384e02da7fc45a9ad66983bc30283b99a75","sha512":"35b1d8f7e63864b5dc374fa67396f9de85d4e10f3d157b81e08b16754d308e78f3c5041c3720f0e9808d2a24768e6146f65b9a978e0e03b447dc1968b6e6f5f8","ssdeep":"96:j610w6jPLckGb6BnBKgNtnayp0GaImF3MMsDlQto0337W:Q0wsycnc6kxRihJQtBy","tlshash":"d6d1c567e5554cb6037c0db9dd5230d241f007469253e49dbf3a8dba7aa0c85902bffa","size":6484,"data":"","first_seen":"2026-06-11T21:42:13.345081Z","last_seen":"2026-06-15T05:50:01.196346Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/shared-1pYG0kmT.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"987fdcc50df29e171a6a892c867ef2f7","sha1":"8b90552c133196e8991448111dc06001650d7a48","sha256":"3eabf24078ffc755f82f3d5dd463d774aeed83bf75a1fb446205a8672fcb071c","sha512":"ee3655fdd0d0bc17bd9e57eee74b7bd1534a2db223bb7afbcd03261f4f79f9a22e1ddf92318731f24141b197a3961149b43aefb0f64309a9720ce405bc6ccdb6","ssdeep":"","tlshash":"d280002228022cf880880888c322ca3202008008f22803f3c20a028bb3030c8a82cc20","size":34,"data":"","first_seen":"2025-12-16T22:06:44.125681Z","last_seen":"2026-07-29T05:48:07.507895Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/countdown-CqFvZSXc.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"baecdfe87fcac9c5d0b0180e8dece57f","sha1":"52c8c877508a01caeea9fb96b556c539f0743e6d","sha256":"8a9a18f55f4ec3ee586fb1ddade77e98bff7c649abfd54c496e8a682d6e7936e","sha512":"d43c15d5dbd6d53daab4971e45840cdc3b3a349b44ec3c04d1e79963ef02eb457598cfb1bc70e68b9982809a323d27e20a5e7f9c859076e019fe00c07ae01df1","ssdeep":"48:W+PtE1pMsAy0lcH0gEvxT0hk2ssXLQeuhcJncac5MeRIx4BK9cPIK96MZ31K9WaA:Wu0pMty0WUg8r2tFq3geMtyzjRUn4","tlshash":"f4c1f1d0e9f0f93a6cb3d9a6735a336c85859c67c9168ad8c19d190c1af7ef30b85701","size":5660,"data":"","first_seen":"2026-06-11T21:42:13.44934Z","last_seen":"2026-06-15T05:50:01.299394Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e1ea8944b4d2107224354239ea5c260","sha1":"773f6f8a37b34c729cef4b822b25d6f9d354fa14","sha256":"5a6575a23e913448c9efdd4638eb5fc77a39fc30eb7e02aec31cb2f0bfe96cfb","sha512":"223321b43b093fc6880fc8b89d9b69224ee445f5a17bc5836b48f9bf273b6a9f85adc69b6701fea140d48326da6fd144b757476791a28676660a715b5123cd3c","ssdeep":"","tlshash":"eb4198327e4698b809de28add92f2346fcb41a1c8911e0909294fdd03cb9f73857399a","size":2397,"data":"","first_seen":"2026-06-15T05:50:01.377635Z","last_seen":"2026-06-15T05:50:01.377635Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e66b0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"77b5afe8d55d26bafcd9f2d742c59c6e","sha1":"a00b1fc3979718673b747c4fbe5077866e35e903","sha256":"65b4f0804ff2257f62c3dc1e7e710a3e9a6bf5e4235c2ed49e742a382e406f42","sha512":"da17768a52176454a8b3c8e1f1ae7aecb6faaa58e516bf0a5d9bafc75279b88a1b2c74882a23377f8946e91c1dbac0c65193e014faa74fb5518d839f72d8af14","ssdeep":"6144:73isqANn9H5aa7p1u+Z18DPL3MdUHuVgNhXB3JWeyZO0K1KOn0:OGn9H5aa7NZ18DPL3bS/","tlshash":"d29409ceb3d674225392f478903f018ba57a69e2b44cc899f189ccd42e7469a4277f7c","size":446698,"data":"","first_seen":"2026-06-15T05:50:01.205794Z","last_seen":"2026-06-15T05:50:01.205794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/checkmark-ChRAWbO6.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3260d6d9f73a36ce10704f776ad0820","sha1":"a4df3955b3aa70b81ee81af858861c3bfb685d4c","sha256":"1bd1e9589d71145297f801fc069de7fe760f1d692dc7e56e69e29fddb65cbe83","sha512":"453aeea300b9d0173010ef2733562459a036c84bc3326ef567bb2cb691e9b7b7a59a4879eda24691c593239ec398f9db86abc0cbabe5c796b7c968f06580a167","ssdeep":"","tlshash":"f4e02bba02441eb840178934c63d0d51470c1eeb3b8884d0830e1e2a46d61f4e51fa79","size":396,"data":"","first_seen":"2026-06-11T21:42:13.239955Z","last_seen":"2026-06-15T05:50:01.184722Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/get-captcha-enabled-BokRFCtU.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ad982ab70b9fb83248dc1aa947661e4","sha1":"ea712056562df420ead279ffd59e91e94c5483da","sha256":"4e96a81cd10ee4b8d7e8b023338a7cebdaff7adf7e3a2af6f38bc0e96a448d9c","sha512":"a697f726b22221ede3b449abc882f360f0d2753349bea4516f31827fe49659bb8b934e2de2573e72845a323bec5f120ab161c246aaf9e282149c5b18174ea88b","ssdeep":"","tlshash":"a8f026363c0a73385f0f8809cf368195531e4546fa38d5e9701d9eca1097993d00fd36","size":563,"data":"","first_seen":"2026-06-11T21:42:13.137075Z","last_seen":"2026-06-15T05:50:01.107911Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/get-masked-id-BtopzaVp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9bd7ad5724e1719897ab7463d2afa4c","sha1":"0963bd110e52088f4fe198e76ff3b1c05dda4559","sha256":"5cc2102dcd1d849e08a5a45a84d8d197de1e8b2078697fafccef3f9dc3cb38ee","sha512":"dfca451c888f827a42036f55baa0ee05b9241965cbf359dd91f8b5e28cba501ad326f5c017740654f97de3069ac568da1654bb8467c1d84eee52e9600d92ba78","ssdeep":"","tlshash":"de900445140130f401750c5541f5cd70cf44074d73f113d1f4151101470f0c4110d531","size":47,"data":"","first_seen":"2026-01-16T15:26:34.991782Z","last_seen":"2026-08-05T09:11:21.996197Z","times_seen":1362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fc5548165afb3d4ce3a49412a44ff925","sha1":"ed38e6b5bf1416c8b1899b99cdd9eafe3af7c9c6","sha256":"7091a3b990495c11e2ba9809f170a4b92d026a3a6179f56aebe55f442eb82bd6","sha512":"1fb7777b89a4acfe8be5303905730d950bd99c3edfcac92ac634c329601309e6ced010abb55fbc42d69e2c124862ad2e8ae185152d642685fb7e2b8b086ed258","ssdeep":"","tlshash":"e2900298f483319c410d215c2076d015157d558199088d00a37104955438109a569b54","size":48,"data":"","first_seen":"2025-06-23T00:10:28.622802Z","last_seen":"2026-08-04T01:13:27.601658Z","times_seen":3384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/language-icon-D3aRi9wp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b450e0b3573635ceab25344e4ad62d3e","sha1":"c12a01936ec912f296389198c542544bf2ae2984","sha256":"ec1f92ca305dee38fb6d3979b77f98f277871a6344814ead40bcb2c33ff78258","sha512":"2dc725c8d968e071c8955c8e29c7976a05291c201250e141c1b07779ca0e5052b2cf2320af09fe420d15e58edaadc95f81bd223275cb3832e302bfa71f359862","ssdeep":"","tlshash":"ff31ed1ba63261a6732b0846f4e4bc75a06100afef22bf59c3ed4d3876e543c542a69c","size":1585,"data":"","first_seen":"2026-06-11T21:42:13.355997Z","last_seen":"2026-06-15T05:50:01.285123Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-B_6wsIFd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"018728f3fb7fa26774b20692812fd621","sha1":"c13fe672766c84c9847b5281c474faed09ad6d10","sha256":"3dfd5b1d937a4c6af56c97bbcd3cc371cbeb59d0bcef11d7afe347b4d642897e","sha512":"c42eb68ad6e3ae09eaea2c509d45d4bee741f5f89d61fb0a0f98f7cedab98d16274c3e39944f4adb5ce32ccbc56f982c9997d446b76af7487bfcbeeb98824715","ssdeep":"","tlshash":"17b02b0b0482c5b408160845ba0080427328a2040321ebc4b00e031015658c3920e00c","size":121,"data":"","first_seen":"2026-06-11T21:42:13.148178Z","last_seen":"2026-06-15T05:50:01.208866Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-back-C7jRwOw1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b84b5b61cd34adf503dde1cd28ff0da","sha1":"be4a1f44449527edbabeb0937a4d3d18eead8de7","sha256":"8eebd83880a24ae940dc539d53bce441786f84c8805da47a69611e70db4c1364","sha512":"5913e91e3d5916a4ba01e0e4cfc57d067f650542b4a62a409995706d62baf5f8cfb94213091cdb70361731d38eb6c2af5e303436e98b585df3c885c69c3aaf2a","ssdeep":"","tlshash":"25e05c6c118959fcc56359e0c27599150b0c61d9370fc8d39b0f003a4226ae1d48f339","size":437,"data":"","first_seen":"2026-06-11T21:42:13.394558Z","last_seen":"2026-06-15T05:50:01.265798Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-L9inHqpd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b16e9c39da72194bb40c911cb8643b3b","sha1":"37fb7b1c7d52db8877accac183a2bc30f27b60e3","sha256":"2c2439d6564dee6d3629408e923638dc08ed17ca2dc59268077ae2a20d85cb66","sha512":"7806ef26d6b4fbadefa46532bafa5e2c82b91393ebafd6faf1826b5e7252f59dae1ee6c768625beb0f05be87583b6270ca57e03833dc60449baf0137490e3157","ssdeep":"96:j6gBbVo0inz3PFtIj6LJYyelIJ0bfHYPjLaDhaDJYydeDGhEj804BlvbEBDHFniX:mg5Vobn7Mj6L6yelk0bf4rLaDhaDJYyn","tlshash":"c4b1c595798c29750bfc4ed0fe3615e092c54b71e519c0ccb9bf8f7e228289485aaf39","size":5320,"data":"","first_seen":"2026-06-11T21:42:13.139947Z","last_seen":"2026-06-15T05:50:01.254399Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/skeleton-TqhFCWue.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a2ef08c610657c7cf2317059dbfcdf0","sha1":"70c97feb2df75871fefc66ad15a26bfaa12dd73e","sha256":"5258215b2d03fddb918fd50187e5b8230e8dfde9abff94a3674945cd10c8e874","sha512":"00bfb14ffa18494f8580001cdbda58bc2b288bf4a09dd356e3795d53754276c2034ddbec0259ad4d981461abaf618e453a10e0481da7c07113589a520acb2d90","ssdeep":"","tlshash":"7211cc04afe580f4a19b1053b23ca6e0986e59b39352d578823efcf8279499c412ba88","size":871,"data":"","first_seen":"2026-06-11T21:42:13.133048Z","last_seen":"2026-06-15T05:50:01.337015Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-C-nqAgds.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b6ad7e719b8955a1e4f31f6f6310e6c","sha1":"5c432e173cd7caa44ec640292f1239a68d3dd91c","sha256":"06b0d6930ff5df5075e8f0f485dbffab476ba268e4656d7971c17d09cee7522d","sha512":"275e8a6d1bbc31325e0f8099e1299844c5e86648d42e9a54130b538a437b0671c709539b0d8270cce638e18ecdb53dd034d8097ee1c5e93b586aca03c476ef44","ssdeep":"768:uMPaaQdFEpZEEgIceWylD4OX1oYkK512UbszCw6gwijZ53QAmRidtbQ/VaECBDU4:uoIdbOFozufZeXl","tlshash":"0cf23ac572d276b003fa68f0d02b0140623a5758b40dc4ecfa35ade658add4696bbfbd","size":35902,"data":"","first_seen":"2026-06-14T13:48:35.240047Z","last_seen":"2026-06-15T05:50:01.174041Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-app-install-YY8sCrvJ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"482d51aaddf02fa81319d8e85ae27e74","sha1":"9cd986ea9a17362ad7356fbba82e1b823c870f79","sha256":"a7f6e74c6ad328af275c639143c3cdd359128dfbb4f78cfa9caad5c3e440c6e2","sha512":"a9393718f5eda7d00d10a810fa03b8adb2387e2ed1a3d1cd37dec133f8061ab58a5653febe7ef33f9dfaf2017848daf3cf2539bb683dff0610c61eb71bf8419c","ssdeep":"192:KvcronCKrL/D2pqG0xI54PZ69PtSOkR7kTXGx+m9pHqEC:Kvvfw0yo+O7KGxVBC","tlshash":"5b2296947f71f638ba37a69e62cf3c185004291a4dd24ef5f1e7066e03c7ca1928675b","size":10284,"data":"","first_seen":"2026-06-11T21:42:13.469233Z","last_seen":"2026-06-15T05:50:01.120697Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/copy-BEecZH4d.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"79a6531ee34d72a81a73af31f0bd90d5","sha1":"f13e9963936b2d97b3633a986049e3fbc225322a","sha256":"e7a0cfd003e402021106f6d9025bb83c0a66e73ae570eb6eac31ef76fdf6b337","sha512":"b07f6c9ec651dbcb58a63e3890903428f1aa7490240713298959367f911e6b8c6f5f4f338f085d3ee4de05e59fee39fb1665f42e2f1f6a81153267e7125c36cb","ssdeep":"","tlshash":"4d119ba91309377c80138d69efb94810c76f6cac36b584c945bd4fb5c1c289ada67e60","size":968,"data":"","first_seen":"2026-06-11T21:42:13.415141Z","last_seen":"2026-06-15T05:50:01.226221Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"1baae958998549db61a10163ef574580","sha1":"09688d36799756333271e154d095ebafb307857c","sha256":"aa80561b1eefe257e6b19c7dfad2e8d1ea7cfdd2ef141c3fd7cc6e44111c4dce","sha512":"d84a7b9e6cda04d550ac433c545981489c4014cb8b67467aff5689a2be71a6a4871c68dae47a52ce22fe9ed1869e0d85b4950b52bc20844a1c6f8e8f4d3b29a0","ssdeep":"","tlshash":"0b900298f042300c5001611924270015113d45c89d040902aa402141d41418c9822d44","size":44,"data":"","first_seen":"2026-02-04T00:12:56.265058Z","last_seen":"2026-08-04T01:13:27.605602Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/search-B9491s1b.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d250e2944fdacb7a926e07b0c8c39deb","sha1":"66941ec64d6a9fb7541033441a056970e06d02dd","sha256":"8dd62a8c557f0dc79ec65503133de6c23dc6060e97e51b3c6860660005f53a1a","sha512":"028ffdd17ea035ac4e588cf1ea7fc34c92e9a99ad3bcaf22f97f8372055190879c49402701cff2527d0cb7862726b6cd8f7387d7a60160d38a28ac3efae0e5e5","ssdeep":"","tlshash":"58f081b11158b17c0e1f42b5c73c68c6431539bc774d51c4a36ea1358c8ae71ee4b525","size":568,"data":"","first_seen":"2026-06-11T21:42:13.207087Z","last_seen":"2026-06-15T05:50:01.179337Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/telegram-white-ClJpQqVv.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c323dcf93ce6537c3356af0c3a0c08f5","sha1":"32363b733edc2d8e4b226b84c13094f336453afd","sha256":"4e9965c959482ba0c4f45384a891bb84dec9069e4cdd6d9c30b5088a8bf330f3","sha512":"5329dd74b74a1f4cff6119a215a0656a7eb6f6ecb027c4d4a417a9a55bba05e5ae458399142a164b8ad27e12a2e6bcf4e971a68b800187316d06896f52808427","ssdeep":"","tlshash":"5df02355132456f802a39de6cf780e405b0965ac7b4d90c4526b873163c58d8c88bd14","size":639,"data":"","first_seen":"2026-06-11T21:42:13.482499Z","last_seen":"2026-06-15T05:50:01.215143Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BzLCQsKF.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fffd492dd4b65be97dc854cfad8687e","sha1":"5a8cff00c5f0b263ecbc15c54e7b4353503c846c","sha256":"c7f85c2ca155238c2a4937d60cd3b2a96ce18f57018616a628b6ddfaba1ba095","sha512":"908d57c7270087fea35dbd07afc8bb19745bb2acf66b3067f1674e51f3ca95649186e5fbf3f064e8e18fd398317e21dc88ded44fe6f55b75db68726634f21cd8","ssdeep":"","tlshash":"4e5174eb94845db1127c4c99ddea10e095f85b86e440c89cbb3e4cbc7261ce8a01afb6","size":2816,"data":"","first_seen":"2026-06-11T21:42:13.368174Z","last_seen":"2026-06-15T05:50:01.308521Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.ads-twitter.com/uwt.js","fqdn":"static.ads-twitter.com","domain":"ads-twitter.com","tld":"com"},"ip":{"addr":"199.232.172.157","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6404fceba8a6f71ceb2342c923ae791f","sha1":"b041e15555e2c1940ad5a2794e3b924e958529d6","sha256":"fed344940a52670af96d23cd88e8fedf17c4db4adfeb66e284f36df2b14c1219","sha512":"1734d7c2f0a4fac3fd66005e9157eea73b9a81f912cc6ac990ffc584766cf9a7a25d4725d0ec220554c11a0b75425c0be777374564fa1710107bffeb02c5c533","ssdeep":"768:pvY/2/uISU5w9BOXDeivH3Izbm6XjQbHekuhOfDIaMfFSArOoqQT0VC+FI5kv5DS:pLM56MrQ3ZLnKNNL","tlshash":"6323e896b2d4f4b103d2a5e9543f011af23a5828301da1d4b3a8dcd66c29e5f9673f3e","size":48081,"data":"","first_seen":"2026-04-18T15:57:00.528457Z","last_seen":"2026-08-03T22:34:46.502838Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-table-controller-DTBTrNZi.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e89acac7cc3aa9b87b8389fc1c9bb1f","sha1":"a8868a958c950d1a4356380b8ff88f78648c32ff","sha256":"3a703006f5b25e529bd2a1affe88ed0208a044e973006974fd19e1e49d227a55","sha512":"7bd6150b7b8e2763b84a5c70fd53ea4775ec980df61efa31f714312df1b7745ac8d0945a14df30a516c36f91a94dfc51a0811142232620e58c75295cb9b7e2cd","ssdeep":"","tlshash":"5c112f063b019cb881decbcea8b00ae9e14a119fb62241f4a127dc780891fc1312ac7a","size":904,"data":"","first_seen":"2026-05-26T00:02:54.944107Z","last_seen":"2026-08-05T09:11:21.869783Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-08-04T01:13:27.600758Z","times_seen":7490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/helpers-BVRNAj2t.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed51fbf722966cc2be991b35726a8dff","sha1":"7c89b789efe6e84c66a4d7bd305a5734254e8113","sha256":"0105bdf37d7fd44da0b90a782e043a20bbe4c5777e853a1c5f1aa5f611d4c439","sha512":"c54ab28b21764047338b99f5a42094c3d8bc9f2acc392a59274bdd928e9ba2022a9c7a654de267696017d7d14c91455b9328973cd6e8275306a8ad5577760640","ssdeep":"","tlshash":"61b012da114013fe5b05828021d35604f562036c24a2b2470eb027d115c0043e10ed8e","size":105,"data":"","first_seen":"2026-01-20T19:14:14.321823Z","last_seen":"2026-08-05T09:11:21.919997Z","times_seen":1146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-08-04T01:13:27.600758Z","times_seen":7490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.hotjar.com/c/hotjar-2606090.js?sv=6","fqdn":"static.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.164.240.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4167dda96cb387f4c1d94532d32cd235","sha1":"8d357f8f59749fb96a44eeaa0f6fdf11d959cc4a","sha256":"1db8c03097737b61b0d7e3514fabc3ea462f8db38f7565055beee2366c37d785","sha512":"6c80aa411e3e6785afffb08e4ede22cca24cf7106c30e81d2b0944375a9c89f86d2b9d1336b3511f780a5b8cfefc2a34140d2f19ce82cc5e12adbc0ed643db0f","ssdeep":"192:dbnOPb5tmjHCzN1vf89YbBXTRnXtjC3XnWBeDNCpRlNGoWvCuCKVCX1SU:dbnOPmj6vf89yhttWCfiAujVCXcU","tlshash":"4762b588b2d5b0f84af39416847fa70bb23e291614089454a2dac1d47daeddf9223f79","size":15156,"data":"","first_seen":"2026-06-15T05:50:01.114596Z","last_seen":"2026-06-15T05:50:01.114596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-countdown-lRLfROFl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96b6bdd02f67101f037c5208111f911","sha1":"116ec6b6ddecdde5e42d703bc633fff56411e94a","sha256":"81e1e5729497942ab1b84f04e15951ffae409313d17b00618e024662b66959dc","sha512":"d9aae84959911c5c15316eda4c362142c9e2fc98dd9e83e5fe7ee5f56fdf1f5a367f903f0193d07a27d7b5132cd8dd1b0d72b1066079b33ba38133035d550f85","ssdeep":"","tlshash":"722120bebb6ad0b1473851575920026043051708308359ff514f0a1ec5cbed9d3ef41e","size":1115,"data":"","first_seen":"2026-06-11T21:42:13.284022Z","last_seen":"2026-06-15T05:50:01.178677Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libs.smrtwheel.com/s7.js","fqdn":"libs.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9401363b48c8f8111a5a7861709dbe","sha1":"8df2d6965d2901cf783eec1793f53704c661fe6c","sha256":"4472ba71cc9d74e76171504261ec394697101a1aa15aeedcfdd0f0db1158b01b","sha512":"c2963230df87eeca67da2fca9be62be24e0c819dabdb513cecb3d703174e2109eca404f318890edf1ef793bf506c856d2d2134433c5fd088e98707bba6f0dc9d","ssdeep":"12288:BR5Yg5xLE595v5hDymWUHkq0LOi2Tnmx6UL0b2fyX24HoJ6vVKUtrNrgHO9sScMz:GfVK7JfQQZ55KiI1","tlshash":"a8a43a8d76dab63113e211b5243b2106f33f854d380e8154f66c98ea2f2da4e6277f79","size":456155,"data":"","first_seen":"2026-06-12T15:40:15.881205Z","last_seen":"2026-06-15T05:50:01.173413Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DZJ1uIJA.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"271d970901a3376687d258fb165fa211","sha1":"e4af41d29d5acee647c6ef54b9f109ff93cc1356","sha256":"5d18b27c8f86d153d0a042f00a71807dff03bf88fae7603d0e43d5e1a06d5147","sha512":"5c33afb33c64a7c570335c6121526285aff2c11b52f2f75862b3981e07d529c93596b36ced741f92e2b16aeb1947b7513911de1bba75b484d3dd831cd4d5d568","ssdeep":"192:BFbARhnM4d8sFVZPehe5UkJ7MzkhGSqxGSYrvb0DhsfrWJGF:6h3Ghe5UkJrhGSSGSYbb0DABF","tlshash":"33d1b58a96662af1633e1eca5c6500e005a48b547900cceeff7d0d3e71058de91bef76","size":6584,"data":"","first_seen":"2026-06-11T21:42:13.256989Z","last_seen":"2026-06-15T05:50:01.138598Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-GfwACaF9.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d26a7932367dc1cdf1e337a27b278e0","sha1":"5c2b9c744920b9d1bac81e10056091c7b1d321ce","sha256":"70bb0f8b70bf5c61a1472d68ed6872d1b5f677ef425fde3f8fdbd7a5056a7671","sha512":"4f23e43a936ca7c1531c733752ee1609f4345692ebe2834075f06bfefda3fece5fa81aa97af154ad58f6f3651b443d78666d9abcf16917f876a085f09ec78a9d","ssdeep":"192:tI7XO3mn3KzRshqqZJZJ9ipL3OBG2Rg6M6uJDgwIHuNHFHoTIHPY2F/1:a33KzCYqZJZDipLeBG2Rg6MhJDzIHuNL","tlshash":"db02d84ac58001b8017f1e8cdad725b059f92b41f220c9dc7fbe1df8aa804a9e175f76","size":8334,"data":"","first_seen":"2026-06-11T21:42:13.380337Z","last_seen":"2026-06-15T05:50:01.157009Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/useInfiniteQuery-0snrEpVZ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd6c6aeebc13484edc933363171bb8e","sha1":"d6ca8c39f5ed75c687e8f0f91eae3434d315cf09","sha256":"4ec0478ce96da2516cada7738b86c820d3a4b45ee4615dbf5ed7a98893fc8a59","sha512":"2cfb7fb130c8c9d49fa06896431bf1d24868c5d7df968543209992546cff9b9055da0c7849438508974ab4e351fa997ca455693f7606fe47fd4d7a150ac0d681","ssdeep":"","tlshash":"da219b7136467f07e4a7c24fe30c0305e1115973787ac7fcac2c4aa5ba25402d38947a","size":1130,"data":"","first_seen":"2026-06-11T21:42:13.255595Z","last_seen":"2026-06-15T05:50:01.188592Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/picture-v2-DX1Aygrl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a86ee82b4dfdacf7663f03db3e634ffe","sha1":"e883e86d6716b5884021d87bac71959afaf5c89c","sha256":"1e7236995eec645c576d25af43964648c279bc5f2ffaf99e9029347011e8f0aa","sha512":"220d8999c641edd0d442605cbc4bc693c65d581ba946eceab981d298f70569556dd4de0f005ee443379829f61790f50e0a2b3a3b88cffff861e9ceb21600de0c","ssdeep":"","tlshash":"bb3172355e75c571032740de7a386380beba52bf9a315ca476bc8c7e07f4c59c136650","size":1733,"data":"","first_seen":"2026-06-11T21:42:13.150329Z","last_seen":"2026-06-15T05:50:01.197667Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-cdp-popover-D_ibqq6B.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a23ac03574228c07123df673d334152","sha1":"43509bae5fa888f8f2dc713234375828f7b395a7","sha256":"f07d16c0662492e82eddb1344df4e5bfc36d678ec926467ec9831bcbb27718b9","sha512":"4909857ad39624743f5a5376598ab9d5b8c389234644e7265b9ff7bfa1ae335095f512547049448dd8d90ca1afdde7da01f46b0da6d291d082d491a446fa6e2d","ssdeep":"","tlshash":"f1f09efaec80a130c7ec2ed57378142625b65782b692cac490de46111721841e3bbd0b","size":490,"data":"","first_seen":"2026-06-11T21:42:13.355129Z","last_seen":"2026-06-15T05:50:01.11964Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-feature-flag-items-uiie7Mc9.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d62d673ae67a8648c411d4684bc1ee3a","sha1":"3c7d10143cbc7fbf57fd9336c43ae9223a8c83b1","sha256":"e7d929f9127a6bbfb7cb658cc4e32f8235ea17a81bc6e0e4ae3d17acd42910e6","sha512":"6194c015190a451887cd56ab24763afd2087d4286749b7957bf969d781a71073ea5f14b217ee940ec5197ea37cec8e0f688f2f2fc84cf8902892f7babcbe290d","ssdeep":"","tlshash":"380110ad38c5e038c60248d21930a127b75442e1b119edc4ebae4a7784fb8c7802ef0a","size":729,"data":"","first_seen":"2026-06-11T21:42:13.323549Z","last_seen":"2026-06-15T05:50:01.187469Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2627f5b1be4e272f57aa83c1ed50a82e","sha1":"64ec93f72628371d0a021da0f5e79f7a64c2521f","sha256":"e3d405736f4179af41565cab757dbda70ebc38ae273dd8d3e43ab68f6a4cc809","sha512":"241f4244115e1e1eed7c08f6fa2ffcbfb3c5aa608e7e70ca2a713bb385946b9c3a5b621de003f90498646aee8511332618c7b3942b0bd3027bc8d2b39bc83f01","ssdeep":"","tlshash":"784198327e5698b809de28adc92f3346fcb41a1c8951e0809294fdd13cb9f33857359a","size":2394,"data":"","first_seen":"2026-06-15T05:50:01.378738Z","last_seen":"2026-06-15T05:50:01.378738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/tab-BsuaasQK.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"34e8cf944605db3b8a2ded0b7afefe91","sha1":"0ec53aea1fbcda2602efe449d45d1aeefd729ba3","sha256":"9df52cd8e29291cab2f25a5acf0abb1c7f7ac7ef47b521b99f61272355494bc4","sha512":"f3c985858d7222821df20b347016d3e1e7b431bd3ec54421c9eca97efeff338d21c217f329b71943cf14131875ec1b035ed6eebce86f4b7889d39a436d4ff476","ssdeep":"96:3a7f9QxToILjw9moB2gRw405DlkLF94cF++lduvqyzwO5rObmo8S8X64:Wlsw9jB2gQkLF94cnbuvqyz3WN4","tlshash":"e6f16815741cd5bb5b1f756a1a28d088f10ce27eaca03bbcf16fd57883cf9a68507a42","size":8083,"data":"","first_seen":"2026-06-11T21:42:13.459051Z","last_seen":"2026-06-15T05:50:01.327174Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrows-B7ALf-uX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fad6a279a9ebd20517655920817b7a8","sha1":"9f32fb4757d5702e5a1bc3f0e1965ea1b27651e7","sha256":"6d07340569151d132e576ec3fa770ef53f496ea4a2df48d17bfefbabca1a1fce","sha512":"298520c9098901fb61966a0c10c95151cdd564872becf059ac2b238d1cef2ee3e81288ead5ff01c2eb166706f7ce180fb0b9a316d2037cc8e29af7caca7d198b","ssdeep":"","tlshash":"2d2166076dbb8eb5a85b4002e93662937659027fb76b34e0479e5f3c1b7c6b0400aee4","size":1403,"data":"","first_seen":"2026-06-11T21:42:13.279437Z","last_seen":"2026-06-15T05:50:01.267154Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/accordion-body-DAIOhvvX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ff8600bb5a40feaae92f7d1aa4ca1f0","sha1":"82a8efefbf5570fefc73924073818376d133ff1d","sha256":"02a1e7f56ea3c7de4862cddc30016d1138bf1b20badabdc8dc4af27f973459a5","sha512":"ab0f0872cea312785871886797f08b4a6bd76235b37531e5269c0c67de51be77b637b07a2dfc9549a161f9ad1f48ab3072d77df93460a0fe8c9c5f24daf86fee","ssdeep":"","tlshash":"083197a66bd8d1708a378c26eb257e3d4010d4b5c68d7dcd8117c92d17f8bf30a58b89","size":1821,"data":"","first_seen":"2026-06-11T21:42:13.414201Z","last_seen":"2026-06-15T05:50:01.232027Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Dq50ogmP.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05650b07ce7011f0885ca07d3a90df3f","sha1":"9e8d556cdadea6dcbd18db7560cedd021b6e6db5","sha256":"0fb7d44e2222563fd4647d7ae9aa76632a9f2e3a9454c9008b5da02dca4eb9c6","sha512":"7fdcab2c8229fd26483543b7a5972122de1b1408190bf31b38974f1d1c4cc0be8736bf08db1e91623ea8686a3615b838bab494dda2186f282ce3106ee5285ec4","ssdeep":"96:jKltuinN6bEnNiTACdo/dqR/EuCmXqeHJRyaECbikWuKB3vYm+Denobm+:GlthnKArq/ppRyxq7KB1n5+","tlshash":"dbe1e89bb88a69f543bc4dd9cc3140e255e44b80b192c4ccfa7d4d752983c5480affba","size":6910,"data":"","first_seen":"2026-06-11T21:42:13.395869Z","last_seen":"2026-06-15T05:50:01.175119Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-08-04T01:13:27.600758Z","times_seen":7490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/language-picker-BjkLWfhO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b042295c83d9fd91c00435211709469d","sha1":"a996316c368c1e048d972aba95ebf856f994376d","sha256":"bf4f48ca00b57c37cfed60f8ff1701750fd94a0bab4e36596a34330924ea5f36","sha512":"19844f5e99f36e2576e3f1e3038efd2c9bb5ba2284c093f8ee1a8cbead90cdfd329e543d5c4681205644f8714ec587273bdaba2ceb91d86f1d829eccf7125963","ssdeep":"","tlshash":"9c41e913dc054ab24235cdf2e06be2719577626393c1cbb1d1ef433a4b9a2bec89645b","size":2208,"data":"","first_seen":"2026-06-11T21:42:13.146937Z","last_seen":"2026-06-15T05:50:01.268167Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-categories-all-Bl4d48BQ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd9266e68b55b18d804012ef88edc470","sha1":"774ba5a2f9f97a2b561eeee9bb91dcab61addefe","sha256":"86fb267a3a715a1166d40054bbff1ea0f0aa716b9cc91557e323b3b8cf170dbe","sha512":"18e88bbdf09841a22efcbe294066b1a06e1c2ebf9b6c39ea4be9cdc8214cd889f2053263849d17424949ffff8ef7772d2a8a7f9314c636adf4427416fdb5508c","ssdeep":"","tlshash":"1e41747a950a4227245b99d4d91004aa3a5115c4f26fcfe0d5af8eb4394368fd027b3f","size":1950,"data":"","first_seen":"2026-06-11T21:42:13.339527Z","last_seen":"2026-06-15T05:50:01.23459Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.hotjar.com/modules.c3d712579ef0b1b5af2a.js","fqdn":"script.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.164.240.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dcce081aa57c1e7bfae4e3d859554d6","sha1":"c4eeb7f8383b1e647c92a9eb86fbe9ecc26897eb","sha256":"89a44382f0a0140a16ecc25f0f1cee35fb83f13b21f1d96378bdc0de4a302f13","sha512":"3685c9642b2e050b936e83b33b75275e98dbf55ad93151b7cfeba20cbe3a58b3a37830223799c93c504085c8928acadc77af3e5f50a335c48032f6657184240e","ssdeep":"3072:4RwvwE/wMwkZTi84np0hdFohUaV8YScY/:4Rwvwxku8YMdeuaOlcY/","tlshash":"6534f9ac76c6b0ba13b72079903fb10ab3371459680d8060e229d9d47d7da9f9723f6d","size":233084,"data":"","first_seen":"2026-06-03T18:47:30.551539Z","last_seen":"2026-06-29T07:34:43.439483Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/main-Do5NBxN1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f75ea3dc47b25cb948b823df293c3fd","sha1":"7026dddd25d048a1534c8284703687fbc9f0a518","sha256":"daa1a0d189b02683140d215287a9f8033623b2ad7037d6705441e3cf7db3c5f9","sha512":"05fd5ecfa1fdb2f246df2555db2c9d848ec1348fea7de8430be52974f94768442231ddc9b08ffba3dfacc0f35c58f796b73b6bea61bcf615dc8034b5867b252b","ssdeep":"768:Me3LM2gOskGkZ470XYHAUFOv0rrzMz/kTydl1zBJ5s94RP1p8J4qG3F8r8mbYCIi:3kpjE1zxHgyrWXlrduatOJA","tlshash":"13b31a35602a19a9c1f38c63b0cd1e632c3456517026c127eb2d1ef859ebdab93d5f3a","size":113920,"data":"","first_seen":"2026-06-14T13:48:35.304811Z","last_seen":"2026-06-15T05:50:01.127641Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-oauth-finish-DgCg7dm1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"48cd41fe3ef3e06f4020474eaa4a8797","sha1":"a65ccf5d32d78381ec89c30068d33f3e5f3becb8","sha256":"c828a52a465a46dab65ba3757176928ba63452c9293fbf7e8f8332c1f52a05e3","sha512":"41977f74b928afb878318c1a5d53a5621432f479b71e58a03ac1f8237d82f6078dbdef2258c5fecca9c4e0f8593ec15c95cb05a2dfbe5b1429f93b9493bacba7","ssdeep":"384:lcT3YoljKcNeO2t67FbXr23TGtS9bVCHprRmZI5Q5VMtpULgd:2zYoBKjO2t6mTGtS9xCHpdm25Q5VMtpd","tlshash":"0d820b92a2f316b58ef358c1c6387170d2284a14b41d95e1f9dd8f1f541bd06ea3bf29","size":17951,"data":"","first_seen":"2026-06-11T21:42:13.388539Z","last_seen":"2026-06-15T05:50:01.30363Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-forward-zv5O6ZeJ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0213ad0d1cec89a89b5fdd60fee471c3","sha1":"322c430064c9a9d3904c5b053de4ec4666f0c9b6","sha256":"ff451fe3a5cc5c0c3cf1f69da1bc7bed8593ab809d126ddacb604311b9dbd553","sha512":"1ccb92eaf297584a3acf5d73ae4f5ca57c972a5ebfc70fafd23147fb90a43a980bc5c3cc82d8d0a9e56ddf01b717dd92c07a429c159336cb68996f17c4995471","ssdeep":"","tlshash":"07f05cbc214e62bc011342a4c7ab3d140b09aaf737c984f50a0fd93a46625c4f95b27a","size":441,"data":"","first_seen":"2026-06-11T21:42:13.423891Z","last_seen":"2026-06-15T05:50:01.271569Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"224d814e15420b878f93c58107276228","sha1":"deb9423c99aa5a984f651581551c00f0a05cca5b","sha256":"373ec1cc85ee256740f070428a14b758a08ccec7f405f29ca8e4c41df6d42464","sha512":"5da8fc4b47e2d9bac9d8d8e64f88e48067f4e602ff26604e26488d2880096bfb5c0c4e99c62db227f5a5e9726d27edad249eccc69252e537e17f39017572ad0c","ssdeep":"","tlshash":"8fb09bfcb144695512aa42591669454d55eb05064d595040e44955e0172455d441dd31","size":124,"data":"","first_seen":"2025-10-15T18:39:53.81661Z","last_seen":"2026-08-04T01:13:27.613934Z","times_seen":3457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/notification-D8dId6PX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3c53acb9c7e2ad205040f2ed0a62641","sha1":"76c3bb8a960ab1a7ffb5c3a7f225d0811ef91bda","sha256":"9e3410aff2b9f4092943bae1d0b315a1806414adf87f73c9cdd940ed55e32985","sha512":"c24f2640767a20370ddbcd9b6639090dba9d87e2132d08a763a33e8a6f9a168f837e01d37269949360cd0167e8181ae8516d6c822ed25093a78e4b30df8c5753","ssdeep":"","tlshash":"de01c0c6413077e89eb38a5de73868a1075f80f936554150096fd374c18b564a946a24","size":834,"data":"","first_seen":"2026-06-11T21:42:13.230771Z","last_seen":"2026-06-15T05:50:01.249024Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-token-sale-view-model-CozL5DeI.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d3b9370a86e3159dc70fb702c790989","sha1":"d1dcbd84835c529b6b2b47377df2e2e952295e70","sha256":"e4a3ccfc1f632f6d3b2e4c2fdf7b0bd7a55d8d5abaca68a5c405784426f2e1f3","sha512":"8d2e6c578b9fa09c8579de4cc94871a673266b5885b9e35a0f1e6645dfa4debed6a61fa262b07d58f0bfecaf379aa6f0a2651eda02ae862670e82351a332bcc8","ssdeep":"","tlshash":"7df08bc7a4954be90e13a6eef8445c6253f015b1f250c8d4821f0f3a4f908c3e59f606","size":552,"data":"","first_seen":"2026-06-11T21:42:13.412536Z","last_seen":"2026-06-15T05:50:01.277139Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plus-nFBL9AuA.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3ffc7e7faa1c001f92df3b40c3bf2d1","sha1":"dfa77f6ca49fcbb60493339d3e76299dcb1734cd","sha256":"2e8075371b8b4435374e1a202f2f703a198a5b0f2a6b1b25b773b1fbe6e6322f","sha512":"51fd2c2f62a7440c096fc4efbe55c262a2dd23e257f278716c6e4bb9d5d55a6cec224c03bd132c4f3e94358ace9f7809e99030dece68326f6d2650938752eece","ssdeep":"","tlshash":"e1e0d8fd02481bbc8016c378d73d1c872b1505ef678d81f0964e553a02d70e9a45fab5","size":370,"data":"","first_seen":"2026-06-11T21:42:13.37025Z","last_seen":"2026-06-15T05:50:01.330269Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"224d814e15420b878f93c58107276228","sha1":"deb9423c99aa5a984f651581551c00f0a05cca5b","sha256":"373ec1cc85ee256740f070428a14b758a08ccec7f405f29ca8e4c41df6d42464","sha512":"5da8fc4b47e2d9bac9d8d8e64f88e48067f4e602ff26604e26488d2880096bfb5c0c4e99c62db227f5a5e9726d27edad249eccc69252e537e17f39017572ad0c","ssdeep":"","tlshash":"8fb09bfcb144695512aa42591669454d55eb05064d595040e44955e0172455d441dd31","size":124,"data":"","first_seen":"2025-10-15T18:39:53.81661Z","last_seen":"2026-08-04T01:13:27.613934Z","times_seen":3457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/hint-BiQ90py9.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f91e353b44bbd9caeec216c178de08b","sha1":"83e9fe34ab5e894c1220daef3314c7efcce671d9","sha256":"a0aef50af425ef4fb1b747e11e3719b8f971c93a70fdb17f5b9c231db22423d6","sha512":"2dcc7a6de3dd9a6040a2943dd4e8840dc5750af240d820836341487a120a0a1ee2e6db3ba48558b294391b4c2ee97efc72e89cc39f8912123c21307edacb0cfe","ssdeep":"","tlshash":"8d416344fbb594b595f30d49bf1f6068d064f5b5025b55ecc26fc84887ebd62d2c1b02","size":1951,"data":"","first_seen":"2026-06-11T21:42:13.341116Z","last_seen":"2026-06-15T05:50:01.100825Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/component3-composition-Cx3jgoEb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1668d526d07afbf8e49b7f6115189006","sha1":"e280ef30f656fdcb57aa50af39f06c34ee37b5f1","sha256":"78d87a4b28e04e455082af20db20c8fde81075126553947a77f5b74710e6cd8a","sha512":"6076e3cfbdb0129374ef0840e97291d9aa1ad68677121a5bf02d11535d8f89e3145a7e8e33add5e42db25cfad44e906575e832f19611221a737524dc7c6c09f3","ssdeep":"768:3cmUMGfv70yYqsLw/qt8RkS49TDA62WnzMidTMfdoEWQhyFQBUmrxeroCrwDUT33:1ZDUzg+SNQBUfOLQSOReY1","tlshash":"7b53b5d033f6a46683e8d8d44cb102a3e3327b843445869df47da6df293ed4261bab75","size":62223,"data":"","first_seen":"2026-04-24T05:21:35.09444Z","last_seen":"2026-08-04T01:13:27.495032Z","times_seen":611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/footer-partners-link-BxoJ12XF.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"346aad25757c43a55a2b31e9aa358835","sha1":"b32ceec0638f9941f13aabb8f51ac05ed8decf2e","sha256":"a5ad876bb04002cbffddd4fb78eaf50ba59b0616ecb05e104fd0adb7fbddaa26","sha512":"a39d797a0f328740d4009dfea4153e22b1f2ba09db80c2fbc9cb0c7bdd26d41447cf809ce548b8e3d2a3aec445e5f22b44bf7deac0b515c3928f3490921bfd4a","ssdeep":"384:yIM8aKIwdQR+oyKdmixcwhuYm7xkCuSrTDj:yIMQIwdQUoBdmiSZPxkrKTDj","tlshash":"ba52c671fe60a97cf6378c09f61e1818d00cc52ade4beaeae16d672c07c7bb25185b01","size":14363,"data":"","first_seen":"2026-06-11T21:42:13.217039Z","last_seen":"2026-06-15T05:50:01.315715Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/email-ziCO0z55.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0613cbd66227c173aebd7c6d5cd8bd80","sha1":"e821bbffe5688766b544942c6ba7c583cf9832f1","sha256":"0b4396297aaf2e0783fdd424bfe084e314cbaa58389c25209fb68cf47dbbd46e","sha512":"7ce670e3e0db7e767cf686e160f1ee3a27437b709734d3a8bf403009774624cef3bc599bd1c0e887b88d0973111f8f175d2b16fda9306b08bb15de2196d8a63c","ssdeep":"","tlshash":"0d1120e411346cfe06aa8b7cc72c29d2430f08fc3b1d4189a62ff67a88505b0e906e39","size":1067,"data":"","first_seen":"2026-06-11T21:42:13.1548Z","last_seen":"2026-06-15T05:50:01.212362Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plug-CAl_c9_W.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee13127b480dbf405c9d11a2ad41d864","sha1":"01a8a208d1605c2c520ba4328c4fff4b4274e6ca","sha256":"73cdf9445e25b344cdccc3c324b7e09e03b65a5b8bc1ad1d1121a24c0b11dd19","sha512":"0ad45c1e3ed20027c36bc5536b3d4c67a4cbcb7e84c5d18546f40fc76bf704cb407c771346f4d46362d88a084f0ea830830da34a1a1161d91b5d286b9f4a6f48","ssdeep":"","tlshash":"79e0f19202cc37fd4a06c380c63cf892472951e9378f45a8460d133e458f071ee9f358","size":392,"data":"","first_seen":"2026-06-11T21:42:13.241854Z","last_seen":"2026-06-15T05:50:01.194622Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/dice-BBTPZI_q.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f3b9c4b8a126992cad1c8396cb5950","sha1":"042fc286be8420d414a22e317e2195430dc970be","sha256":"8f291c956e3e3c5e733ad5e6b28ccc9b9437984dd51a1b3f21a7ee10c35cd22b","sha512":"56d53bae5c930a04856ce2495f60d34f880c766496bdf6aafa1fc33c6687fba6cfb18dd267c09974b6e8d35a92f1c39e1f2df6967d0bace6da149503d98efd2f","ssdeep":"","tlshash":"491104eb6e4595bccaab4ef9ce3a36000f97926a325d0059e7dd2577008b950c583c54","size":941,"data":"","first_seen":"2026-06-11T21:42:13.176386Z","last_seen":"2026-06-15T05:50:01.338748Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DLnNEn6D.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"746392d2604256d13b52537bfdc49300","sha1":"c7bd63bf8a3d8cc40000fcef5c7eb65d9aec72a6","sha256":"2915cb3307af438cd7ed78dd7c8215dd78b345160d9081f7347bae6a8867855a","sha512":"817fd5f74511d5061c5ad79121547164cab78284b348a8d43ef7eb5c6d28359ec076018e02c0e79246e6bacbbfeb6d51192a9c08f14466e9405c9d7ec2b4a323","ssdeep":"384:/jxPi8SL7PgQj5VlLbTb0uNHI8UAQSlX8RQb4PIwHqn8TiWG9pz3i0gWZL0:/N+fPjj5zTb0uNHIjAQSlXj4AwHCWMzo","tlshash":"05b229a4b110ac38c6b70a0cad1a4545e6e01fadcd41fcf4b57e493507caef0c29aa9f","size":24344,"data":"","first_seen":"2026-06-11T21:42:13.456266Z","last_seen":"2026-06-15T05:50:01.338286Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fc5548165afb3d4ce3a49412a44ff925","sha1":"ed38e6b5bf1416c8b1899b99cdd9eafe3af7c9c6","sha256":"7091a3b990495c11e2ba9809f170a4b92d026a3a6179f56aebe55f442eb82bd6","sha512":"1fb7777b89a4acfe8be5303905730d950bd99c3edfcac92ac634c329601309e6ced010abb55fbc42d69e2c124862ad2e8ae185152d642685fb7e2b8b086ed258","ssdeep":"","tlshash":"e2900298f483319c410d215c2076d015157d558199088d00a37104955438109a569b54","size":48,"data":"","first_seen":"2025-06-23T00:10:28.622802Z","last_seen":"2026-08-04T01:13:27.601658Z","times_seen":3384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-top-C66XZPs3.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"27d2b4a23c8003fdb4df22b12f8dfff5","sha1":"97c79a2508d9374e2e4d7600d083db6977707998","sha256":"456c1e08df78bcff27ce5f72d7428cce45a4c5f96a10752f526b0212596c78cd","sha512":"a8fdb05b35be0e6f5652558621f6887e8b979ae1520551b086d8f3d1d83ddc398e995bc9d5e09e14e6065e8edd4951812d31b89b862424ea765ff7aa1995d140","ssdeep":"","tlshash":"39e02bb8016896f844274678c22d0c85470d6fba278944e05a1e693a86921e4bc4f639","size":393,"data":"","first_seen":"2026-06-11T21:42:13.247946Z","last_seen":"2026-06-15T05:50:01.10477Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/closable-tooltip-header-BXEDmgHj.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1130ca27a5e6ac7419796c1a02cd9bc2","sha1":"2e1e74e72ea6954a31d204ac7854b87b6dc00b05","sha256":"fdea9e8a3fd702c6eba912e8952f1f52fe53fcb734497416992ee4c1452ab083","sha512":"850318db70c28f2ea35545103632f4581a8c7c46cc94a05b9c8a948762af7e27449192a1cbb7efddf571feb62bf0843cde6111c589839934905134f80edc441f","ssdeep":"","tlshash":"4b31655ad632c778e4339427262cf709a08c54bb0f756ef89129047c17eeeb14209b40","size":1718,"data":"","first_seen":"2026-06-11T21:42:13.215372Z","last_seen":"2026-06-15T05:50:01.147578Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-games-by-category-XrbZSTkk.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ed575ccae5dff9a1d9f737c567fb962","sha1":"b59c342cf46b3a6b72de601513a806596f203bc4","sha256":"8614a1cf576e9fb9e4e280cbc79d5e8fc920cd1f9576c1fb4abdd57b51b29ba0","sha512":"c2818863508a6b9314615a52da0252246496b521da63ead16b2e20cfb8ff5f45f6f0cfe28f6b0f5c301dfe231c9585c7d45adf448200dc9d18428568a697ae5b","ssdeep":"","tlshash":"1f3133ae499a63bb84999cddd46010b54530454c22ab8fd0959faf9602476cec05fe1a","size":1536,"data":"","first_seen":"2026-06-11T21:42:13.363554Z","last_seen":"2026-06-15T05:50:01.300488Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"28e0c6d6063a99772e7aacdefd2b744f","sha1":"0083c223a06dcb1eddb67e3200915bb2a5e40b7f","sha256":"edfa3e76e8b69df99d552e25189eba14dc8b37b08e6252dc16c905f840129c34","sha512":"efdf4a55388176710965e0acc9e8f3cad5c08ec7f7ce275c57ea4dec77132acb861e50778941073b148812a247b9a180d6af845be4eb1dac5d6684fcf7cb6369","ssdeep":"","tlshash":"31d023d475e2b0f89da2009dc5bf370f38997300074cc4547122cb09741c47b9a15a9c","size":227,"data":"","first_seen":"2026-06-15T05:50:01.354956Z","last_seen":"2026-06-15T05:50:01.354956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/mf/shared/vue/3.5.26-p2/vue.esm-browser.prod.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"361c6d150061d19160c841e2e79179ae","sha1":"9ae95d11a78aa50b2451a93af249addf00fb758d","sha256":"4f54d5bbd4851282c0acf2ca284a7a82c8ff7927261e5e5391479bc462ba95d9","sha512":"7bc144dd799da22d689d47013c6c56472d45f57e43941dd6e53980b33f37c202af41210c7a78482d3513b09609dca49fd79f08ad399898e878e4fa2a583f48a4","ssdeep":"3072:C68kAooM+MIYh6PvuE+fLjLITxWyZKbs613A2x7dQFU:C68k6M+MeeE+fbYWiKrRZ9","tlshash":"e3f328fa3352b13393ed51a640bb4002f3aa64692c0d046cf674a9df366494961fffb6","size":166282,"data":"","first_seen":"2026-01-03T11:28:52.135254Z","last_seen":"2026-06-15T05:50:01.332076Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DUkFwHbL.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2386570ab8ac82075cf8e84c7e137788","sha1":"2b3981768d2eb7160649271d657feb420e1831f5","sha256":"8335ceeda008a79a6d1eda0ed261e2305b2a0c982974b09468a81e511b3b177a","sha512":"9fe3b8fcdf8e1fb0c1359383db828cec844a3e7deb5bb1e2f54625d618c8239436106bd55deceb7c302ad795d732a757baa6cdfebb84888ad1e3446064043919","ssdeep":"192:AAOF6PnSQBd5iF8XbJPQv6FqejGFaJgYVHHdH2HLnWOKJJPQLJMye9yckgWVOZ3/:cyBiF8546FqejGFaJgYVHHdH2HLnWLJ5","tlshash":"ef12d8b2e89d65b8017b4c809c9d05c572bd4f40a00ce5c8fa3daf7da482e54497bfba","size":9654,"data":"","first_seen":"2026-06-11T21:42:13.434903Z","last_seen":"2026-06-15T05:50:01.313311Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/scroll-top-CzXxLC_p.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ebd7aa4c54f715ad4e2eb61ecdfa601","sha1":"d5b4c598231f82ff44738cd9dc7e1d240ed1c88a","sha256":"1479a2ab46c1ca146879d61a248e7324e28abff1bd871508bdf6be048769057c","sha512":"e728d7edca45515aa4fdaaddef50050cd455ace02146c3055bc2f004ad9b2406362c92df9d99c24cec50926ce9ca9504e082625e9bec8a0583241190d34f5669","ssdeep":"","tlshash":"70f052fd12092bbd403e8b34c3290c925b2889fbbb8a50e0174e253b06c24fce54b5a4","size":494,"data":"","first_seen":"2026-06-11T21:42:13.2128Z","last_seen":"2026-06-15T05:50:01.329044Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Cen4jr3v.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d2e09b7df74ca46e4a2546577e54562","sha1":"f4e0d874973a6c81efdbc40b11c10939edf0faed","sha256":"82e1c01d499b157ba4f2c70de783cb7f174e0b8c504d75470193fbaa275efe6d","sha512":"9ef818d4b42d42e3e14fb3cf1eca7923d164dfebf6e4e7b5d189ac718001c02ecead6ee88840263eeb96286f44edccfe0f6d873e8e776125d69bea687618aa4e","ssdeep":"1536:oQ9IemSVEvlWlgYcHe4r629i8/csE85cgx++sf9t3tGdqlHG0ancRbMSYNozN7zW:oRLJds9tPlG0ecRw1","tlshash":"fe043a50bf106a7ce733640ce75e0028a01cbfa8d60698d9b57f557b07cbef19262b5a","size":181010,"data":"","first_seen":"2026-06-11T21:42:13.21142Z","last_seen":"2026-06-15T05:50:01.191074Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-08-05T09:11:22.036319Z","times_seen":13524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e225e788a5a94e440538950d234394","sha1":"a9d485746dfa67ad6e6ecf25260d59a7102041af","sha256":"8e2e9679862cd4e113f86f4ce63cdd0e41918e37f15af52c202ffa9e51be3ea6","sha512":"f1267b09a109b18b4f85f0fbcad59fca1a6a0ccd47d3f6a33d5734e6cd97ce0f93aa1105d41e2ca4139662c97b2e1a256193f380693ff9be263d7f795fc7b333","ssdeep":"","tlshash":"07f05485f858c1889537017ad37bcba8559000072d801a234452c4e53c3dfcf46838ec","size":483,"data":"","first_seen":"2025-08-30T00:25:12.164782Z","last_seen":"2026-08-04T01:13:27.600196Z","times_seen":2956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab38e7bf096420e7fe4446db76acd33","sha1":"fe3c1827dcfd82c741627fb60d80c618c824fdff","sha256":"a8111ad67e1795abfa7682dccf402815cebba74d4d2a228ddcca31f59a0e1523","sha512":"d03b274fb748fb19e2e287d409a3458deeb55cd73843613724f1d875ee39edd9e33d4a467efc3318ddd473a240043fe273d128a1bfc7190e6246954d51f5ccf8","ssdeep":"","tlshash":"acf0021664281d36c258436cc1667f135a7c5a37de819e00bacf630816f777e248046f","size":639,"data":"","first_seen":"2026-06-15T05:50:01.341576Z","last_seen":"2026-06-15T05:50:01.341576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa855718f48ea0c3761bd6040c0f2c4","sha1":"0eaead5422dff128c953c21252275494cbb7c9bc","sha256":"9632bf9a9bb1aae46bae8118b14e3627ec79629f9aa9003ae401eec31e92393e","sha512":"7b86a7c5b9316aaa5cb2afa1c191172218459b3b7be237ecbe6d5fa599f822f8f13f5d0db58a0c79455fd2ce8059c181b364d5fca96a1e18b8c814eb5f37ad08","ssdeep":"","tlshash":"1021d0694cf971aa0d5a3039712faa513cb184530d25ed8134cc9f645f24f9589bcfc8","size":1156,"data":"","first_seen":"2026-05-25T14:47:03.700401Z","last_seen":"2026-07-21T12:29:02.05535Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d8a68319b8f575697e94ae019147c4","sha1":"9f873d465d3024abe4a0a0067fc889051eafd91e","sha256":"f74d69b1414e7b5e1551923d6a8a2330b23c42fb480f096a412e467550f2af5c","sha512":"27116bb723bf6b68ab171c10eaa420f17750654af27eb70ec8f46fdf24425cf3f9e133bff2228173d4c50dd4872aece2209872bda88391d467c5559c12399631","ssdeep":"","tlshash":"b5c08cacd8b0a3e53ab8808eb25e8bc23c20a115214160998a6e29b43618debc09094a","size":151,"data":"","first_seen":"2026-05-25T14:47:03.701702Z","last_seen":"2026-08-03T23:19:56.969455Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0c1eac42240e473f6a770910eb1357","sha1":"88424a7c6672b5d401a4ba5b746792e0953b6931","sha256":"b6c25db10f340811d61cd0de750dbef6c201ab6562ddd6acc8cc8294d8df0b05","sha512":"f47642ff5d9a8ac492f5de4f466f85ee51334828fd5fe9e5d50ed7b7fb7bb7743b0acac3f1ce695f486c28a04de9aa2125533165f91cd2cda8bbf29de86ed551","ssdeep":"","tlshash":"4021211700b748440b39362cd79f5810eb22217b2f199c82bbee43082f8fe4f4a68b5d","size":1291,"data":"","first_seen":"2026-05-25T14:47:03.703087Z","last_seen":"2026-07-03T05:45:29.465776Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8da9eb45b791ed86d51325916da028","sha1":"37a743205f3c3c36d06a44eb4acc48f50e5b5db1","sha256":"7b6c9784ae1906ede4d1cb86850bfcac59fc3ce7d62bd5c63f4adea88f623d7b","sha512":"c183cf18263f2634ec6d98de7eb7743af974ffce679e3feadd0c7dcabdcaad990b8f9e37e6fd226b2902556043e029f3fe882940ace01a3a2984e819603eaeba","ssdeep":"","tlshash":"38c08cf3a8e904e78832c0044a7e2215376141130dda61a8bc50906c1fadb3fa0f16d8","size":160,"data":"","first_seen":"2026-06-14T18:06:21.466252Z","last_seen":"2026-06-15T05:50:01.345412Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"66190c9cd340797f8aeb346da5fbabd7","sha1":"9b5a0702435abd812c2df01625345fdd482c5629","sha256":"f212125ddb303fe9f51cc8014f946d65d28a34d12132afe94ea45cd1ce70b5bb","sha512":"aeddac5f24afb986b9650d8d8e63253726ff75c6283d51ab98629fd20ed8a3674d59bdf381b4812106f7daf99ecae83c67393e51ecb05bc3e7e3ca3bb7141bf6","ssdeep":"","tlshash":"48e0225a35c6b4298b83e4dd04f0d4a7527fcac08df051a9b4010c8924b950a7af368e","size":412,"data":"","first_seen":"2026-05-25T14:47:03.705904Z","last_seen":"2026-08-03T23:19:56.97113Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2f16e6b7b71c88196d244f03433de","sha1":"28fc15e4dd7bc70e31c9660b436236963a251a83","sha256":"5232e1d71a33a9ea9670f218f7006a7b0bf4bdfef7cc05a6875c84b6df95e92f","sha512":"8e16ac3d5930595a600762b405a5d6d37d3fe17a39db5628f086c4fb8ba5e5296aa3f8e30cea1ade7ad0a57b25e4159a40879199bc7c03b64f5aeb496beb132d","ssdeep":"1536:MitbTn4vSdo5i+7RB8J1tNqJ7/VS3Yr1NrT3W:Mit/aSdog+7RBotNqR9SIfW","tlshash":"6b434adcb147b0b843b758f9907f5102b23e6d65b45c8442e426d98938b9e1e8237fbe","size":58876,"data":"","first_seen":"2026-06-03T19:40:00.535829Z","last_seen":"2026-06-15T05:50:01.347459Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f391d89452496bdfffb1164db67667a","sha1":"c7cd054df917e82704242fb71a513a2fd4854c67","sha256":"082d86e936fd8d8a16a72f71ef448b20fc3ec8e440309be50a6854a74ea50efc","sha512":"c8b0666a5805aa05eb6c32602859b3d16a70344ffe54e7904f84ecc47a85b44df1fd48b2c6308ce67ef602fd0b0eb838bd26eb7b919e5567802178b1f126ad8a","ssdeep":"","tlshash":"91f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873062157c490bbd","size":586,"data":"","first_seen":"2026-05-25T14:47:03.709028Z","last_seen":"2026-08-03T23:19:56.972193Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a124456b69424c63f407b977fe5a87df","sha1":"a98fdc4ce5153c10bdee44d71a06c2d4485c96d6","sha256":"1b66da332d025f10477dd7e084c3aca6d37fbc15cde366b7329160a9483e26c1","sha512":"07e0d1806fee74fa8365a78af1cd348a7167ef16bd8a77dc817f777721c1b36217f23828da99a831b6783d579cb916c0098c69d7946e3958b266e4ec3fec287f","ssdeep":"","tlshash":"3d4120e973e2b165cb66235ec03fa212f7b96c401008e450e65ca846b4960d786e2bdd","size":2150,"data":"","first_seen":"2026-05-25T14:47:03.710314Z","last_seen":"2026-06-15T05:50:01.348629Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d65192ae631bb04fb60be3ccbb767f2","sha1":"9a37b54af9dd3cab59c659b6b2cee1243cb7d5c7","sha256":"b5a9f37ca64884ccc4fc3782559bfead1ceb20f267e34ab78ec6ff07f8eae6eb","sha512":"631a56bc5fdb93a123a36171ae26affd8c1e9b715ecc72c4559ad2ee096f8c6b8262f63b8694923f03ed39d0e778707a1188c3099f43b36a0afbfc92902d92e2","ssdeep":"384:AXSn7tPU64gAST9oH/ZAI91nnSWJskerK83scpFX6E+U/g9m:mCtc64gAS9oH/NnnSWJskerK83sSX6EL","tlshash":"7072c7d97352943053ee926ef43f1202b3ba9895688d812cf2b84cd539a49039376ffd","size":17260,"data":"","first_seen":"2026-06-14T18:06:21.477245Z","last_seen":"2026-06-15T05:50:01.349381Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad163bf91a43dd704fe8f46d9e9ee21e","sha1":"7795776ae5f5c0c39dec6430e4275dfdf12af24d","sha256":"3597cdf15da185fe3aa5fd9d6665be5b42814b227f9b9bccb12346ae6bc24ea1","sha512":"b87b0f4d6aabc2138b4f7cbb39b5a07441d99b20ac7c5dd19f9351142055f9ddcb8eb5b4c257c31729f8a8bcdd0d4f71131d8ecfd411ae9cb7eeeedccf98249b","ssdeep":"","tlshash":"a2b0928cc8aab02a1ab0a4f98c078a50566e524481492096afe20710049382892ba846","size":108,"data":"","first_seen":"2026-05-25T14:47:03.712971Z","last_seen":"2026-06-29T13:42:56.801803Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e903dc1b6046e50f2bf085fa467e51b","sha1":"55944255d0d09ea5040d49b53ae251a98112d51f","sha256":"a8892f379aaea01010712d6ba3f9136b9fce53abaac1432599c2919d9a0b58b0","sha512":"2739d27dcbf71d1f86be47d7474c9755d93400c524d648c697940311ab134c9f5afeaa7b4ce4402fed88f82feaedf17e21cef351214edf274f21cf8f1a63b5c4","ssdeep":"192:MDqqHeT6ERfj7du3pmVmNtcktwyJxF6jnslslWHUyBe51wgQcWaa9jf:M2qHeT6mjhMpJNtcmaWHUy4Xw7cGf","tlshash":"ce32099c7369a44563d951dcb82b1112f73e5822284e9468f0ba9d12b06ef4d43b3ffb","size":11683,"data":"","first_seen":"2026-06-03T19:40:00.539595Z","last_seen":"2026-06-15T05:50:01.350575Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16df6fab8e2b62e529afe02f680923","sha1":"db2b5c5dae01a7e092ae7111868de2377b21e017","sha256":"603a3ee8d77551eedb1262eac1d8212cc27b51b881c65afdd685e6f1ca706bff","sha512":"6942efff73d3200e33c3441f5fcc41b92e225e42b58da5892dd4340777c784c7b3bcccfa2c88c4aa41c16a8747dbabe7c6e7e72f6020ea9a84655859c09e412b","ssdeep":"","tlshash":"4f01c22411009479126187bf7efb19d835e1528b70d2c0a70c5d495e76f279f5a6287f","size":808,"data":"","first_seen":"2025-11-24T16:24:15.746056Z","last_seen":"2026-08-03T23:19:56.975678Z","times_seen":3315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c08661991d828a6c56807242a813bd7","sha1":"fde18cf214587dc0b523478c46683ded868db62a","sha256":"659a90a00f601c513cf7636a1c011a4b2e8e283aacad38328c3100601d633976","sha512":"57fe45038a3607a3147cf25b8b3f166f1536bfbe46e847eaca2b171850695a85baeeaf8dff473d9f4d447036fa784e6f81d5d5fc234c6485949f6c1789dbac05","ssdeep":"","tlshash":"73f09efa5714b089963470c8d34bbfc6a22427008c4890597cbf4d25300b04bf0a65eb","size":479,"data":"","first_seen":"2026-05-25T14:47:03.716648Z","last_seen":"2026-08-03T23:19:56.976129Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2a4f971dadbd12d327f0423580755b","sha1":"979b3798d9b285b1dae4caf890bdb4075d959efe","sha256":"7bf7bd1921dd7e307a50dea8337d6a21bfd4b80f759b8ae45c98ea671f2f6a64","sha512":"2fb82d69dd7d54b86bbc425ca99bdb8889038da7f21999819275073326867280333c3ca049d64a7ca81c6580140b7513d311810f622f103bf95509c424df2ec4","ssdeep":"","tlshash":"900147294faa8064603320ab0b2bf3843522c06b714cf6047e8cc677bf84d1b89325a5","size":776,"data":"","first_seen":"2026-05-25T14:47:03.717927Z","last_seen":"2026-08-03T23:19:56.976762Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f355c840cc4a32c148041dd45ae9b8","sha1":"c12fa2350e51bbf1f75919035337759d185512fa","sha256":"ee7ed6079c0720c74b7229af116c1a7bf6d615d06bff6a9bad495814482e2f64","sha512":"3de2d76748c38e193c5082c735401bf48b2e92ba1e65e4f2a772eb0575b049ba6c0caa241a7b1bf346658f35bb6ef628d697e6bbf87f4055de392a8dbf1be2b9","ssdeep":"","tlshash":"141100b53a2a5534d9c5408b317ee7e93e3220617a02e144c2accc289d68e8314efcbe","size":902,"data":"","first_seen":"2026-06-15T05:50:01.352745Z","last_seen":"2026-06-15T05:50:01.352745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/badge-deprecated-DSgKfIFW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a16c10826640275e97941d6c53b06cae","sha1":"055335cc12c5386768618132ee227862c62cc906","sha256":"ba872e426408cb1a5c960b6ec40849b9d43cca563787406f639dda13deae7960","sha512":"db41464d6238258ca03bf17673e89f5795fab2040e1922951050c23d4723c94ad2dd63c48d7b37e246036fdbe0e8217a92db59a252d492f8a34fb33fb75a9239","ssdeep":"","tlshash":"5f81ae77f19b96a1bf1346bbb90ee075d04854f88b291ff6f299421a17cdefd018a900","size":3887,"data":"","first_seen":"2026-06-11T21:42:13.390506Z","last_seen":"2026-06-15T05:50:01.326649Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-D9aAYxgf.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d4e4295685d5276217047339f6c88eb","sha1":"9d96bb9ece138fe798ad64eb237d8babe03a4b3b","sha256":"dc952a5b388135bc1d9b82dca2a7c03d6ad480b4c59da333f0a9ffc0b35308e5","sha512":"028437dd104c834bea116689800aa9efdd1faaff10ba521ce9e8398e08dbcb22b02f98abc414a060a21a7ea299c55baab517d22245e2db088fac593d388d2df3","ssdeep":"","tlshash":"6c3102528d4e5cfe106c0cf8fc193152169c078ab554e98efc7c0d7922929d6911bf7a","size":1471,"data":"","first_seen":"2026-06-11T21:42:13.401857Z","last_seen":"2026-06-15T05:50:01.120172Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-D8_bzOYg.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"349fbf277b16d6241dd3631175c4a680","sha1":"25a35fe624c322a6e5047a29e540daecc332bb42","sha256":"4dfe1a1e8d9176e5806b0fc96660b1a5953bab7bb81b3ddffdd03adcc8ad992b","sha512":"8c6f6f08fe9ccb8f90c81213ce386e670be1f501a5b3746b1269fed67d1ae28f81e4ac879495904f0bf20e936fad06a6eb830d82b0b02c802888e4ae5e22f27a","ssdeep":"","tlshash":"dc51b6156e02c0bd8aa78842ab5ce84096c93363c667a4f326ee4c2d83f0d64ce6706d","size":3005,"data":"","first_seen":"2026-06-11T21:42:13.400993Z","last_seen":"2026-06-15T05:50:01.232564Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/fp.esm-pVy3szrW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"71953447188f4dfa12faa9233dabfd76","sha1":"5c6370cc2f22aa06a742313e0e35fb2d81ece91f","sha256":"bc511b73f8ac0b7bc810969c252e6734388fb2c858d10b7a9c4a1bfdac401a57","sha512":"7f899d2595101d7db2e1f298562753018ac36cc94fdd8a6549d0a76d92ff3e43969535d2c00d5fe46221e452b46500775731813490506907bbce23f7e4cbe0c5","ssdeep":"768:4VhwsRQNFEOwc1CB/yBi+7RB6hJg4tNqJWDT5Gi:4Dc5i+7RB8J1tNqJWDv","tlshash":"870308dc7287b0788377547944bf9107b23a3c61641d8902d467d9893cbae6e823bfb9","size":37714,"data":"","first_seen":"2026-06-11T21:42:13.447574Z","last_seen":"2026-06-15T05:50:01.136545Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CSC7xuQf.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd63942c24c7c8e6b433c0688d6edda","sha1":"0a1f426e98edf11663839704aaa215985a5a3ab6","sha256":"d2105e511960b781a8c7d61284685535f70047f408ec0c3597445ece98a52c76","sha512":"49bded63a38b28c4005e59930841b50613b41f09b00daf9322abeb374d5a11a5426f3edecab1051fa8f8f1abac704047e51f92aa4b1f601d40dd7f540d2bdf52","ssdeep":"","tlshash":"d351a55ba8e94ebd41299dc5a9512463c7b403c5fa00e4f4f37d4d3c7a8a0dd811ef69","size":2959,"data":"","first_seen":"2026-06-11T21:42:13.258161Z","last_seen":"2026-06-15T05:50:01.23514Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"Saved partner infopartner_keyfgux","filename":"https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infovisit_domain1win.ng","filename":"https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infosub_idssub1=clk_6vnmoh3gi9pt6l7z","filename":"https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infosession_partner_keyfgux","filename":"https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infosession_visit_domain1win.ng","filename":"https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infosession_sub_idssub1=clk_6vnmoh3gi9pt6l7z","filename":"https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","line_number":0,"column_number":0},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher16.process8//obj257 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[client_event_time:map[configurable:true enumerable:true value:2026-06-15T05:49:18.743 writable:true] client_event_time_utc:map[configurable:true enumerable:true value:2026-06-15T05:49:18.743 writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] country:map[configurable:true enumerable:true value:Norway writable:true] custom_url:map[configurable:true enumerable:true value:https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z writable:true] device_type:map[configurable:true enumerable:true value:desktop writable:true] event:map[configurable:true enumerable:true value:send_pageview_events writable:true] eventCat:map[configurable:true enumerable:true value:page writable:true] eventName:map[configurable:true enumerable:true value:view writable:true] hash:map[configurable:true enumerable:true value:fgux writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"\u003c---------\u003e","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infopartner_keyfgux","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infovisit_domain1win.ng","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infoclick_id2ae85b33-e9d8-45b1-b961-400396fd1e54","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infovisitor-id5907b00d-7c25-4904-97fc-ffd9223291d0","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infosub_idssub1=clk_6vnmoh3gi9pt6l7z","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"info","text":"Saved partner infoshould_restore_hashtrue","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"debug","text":"[boot] successmap[actor:server1.conn0.watcher16.process8//obj258 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[index 2440 booted] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher16.process8//obj306 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[client_event_time:map[configurable:true enumerable:true value:2026-06-15T05:49:19.471 writable:true] client_event_time_utc:map[configurable:true enumerable:true value:2026-06-15T05:49:19.471 writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] country:map[configurable:true enumerable:true value:Norway writable:true] custom_url:map[configurable:true enumerable:true value:https://1win.ng/betting/?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z writable:true] device_type:map[configurable:true enumerable:true value:desktop writable:true] event:map[configurable:true enumerable:true value:send_pageview_events writable:true] eventCat:map[configurable:true enumerable:true value:page writable:true] eventName:map[configurable:true enumerable:true value:view writable:true] hash:map[configurable:true enumerable:true value:fgux writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher16.process8//obj326 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[event:map[configurable:true enumerable:true value:send_fortune_widget_events writable:true] eventCat:map[configurable:true enumerable:true value:fortune_widget writable:true] eventName:map[configurable:true enumerable:true value:view writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj334 class:Object extensible:true frozen:false isError:false ownPropertyLength:16 preview:map[kind:Object ownProperties:map[build_version:map[configurable:true enumerable:true value:0.3576.0 writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] domain:map[configurable:true enumerable:true value:1win.ng writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] gtm_container_id:map[configurable:true enumerable:true value:GTM-KGKQDC7 writable:true] gtm_container_version:map[configurable:true enumerable:true value:263 writable:true] page_path:map[configurable:true enumerable:true value:/betting writable:true] page_url:map[configurable:true enumerable:true value:https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:16] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher16.process8//obj363 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[banner_name:map[configurable:true enumerable:true value:appbanner writable:true] event:map[configurable:true enumerable:true value:send_burger_menu_events writable:true] eventCat:map[configurable:true enumerable:true value:burger_menu writable:true] eventName:map[configurable:true enumerable:true value:banner_view writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj371 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[banner_name:map[configurable:true enumerable:true value:appbanner writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] domain:map[configurable:true enumerable:true value:1win.ng writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] gtm_container_id:map[configurable:true enumerable:true value:GTM-KGKQDC7 writable:true] gtm_container_version:map[configurable:true enumerable:true value:263 writable:true] page_path:map[configurable:true enumerable:true value:/betting writable:true] page_url:map[configurable:true enumerable:true value:https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher16.process8//obj372 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[banner_name:map[configurable:true enumerable:true value:freemoney writable:true] event:map[configurable:true enumerable:true value:send_burger_menu_events writable:true] eventCat:map[configurable:true enumerable:true value:burger_menu writable:true] eventName:map[configurable:true enumerable:true value:banner_view writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj380 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[banner_name:map[configurable:true enumerable:true value:freemoney writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] domain:map[configurable:true enumerable:true value:1win.ng writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] gtm_container_id:map[configurable:true enumerable:true value:GTM-KGKQDC7 writable:true] gtm_container_version:map[configurable:true enumerable:true value:263 writable:true] page_path:map[configurable:true enumerable:true value:/betting writable:true] page_url:map[configurable:true enumerable:true value:https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 30 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 2 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 30 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 2 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 30 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 2 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 30 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 2 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 30 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource. (api2.amplitude.com)","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 2 events\"}","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://libs.smrtwheel.com/s7.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/switch-CIz6NCCH.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.288Z","timestamp":1781502558288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/switch-CIz6NCCH.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"de897f50ae11206bda82aa8e8e21d1ea\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a428deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4624,"size_decoded":2120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3320)","md5":"de897f50ae11206bda82aa8e8e21d1ea","sha1":"75b7a81b4d38ceecd054cd24596ae432763129dc","sha256":"9ca8c386c36beddc6efa75fa543ef2ab8337b56b83a4a37de7388eb66aa89c66","sha512":"0e5f35a70d8c34ae0c4894dbeb6b87ba52badb89d1795512765d2ee12d841449204d3c479672c7578693331b0b1bbc94dfa1a0d524ec9936b94694b2e9c33fb8","ssdeep":"96:yZr3ZAdL9u9vVvioT9Scfvb2xiGA6//h8Z:yh3ZELEl9Scfvb2xe6Hha","tlshash":"c59174b77215c2b5ea222235638fd88cd85452760c1d5eb4f4dec035cfe69f66e26e10","first_seen":"2026-06-11T21:42:13.144893Z","last_seen":"2026-06-15T05:50:01.098538Z","times_seen":73,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/crypto-token.sidebar-dynamic-section/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.878Z","timestamp":1781502559878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/crypto-token.sidebar-dynamic-section/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-deb5b7a3b722579275270cd9e36d50b0-fc7625357cda1c27-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 04:26:42 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"baae4309d098ba50e99ad8ed46807077\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a773a2d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195,"size_decoded":690,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"baae4309d098ba50e99ad8ed46807077","sha1":"f6bad8f36c97ba1d746b29bc21eff342abe4fcb9","sha256":"bbe10400ff30a287194cf7c1be8426d9f446b543a12ca69c1cd7c8d6f04cc2a1","sha512":"fd5a1cb8309693a0d95846a673f21f4fad49767de7ef38b33754828be8f71716b0ecb56cac76c31e2661f1cffa6e5bee6fb01ef4d21c47d3514ee8fb45ec4e47","ssdeep":"","tlshash":"9bd0121844277ce993f8049029fe70de55f831256873bc347646c65157bfc71d2db6a2","first_seen":"2026-06-07T21:51:34.599277Z","last_seen":"2026-08-04T07:42:36.674786Z","times_seen":345,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=763\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.557Z","timestamp":1781502560557,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /categories/get?categoryId=763\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=tDIIWo0u4zGH7ceLGvFuAZL_FlysmOpu9gtin6z1OSY-1781502560.6120358-1.0.1.1-6iaqwm2GvZaA7r1Eo9wkscYlBeqcDoEeHXoYjg3_yIWNQKaVzq4R3St7.oQQVXiVhd1BpyTszJ75BZMgFmaCSBeJdG3sPP3D5A1FNEoxmGSjJBosLwK6cZZ.OggzJY57.WRTkDPkL8484N4cQpiBHg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bdcb8568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/hint-BiQ90py9.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.962Z","timestamp":1781502556962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/hint-BiQ90py9.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"6f91e353b44bbd9caeec216c178de08b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a650ca78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1951,"size_decoded":1394,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1007)","md5":"6f91e353b44bbd9caeec216c178de08b","sha1":"83e9fe34ab5e894c1220daef3314c7efcce671d9","sha256":"a0aef50af425ef4fb1b747e11e3719b8f971c93a70fdb17f5b9c231db22423d6","sha512":"2dcc7a6de3dd9a6040a2943dd4e8840dc5750af240d820836341487a120a0a1ee2e6db3ba48558b294391b4c2ee97efc72e89cc39f8912123c21307edacb0cfe","ssdeep":"","tlshash":"8d416344fbb594b595f30d49bf1f6068d064f5b5025b55ecc26fc84887ebd62d2c1b02","first_seen":"2026-06-11T21:42:13.341116Z","last_seen":"2026-06-15T05:50:01.100825Z","times_seen":91,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v1/user","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.539Z","timestamp":1781502556539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/web/v1/user HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 5\r\ncache-control: no-cache, no-store, must-revalidate\r\netag: W/\"5-fLbvuYullyqbUJDcLlF/4U0SywQ\"\r\nx-cache-status: BYPASS\r\nserver: cloudflare\r\nset-cookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:16 GMT\n_cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng\r\nserver-timing: cf-cache;desc=\"BYPASS\"\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: a0bf4a625cf8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5,"size_decoded":946,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-05T22:40:36.740619Z","times_seen":80016,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/merge-translations-e1i2ANTe.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.949Z","timestamp":1781502556949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/merge-translations-e1i2ANTe.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"3cca8f739006bb78699ce31a75ba801a\"\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72517\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64ec758deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91877,"size_decoded":28263,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (61797)","md5":"3cca8f739006bb78699ce31a75ba801a","sha1":"f00e64128e0ecc06d99d67731eff0ce3635c19b5","sha256":"7f49f6e8c38e83622f71779ac4ce7110410ef999f37f260e68d615ebe2180f3c","sha512":"d4618560c60d241ef5dcdd57c58081e1a3683ec648a4ba1892a6ab0c4c4a11b034d8f24be68bc1059bf0f380a5f49c274a54099cada85ef468716e380b54511c","ssdeep":"1536:azk8UoSoBHfbEEYfnwY9YHQLhDoSMbDsiEPLah:a4xYafnwY9YHaD2h","tlshash":"ba933cc3bb5421f99bb61dd5e910108417369f14a82bc4e9b3be1de9128dd80b3b7b36","first_seen":"2026-06-14T13:48:35.249191Z","last_seen":"2026-06-15T05:50:01.102144Z","times_seen":29,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/plain/favicons/favicon-v3.svg","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.633Z","timestamp":1781502557633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/plain/favicons/favicon-v3.svg HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=7BhbzWFZv6NhLpkWcRCKvDLa7VvUa2_ATWCGcPsq8vk-1781502557.2433527-1.0.1.1-Zrkc9C4R23cIWao_J9c4G3Crg.8agJXY9.Z7EFCZSIS19CszF0xZ2zcVtmxXUcZS2C__YFXkIOa3VTgggkZbtqMhQ0jIFVHrFpCSNIIOJr1xPXlHH0NwiyrLL9SsuNBH6UvNoM8oAGFhda8aAdaSdQ; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Sep 2025 16:18:20 GMT\r\netag: W/\"29e4609d107da142902d5c80582b341f\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nage: 3334881\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a693f9a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8936,"size_decoded":3903,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29e4609d107da142902d5c80582b341f","sha1":"30b7fbb10d13ff8b17c7aed4e61e1872905cc724","sha256":"0cef87b78eed9c7e2b91ccfe1ecfd5fbad337cbb61e5d99396e1056600e84a69","sha512":"d872092470557a3f0dd85f1eecb6bd0e796f4d1232940f544b97332536e2c0a4b9865331db0a44e8c730ee9d24fb9e43fe0ace17ce91bde9dfc0b701aa05ac3d","ssdeep":"192:NwE1pIypREtvjdn4DsZNwjNiSMx3hJ+7u3cyb8/tNgEUC4h1bV/L:NwE1pIl9iDsAjNAU7uB1Ey31L","tlshash":"9b02849173b991fcf10997f88306ac31af66afe53532c91987e52c16d49083c297adcb","first_seen":"2025-07-10T00:15:29.49784Z","last_seen":"2026-08-05T09:11:21.99395Z","times_seen":4406,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-top-C66XZPs3.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.303Z","timestamp":1781502558303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-top-C66XZPs3.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"27d2b4a23c8003fdb4df22b12f8dfff5\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6a828deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393,"size_decoded":770,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (392)","md5":"27d2b4a23c8003fdb4df22b12f8dfff5","sha1":"97c79a2508d9374e2e4d7600d083db6977707998","sha256":"456c1e08df78bcff27ce5f72d7428cce45a4c5f96a10752f526b0212596c78cd","sha512":"a8fdb05b35be0e6f5652558621f6887e8b979ae1520551b086d8f3d1d83ddc398e995bc9d5e09e14e6065e8edd4951812d31b89b862424ea765ff7aa1995d140","ssdeep":"","tlshash":"39e02bb8016896f844274678c22d0c85470d6fba278944e05a1e693a86921e4bc4f639","first_seen":"2026-06-11T21:42:13.247946Z","last_seen":"2026-06-15T05:50:01.10477Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/games-grid-BwfTPZZh.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.362Z","timestamp":1781502558362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/games-grid-BwfTPZZh.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"ff33c02f4c52cd4e8d6afd096b4650e3\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb778deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4188,"size_decoded":1622,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3451)","md5":"ff33c02f4c52cd4e8d6afd096b4650e3","sha1":"0bfb83f0bbd74355df0b72b9783de72fd75b0dc7","sha256":"f386fd17796ba6ef3b02dda422b8e3d560efe9d424533758cee8c3f9fc0ef5d0","sha512":"3e98081fc4990603774f62a429ba7cd283221a0b7947bba5aa982332fed1a1e60dc8cf9ad0e2cb317c7abb02ab275b9558bd96c34ec15cc146582a95390cf606","ssdeep":"96:kvGLAQgPAn7eiTO6jijilpilyoi6iPvMlpltXIZqun8lNlGXk9IkZolLlWH/uyxP:kvGLHqA7eiVjijilpil3i6iHMlpltXIK","tlshash":"f28190573a26e7382c79a1fe5837f19c724865265e7789c416f2919f0bc9ef2002af0d","first_seen":"2026-06-11T21:42:13.156017Z","last_seen":"2026-06-15T05:50:01.105406Z","times_seen":72,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-history-favorite-ab-test-WxjjdUFp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.167Z","timestamp":1781502559167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-history-favorite-ab-test-WxjjdUFp.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6325b6e7a76876e4404e16dd67896f4a\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72cfa38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":702,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"6325b6e7a76876e4404e16dd67896f4a","sha1":"d1c2eb6def794e3492d643a77de193ed9284f1fc","sha256":"ea27172a0d75c0540f7dc3d2f33cf094cecb4f1624277ef499284da087092aeb","sha512":"92d6a77ef653550d6f0cb7aebf6640d98703e7e4a012440a682ef17b7b84168f96254ceae1e223b42d1921fa0277850a959db859fd96cb34803c86f4e01e24e0","ssdeep":"","tlshash":"5fd02bafa86452740a478899f514883692594bc4735dcbe0929d16240a8b590c03f81f","first_seen":"2026-06-11T21:42:13.182519Z","last_seen":"2026-06-15T05:50:01.106016Z","times_seen":50,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.ads-twitter.com/uwt.js","fqdn":"static.ads-twitter.com","domain":"ads-twitter.com","tld":"com"},"ip":{"addr":"199.232.172.157","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.779Z","timestamp":1781502559779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-twitter.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 02:04:39 GMT","end":"Sun, 13 Sep 2026 02:04:38 GMT"},"fingerprint":{"sha1":"BC:6A:70:5A:A3:8D:54:27:04:9D:30:0B:97:E3:D2:84:41:81:FA:F9","sha256":"7B:4F:B6:A3:F8:6E:CF:0F:FA:3C:B0:6A:EC:E6:3A:A2:2B:49:08:0F:FD:15:07:BF:0C:EF:5C:2E:98:33:B9:BE"}}},"request":{"raw":"GET /uwt.js HTTP/1.1\r\nHost: static.ads-twitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 18 Apr 2026 01:08:42 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: no-cache\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"6404fceba8a6f71ceb2342c923ae791f+gzip+gzip\"\r\naccept-ranges: bytes\r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\nx-served-by: cache-iad-kcgs7200155-IAD, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding,Host\r\np3p: CP=\"CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT\"\r\nx-tw-cdn: FT\r\ncontent-length: 13407\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48081,"size_decoded":13981,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48081), with no line terminators","md5":"6404fceba8a6f71ceb2342c923ae791f","sha1":"b041e15555e2c1940ad5a2794e3b924e958529d6","sha256":"fed344940a52670af96d23cd88e8fedf17c4db4adfeb66e284f36df2b14c1219","sha512":"1734d7c2f0a4fac3fd66005e9157eea73b9a81f912cc6ac990ffc584766cf9a7a25d4725d0ec220554c11a0b75425c0be777374564fa1710107bffeb02c5c533","ssdeep":"768:pvY/2/uISU5w9BOXDeivH3Izbm6XjQbHekuhOfDIaMfFSArOoqQT0VC+FI5kv5DS:pLM56MrQ3ZLnKNNL","tlshash":"6323e896b2d4f4b103d2a5e9543f011af23a5828301da1d4b3a8dcd66c29e5f9673f3e","first_seen":"2026-04-18T15:57:00.528457Z","last_seen":"2026-08-03T22:34:46.502838Z","times_seen":804,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":9,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/get-captcha-enabled-BokRFCtU.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.954Z","timestamp":1781502556954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/get-captcha-enabled-BokRFCtU.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9ad982ab70b9fb83248dc1aa947661e4\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64fc8c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":880,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (562)","md5":"9ad982ab70b9fb83248dc1aa947661e4","sha1":"ea712056562df420ead279ffd59e91e94c5483da","sha256":"4e96a81cd10ee4b8d7e8b023338a7cebdaff7adf7e3a2af6f38bc0e96a448d9c","sha512":"a697f726b22221ede3b449abc882f360f0d2753349bea4516f31827fe49659bb8b934e2de2573e72845a323bec5f120ab161c246aaf9e282149c5b18174ea88b","ssdeep":"","tlshash":"a8f026363c0a73385f0f8809cf368195531e4546fa38d5e9701d9eca1097993d00fd36","first_seen":"2026-06-11T21:42:13.137075Z","last_seen":"2026-06-15T05:50:01.107911Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=41397\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.433Z","timestamp":1781502560433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /tournaments/get?tournamentId=41397\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=NaGOVAsFp_gspP6iPSKX3fh6HxKCXpUs.dmhHy_3mWw-1781502560.5145063-1.0.1.1-_Yfm2lOpCdtruOiDWVBJQAsBnQG6XGaMqophfyLzI5TSKey0PaZe9Mw2B0O1k.Qe93Haw8.r9lqCyX6L9GLL.OHAUCpNDohTwDUwa__ttMVdB.1Qq6za4ichfRdLLzi2.XWu4MRUcRgekOSxoe4xhQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=fY.0XBUftQh0XEGkvdmx.FaPx4r3g90YzBo9CgNDHKM-1781502560.5145063-1.0.1.1-9Zt9MalKCx.ioI1yy3RSnNdJSqe9I0BxDKyipsMWodk; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b3c10568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":1323,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e966e6ed0a30b523c1d35933b18ca3b","sha1":"b5d7a395eeb8ed3bbc960183c1b2c424d35bf2e7","sha256":"e193951ac0056935bfa61ed0cdf60c32ff9505783061f3595e6ad8173b83914a","sha512":"bd5f2e541b102913f6a8514785dcef36cf4c42fbe07d1906525181e1f237fddf24d1a57f616221e1173108e76b0df013d6e3c964669530405b18557caa6fec58","ssdeep":"","tlshash":"33e0686e232804c923042767114cec09b9440ca8bafb3c02dedccf0ca8718d8374f2b9","first_seen":"2026-06-15T05:50:01.108989Z","last_seen":"2026-06-15T05:50:01.108989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1632\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.568Z","timestamp":1781502560568,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /categories/get?categoryId=1632\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/betting/ui/tv.svg","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:26.724Z","timestamp":1781502566724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/betting/ui/tv.svg HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=pyhYnJKAyas_Zw.hNTNXseZLg.QSNAcvKSdEM7Se34Y-1781502560.131892-1.0.1.1-bvGUeVTKh0kUOEUjL9VH1WlXpXS0WlGvfdfwTzO6PNvMGTRCVBTh7DQCBGDNo02V0Rl7TdQWluwJZlYO0ggDiKdvj.BcDZJfRys0Spvmdq97oWc4m1.cJHcJpVzXKT2Rwz2yOKY22VIAYhdE751Big; _cfuvid=bjI0CChKQgARaHT_HEuWM35OSSWEJ0wEy_KLuamnNOE-1781502560.131892-1.0.1.1-2tX_fu7W8oAVxNzjHjumLxwrLMcD0yml6Be9YJvB85Y; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU2MTI1NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMzIlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559; _twpid=tw.1781502559888.821034322867757848; core-sticky=ae220d3d7644fba3; _ga_548949LWLW=GS2.1.s1781502560$o1$g1$t1781502561$j59$l0$h0; _ga=GA1.1.1426029066.1781502560; _hjSessionUser_2606090=eyJpZCI6IjVlMzNiMzRlLWYxNGYtNWZkNC1hN2U3LTgxZjZlMTAyZmRhNyIsImNyZWF0ZWQiOjE3ODE1MDI1NjA0MzIsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2606090=eyJpZCI6ImI0Y2E0ZTMwLTE3MTktNDAwMy1hMzg0LWFlMGNiN2ExZjA4NCIsImMiOjE3ODE1MDI1NjA0MzMsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Apr 2026 17:39:10 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nage: 2891442\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"03c02cf999704281b1d84cf30a4ef040\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4aa20f5b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":862,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c02cf999704281b1d84cf30a4ef040","sha1":"f891e9f7562500407b3679b2d306e2583e1d775b","sha256":"dd17b55399070e87ed9451596a8953251fc4fef4172f8bbe455aebbe6eabd258","sha512":"e02257e26700c3d06a36ebd09b2b9d943f8250235db210a72cd0170641df50b8d3bf64bb0a7eac935b998760ca701c30701e1456794ecd548446a4a964c1ad90","ssdeep":"","tlshash":"a20176e5ae38558c42db86388a3b29c00b2e50fd3054f4e25c5eea31b4932d2d583874","first_seen":"2025-08-22T07:28:00.661138Z","last_seen":"2026-07-19T04:01:52.624898Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-path-based-route-matcher-CtMt9cs5.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.926Z","timestamp":1781502556926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-path-based-route-matcher-CtMt9cs5.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 13:43:47 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 3411816\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b96f521dc1b8aed59f2128c314ca278f\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64cc1e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":1058,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (885)","md5":"b96f521dc1b8aed59f2128c314ca278f","sha1":"5bd5ecf61b8b4ab0679b960629561a742873b5b1","sha256":"ff928bcc105dcbddc2c8a7065990281315aef194cadaabd473ad6eccc92ee78c","sha512":"9ba99f77565ce7e02e5b1b606934fe858b18669ba005bb0eb568f18f5a23b2d83eda1caca2f5a53923519b7038fcf5834d56a28019ba985feba14989b7e5aad3","ssdeep":"","tlshash":"e511eda425e794608b25df8550305433e4296de83506aac0f9fc5b32ce17d83a47aead","first_seen":"2026-04-24T05:21:35.035254Z","last_seen":"2026-07-28T11:58:30.686771Z","times_seen":560,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/title-XJy6U9Qw.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.361Z","timestamp":1781502558361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/title-XJy6U9Qw.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"103da70fbef883913e259a2217a0b852\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dbb728deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4318,"size_decoded":2076,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2355)","md5":"103da70fbef883913e259a2217a0b852","sha1":"44919da97f73eb9dea197fa409644ae1b75f9784","sha256":"45c3d685f27f467da3782820332e37afc25f2faccdec25a1a03ff8928d08cb1f","sha512":"188102148d0e836edeb7e2a0b97014c12ac7f6655ea62780e865cf355339a660f241ff3058421d867a130d51b985dd939ba7a28d854ac5f7fed434ede6e6b51b","ssdeep":"48:XHZZVrD2F8daeZ9J594xs3ewXQj/9OVO9u3QSzV+HI+d5Ae9uDuE/RlXWfBfn9MN:X5H2qZisOwXs/wpEHI+c6Epl24","tlshash":"e2914f06be11e03cf6332c563b697448b048a85a5fe25af9d1eb965e5be28e18300f45","first_seen":"2026-06-11T21:42:13.368982Z","last_seen":"2026-06-15T05:50:01.112263Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/accordion-DQA1RP2H.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.377Z","timestamp":1781502558377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/accordion-DQA1RP2H.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"eab9a4a2dc37394ceac38a264e3543a2\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6ddbb58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4377,"size_decoded":2307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2347)","md5":"eab9a4a2dc37394ceac38a264e3543a2","sha1":"49412925fd89521c4c9ae52b0fa66a869c079287","sha256":"eb0e6f780fa9da06423755cfc1a191877295bfc582cfe8f27391e9dcaf5794b6","sha512":"ea907529c07e2c12caa20ece8e95834e01c0988423456191ba55fb81c29cb9071afb44a801cd06bbb16b28d584429ab40193565dfa4ffd2877e1074cb6a17637","ssdeep":"96:Dc1bbI3xMFs8kMCIIGGKk5HVFudSqyzwa:MbIhMCKCIXGKUVFudSqyzp","tlshash":"c491a6357d4886786b27dc3877e81bbc8038c3f5a56479ecf15b952827cafe00856b09","first_seen":"2026-06-11T21:42:13.376766Z","last_seen":"2026-06-15T05:50:01.112805Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/minus-CyjQ7M4e.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.389Z","timestamp":1781502558389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/minus-CyjQ7M4e.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9af71e3bf366a5848e0a96089d676420\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debe28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279,"size_decoded":709,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"9af71e3bf366a5848e0a96089d676420","sha1":"cf54df07f2a51bae1ebab1c4da3f36e03cecb151","sha256":"7988eb0ae5fa40bba9d27fc2bfef63000626f4b98fee9613bbc0eb704937d127","sha512":"47cdad2ce922f8bec4dbb489046bd2495173c0822c45391c1e0d1e07a083ffad265974d198223980f3837ace4b10162f08a93b114a1c45b844e8cd1e747717e1","ssdeep":"","tlshash":"cdd0c2a901882ff48526c668c22d18a14a154efd274d80e4570f553643aa0f4984ff39","first_seen":"2026-06-11T21:42:13.333849Z","last_seen":"2026-06-15T05:50:01.113422Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BdvwEW_2.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.271Z","timestamp":1781502559271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BdvwEW_2.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 314193\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a764f4bb6164443e8a042d9f88bf3b03\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7378ff8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":804,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (715)","md5":"a764f4bb6164443e8a042d9f88bf3b03","sha1":"ea410b3fea7b4ff925c65742c863d85cba272ea4","sha256":"cb1f31d8969c42408908a839d935962ebe5dd1c91008235ba708ff3699680f56","sha512":"8ed9200f468649b17d73385b3499985cdbf2b69c46d604b8c8d639f9c2ef3301a0999f7f914355984ecb166961c9cd4a4b3a27aa53b4cf891adc570eba009b2b","ssdeep":"","tlshash":"c2012b49e5fc96b8c9adc0db6b114493e5b432c6fe34c8904af65d685e805c253ba849","first_seen":"2026-06-11T21:42:13.430563Z","last_seen":"2026-06-15T05:50:01.114069Z","times_seen":50,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.hotjar.com/c/hotjar-2606090.js?sv=6","fqdn":"static.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.164.240.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.804Z","timestamp":1781502559804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:D7:88:CA:28:DD:38:11:3F:A8:6A:9B:5E:7B:E7:88:2B:B9:C4:16","sha256":"C3:77:09:D2:3B:D8:CA:6C:D2:9A:5D:EF:E6:BA:B2:15:99:3D:88:F9:6B:A7:3F:18:8D:8E:C9:99:D2:F2:F2:38"}}},"request":{"raw":"GET /c/hotjar-2606090.js?sv=6 HTTP/1.1\r\nHost: static.hotjar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\nx-cache-hit: 1\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\ndate: Mon, 15 Jun 2026 05:49:11 GMT\r\ncache-control: max-age=60\r\netag: W/4167dda96cb387f4c1d94532d32cd235\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5ef788d0f05b31973ca8ae989fe9748.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: cDW5cCArFUuh2d5eZ2gNQp4z1lE1B8dy_8nY8sjDlgF1_5yoxVQWLA==\r\nage: 9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15156,"size_decoded":6422,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13884)","md5":"4167dda96cb387f4c1d94532d32cd235","sha1":"8d357f8f59749fb96a44eeaa0f6fdf11d959cc4a","sha256":"1db8c03097737b61b0d7e3514fabc3ea462f8db38f7565055beee2366c37d785","sha512":"6c80aa411e3e6785afffb08e4ede22cca24cf7106c30e81d2b0944375a9c89f86d2b9d1336b3511f780a5b8cfefc2a34140d2f19ce82cc5e12adbc0ed643db0f","ssdeep":"192:dbnOPb5tmjHCzN1vf89YbBXTRnXtjC3XnWBeDNCpRlNGoWvCuCKVCX1SU:dbnOPmj6vf89yhttWCfiAujVCXcU","tlshash":"4762b588b2d5b0f84af39416847fa70bb23e291614089454a2dac1d47daeddf9223f79","first_seen":"2026-06-15T05:50:01.114596Z","last_seen":"2026-06-15T05:50:01.114596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/app-install-widget-BNv9f71I.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.266Z","timestamp":1781502559266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/app-install-widget-BNv9f71I.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"54d13e176cb97bb9100808ff1f85436b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72517\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7368ee8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10498,"size_decoded":4602,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6958)","md5":"54d13e176cb97bb9100808ff1f85436b","sha1":"066c450de2f3569571f6e9d181cb1906e88cdd90","sha256":"4df0ea8ce2e631b75c2f5ee646d0d25eea951e7a1537fdc1a4eeee831a6763e4","sha512":"20a15ef455940593926a6f2725415181a4cd2b5f51ed48d1db878a108c5de44535c713ac4665fdc5f8e7ca7cc5e11560936e104f46e252d0dfd6deb12ae315d4","ssdeep":"192:rnbIRvN+xtBSOWuk4nkm39n5ExHZrqF7LsvP9T5rv1BhdF4:r40xLSOWuDJWx5eJuXThdu","tlshash":"81229612d91908b642799ce6fd56e4e001e2535a4241cbb9b8ff4e3423c6db5c1abfb2","first_seen":"2026-06-14T13:54:17.974472Z","last_seen":"2026-06-15T05:50:01.115641Z","times_seen":11,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/promotions.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.470Z","timestamp":1781502560470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/promotions.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"promotions.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RIjA0MjMzNGE2NDdkM2I1MzRiNjBiZDA5NjM0YzM4MjhlIg\"\r\nx-request-id: zEiHyXbdrIGW56olpayrh\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 676514\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a7aedb076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2056,"size_decoded":1592,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"042334a647d3b534b60bd09634c3828e","sha1":"2c8e8fe0fdeb96163ec1f0ed3b6671bc5676a33b","sha256":"cfb7bca74d9095d488953e9c9e295f1db862302b4ad970e402cabfc220ed0b53","sha512":"4fad98ce95c2eb08dedc3b51087f1ca1c5365cdcc4598920707fea85b2194696a3d91af0125825efb4ac3c4034b3999a490aa34ec1f8a5c54c3a0dd9083eac03","ssdeep":"","tlshash":"714185f9725092c4b14a9f21f9225095bb5f34b5afead10c9149efc4ae142c96fcac80","first_seen":"2025-05-18T10:30:33.829864Z","last_seen":"2026-08-04T07:42:36.486789Z","times_seen":3468,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/user-CC2Rg2SE.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.308Z","timestamp":1781502558308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/user-CC2Rg2SE.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319116\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"fed62581a7f4086726c920c6f110cfcf\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6a9b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":845,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (520)","md5":"fed62581a7f4086726c920c6f110cfcf","sha1":"717f9ffe97b6b73c104f3920d626bf3796e5819a","sha256":"0b7bb585e279ba95898a1122201ac4ad136ae10d54eda61ecb01b667145ebf20","sha512":"5f619a43189cadd6ea33e9ef4116acad85f4bf38fff7e4e1631dc402be2f7c55654b802edbbfcafc3604b6c4d5a285083fd0ba88806ab12f94b091eca31351f3","ssdeep":"","tlshash":"74f059e80191a8dcc5a54d7eca3e18950b59b8ac3b4584c0d73ee9f78aa40f0c09a226","first_seen":"2026-06-11T21:42:13.344196Z","last_seen":"2026-06-15T05:50:01.11671Z","times_seen":74,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=39951\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.591Z","timestamp":1781502560591,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tournaments/get?tournamentId=39951\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/setup-window-open-interceptor-CCPDkxjO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.946Z","timestamp":1781502556946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/setup-window-open-interceptor-CCPDkxjO.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:57 GMT\r\netag: W/\"06ca770ace95eda538bdade033286624\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72517\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64ec6d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4679,"size_decoded":2735,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4678)","md5":"06ca770ace95eda538bdade033286624","sha1":"edfb5304d8018edd36618d06c4ad3ff5fc87cc93","sha256":"1a02d319db33a5bf4342012c82ace159fa711b052b2265ed773b353107675efc","sha512":"0130333235745c9ba6b84a73393bd0b21f3a976b9944dc42a4a9c525c5ea5b62e25f4037aad804834ef60b2852e4422450944d7883d05e7f4fd7d5a7985ea130","ssdeep":"96:tS3vWIsBfNavKA6niajJ8VCjWnjpCtBT91qbstSRfmSJTgZdXgkR0l:tS3OIMfNaCA6nvtbTmx2X5O","tlshash":"dca1931dec79b57806b554c9b070a1615878abc43326e6d0f5af2ea8a06fdc35223f0c","first_seen":"2026-06-14T13:48:35.232924Z","last_seen":"2026-06-15T05:50:01.117599Z","times_seen":29,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/date-input-BMCrtSxN.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.029Z","timestamp":1781502557029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/date-input-BMCrtSxN.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"c1b6e8eec132bd64c466511250e20725\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a656d8d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4156,"size_decoded":2610,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3844)","md5":"c1b6e8eec132bd64c466511250e20725","sha1":"ea503858d457ef5e1117e987aa8e4fb7eb097dbb","sha256":"3151d53cf86dfdfe3bb506e4b93e5ad0b754666310061b36a1ac3d9de0b3fe09","sha512":"42283ee98287ce619ed3b8df51eff5c342579a0771440d4f6a25c7e1c353d47c8e419756ecceeb0d491dd08e1609c163665c29875f671fb8a5c540c0440d3e6f","ssdeep":"96:rmm+JWUuf39DdEyTgQeKuQ2Rz3UYcW78BePFj4:rmm+JWUuvhdEyTj12lEYZ78u4","tlshash":"e481b68175f94df607b24899f0ea9460ae341baa619a81f0840d8e6507ffc84c66ff69","first_seen":"2026-06-11T21:42:13.184661Z","last_seen":"2026-06-15T05:50:01.118102Z","times_seen":89,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flowmetric.life/api/v1/product-visits","fqdn":"flowmetric.life","domain":"flowmetric.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.016Z","timestamp":1781502558016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowmetric.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 14:53:26 GMT","end":"Fri, 04 Sep 2026 15:53:13 GMT"},"fingerprint":{"sha1":"9A:77:6A:A6:89:74:A1:CA:A5:72:30:D0:EE:8A:76:AB:3E:DA:D2:59","sha256":"9F:F8:3C:32:C4:D2:78:C7:C4:CC:17:DE:91:65:DB:F0:E7:91:3C:9E:DB:E4:FC:C5:9A:25:63:CF:61:AD:92:FB"}}},"request":{"raw":"POST /api/v1/product-visits HTTP/1.1\r\nHost: flowmetric.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 196\r\nReferer: https://1win.ng/\r\nX-Unique-Key: 6f06bcc16c4c40864ea28ea19bc0ef1f\r\nOrigin: https://1win.ng\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nset-cookie: h_visitor_id=5907b00d-7c25-4904-97fc-ffd9223291d0; Path=/; Max-Age=2678400; Expires=Thu, 16 Jul 2026 05:49:18 GMT; Secure; HttpOnly; SameSite=None\nh_click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; Path=/; Max-Age=2678400; Expires=Thu, 16 Jul 2026 05:49:18 GMT; Secure; HttpOnly; SameSite=None\n__cf_bm=NnXJ23bLKhk_QYeMxLvl0B5NEunoCU30wP.wUNx_lRk-1781502558.3396745-1.0.1.1-7WfTKVX4xIvbXl4m3Y8ZXznXoY0D16bp788L4ZgO7qENXcU163ooTz1SciTSX9kp8rFufMk9Rp1OxdGeQZCW8NdcMsGrh4GKB5EifvSgCpj2UoTgV9wtecPI1.QmOS8M; HttpOnly; SameSite=None; Secure; Path=/; Domain=flowmetric.life; Expires=Mon, 15 Jun 2026 06:19:18 GMT\r\nserver: cloudflare\r\ncf-ray: a0bf4a6d9a04a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":448,"size_decoded":1723,"mime_type":"application/json","magic":"JSON text data","md5":"aa391175735a80c3a3cf9d85139d6930","sha1":"644cd97ab8cf5a7b18729569f0ebf3072332700e","sha256":"81520739485570201b2ca372d5fa8bf4d94660d747459a1fc670e180caaa165f","sha512":"e81ddd99aa016af3884908ad98ca861d92b00c166cd4533275cdc8abd229062c96b1b7845e5c6d7d0f0da4a0bb3c84aca40449e3bedb6f07a8cf4c4a31877dd3","ssdeep":"","tlshash":"38f0a033912a2d25a508357051c5be05f45f45ab96a51eb4b4da2f841df82325720305","first_seen":"2026-06-15T05:50:01.118575Z","last_seen":"2026-06-15T05:50:01.118575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":123,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-cdp-popover-D_ibqq6B.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.254Z","timestamp":1781502558254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-cdp-popover-D_ibqq6B.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"1a23ac03574228c07123df673d334152\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d198b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490,"size_decoded":813,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (489)","md5":"1a23ac03574228c07123df673d334152","sha1":"43509bae5fa888f8f2dc713234375828f7b395a7","sha256":"f07d16c0662492e82eddb1344df4e5bfc36d678ec926467ec9831bcbb27718b9","sha512":"4909857ad39624743f5a5376598ab9d5b8c389234644e7265b9ff7bfa1ae335095f512547049448dd8d90ca1afdde7da01f46b0da6d291d082d491a446fa6e2d","ssdeep":"","tlshash":"f1f09efaec80a130c7ec2ed57378142625b65782b692cac490de46111721841e3bbd0b","first_seen":"2026-06-11T21:42:13.355129Z","last_seen":"2026-06-15T05:50:01.11964Z","times_seen":75,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-D9aAYxgf.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.275Z","timestamp":1781502558275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-D9aAYxgf.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"0d4e4295685d5276217047339f6c88eb\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d3a018deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1471,"size_decoded":1254,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (994)","md5":"0d4e4295685d5276217047339f6c88eb","sha1":"9d96bb9ece138fe798ad64eb237d8babe03a4b3b","sha256":"dc952a5b388135bc1d9b82dca2a7c03d6ad480b4c59da333f0a9ffc0b35308e5","sha512":"028437dd104c834bea116689800aa9efdd1faaff10ba521ce9e8398e08dbcb22b02f98abc414a060a21a7ea299c55baab517d22245e2db088fac593d388d2df3","ssdeep":"","tlshash":"6c3102528d4e5cfe106c0cf8fc193152169c078ab554e98efc7c0d7922929d6911bf7a","first_seen":"2026-06-11T21:42:13.401857Z","last_seen":"2026-06-15T05:50:01.120172Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-app-install-YY8sCrvJ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.317Z","timestamp":1781502558317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-app-install-YY8sCrvJ.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"482d51aaddf02fa81319d8e85ae27e74\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7ac68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10284,"size_decoded":4051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6673)","md5":"482d51aaddf02fa81319d8e85ae27e74","sha1":"9cd986ea9a17362ad7356fbba82e1b823c870f79","sha256":"a7f6e74c6ad328af275c639143c3cdd359128dfbb4f78cfa9caad5c3e440c6e2","sha512":"a9393718f5eda7d00d10a810fa03b8adb2387e2ed1a3d1cd37dec133f8061ab58a5653febe7ef33f9dfaf2017848daf3cf2539bb683dff0610c61eb71bf8419c","ssdeep":"192:KvcronCKrL/D2pqG0xI54PZ69PtSOkR7kTXGx+m9pHqEC:Kvvfw0yo+O7KGxVBC","tlshash":"5b2296947f71f638ba37a69e62cf3c185004291a4dd24ef5f1e7066e03c7ca1928675b","first_seen":"2026-06-11T21:42:13.469233Z","last_seen":"2026-06-15T05:50:01.120697Z","times_seen":71,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-token-sale-server-events-rndEk7JV.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.323Z","timestamp":1781502558323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-token-sale-server-events-rndEk7JV.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"369623c9b3bea90b3a05e5aea3216061\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d8ad98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8249,"size_decoded":2640,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8248)","md5":"369623c9b3bea90b3a05e5aea3216061","sha1":"90994f93ea025b682abed9a6debb2983fd86b869","sha256":"cf612292861f978b05a4465c2371181d5ca105246710a40672d22ba9d234a2db","sha512":"b0991802023aef205fbde08069849cc5a921b282a1636c07a4156ef9f38963a1dcf6608710beea5ce470d4ab0e03be4db643fea2c6d1e1f0986141cc52f0bb83","ssdeep":"192:5tAabQJofC6MOfZMNc61CTQ8ITBDO3vjPjZjJO2b:5trbQJZ6MQ658IThO/jPjC2b","tlshash":"d10298408d42b0387ba2ed69d770c0b86c511e04bc7ac7d6f91e0e5a6f5348676bea2d","first_seen":"2026-06-11T21:42:13.337977Z","last_seen":"2026-06-15T05:50:01.121235Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16795866810\u0026cx=c\u0026gtm=4e66b0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.770Z","timestamp":1781502559770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=AW-16795866810\u0026cx=c\u0026gtm=4e66b0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\nexpires: Mon, 15 Jun 2026 05:49:19 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 15 Jun 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149509\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429581,"size_decoded":150139,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5993)","md5":"dda19956845600973feaa94cd70429a6","sha1":"5a71530a9dc616b29d1b157d1c14e59dfca5c916","sha256":"cb2eed46a01cb54d47e59ab6f971dc3bfa8a78ae6bb31e024419b3a52044f6b2","sha512":"bf9dfb90e06ca295ffd3911201c76538dbe5bed25bc13d76ea72f503c16c872a297be61f2749fb1abec0be93b3820adc3d26bc770670d4daa7931573ab15d7b0","ssdeep":"6144:6EGqA25aa7p1u+ZUL8DPEBMdv8HuVgNhXB3JWOHhYc0AH0:Rh5aa7NZw8DPEB4gBDy","tlshash":"239408cdb3d674225393b478903f018ba57a79e2b44cc899f189c8e42e7469a4277f7c","first_seen":"2026-06-15T05:50:01.121723Z","last_seen":"2026-06-15T05:50:01.121723Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/PROXY-SERVICE-CDP/v1-landings-GetExchangeRates","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.652Z","timestamp":1781502558652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/PROXY-SERVICE-CDP/v1-landings-GetExchangeRates HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-24ad78030f5631fceb39ca5b52e3d624-c4d37adb997f43aa-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"34af-E3zUnvwzpWCnOD+sPNLyW1W0CCo\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6f8f718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13487,"size_decoded":2796,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a1234e02b143df3a969ed73ef6117525","sha1":"137cd49efc33a560a7383fac3cd2f25b55b4082a","sha256":"ecae51ccdf3d2685ecc62e0f4e22b7e108400275a3f40ea156ede7b6ee8c9258","sha512":"f7def0e610c5a666f8863d20b66aec981ae16a2b42811e56cca21e7bffe7f3a386319f1929890e0a7983e623df11aac4d92c4d1bf3bab39948f08417150d25d2","ssdeep":"384:o1n8jqIZ26UNIvUi7i0ay6U9U+UP1h920J1CU4lwdvFpg3UjnK6hkgUUbD0hB4Vh:o1n8jqIZ26UNIs8i0ay6U9U+UP1h920N","tlshash":"7c52a7527240aab6c41d29107490e2fa7ffac599b8d71ef2836ecd5b2d0940de41e9f3","first_seen":"2026-06-15T05:50:01.122766Z","last_seen":"2026-06-15T05:50:01.122766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/loyalty-program.modal-level-up/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.653Z","timestamp":1781502558653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/loyalty-program.modal-level-up/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-fbb4035c26acf8299454dd12ce8c413f-7ce3cedfdcd66085-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 09:55:04 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"e568c12637a40e3ccdbc4f28668068ea\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6f9f818deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132,"size_decoded":688,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e568c12637a40e3ccdbc4f28668068ea","sha1":"f4084c9a0b59b3c9cc19a6b4a893856508af887b","sha256":"7f167b3add586452bd038828d10cf4f9d2222aec7d77069ea413a7986d79142a","sha512":"a83a0f1e2c67bacd8be891a0b5defdd2aa4c9027dcd8c7e4ee0a0fa5d23b31d0af9439cf104c791ab8892077386d0e2fa1d476a39c2a8593c1601aa4dc69de5d","ssdeep":"","tlshash":"bec02b77cb604ea0070206491d6e09737cf881c4b6c06030184cc619414e4c9c72a003","first_seen":"2026-06-07T21:51:34.649613Z","last_seen":"2026-07-09T05:37:08.716121Z","times_seen":477,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/cdp-modal-uZy190cm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.255Z","timestamp":1781502558255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/cdp-modal-uZy190cm.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"c14d9d75159ec308a2d19a5adc0dee43\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d19908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4352,"size_decoded":2417,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1523)","md5":"c14d9d75159ec308a2d19a5adc0dee43","sha1":"492ece2df6c4794570dca29fd551efec8dfd951d","sha256":"f813fc70dac02e68e54b19d349ff9626a334181a113611818babddc3a5a32e02","sha512":"e22b0e2e2405349f0b438d97c1f83a55ba1849edb715040aa8e5f70d83e33050996a605f4f8d3cf9a2c66546ce63eff4d0da03300341d58bb60b82fcb299cc32","ssdeep":"96:0P7Q0wO2r2K2ghtgFy9xdWJ7FNLJHKkOZaLmc2ZXYYAAz7bjNl/+2P:0zQ0wXibghtgFU7WB/zOILm5zlT+2P","tlshash":"b591a48a7ffcf079682f8897b11f5819e308b99c4563bd9284f8096d1bc1ce79454707","first_seen":"2026-06-11T21:42:13.342223Z","last_seen":"2026-06-15T05:50:01.124387Z","times_seen":75,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrows-scroll-view-B_NWtfcp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.374Z","timestamp":1781502558374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/arrows-scroll-view-B_NWtfcp.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"9a33f4e9fdde39e33a4beb9e5ecf9179\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6ddba88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5884,"size_decoded":2193,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3149)","md5":"9a33f4e9fdde39e33a4beb9e5ecf9179","sha1":"573ab5f57ce4097ae4cb39e98e62dbb6c7c872df","sha256":"9bc3048fc159faf0bd1c075e4e8c60971ffd11dd836fdbd22d49aee8fbf6f722","sha512":"76d1990508502cb77feb8e77bf14f18db9b0cf136d5b80057d6a6ef987db0e9f3338fc7fc117d489438ee7df0293cf9a4e1a19d0b01bb73cb0f25e62cfc0296b","ssdeep":"96:FQ2U+IKxbgH4TV1Px3VxR0m1OPFWaOxDOh/DdDZ/DU:FQhb4JLZ0zPgaOxqRJRw","tlshash":"3ec1ec76eccae0a866cf9239d915431b11d91ebb5714294ad8bbadbe07d0fb8013d30d","first_seen":"2026-06-11T21:42:13.324439Z","last_seen":"2026-06-15T05:50:01.124974Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/progress-bar-OB3KxIsm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.386Z","timestamp":1781502558386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/progress-bar-OB3KxIsm.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"2a8b50649add758d5e7261698dc80511\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debd98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3087,"size_decoded":1766,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1980)","md5":"2a8b50649add758d5e7261698dc80511","sha1":"069ceb642507021433d265e1af6ca0ffa1d4b15f","sha256":"f7e9bd9927cf8da50e8eabb901ec7f2c73f4ee72a7902802008790168e403c87","sha512":"77e1c116ec453375064747a25edd0d8776c14f1a350d65c71d8fd9252afbf711fd0fd31d070e781eb5fe63eaf465d33693fd36fff70bc5ecc83a30166bce5230","ssdeep":"","tlshash":"3c513d95dc255078b49e581d0bd480c4a268590a863feea8bfbed16883f1fe71d5b3e0","first_seen":"2026-06-11T21:42:13.188131Z","last_seen":"2026-06-15T05:50:01.125797Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=47\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.580Z","timestamp":1781502560580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /sports/get?sportId=47\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=YbjSJxo.wCfBXO6a.KrG_DUyOBU0q1JHM3.shmHWcK0-1781502560.5801508-1.0.1.1-9gHJjtEWXRUalolYUqBnqEeSG360ciP2mUIKt80SHWkd3z11BJAlrVfbKvtoztRlnUhFFfgevaNZlNaJn33noHhW3ttv_VAZj26MFwZX77Zrx_FsR9mT.kaysJ0jCBiLyhOo1GAncT.lXTkcljvScQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=aXU1BZWZu8RcZ_BE.yMTXNYTjPRkGfdTi2zM9h49y10-1781502560.5801508-1.0.1.1-EvU8gSZVNekhaqnxpOirkTQUOa3Bi2eGQzLX_CDF6R8; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b9c83568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.smrtwheel.com/visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517","fqdn":"img.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.611Z","timestamp":1781502559611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smrtwheel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 May 2026 13:57:20 GMT","end":"Tue, 18 Aug 2026 14:57:11 GMT"},"fingerprint":{"sha1":"0D:86:B0:B7:FD:CC:29:56:13:BF:65:6A:29:34:76:BB:66:8A:FC:5B","sha256":"5F:11:4E:C4:59:52:BB:7B:6B:63:82:E3:23:94:68:E1:39:4E:E1:E6:72:8E:68:FD:1E:D9:05:9E:EE:BD:A9:67"}}},"request":{"raw":"POST /visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517 HTTP/1.1\r\nHost: img.smrtwheel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 139\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=fjUsPCGraGQbIaBv80Giv6zeOSKS5wx8rnLY7e4Pbag-1781502560.0261085-1.0.1.1-7sSviuyiWoPUgYqLwE9_vM17hlUydtcuIILUBBhmbtA4zP.nlHvIaZVKvF8QJG8UPNaB1nXfn8_CgyxTB9PNv151IBejxiDPAvC3OZ9u8Xo7zb0uJ_hEBJYNcQuhHSek; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=CDEkZjWTnBY2OjGA8lnhOHRP4XdfYwDG4NicOSqgmUc-1781502560.0261085-1.0.1.1-Zu59zXv.3Y91.A_uPXGH1YBA8XDdkgCQ7.7gVLGw3AU; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com\r\ncf-ray: a0bf4a78288ea0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=300\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 c6ba27a7ed18cc9b3d19d0b88a394c50.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: dVCt1nkXDfjSKbvqRvaqDvp74m5h7NKg9q5erxBAvP7S1d0rBko-IA==\r\nx-amz-cf-pop: ARN56-P4\r\nx-cache: Miss from cloudfront\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10805,"size_decoded":2478,"mime_type":"application/json","magic":"JSON text data","md5":"000a4071da86d5a2114019a881b93741","sha1":"20a0ce5e3e24ca510ecdeae5708f58fd1562831f","sha256":"d3dc367d979613c02a966c66408083ed69ea1353c11b1f2425f94c5b79ff3c84","sha512":"028d550b96d7c584b5956735529a6ba3b5d1af6e25e46fb2e29f135314a94990109503251c286672d6212c2df358332d11e4f0d3c2f7391765fca5d113060a3e","ssdeep":"192:vLOwZVu+wvLvwsmrSwhaLwjdMJwbhL9wHh:S4A/tJG0IPMh","tlshash":"0822cc66e5004d33a1e5297ead993b6626f6a31b0c017d147edc440c0f8e6bfb1727ab","first_seen":"2026-06-15T05:50:01.126346Z","last_seen":"2026-06-15T05:50:01.126346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/main-Do5NBxN1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.836Z","timestamp":1781502556836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/main-Do5NBxN1.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"2f75ea3dc47b25cb948b823df293c3fd\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 72517\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a643aa28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113920,"size_decoded":25877,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28620)","md5":"2f75ea3dc47b25cb948b823df293c3fd","sha1":"7026dddd25d048a1534c8284703687fbc9f0a518","sha256":"daa1a0d189b02683140d215287a9f8033623b2ad7037d6705441e3cf7db3c5f9","sha512":"05fd5ecfa1fdb2f246df2555db2c9d848ec1348fea7de8430be52974f94768442231ddc9b08ffba3dfacc0f35c58f796b73b6bea61bcf615dc8034b5867b252b","ssdeep":"768:Me3LM2gOskGkZ470XYHAUFOv0rrzMz/kTydl1zBJ5s94RP1p8J4qG3F8r8mbYCIi:3kpjE1zxHgyrWXlrduatOJA","tlshash":"13b31a35602a19a9c1f38c63b0cd1e632c3456517026c127eb2d1ef859ebdab93d5f3a","first_seen":"2026-06-14T13:48:35.304811Z","last_seen":"2026-06-15T05:50:01.127641Z","times_seen":29,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plugin-feature-flags-CvWg03D8.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.901Z","timestamp":1781502556901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-feature-flags-CvWg03D8.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"94ac2249a7ed3ce17b0432762a6236d4\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a649ba48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193836,"size_decoded":60935,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48592)","md5":"94ac2249a7ed3ce17b0432762a6236d4","sha1":"1c5c20e3d8c3c45b015f96ae0bdcaf378120e65f","sha256":"d01efce77c1e8e015db9119b8061413f02d94b5c1d56fcd33dd84142ce4402b5","sha512":"efed215478126848d1119ef4a21d86a25108a97e364fda6148e589cca4c79b8c398e20a56794b87de38e29227bb3051359b46838437146f517d9ebb4d00fb390","ssdeep":"3072:leWqdkQ9T8nbsE/kT2/wYFe1RsUI7UVpysK8q1K9nOwBu9smk:lRqdkQ4MOmvfKXK9nOwBu9smk","tlshash":"5114f9c8f69ab471039794b8d03f1106f23e3d99641c8078f66adce52db9a099137fb9","first_seen":"2026-06-11T21:42:13.294413Z","last_seen":"2026-06-15T05:50:01.128187Z","times_seen":92,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-modal-ew4v3wp_.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.918Z","timestamp":1781502556918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-modal-ew4v3wp_.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"35ddce5e570c6316542fdb400bf98808\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64bbef8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1230,"size_decoded":1086,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1229)","md5":"35ddce5e570c6316542fdb400bf98808","sha1":"7a04dbceca7b1b2d4b45cc91fa6a7fa483dfdc22","sha256":"553a62eac4a7106fa261583f289a2c0f767e67f4c630a5060c6cb4826389ad3d","sha512":"f01d77129f02162e19fbcd5e540a92ff26931227976f346916f2f18bcde435e0e6e145f153a841e011884c05164bc895bd9f038f1a21676fc7b798a4bb42f042","ssdeep":"","tlshash":"44210f9fce69aab5020be95ac89187be973813e0d15fe1a3906d1b5822673c2421bc1c","first_seen":"2026-06-11T21:42:13.252184Z","last_seen":"2026-06-15T05:50:01.128712Z","times_seen":92,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/conditional-BBCxolcm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.928Z","timestamp":1781502556928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/conditional-BBCxolcm.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"99eedf2542e057cecf63ef17fc31061e\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64cc268deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":1278,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637)","md5":"99eedf2542e057cecf63ef17fc31061e","sha1":"08c2ab6cd16880fffb51f356639df9461a218381","sha256":"711b2374c3c35d2012a7ab00aec8e8da45ce51aa0ae62f617dcc5aa254c34f58","sha512":"00152f3ab1738c4b79ecae9921d190d71d4f6f8c65051a030af92daf0b614a5bb1352a49a82869223ba4f327f1ccd67cd61fd9300174bfed6b1da2115af65144","ssdeep":"","tlshash":"b731ded7e6ce8491c378e8d1a1279120f0287d76387cc5e4d2ba4d3f9811956e07ba3b","first_seen":"2026-06-11T21:42:13.379506Z","last_seen":"2026-06-15T05:50:01.129213Z","times_seen":92,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/handle-affiliate-DnnJyfO2.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.040Z","timestamp":1781502557040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/handle-affiliate-DnnJyfO2.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"3569ef5035180a24c9b89e70d84eeb7d\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a657dbc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":966,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (752)","md5":"3569ef5035180a24c9b89e70d84eeb7d","sha1":"7b41d8d789fba26f376aeb927df3605dc1925c1a","sha256":"b088900d7bef991e989aff6e62c1c3a2376b02f94c109e25d8333358c8c9522a","sha512":"015e14c0db300298085c047b62215a01052f9050f7e64766b668121226eae760863a6aa37ea861f9feb4c211d12155d1a568b341a33e875ea70251126917bfcd","ssdeep":"","tlshash":"7101d0ca15b64cbf0f793ee568053669b9f344cc707a8280305c6a023523e8bcc1e54e","first_seen":"2026-06-11T21:42:13.22988Z","last_seen":"2026-06-15T05:50:01.130039Z","times_seen":89,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CpuHaY1f.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.372Z","timestamp":1781502558372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CpuHaY1f.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"01d1b7279ba5b3d923caea8b9fd5084b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6ddba08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129348,"size_decoded":30817,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (63787)","md5":"01d1b7279ba5b3d923caea8b9fd5084b","sha1":"31a273fa827442f8d83c3c529c06ae5f0aa4d9af","sha256":"2fd31e901df621bb81ce6115dead8ff4b9083886d72de7b8e4112e8347b697fb","sha512":"356177bd0a2dd9cf4522c9278f4ecce2940382102d052c19856b4ef7b63d917766ab29394305b0ac1bbf3fe2a199af45734a4ca5261b1ddb5f718dfbfe7e2a8b","ssdeep":"768:2aec8fcjLdLu+Ab0cHkr4krEWJCER8r3wV/t8ccibLT4zfYBUmDTRueWp0mSUhPP:Vky+zER7Z7ShqsbPXSpev+oa3Wuq","tlshash":"e2c32b70fb51a4bce9374c02f7dd1088706c6b5aa502c9ecd6a9512a0ac7df713e1bad","first_seen":"2026-06-11T21:42:13.470974Z","last_seen":"2026-06-15T05:50:01.13054Z","times_seen":71,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Ca-mT0K4.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.128Z","timestamp":1781502559128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Ca-mT0K4.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 08:35:35 GMT\r\netag: W/\"5c4634f5ba8b2e552e7bb28106d61f53\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 2360641\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a728edf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41376,"size_decoded":14407,"mime_type":"application/javascript","magic":"data","md5":"5c4634f5ba8b2e552e7bb28106d61f53","sha1":"7f6c325db4947bbdf1e3d4e32df43e55f28200b2","sha256":"aec405c7e900100c6998137b9e1aba1ee9e82489b4a83c635d970991d24bec8a","sha512":"b8fe1aefaba92a2a3e96b25cd61381cfdf3686bb074e5d6e897ca9bcb80cefe2c843bfcd7dbaf43fb62a812bbb1657ba709e928106866437789a988b04ed7a7e","ssdeep":"768:yrXmoWWn686GmYA9KE466/wOMlr1lepypieIf/PfYNiApMSomZlI6Hp2iH9zyvwX:qmMJhUAe","tlshash":"2203e9c4b251506683d2e1a380b50203f32995547409859cbb2ceeffa97deca7277f76","first_seen":"2026-01-15T17:57:30.741409Z","last_seen":"2026-06-15T05:50:01.131082Z","times_seen":630,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1976\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.419Z","timestamp":1781502560419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /categories/get?categoryId=1976\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=BKjFEYQEMm9muzKEZTTcnfcKpanHIBTJsaBjn5wM1ys-1781502560.4825158-1.0.1.1-JNUKhh39bU5bqE.RUfTY5cYsxz5bVzJRE3wVcVN_33nuYwwIjqe39iFSn90PUu2QnfLeF3J.F3K6RWa3sqLvF1b.cfKr9vaze4irLBBKwlACYhTbZlrdisM_ybweA0fGq_43Sjj4wpN_0W_lZvJk0A; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=k_tMQimgmFSZmKqvlwStOCPtOMt_LPPe4qsTUagYA1E-1781502560.4825158-1.0.1.1-FR5t_bhD6oVFIwyRaWnKvb7iklDEhSXtah93S_6JPXE; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b0bd4568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":326,"size_decoded":1293,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e27250c6b0d4275ba5ec3c4cf5d4c83","sha1":"1f49ebdd75efeddc86c01097e58ce8a154420b49","sha256":"c94014526d6b3586606efd048e940cf495ecbe00903197cdac1c7f7b1bc31ab5","sha512":"9ce77835e67850896df3e06cc4a9b4105e75039d80c88f9b0bf35e1602854df848f9b392dea8aec3783ccbf2d205cf6f1259c872b82c001d5bdd8319955114bb","ssdeep":"","tlshash":"a8e026bb0108ac77760207b3050c6c4b588b947d9dbe9e01d4e96b0c1a74c6a630d5d5","first_seen":"2026-06-13T12:45:13.59446Z","last_seen":"2026-06-15T05:50:01.131617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=24\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.449Z","timestamp":1781502560449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /sports/get?sportId=24\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=SPcyVb0eYAEcx5560enPSj0xOJICb_e._DSHnV32B1U-1781502560.4480178-1.0.1.1-SEMXchtUsZsZQ4YPVjx2xW5UHmYZ_UzCj5WSDYEJdDhThK8BjtmqvaEbZ2atblY3hTlt1p7yQ2Dy3NpJq9iN4IDLUVgaDuoB0qLEsiDrXEc.EfCMkh5NpfRFIQDtBHakFhdFApQXUQOFZ1EIW2FdNQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=fugcspkXqLzuQOYmxIOrx85IavA0Ki46.z3efuJzybk-1781502560.4480178-1.0.1.1-MkGUnzrEzt673YEznkBKD9lSCzuEQEIGDJuZ_OcehqU; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7acba5568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-bottom-DVL4AW7L.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.013Z","timestamp":1781502557013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-bottom-DVL4AW7L.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 318628\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b2ea005451474ade5e95cc9acf2f5883\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a655d558deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":767,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (393)","md5":"b2ea005451474ade5e95cc9acf2f5883","sha1":"e8b6afbfcb93225f6d6212c7bbaa38fb4c522e26","sha256":"f4c01c25a4df8f6cd43f8cacf9f61bad5c69986e875bf453b0240d878aa56b76","sha512":"9cb2003577ec78170a1c1343129df81c7a2d696314a40b133490923cbdd304488df649849e3442c8eef7e6b032de33b69877a10068487b3d0d4580904ca95686","ssdeep":"","tlshash":"3ce061b810485df980228734c22e0c8503147faa3f8d40e15a1e5d3b41c32f0b84f635","first_seen":"2026-06-11T21:42:13.367265Z","last_seen":"2026-06-15T05:50:01.13364Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/main-DCCFxogO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.540Z","timestamp":1781502556540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/main-DCCFxogO.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 13:53:47 GMT\r\netag: W/\"5f4ec4f2c011a8a4996fafbed3ea7556\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 314568\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=ZX_RcyFH.8wrincoyev5gOJFGEEedbARlCn_kzJf5Z0-1781502556.539056-1.0.1.1-qylQs3uRv.YRcnpKeU7TF03cR7HslOwiZNERQ5wxvJuc2wiByobbIf7dQvfIjXSLlIJ1iKDvts3tOSqASVE9.k1T9pUok.IYCQCCWFfmcDDVVc91sHgVcaicYVSMR9koxCxbM4g6BfeSlhNjOFPlQw; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:16 GMT\n_cfuvid=DdyPJIVoBoJFepVyjL_OjW7htCnpwn3VP_BAvotUd.k-1781502556.539056-1.0.1.1-m9LE8ka9iyozavsQSpUAMuXUwOi9bpVCLL5rxLfqRT8; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a625cfcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":113920,"size_decoded":26382,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28620)","md5":"5f4ec4f2c011a8a4996fafbed3ea7556","sha1":"b647f6f94bb5c9161ff49ae97c2bddb29a97962b","sha256":"c872b0736478ee54ebf82e8eb8e67c60e779077a2a0b2d39f6d0d2172ea75fa4","sha512":"9754dbf890f1fbe1df710885fca8fcbb36d17dfca4e5126ecbd6241a9ea4a6ab3273fa909ac8e5aeef66e80cd9de122a4daf23e2a3a2f091d36fbed3ff4ea0f0","ssdeep":"768:dUKLk2gOskGkZ470XYHAUFOv0rrzMz/kTydl1zBJ5s94RP1p8J4qG3F8r8mbYCIw:CFpjE1zxHgyrWXlRduatOJA","tlshash":"ecb31935602a19a9c1f38c63b0cd1e632c3456517026c127eb2d1ef859ebdab93d5f3a","first_seen":"2026-06-11T21:42:13.291478Z","last_seen":"2026-06-15T05:50:01.13512Z","times_seen":65,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/support.modal.support/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.744Z","timestamp":1781502559744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/support.modal.support/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-59e256a1bd979ed6cdd59309e43e783d-2e037bb1410be635-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Tue, 09 Jun 2026 07:03:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"1ff8dad8b03fcfeae34ebf939d2de2fa\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a766ff98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":869,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1ff8dad8b03fcfeae34ebf939d2de2fa","sha1":"a2ebbd4d9e639b6289f8daf3552b7a6c135b8bbd","sha256":"f908c7fafeb4ad8f7ecb34e68050edb4af7facf47fa301139c76e202dbb82aca","sha512":"f26966eff4f23532bec09464d87b6760f9068450abfed1cb71fa8c2a59f000d7244841900aa163ade328a4643c42b6ea51c32c992b227c50e3d7681b022e1bd1","ssdeep":"","tlshash":"8ff028e617225bb19aade925146162e23578f2342cf141b4b8184f3a475fda1d501ce2","first_seen":"2026-06-10T21:11:43.527263Z","last_seen":"2026-08-04T07:42:36.548388Z","times_seen":420,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1614\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.570Z","timestamp":1781502560570,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /categories/get?categoryId=1614\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/fp.esm-pVy3szrW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.228Z","timestamp":1781502557228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/fp.esm-pVy3szrW.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"71953447188f4dfa12faa9233dabfd76\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 319116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a66a84a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37714,"size_decoded":17426,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22278)","md5":"71953447188f4dfa12faa9233dabfd76","sha1":"5c6370cc2f22aa06a742313e0e35fb2d81ece91f","sha256":"bc511b73f8ac0b7bc810969c252e6734388fb2c858d10b7a9c4a1bfdac401a57","sha512":"7f899d2595101d7db2e1f298562753018ac36cc94fdd8a6549d0a76d92ff3e43969535d2c00d5fe46221e452b46500775731813490506907bbce23f7e4cbe0c5","ssdeep":"768:4VhwsRQNFEOwc1CB/yBi+7RB6hJg4tNqJWDT5Gi:4Dc5i+7RB8J1tNqJWDv","tlshash":"870308dc7287b0788377547944bf9107b23a3c61641d8902d467d9893cbae6e823bfb9","first_seen":"2026-06-11T21:42:13.447574Z","last_seen":"2026-06-15T05:50:01.136545Z","times_seen":86,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-C6liJRz-.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.258Z","timestamp":1781502558258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-C6liJRz-.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"9d5c01ae00936f27fd3821e3ab99d8fb\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d19958deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25359,"size_decoded":8970,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11164)","md5":"9d5c01ae00936f27fd3821e3ab99d8fb","sha1":"886f050d00be68a37c1564ab084e31fbd107862e","sha256":"b64526735d22339e11286052102fbf7f97a6c468805e78ae941f7171ef8b2042","sha512":"6ad467adecae6768c98ee19e3ec0c38d98143fdfff0c8e5a7e10fafc9ecd93b688470340223e7bbc6053d91df2b6442e05655559f7a9536f26dcd715aeaa8d33","ssdeep":"768:kmMV/TLFvc3vrJS6FfiZGLu+2jMM9v/Ik27vMwgktCu2bDFL8V+8V09GS2A2J7:k1LMv9kwMuU8V+8V09Grf","tlshash":"f8b24bc2b131627817b785c3b6261584b4549289b980d8f8fa7f0e7812cfdd2e1a6f5a","first_seen":"2026-06-11T21:42:13.240862Z","last_seen":"2026-06-15T05:50:01.137276Z","times_seen":75,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/gift-9SNQZ08t.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.392Z","timestamp":1781502558392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/gift-9SNQZ08t.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"c45d4b43950f53faea6f87eb78dfc40a\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dfbef8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":1229,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1241)","md5":"c45d4b43950f53faea6f87eb78dfc40a","sha1":"0728c91acfa40ddb3e442bc93db2998b96d5411b","sha256":"06f46a7dbc16b587d9452367b41c327471023d22f46d81e125d569051ba5b4ec","sha512":"698f65a0fc953943cca264dfb781b0038d34d1ff822890a8d5a029fb30bcda53e67e46866ecae0fffff94efa85c65e98194e399e4f006642f99edb036dd9935c","ssdeep":"","tlshash":"672135e02360dbac1957e65acf38bee0525f159a37a5c5c10e8ed7b901d78b0f40a804","first_seen":"2026-06-11T21:42:13.232624Z","last_seen":"2026-06-15T05:50:01.137953Z","times_seen":71,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=763\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.574Z","timestamp":1781502560574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=763\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=0o58T4D.Kt3HMswJ8LL6GqI6BCLONv8nGnyFWxtzWnc-1781502560.5738-1.0.1.1-H_6P3FgLzXC0Kj_VSrsh5HWI69_X8SWK07XWcuo6bwNXd6vFOXkdk2mBpjdZrQGzDU4VWpA0DT1RCBhY.xU6mlVDmO1mXeAUU_7WTix6xa7ngOiEiUhBCl8JZM.6CIecB4m_9Y3Nh.W1YZfKY1lxHw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=TvH8Dsw2C.H7qrBCDmiAoAaxwuIT0of5BVfK3BjlH2Y-1781502560.5738-1.0.1.1-oo4V9.Xqsx.1Gi4Rj7DPFt9Dz_WLQrPp6VXXuU.Bolg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b9c79568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1134,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DZJ1uIJA.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.269Z","timestamp":1781502558269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DZJ1uIJA.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"271d970901a3376687d258fb165fa211\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29d28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6584,"size_decoded":3217,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5305)","md5":"271d970901a3376687d258fb165fa211","sha1":"e4af41d29d5acee647c6ef54b9f109ff93cc1356","sha256":"5d18b27c8f86d153d0a042f00a71807dff03bf88fae7603d0e43d5e1a06d5147","sha512":"5c33afb33c64a7c570335c6121526285aff2c11b52f2f75862b3981e07d529c93596b36ced741f92e2b16aeb1947b7513911de1bba75b484d3dd831cd4d5d568","ssdeep":"192:BFbARhnM4d8sFVZPehe5UkJ7MzkhGSqxGSYrvb0DhsfrWJGF:6h3Ghe5UkJrhGSSGSYbb0DABF","tlshash":"33d1b58a96662af1633e1eca5c6500e005a48b547900cceeff7d0d3e71058de91bef76","first_seen":"2026-06-11T21:42:13.256989Z","last_seen":"2026-06-15T05:50:01.138598Z","times_seen":74,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/progress-DwnHxklp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.385Z","timestamp":1781502558385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/progress-DwnHxklp.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"ca4bfeab756926e252f150235bd04abb\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debd48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2049,"size_decoded":1531,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1288)","md5":"ca4bfeab756926e252f150235bd04abb","sha1":"b922732c1cd622f9e575f28f9aa90fbfb8274434","sha256":"86a98a214abd48f446e7c442b5632908baf4b3c2b807e4804275c0d60b1842dd","sha512":"260c976dfb0d6e170ad886cb7056c54f51cebf5ffbe8401e59ca89cc1b42f562f8804cdcf2041fd4e757f1fa2498676d8698cf96515b181842e15300b73552a4","ssdeep":"","tlshash":"47419a80fd35db7869330c1b5b3b40642244b17d571fdcd88f5e8565c7deae20908786","first_seen":"2026-06-11T21:42:13.231794Z","last_seen":"2026-06-15T05:50:01.140336Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/v1/ms-affiliate-links/linkVisit","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.614Z","timestamp":1781502559614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/v1/ms-affiliate-links/linkVisit HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 302\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTE1MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\npriority: u=6,i=?0\r\netag: W/\"f-v/Y1JusChTxrQUzPtNAKycooOTA\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0bf4a759e3e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":351,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c776997933eb60833b37beaf43814c8","sha1":"bff63526eb02853c6b414ccfb4d00ac9ca283930","sha256":"3d23d39a30bb7323f8ccfd64c52cf286138fba4f83e78f7edcf66703b7c23aaa","sha512":"6897c20156465a410c333ac1932c5b0d0db14bacf6b8c915ea25ef2ed5f8a2fc446c195b75a69572e6db398651bd040b3e1f8c61f31d4b94fae782f488cee9c9","ssdeep":"","tlshash":"99600000000300030cc00c000300c0303ff00fc0003f00c0030fc0300c000c0c0cf000","first_seen":"2023-04-05T15:38:54Z","last_seen":"2026-08-05T18:01:37.282104Z","times_seen":10290,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/seo.seo-text/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.862Z","timestamp":1781502559862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/seo.seo-text/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-9127f11eb662da73916c3cc2cff4306b-bd6455c8e9750eb6-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 04:35:18 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"f0aa300d449656663b2e8c29986ea63e\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7729ef8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189,"size_decoded":691,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f0aa300d449656663b2e8c29986ea63e","sha1":"cca0da36b12c5a4a698134b16db0298984d661f5","sha256":"c9b79f130a6acc6554d3a42e39895550099b2d91a50ff947868b38b887697ae5","sha512":"6334b739edcdff02d21d84e274686cb07769bce75a1708a1559af34aa99a03e61fe9a326504a1548398374a512dd020dd83fb2f0acd93aab284b16e8b0a2da39","ssdeep":"","tlshash":"38c012c041771f2f07df555d5c3529076a41c1c3a0c313bcbf88c075108f901f402545","first_seen":"2026-01-16T17:05:55.08833Z","last_seen":"2026-07-29T05:21:14.58497Z","times_seen":275,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=1378\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.448Z","timestamp":1781502560448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=1378\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=M99hLd8dZPDfBibiDxCPjU.gKkvTuLagP1S6wGRrDgA-1781502560.4471624-1.0.1.1-rpPY6Wuc4mXnAE1mef..g7B1SzNp6LZ0kSANCu0sZgfsqZTkCLN6KRrtIZtUmF9SzW1agZByVMKgbVYlR5WL8z8rbWbZtqVPTfrwkXfffSoeANf9KDZo3stQXtpnPClqOjcKTrnWqa41oxrs8lO01A; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=lkxozWGAjGzx2FTPTQ2D.xjbdJE0RJd6KLWD9Ma5kxc-1781502560.4471624-1.0.1.1-82BRBStgikxyE72Wdyp8l5740a675Ml5tGQ6qwb4GBU; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7acba3568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1666\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.550Z","timestamp":1781502560550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=1666\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=n4h1tQsMwSa8Rz0qaTL6B5cTmjrWqMGXMwjtwMG_7vs-1781502560.5498586-1.0.1.1-Y21iH39UdS0sk.YjXRSQIvMwDorVeKZshk1ayLV2Y5pwuCCGFpfyYzGIDIc139aneyHVgfZdBlZe9DPhBqw3Yk.8aHTj5SICFNYxk1usJboNpWZewSQV0HXr.KifIVKJ8G8hcfxhlcmBsB_VYYbH2A; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=Zy.nHxFK7cZTy4Nmx1tt9Vz2DgUMrjyY8KEYifXLu18-1781502560.5498586-1.0.1.1-m4Rk0zoB72iy.VUyvb5c5.tyqqsuKp1k75y.ajKgHak; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b6c56568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-info-ySrUA4Fw.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.916Z","timestamp":1781502556916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-info-ySrUA4Fw.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"8464301c7da6dd2c8fa306e775a2d826\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64bbe48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2761,"size_decoded":1809,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1659)","md5":"8464301c7da6dd2c8fa306e775a2d826","sha1":"56b47efc41c0a84cd64514e5a48eca496b3eef3e","sha256":"09db6bd7caa901cd85bf3fd886437b2b9fa255469a5140cffd9ddba92f467558","sha512":"8d464c1266866ff27f03d7ae3a6d0f4197e22f440186454c52989d0367af79ca69bd7c26365b371eff5c70553117fce882d1d9163f584aed6db8b7da8860f3f8","ssdeep":"","tlshash":"c551a5c57eb8d3b4647f0417a93fe949610ce52a83377ce48078893c07ebca2926864b","first_seen":"2026-06-11T21:42:13.400119Z","last_seen":"2026-06-15T05:50:01.142243Z","times_seen":92,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plugin-form-builder-CvTriPPd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.037Z","timestamp":1781502557037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-form-builder-CvTriPPd.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"f3d03fc15662464fedca87f37ab55124\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a657daf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53265,"size_decoded":15329,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45867)","md5":"f3d03fc15662464fedca87f37ab55124","sha1":"3b8a11a8edf3baaced07033a3e5245cda93a4a46","sha256":"beb04816d8ba6dc6127d4079f5c55c9a3d7b3424c2b3edcb1a157fa4c9f461af","sha512":"f7b6cad0a48e4a86579edd9f01a10b6e6ede0b6d3f9f0f15157aebeca717f5dcee7aa570bebf4b6a3c4b8a6c9963527655cbf8ff461f0da21f72ea0c9cf667ea","ssdeep":"768:Jsphgt7rjtTrOsOfJ8VCmvNa1PxhzDiyR8NqhxZR5:JZ9TDE+pla17Z8IhzR5","tlshash":"a5335188cb65069cf877ab9cb40b7821163a7f63f6ccc2c0bcdd4b6694d4ee19160799","first_seen":"2026-06-11T21:42:13.40377Z","last_seen":"2026-06-15T05:50:01.143537Z","times_seen":89,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v1/sdui/templates/by-types?h=4f2067181c385cc3\u0026country=NO\u0026subdivision=02","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.232Z","timestamp":1781502557232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/web/v1/sdui/templates/by-types?h=4f2067181c385cc3\u0026country=NO\u0026subdivision=02 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-deca3ba4cfac9a13b63815ebe5cc3b38-329caa1f29d3576c-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=2678400, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 15 Jun 2026 05:49:17 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a66a85b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"MISS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323934,"size_decoded":43492,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ee88dd7300fa1a3312f42b33caac2f1","sha1":"ed9f196bdffdadf0c78b1886c3de82ce4aeff28b","sha256":"d4e5fdb8500b32ce16dc045dd1ec8736b092379df9979c7ea1044bb3491e3144","sha512":"6e135494c362aacdee5368f86b8380cfe2341937d568fd5a7b014a888d5ed229ad47c58b3f71ef30545348dd66569bef2850884b8b6bd87393ebc710f2fefd89","ssdeep":"3072:tVlqfCeOPOGN8XpWItJFYA6TIj+5aj7Q3:tVlqzXpWItJFYtTd5H","tlshash":"5f64222bd4844dbb9b92853878d77702f1397c04d68ac75d54e9cb28edc8acab1321e7","first_seen":"2026-06-15T05:50:01.144218Z","last_seen":"2026-06-15T05:50:01.144218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.242Z","timestamp":1781502557242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=NFLBk2vWctRHnxcoYTdX.HNMD.vsg6gVnPXmaWA5VNE-1781502557.2285578-1.0.1.1-FZHuHib6J.slir2XB2Saf4sxHPQRQR8IGUs_PiWYrfRlJwQoNBOjWkIKJCwGNBS3v0su1S30jbqF6VYgA5zjOQFu0HWjVB4_sRLiL.8E_Z.NUKVKW2aB9mAiCOCyx6FmMR5o64QrtehmXh_dyXL7yg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=7BhbzWFZv6NhLpkWcRCKvDLa7VvUa2_ATWCGcPsq8vk-1781502557.2433527-1.0.1.1-Zrkc9C4R23cIWao_J9c4G3Crg.8agJXY9.Z7EFCZSIS19CszF0xZ2zcVtmxXUcZS2C__YFXkIOa3VTgggkZbtqMhQ0jIFVHrFpCSNIIOJr1xPXlHH0NwiyrLL9SsuNBH6UvNoM8oAGFhda8aAdaSdQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:17 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0bf4a66c88a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24866,"size_decoded":11604,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24866), with no line terminators","md5":"fe4c42f0d6f31ef18e9267f07d5daeb6","sha1":"feb62a8f69a323fdfaa7c40515f153c95cbbe70c","sha256":"61d4f650185982d0903c61786e408bfb1440f934d75a5ffbe526c609bd5cd7ca","sha512":"13f2d87acf724b714f9abfb208fe05ebfc3adb1a2da869987471a3202d9c18a7bbdd3195d04aeb40e3fd84c041d731f91aa2b10e07122b6cdab9d4246d353236","ssdeep":"384:EmyuJYbE47auTIvSVAgwCkIR+8Uh+bGLZV1jBS0QXTvLf5vrtN6YF+joxJ:9LJYbEyxIs5JR+j+0g5TtN6djoxJ","tlshash":"edb2e8ce7cceb9a9136230f50d5736de647bee84e4685504e220e8e0f970701aeda86c","first_seen":"2026-06-15T05:33:27.469654Z","last_seen":"2026-06-15T05:54:12.782249Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BqgRudU_.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.265Z","timestamp":1781502558265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BqgRudU_.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"669ce595ba5c5650172f557ae36f2f72\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29bd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6262,"size_decoded":3161,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5394)","md5":"669ce595ba5c5650172f557ae36f2f72","sha1":"c2b07a8e3f4b0f395b0c54be60eb98f3a8115f62","sha256":"999e7c536e1901a1c32107df5987f52c449250eff34694b2691d1f1bf38bdfcf","sha512":"ae38bac5e0fa26d50276518969064a66e750ed21c537f6219f64bee2b77037ac11027feaad497348d8313904ab149090026934a0a71859ca1a79af8b83fb24cb","ssdeep":"96:j21kk35GwEnQgDedfJwejdUuieZV+/CMlUzjYF:i1kkp8nQgDiwXeS/CMlUzjg","tlshash":"4fd1b5d6e54621d586791ce4eab8068f11b05b91b03ac9d5783d4d7c3243e11b92bf3e","first_seen":"2026-06-11T21:42:13.286087Z","last_seen":"2026-06-15T05:50:01.146883Z","times_seen":74,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/closable-tooltip-header-BXEDmgHj.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.313Z","timestamp":1781502558313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/closable-tooltip-header-BXEDmgHj.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"1130ca27a5e6ac7419796c1a02cd9bc2\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7ab68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1718,"size_decoded":1415,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (960)","md5":"1130ca27a5e6ac7419796c1a02cd9bc2","sha1":"2e1e74e72ea6954a31d204ac7854b87b6dc00b05","sha256":"fdea9e8a3fd702c6eba912e8952f1f52fe53fcb734497416992ee4c1452ab083","sha512":"850318db70c28f2ea35545103632f4581a8c7c46cc94a05b9c8a948762af7e27449192a1cbb7efddf571feb62bf0843cde6111c589839934905134f80edc441f","ssdeep":"","tlshash":"4b31655ad632c778e4339427262cf709a08c54bb0f756ef89129047c17eeeb14209b40","first_seen":"2026-06-11T21:42:13.215372Z","last_seen":"2026-06-15T05:50:01.147578Z","times_seen":73,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DupEwSM-.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.359Z","timestamp":1781502558359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DupEwSM-.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"359722c89812645de57850b2874290b6\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dbb6d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":2182,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2065)","md5":"359722c89812645de57850b2874290b6","sha1":"9d787739030473fd5a399f510089314a2e5b54b5","sha256":"f70eb8db5fb31d04f93ea8e9c28f760b5d2dd4bc2c4932ce6911f6537d65c781","sha512":"5f0f198b783daf6e649f59720faee8030e9c317cd59a08bd4063f86eea52d2ce77cabb5025a36878b6494b62b874869e2c190c103c535c7e7536b06133514785","ssdeep":"","tlshash":"4b61630219460eb542bd0cccac7031d2a5e48b42a121d4edfe319cb675a7de9502fff6","first_seen":"2026-06-11T21:42:13.253106Z","last_seen":"2026-06-15T05:50:01.148214Z","times_seen":72,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/user.modal.auth/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.579Z","timestamp":1781502558579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/user.modal.auth/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-45ab3a1f94977535a4c0aaff8ae0e619-fa300525b4188c68-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 15:28:50 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\netag: W/\"6a73c5a419d9dbddbe05ef8191f36aeb\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6f1e638deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3061,"size_decoded":1669,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a73c5a419d9dbddbe05ef8191f36aeb","sha1":"0b01f8597e5f3faff54fd673266d0ed06a686fff","sha256":"736c2bd61aad0ef8dc5e7888d1c804f873189ab9058d29ee055c59c4811d3901","sha512":"bfa5fb7b332fcb56cad960b87c1db0cb8635298be189480ffc284742317644fbaf6a2850902ccd74c4bd516aa3208d6570f8763ec069073c41e9923c7e93446b","ssdeep":"","tlshash":"ce51638742320cb39bdb93e394487689396bc0a6b857183597edd56f21abec6db07003","first_seen":"2026-03-05T08:15:59.265652Z","last_seen":"2026-08-05T09:11:21.896998Z","times_seen":797,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/menu-section-item-tab.vue_vue_type_script_setup_true_lang-Dv5pG7n0.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.299Z","timestamp":1781502558299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/menu-section-item-tab.vue_vue_type_script_setup_true_lang-Dv5pG7n0.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"5302e79d39ee75c569222515caf36794\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d5a6f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13792,"size_decoded":4787,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9851)","md5":"5302e79d39ee75c569222515caf36794","sha1":"fcdfd61b8ae8c0c9e0071ede1da2bf8eb5e3ce86","sha256":"d12b6ee5310b4799e742a9096d9fde8e873832d176cf2f6360e9cbc6b708f0f5","sha512":"a083cddde260f56de1bcb84795a7c0efc070dda74a63e373c3a8c7b9b16ba1dfa29c62ffcb9a2ee9dfa3213d673da2f1d73963dccf96ec6e29045d655fff87a0","ssdeep":"192:17kItwALEZJwRYepwIvzmorQsg7ww27CrayWjKw+pWptpeYwdwbI5xcPTRAqI5PY:1752AAVXKQNENs88mbIrsI7pi3","tlshash":"5a52e697db65ba34273f2497ed1910e8c104532fce894df4f97d56680bea9f2e64030a","first_seen":"2026-06-11T21:42:13.481235Z","last_seen":"2026-06-15T05:50:01.150042Z","times_seen":72,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/shared-1pYG0kmT.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.154Z","timestamp":1781502559154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/shared-1pYG0kmT.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 34\r\nlast-modified: Tue, 14 Apr 2026 17:02:40 GMT\r\netag: \"987fdcc50df29e171a6a892c867ef2f7\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 2190863\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a0bf4a72bf5e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34,"size_decoded":532,"mime_type":"application/javascript","magic":"ASCII text","md5":"987fdcc50df29e171a6a892c867ef2f7","sha1":"8b90552c133196e8991448111dc06001650d7a48","sha256":"3eabf24078ffc755f82f3d5dd463d774aeed83bf75a1fb446205a8672fcb071c","sha512":"ee3655fdd0d0bc17bd9e57eee74b7bd1534a2db223bb7afbcd03261f4f79f9a22e1ddf92318731f24141b197a3961149b43aefb0f64309a9720ce405bc6ccdb6","ssdeep":"","tlshash":"d280002228022cf880880888c322ca3202008008f22803f3c20a028bb3030c8a82cc20","first_seen":"2025-12-16T22:06:44.125681Z","last_seen":"2026-07-29T05:48:07.507895Z","times_seen":20,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/sidebar-dynamic-section-B3689Q4w.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.163Z","timestamp":1781502559163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/sidebar-dynamic-section-B3689Q4w.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"9ab9fa4add3c09b9a8100f4a93ce229f\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72cf888deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5309,"size_decoded":2662,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3760)","md5":"9ab9fa4add3c09b9a8100f4a93ce229f","sha1":"78a0933a65c95dd19049f3c4f9f2df51fddcfbc7","sha256":"bf7888f7d78aec3a92ccfba078ca6d444b5c31ebbbea730488c7b96756d33813","sha512":"67cae02ca6c9fc8bf5e37027c0801a23f85edf6e09f97bb78027d1e9f17ee78570d39b7a21d1fdd91f2cfaba206d3c58a6dd65122b3f3526728719e4d416b98c","ssdeep":"96:+RtJ8LFDnM1ypECTqdh5kujkY8BY69V9LLh4X53JE4:+RtJ8LFnwypEGqdh5kujryVVP4","tlshash":"96b1f843f620b074693b54b7fab9705150349b9852e28ce8e1bd8e104be0eaad5c67cb","first_seen":"2026-06-11T21:42:13.181562Z","last_seen":"2026-06-15T05:50:01.151435Z","times_seen":49,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/presets-DJXlYNNd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.263Z","timestamp":1781502559263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/presets-DJXlYNNd.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Jun 2026 09:54:41 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 503205\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"48f170672636e9c4148d0f7b9d1fff89\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7368e08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":579,"mime_type":"application/javascript","magic":"ASCII text","md5":"48f170672636e9c4148d0f7b9d1fff89","sha1":"aa0b2b995e14fd6c2c7707a84895f6c5e46c1e99","sha256":"4dafda231cd672f65e6e8b3544f12cf8d3607e1967be1a5ee916cb71fd51fddd","sha512":"815d066b71ee0e49cc8ecd1367be976d4d9f69a95174004d4cddc2fe29761c91120c3db3f10eb381992007092810c2d62644cdb350c8af3faec717f0e1310a4c","ssdeep":"","tlshash":"d3b01207019109f0012b32882bf07d5204c0cdcd32fa10b084180b050346f244099f82","first_seen":"2026-06-09T11:00:46.243042Z","last_seen":"2026-06-23T14:10:56.489752Z","times_seen":130,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t.co/1/i/adsctp","fqdn":"t.co","domain":"t.co","tld":"co"},"ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.938Z","timestamp":1781502559938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 09:46:43 GMT","end":"Sun, 09 Aug 2026 09:46:42 GMT"},"fingerprint":{"sha1":"65:E3:08:E7:E7:30:7D:47:E2:F9:BB:7B:16:BB:26:87:CE:C3:2C:C5","sha256":"CE:7B:C5:EF:84:EE:10:7D:51:0E:2C:99:A1:59:7B:03:AD:B4:D9:AC:B2:AB:A5:1A:60:4E:6E:A4:A7:28:63:34"}}},"request":{"raw":"POST /1/i/adsctp HTTP/1.1\r\nHost: t.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 537\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:26 GMT\r\ncontent-type: image/gif;charset=utf-8\r\ncontent-length: 43\r\nperf: 7402827104\r\nserver: cloudflare envoy\r\nset-cookie: muc_ads=577ad552-989a-44de-ac39-4e32649fb9e3; Max-Age=63072000; Expires=Wed, 14 Jun 2028 05:49:26 GMT; Path=/; Domain=t.co; Secure; SameSite=None\n__cf_bm=dH.tsFd_x0jXVxoxzbCNJT.rKkR8LsNXWe5A3rt9WP4-1781502566.3615422-1.0.1.1-Z3PxN.ugTYFYLIEwPm464VEytdMKhSo9kAs69hkRwg0I9xYg.j3tTmNCQynaGoCvfXYaX1jHon0A7NX8fxQYx2I.L4EPidN8AkIwzqYGYvK8bxPtZhvDvAeOrXaY0V88; HttpOnly; SameSite=None; Secure; Path=/; Domain=t.co; Expires=Mon, 15 Jun 2026 06:19:26 GMT\r\ncache-control: no-cache, no-store, max-age=0\r\nx-transaction-id: fadaec48ce2288b8\r\nx-response-time: 7\r\norigin-cf-ray: a0bf4a9fccc756a3-OSL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-expose-headers: X-Acted-As-User-Id,X-Rate-Limit-Limit,X-Rate-Limit-Remaining,X-Rate-Limit-Reset,X-TD-Mtime\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0bf4a9fccc756a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":1126,"mime_type":"image/gif; charset=utf-8","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-05T04:28:35.323766Z","times_seen":1385,"resource_available":true,"data":null}},"time_used":6583,"timings":{"blocked":-1,"dns":4,"connect":4,"send":0,"wait":159,"receive":0,"ssl":6415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1789\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.450Z","timestamp":1781502560450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=1789\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=zs9e7x0Q2WPejdY.X16ZhEdL1Ou2Yvf8ylgw4W.8lao-1781502560.449093-1.0.1.1-1PBeQfxn6bcjwCWWc3UCETCihUia2ooe7mqv3gMwli0RNWL4OcaHQiz14NUZEWkmIwMXtlKWfULzwHx1fgllQdqw5LtYUvlkOFoOEz99uZXSuXK9JS7lrgpOfEMdPC16KD65RexUqBBoLZyKz7Pyyg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=hQzzfIhJNxbRFR3SRx7nB.G3jBDKzTU0PtuHsIC3ZOo-1781502560.449093-1.0.1.1-w4tRoaSaqVZTf48FyM1gJ3zi_RmlIBCDnN868SrpWJg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7acba8568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1138,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=40006\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.589Z","timestamp":1781502560589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=40006\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=BjJTpqfN0b8V4.ys1HiSULm0TtNOlqmrnYEUM64v_Mc-1781502560.5881248-1.0.1.1-Eb9UUkc4U.YBOwKcHSyPyIpDJx0qnQnnt9i.lESSKfFtxV9qYOVcN7YAGCdsRqLwXhs6uZER4rBJ5UvSVT_feJc062QgIeJT2SmNVMZPPmUIEMGuiVy2U4NqI8emC_lRBy723nXcwrt2B5kWc.x.CA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=gedIJCP8aldUQjs0glg0YFrWJyAREt9maFrqe4zOTTM-1781502560.5881248-1.0.1.1-jUgs74X7wonlEk3pbVdl.G6HBHJ0LxxXLN9PDFVlIw8; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bac8f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/icon-box-CT8v8WS1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.929Z","timestamp":1781502556929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/icon-box-CT8v8WS1.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"f49c2ed30f1630c14bc0922bd8c4a815\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64cc298deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1442,"size_decoded":1169,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (731)","md5":"f49c2ed30f1630c14bc0922bd8c4a815","sha1":"f3d5b4b6edcf0a4d2c50667828265753bb2871a7","sha256":"d2de5a7a946a1ff621f3ec39747da460c9213d42000e22d99836b5ae19fe396a","sha512":"fdf323ac0968d78834e2bc62d1ade837feeed67956e1b3015660553adf7ad8ac27c03352c2523a32fe7713b1b1582de699735dd286700b5668f11e1cd46c680b","ssdeep":"","tlshash":"12212422dd21e2387379044bd721d98bad5451921fa02cef8b769c395beca1b2305eec","first_seen":"2026-06-11T21:42:13.23347Z","last_seen":"2026-06-15T05:50:01.154494Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/widget-types-BUsI5A3L.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.951Z","timestamp":1781502556951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/widget-types-BUsI5A3L.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 13:53:48 GMT\r\netag: W/\"12fe862c5f8dab33f0c13a2ee0f009e2\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 314569\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64fc818deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6645,"size_decoded":1984,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6644)","md5":"12fe862c5f8dab33f0c13a2ee0f009e2","sha1":"026dc29d91085adfe97153ba7b3746b5e5663323","sha256":"522ec64e9563c6a09eb5f18edb408b0126c225aa0e1733e652c1cb2416ce1724","sha512":"abd3c44b52c89092abc55baf2618d70a907e6819f3fd02646e609088f702c459ddfbfbb599b36459c91dd478c4ef9293c06635596117f106a8bd4c0414a2f4c7","ssdeep":"96:TnSfGcFb8DrBATQu/EV+I7RCYWn6fejoFGAcJYACNMjvo6fr03bPbNEtR+YcLDiR:7SfH+LNLDitan0Yq","tlshash":"58d170b005a46027c1b698889f7a2e1257c43ba5e8c75600bd5ff4c76bdf8e0e2023de","first_seen":"2026-06-11T21:42:13.391411Z","last_seen":"2026-06-15T05:50:01.155249Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-GfwACaF9.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.271Z","timestamp":1781502558271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-GfwACaF9.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"2d26a7932367dc1cdf1e337a27b278e0\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29e48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8334,"size_decoded":4077,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6643)","md5":"2d26a7932367dc1cdf1e337a27b278e0","sha1":"5c2b9c744920b9d1bac81e10056091c7b1d321ce","sha256":"70bb0f8b70bf5c61a1472d68ed6872d1b5f677ef425fde3f8fdbd7a5056a7671","sha512":"4f23e43a936ca7c1531c733752ee1609f4345692ebe2834075f06bfefda3fece5fa81aa97af154ad58f6f3651b443d78666d9abcf16917f876a085f09ec78a9d","ssdeep":"192:tI7XO3mn3KzRshqqZJZJ9ipL3OBG2Rg6M6uJDgwIHuNHFHoTIHPY2F/1:a33KzCYqZJZDipLeBG2Rg6MhJDzIHuNL","tlshash":"db02d84ac58001b8017f1e8cdad725b059f92b41f220c9dc7fbe1df8aa804a9e175f76","first_seen":"2026-06-11T21:42:13.380337Z","last_seen":"2026-06-15T05:50:01.157009Z","times_seen":74,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/get-masked-id-BtopzaVp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.283Z","timestamp":1781502558283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/get-masked-id-BtopzaVp.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 47\r\nlast-modified: Fri, 16 Jan 2026 12:38:30 GMT\r\netag: \"e9bd7ad5724e1719897ab7463d2afa4c\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 3508379\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a0bf4a6d4a2b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":545,"mime_type":"application/javascript","magic":"ASCII text","md5":"e9bd7ad5724e1719897ab7463d2afa4c","sha1":"0963bd110e52088f4fe198e76ff3b1c05dda4559","sha256":"5cc2102dcd1d849e08a5a45a84d8d197de1e8b2078697fafccef3f9dc3cb38ee","sha512":"dfca451c888f827a42036f55baa0ee05b9241965cbf359dd91f8b5e28cba501ad326f5c017740654f97de3069ac568da1654bb8467c1d84eee52e9600d92ba78","ssdeep":"","tlshash":"de900445140130f401750c5541f5cd70cf44074d73f113d1f4151101470f0c4110d531","first_seen":"2026-01-16T15:26:34.991782Z","last_seen":"2026-08-05T09:11:21.996197Z","times_seen":1362,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/install-BiNbFxZe.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.296Z","timestamp":1781502558296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/install-BiNbFxZe.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"12d8f88f9249842bc5e01f4062de1434\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d5a698deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":937,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (752)","md5":"12d8f88f9249842bc5e01f4062de1434","sha1":"ddbe52b2ca3e671f14f549a437beee1521c19454","sha256":"bf16ba3444ba2d2142d63064ddf11088c050ef523e9911e25dbdf5d88efc1ba0","sha512":"b0ed5b0755c8f1dea7a01e359ac279a7e35544241a6a77ad789b14e9ba88058321095ee982e71eaff9f713337c6383dbb9c5e32bfc315208f3c82d2b11321966","ssdeep":"","tlshash":"c00190fd131806bd88c75bacd72f8e96131a4c5b3b8958e04b1f9735955b4e1e64f120","first_seen":"2026-06-11T21:42:13.375887Z","last_seen":"2026-06-15T05:50:01.170605Z","times_seen":73,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/menu-tab-CBoYEkw_.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.301Z","timestamp":1781502558301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/menu-tab-CBoYEkw_.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"bf005e26ed3002a5701b1e6a200a916a\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d5a738deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7294,"size_decoded":3022,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4212)","md5":"bf005e26ed3002a5701b1e6a200a916a","sha1":"7238a8ab7d0cb3fcfc9eb006bab42dc63ba16f58","sha256":"8fce35af65ed4d23b261766b0e55c87b9f6e942bf56c9da05fd41dbb2187c507","sha512":"d0c55064c3151f6f6a06acd25b04ef48acba09e4d35113295640cafa45608a9ec63ec77a7f88ba490793876476707e7ba168f1d3ee0859750d3a98ed5155af67","ssdeep":"192:cBMijHkGZ580NhVk3QTEqnuvBF2qq5qPVhn:cBMui4mAnuWfG","tlshash":"f2e195bdee80e63b9767643e5b1cf0dc814c65358e85c9d9a125e9390fc7be36282306","first_seen":"2026-06-11T21:42:13.343064Z","last_seen":"2026-06-15T05:50:01.171288Z","times_seen":72,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-548949LWLW\u0026cid=1426029066.1781502560\u0026gtm=45je66b0h2v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=15\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938466~115938468~119456239~119456247\u0026z=1093286323","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.267Z","timestamp":1781502560267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:40:17 GMT","end":"Mon, 17 Aug 2026 08:40:16 GMT"},"fingerprint":{"sha1":"EA:0E:3F:78:A6:BC:42:4B:F8:83:60:D9:3B:B6:87:D4:0F:35:01:AB","sha256":"79:A1:CD:F5:F5:8B:42:8C:8E:26:8A:CB:4D:BB:80:9F:FA:D9:EB:92:01:B9:42:50:78:FA:9F:C6:BE:F7:9B:65"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-548949LWLW\u0026cid=1426029066.1781502560\u0026gtm=45je66b0h2v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=15\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938466~115938468~119456239~119456247\u0026z=1093286323 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T23:04:03.975971Z","times_seen":1021603,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/mf/shared/vue-router/4.5.1/vue-router.esm-browser.prod.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.849Z","timestamp":1781502556849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/mf/shared/vue-router/4.5.1/vue-router.esm-browser.prod.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 15:23:12 GMT\r\netag: W/\"2781220521a4fcd110b2b96ba428dae4\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 517201\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a644ade8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30418,"size_decoded":11646,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30330)","md5":"2781220521a4fcd110b2b96ba428dae4","sha1":"015173c54c2c61906f8e7d0d9b1ab517b22c7a83","sha256":"7d1df4187a17235bbcd73c99dba604535d39a5981b6c02925dba67cc5288c65b","sha512":"f9beedb9ea22753545a7e949c7973dba931abe14b295810a5c51730a125554435edbcf0b89d79cf47f51cc75619129e51dffe07c4ae1662006e0967fc7e108ce","ssdeep":"768:Prlz9I/lIPM9HLpuR3ilg6EJIFSWgudF2Sygtq9xiPrX9/AQleZK1LVyPCwVMwIL:h2lz5V/Sj0R99","tlshash":"4cd209fe7245b0265be60be750bb2111f0764ada348d9590b26cdcd73c339d882abf19","first_seen":"2025-11-13T13:04:58.751813Z","last_seen":"2026-06-15T05:50:01.172715Z","times_seen":220,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/main-Do5NBxN1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.892Z","timestamp":1781502556892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/main-Do5NBxN1.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"2f75ea3dc47b25cb948b823df293c3fd\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 72517\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a649b778deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113920,"size_decoded":25877,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28620)","md5":"2f75ea3dc47b25cb948b823df293c3fd","sha1":"7026dddd25d048a1534c8284703687fbc9f0a518","sha256":"daa1a0d189b02683140d215287a9f8033623b2ad7037d6705441e3cf7db3c5f9","sha512":"05fd5ecfa1fdb2f246df2555db2c9d848ec1348fea7de8430be52974f94768442231ddc9b08ffba3dfacc0f35c58f796b73b6bea61bcf615dc8034b5867b252b","ssdeep":"768:Me3LM2gOskGkZ470XYHAUFOv0rrzMz/kTydl1zBJ5s94RP1p8J4qG3F8r8mbYCIi:3kpjE1zxHgyrWXlrduatOJA","tlshash":"13b31a35602a19a9c1f38c63b0cd1e632c3456517026c127eb2d1ef859ebdab93d5f3a","first_seen":"2026-06-14T13:48:35.304811Z","last_seen":"2026-06-15T05:50:01.127641Z","times_seen":29,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libs.smrtwheel.com/s7.js","fqdn":"libs.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.058Z","timestamp":1781502558058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smrtwheel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 May 2026 13:57:20 GMT","end":"Tue, 18 Aug 2026 14:57:11 GMT"},"fingerprint":{"sha1":"0D:86:B0:B7:FD:CC:29:56:13:BF:65:6A:29:34:76:BB:66:8A:FC:5B","sha256":"5F:11:4E:C4:59:52:BB:7B:6B:63:82:E3:23:94:68:E1:39:4E:E1:E6:72:8E:68:FD:1E:D9:05:9E:EE:BD:A9:67"}}},"request":{"raw":"GET /s7.js HTTP/1.1\r\nHost: libs.smrtwheel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: text/javascript\r\nset-cookie: __cf_bm=yH1dvmwYoKTj5pIGQJAUSpzAf_k72ahhJV6pcEVRtDE-1781502558.1000514-1.0.1.1-89ErSmygB2eMzveMeQMbT_5YughPKG9Lt6WXLr3fyr8TsyWPCOVZLjs6LfjteU.QiwVCrwEnhfVytI8WLSvpyJfYgifzHlbHV_8zSoiqpgqtpw04jc157AvVK4bASmzF; HttpOnly; SameSite=None; Secure; Path=/; Domain=libs.smrtwheel.com; Expires=Mon, 15 Jun 2026 06:19:18 GMT\n_cfuvid=K657nByY_trV92FIcfGIjNM6T7MjmY8J7AIxj6qPYv4-1781502558.1000514-1.0.1.1-IQc.6JJpgHd7UEGDQWE5JzzOGM2KPyMgBA76.RpByNw; HttpOnly; SameSite=None; Secure; Path=/; Domain=libs.smrtwheel.com\r\ncf-ray: a0bf4a6c1a5632fa-OSL\r\ncf-cache-status: HIT\r\nage: 338\r\ncache-control: public, max-age=14400\r\netag: W/\"c7558235e3b0dcf19c55196192dc9e60\"\r\nexpires: Mon, 15 Jun 2026 09:49:18 GMT\r\nlast-modified: Fri, 12 Jun 2026 09:56:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 61fafbbf54e5560686b2d414df132838.cloudfront.net (CloudFront)\r\nx-amz-cf-id: r4NR-8_R_YhqUBrSH1P-t_bIkEhSgmD7eEC0W-3vqUSZs6yI4u8gYg==\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":456155,"size_decoded":128949,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators","md5":"dd9401363b48c8f8111a5a7861709dbe","sha1":"8df2d6965d2901cf783eec1793f53704c661fe6c","sha256":"4472ba71cc9d74e76171504261ec394697101a1aa15aeedcfdd0f0db1158b01b","sha512":"c2963230df87eeca67da2fca9be62be24e0c819dabdb513cecb3d703174e2109eca404f318890edf1ef793bf506c856d2d2134433c5fd088e98707bba6f0dc9d","ssdeep":"12288:BR5Yg5xLE595v5hDymWUHkq0LOi2Tnmx6UL0b2fyX24HoJ6vVKUtrNrgHO9sScMz:GfVK7JfQQZ55KiI1","tlshash":"a8a43a8d76dab63113e211b5243b2106f33f854d380e8154f66c98ea2f2da4e6277f79","first_seen":"2026-06-12T15:40:15.881205Z","last_seen":"2026-06-15T05:50:01.173413Z","times_seen":54,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":29,"connect":2,"send":0,"wait":43,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-C-nqAgds.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.252Z","timestamp":1781502558252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-C-nqAgds.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"2b6ad7e719b8955a1e4f31f6f6310e6c\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72517\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d19888deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35902,"size_decoded":13816,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16847)","md5":"2b6ad7e719b8955a1e4f31f6f6310e6c","sha1":"5c432e173cd7caa44ec640292f1239a68d3dd91c","sha256":"06b0d6930ff5df5075e8f0f485dbffab476ba268e4656d7971c17d09cee7522d","sha512":"275e8a6d1bbc31325e0f8099e1299844c5e86648d42e9a54130b538a437b0671c709539b0d8270cce638e18ecdb53dd034d8097ee1c5e93b586aca03c476ef44","ssdeep":"768:uMPaaQdFEpZEEgIceWylD4OX1oYkK512UbszCw6gwijZ53QAmRidtbQ/VaECBDU4:uoIdbOFozufZeXl","tlshash":"0cf23ac572d276b003fa68f0d02b0140623a5758b40dc4ecfa35ade658add4696bbfbd","first_seen":"2026-06-14T13:48:35.240047Z","last_seen":"2026-06-15T05:50:01.174041Z","times_seen":21,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Dq50ogmP.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.322Z","timestamp":1781502558322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Dq50ogmP.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"05650b07ce7011f0885ca07d3a90df3f\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d8ad48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6910,"size_decoded":3750,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5164)","md5":"05650b07ce7011f0885ca07d3a90df3f","sha1":"9e8d556cdadea6dcbd18db7560cedd021b6e6db5","sha256":"0fb7d44e2222563fd4647d7ae9aa76632a9f2e3a9454c9008b5da02dca4eb9c6","sha512":"7fdcab2c8229fd26483543b7a5972122de1b1408190bf31b38974f1d1c4cc0be8736bf08db1e91623ea8686a3615b838bab494dda2186f282ce3106ee5285ec4","ssdeep":"96:jKltuinN6bEnNiTACdo/dqR/EuCmXqeHJRyaECbikWuKB3vYm+Denobm+:GlthnKArq/ppRyxq7KB1n5+","tlshash":"dbe1e89bb88a69f543bc4dd9cc3140e255e44b80b192c4ccfa7d4d752983c5480affba","first_seen":"2026-06-11T21:42:13.395869Z","last_seen":"2026-06-15T05:50:01.175119Z","times_seen":71,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DYbkxAfE.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.368Z","timestamp":1781502558368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DYbkxAfE.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"9e1e9c9d8bb3e07121ef2a9f3fe3646e\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb918deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2182,"size_decoded":1737,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1619)","md5":"9e1e9c9d8bb3e07121ef2a9f3fe3646e","sha1":"1136684397a40a9092cae35808f58ecd026697d1","sha256":"6bdcd42e784681a6be7a467809b807ae16f1c5cd642861306d170dc3707555fb","sha512":"69d8a43035d3db324fd99c3c1509ca240cb86126db1d6b591a970cf9e07b58a492b6e30b75c848b1f62fefc857f0656b52f3dae15a698a0acec1221dd6506595","ssdeep":"","tlshash":"6541854a4a012af1102d4dcdce1850d259e64bc2ba5acdccf82e5f795983dead027f36","first_seen":"2026-06-11T21:42:13.413325Z","last_seen":"2026-06-15T05:50:01.176025Z","times_seen":72,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/MS-SMALL-THINGS/support-chat-type","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.651Z","timestamp":1781502558651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/MS-SMALL-THINGS/support-chat-type HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-3a005bf7a16126f3aa5c98a7afe7f431-790aac5a6be7b52f-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 1\r\netag: W/\"10-o8tL8NwXYDoCmOoLkGRSlEQlx9U\"\r\nx-cache-status: BYPASS\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: a0bf4a6f8f6d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"BYPASS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":454,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0cedb6d9691ef6fb0778eebe8382a470","sha1":"a3cb4bf0dc17603a0298ea0b906452944425c7d5","sha256":"6a1d3150ddb13740b4071c26a2bfbaa88de5f8faab2e20f369381d50d7ae4a1c","sha512":"678b08c7f7662749132cd9148046287dd08f39f46105f13f11f55051a47dc6b36c6b1ae7e472ba741105aa7b0a088c67a363efc1bf756267eb5775ac65e896bd","ssdeep":"","tlshash":"436000000cf0cc000300000300c00c00c0000030f0c00000c0f0c0f0cc0ccc0330030f","first_seen":"2025-09-11T00:07:37.060633Z","last_seen":"2026-08-05T09:11:22.031874Z","times_seen":3882,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/bonus.bonuses.cdp-banners/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.655Z","timestamp":1781502558655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/bonus.bonuses.cdp-banners/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-205787e8186746d3a24cf20c7c876fb3-002103ddd6b8dd2c-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 14:51:29 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"e1bb9a23bd197621f3a1ada2fd52a979\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6f9f858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":946,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1bb9a23bd197621f3a1ada2fd52a979","sha1":"4b0bfcb370a2aeee809efcb2ba436c4496cbe1ed","sha256":"4acca3fde269de095c4db583cac0c5558c7eb61d877382fc7a498e0160306c83","sha512":"5c34570ff410c094dca1318a40d5722597d60c6cd110c4c99ad2884bac01e25a4bc5caadab4193885bf0d9f8478ab57355092b812397996ef51ea181d9d4db52","ssdeep":"","tlshash":"70019c4c5f6a10620f472bca7cd1dfb89e647370624342d99dfa914e0eb43b082725c7","first_seen":"2026-04-15T08:17:19.403484Z","last_seen":"2026-08-05T09:11:22.017926Z","times_seen":749,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-countdown-lRLfROFl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.937Z","timestamp":1781502556937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-countdown-lRLfROFl.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"d96b6bdd02f67101f037c5208111f911\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc498deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1115,"size_decoded":1072,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1114)","md5":"d96b6bdd02f67101f037c5208111f911","sha1":"116ec6b6ddecdde5e42d703bc633fff56411e94a","sha256":"81e1e5729497942ab1b84f04e15951ffae409313d17b00618e024662b66959dc","sha512":"d9aae84959911c5c15316eda4c362142c9e2fc98dd9e83e5fe7ee5f56fdf1f5a367f903f0193d07a27d7b5132cd8dd1b0d72b1066079b33ba38133035d550f85","ssdeep":"","tlshash":"722120bebb6ad0b1473851575920026043051708308359ff514f0a1ec5cbed9d3ef41e","first_seen":"2026-06-11T21:42:13.284022Z","last_seen":"2026-06-15T05:50:01.178677Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/search-B9491s1b.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.989Z","timestamp":1781502556989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/search-B9491s1b.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"d250e2944fdacb7a926e07b0c8c39deb\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a652cfc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568,"size_decoded":864,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (567)","md5":"d250e2944fdacb7a926e07b0c8c39deb","sha1":"66941ec64d6a9fb7541033441a056970e06d02dd","sha256":"8dd62a8c557f0dc79ec65503133de6c23dc6060e97e51b3c6860660005f53a1a","sha512":"028ffdd17ea035ac4e588cf1ea7fc34c92e9a99ad3bcaf22f97f8372055190879c49402701cff2527d0cb7862726b6cd8f7387d7a60160d38a28ac3efae0e5e5","ssdeep":"","tlshash":"58f081b11158b17c0e1f42b5c73c68c6431539bc774d51c4a36ea1358c8ae71ee4b525","first_seen":"2026-06-11T21:42:13.207087Z","last_seen":"2026-06-15T05:50:01.179337Z","times_seen":91,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.hotjar.com/c/hotjar-2606090.js?sv=6","fqdn":"static.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.164.240.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.773Z","timestamp":1781502559773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:D7:88:CA:28:DD:38:11:3F:A8:6A:9B:5E:7B:E7:88:2B:B9:C4:16","sha256":"C3:77:09:D2:3B:D8:CA:6C:D2:9A:5D:EF:E6:BA:B2:15:99:3D:88:F9:6B:A7:3F:18:8D:8E:C9:99:D2:F2:F2:38"}}},"request":{"raw":"GET /c/hotjar-2606090.js?sv=6 HTTP/1.1\r\nHost: static.hotjar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\nx-cache-hit: 1\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\ndate: Mon, 15 Jun 2026 05:49:11 GMT\r\ncache-control: max-age=60\r\netag: W/4167dda96cb387f4c1d94532d32cd235\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5ef788d0f05b31973ca8ae989fe9748.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: jaX3IuOpt1eeogkaZqpL3UsPfrnsXQwokJrzm9YmKOCIIH5hdgWcEQ==\r\nage: 9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":15156,"size_decoded":6422,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13884)","md5":"4167dda96cb387f4c1d94532d32cd235","sha1":"8d357f8f59749fb96a44eeaa0f6fdf11d959cc4a","sha256":"1db8c03097737b61b0d7e3514fabc3ea462f8db38f7565055beee2366c37d785","sha512":"6c80aa411e3e6785afffb08e4ede22cca24cf7106c30e81d2b0944375a9c89f86d2b9d1336b3511f780a5b8cfefc2a34140d2f19ce82cc5e12adbc0ed643db0f","ssdeep":"192:dbnOPb5tmjHCzN1vf89YbBXTRnXtjC3XnWBeDNCpRlNGoWvCuCKVCX1SU:dbnOPmj6vf89yhttWCfiAujVCXcU","tlshash":"4762b588b2d5b0f84af39416847fa70bb23e291614089454a2dac1d47daeddf9223f79","first_seen":"2026-06-15T05:50:01.114596Z","last_seen":"2026-06-15T05:50:01.114596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/freemoney.common/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.864Z","timestamp":1781502559864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/freemoney.common/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-69817bd9f3b69171dd32f02f0633f3bc-f97d882470dc3a0d-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Tue, 26 May 2026 10:17:36 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\netag: W/\"e9e6d0d50658f3cd0fe543b13938215d\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7729f48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7181,"size_decoded":2921,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e9e6d0d50658f3cd0fe543b13938215d","sha1":"df46e413f42daf3f14c662eb24da67d07cf134dc","sha256":"3e8345d1a7e23f96822fdd1dc19053cf650e8125b5001cb8aa000fd796b0c5cc","sha512":"dc993d825caeeb5b5a7641b3250f2e2f9952c0bed5acd7ca005da8f0339e888c737cdcc1a2c5de9a0fa45315cdb8a6bad4b6e6281513c9d64d8183ed678940e6","ssdeep":"192:uhV1a8Tqdnj1AGfPp5Q15EsSvtOJtJXJlkOfaag:98+Ng7JtJXJWOfa/","tlshash":"37e1634646205cf097521389bccb2b5c32fe4179766265519ce78ac922ecfd8c82fadf","first_seen":"2026-06-07T21:51:34.52632Z","last_seen":"2026-06-26T00:12:56.660696Z","times_seen":127,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=989\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.441Z","timestamp":1781502560441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /categories/get?categoryId=989\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=zotf8txm3Z.qe4huvBeft5i4lt17DmFBXBRtRlK1o9Q-1781502560.5239077-1.0.1.1-zDiLFEryuICkfdT0IZcP4.tUFyZ1tthUW7LBXpjLoJn0YcjtUbdxHlK3O.xN0wU.nAkzUmK5S9vVZyKo9qi4PYUqdikeQUWawgEkvAjRkdjY5dWFS9O4kA8khxAS7MDNAjeY7pTt1Rasn0LsvyrX6w; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=pOX5o8iHG3xiF232PtDNxmitFWBm4LJfgwZB6Uz8rsI-1781502560.5239077-1.0.1.1-6k7ymV8YwaE1m6iiC5rwnTEgveJciWYlpRmZACV7990; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b4c33568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":1294,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f771cef58ca74a49716765ac3f1bd46a","sha1":"bfd26f2695c5838dd6070ab2d003f8ee16549d96","sha256":"e241bd33e7c19c86506b3d7e06e50de247176f017338fd326e5436ba1cb1f17b","sha512":"7a1de89bd77328bc4ea6c3fadef333ad92d022a1b620df580578b75d26f68019e95ceee06cc2f07ad5974f4ea220b78f7295dc5ec8648028d8745f53ea222546","ssdeep":"","tlshash":"e7e07daf828046d9134127538ac9fe9f8c86103d8ce23b4cd5c8de4eb4797e4230e346","first_seen":"2025-11-09T23:46:00.035294Z","last_seen":"2026-06-15T05:50:01.181231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/home.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.785Z","timestamp":1781502559785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/home.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"home.svg\"\r\ncontent-security-policy: script-src 'none'\r\nvary: Accept, accept-encoding\r\nx-request-id: z8mkduRm-vBedBw6Ne3l9\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cf-cache;desc=\"HIT\"\r\nage: 2362881\r\ncf-cache-status: HIT\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RIjllMWVjYTlmODJkZWZiNzczMDUzNDVkOTRhYzNjMzJlIg\"\r\ncontent-encoding: gzip\r\ncf-ray: a0bf4a76ad904c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":1212,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb7c17edd8130c148eaae661dd7ce93","sha1":"42aca3bf1ce8e8f2646325e3dcf5d5498e152f3b","sha256":"87a93f014daf5c1d37b36238460659f2a676287de494b257d24af174a8161393","sha512":"0666a3b24aa129916257664b1f12f44d8e39b33b511ef25eda064b3455d7400af22a8a9c2a41046a9796f7bc187f767ffef1e091c7c3169adfbea95dc233b3f3","ssdeep":"","tlshash":"3711e1eab3d455d09846d7b4c822815aaa5f7c7afe83b3cb8221996862332e08446c84","first_seen":"2025-06-23T00:10:28.481648Z","last_seen":"2026-08-04T07:42:36.669989Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/ceo.widget.welcome-message/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.897Z","timestamp":1781502559897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/ceo.widget.welcome-message/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-44651b68c72948b1dabd3bcab4e35146-2067b83077d33e5e-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 04:24:25 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"3d24f78f71a4b455ecc2d3382f85574f\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a775a858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":1050,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3d24f78f71a4b455ecc2d3382f85574f","sha1":"16fcf4a1c131b4102d208b954d4732e3961cff47","sha256":"b41534762fbbf1cc891002cb7888f2e48029fafd23aff0da335f0bf3b834b36a","sha512":"2f381d749acf067aa687276772cd48dc7a5488567f3103adf359d2d0f4b349adf8c03e82375d4a2afde116da4c97b9aec9e0530c19949dc7c579f4d4d0d17cad","ssdeep":"","tlshash":"2f01f196da202b3957c0490281eb49dea524f1513281c76cc9cfd976232bab6833fed4","first_seen":"2026-06-07T21:51:34.667514Z","last_seen":"2026-08-04T07:42:36.578739Z","times_seen":323,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=41397\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.451Z","timestamp":1781502560451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=41397\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=7KIvRRSihKJaL1sYYh1UiUGB.zGremlGE4a1EG40E7I-1781502560.4502704-1.0.1.1-p9yZHVpJTfyi3VNeOCDDQNec.MdgpTVNOjMQKpcUP.Bq2cpGCJ8ERJwTt3fZM6F3Qmr2WB3YBf83nOLRmvPavaIQxpxvx1.Og6F81eJlCiBUIy5rsPo08S.FMUl9avPRX_6OcL7RGc305Ol0ysjziw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=a5yVyF3YAKLVkLrpkt1af7xCeGyrg9QGGFkjrjxnHoY-1781502560.4502704-1.0.1.1-VPFo0DN9GQD6f7T.Va7RlO7w_ej.Qle3ENeiqaUR8mU; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7acbad568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1614\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.590Z","timestamp":1781502560590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=1614\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=GY0pHB_254DjtNQsP_7EYfm4RndiH1zl2CUCJmetblc-1781502560.5891-1.0.1.1-4YEbmppH.w3uhW.7QXBiM1c9JM0p1B.1NmYoupwWNWWOq.u2y24RPAU_kR5reqkop_t83cd3zm4NwntCl8wxyFcoP1h8.LO687Uj3apHvdnF9tYhAlUcUZXqll3KjUBEZeJ_0Zg4PnpLj4.uddS7NA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=W3icEM4_tnIKPA34oWnF4.BjrDTfxQSB2Y_ORfK4TF8-1781502560.5891-1.0.1.1-bo8sm37Vlkv.XfgvLaoUscotSLLtaWhIbC.WQzjYl.o; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bac92568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1134,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/shared/fonts/coolvetica/coolvetica-latin-ext.woff2","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.841Z","timestamp":1781502556841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/shared/fonts/coolvetica/coolvetica-latin-ext.woff2 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 22 Sep 2025 15:36:01 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 2634358\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"05ed695ae85fef9088497eb060465a34\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a644aba8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18104,"size_decoded":18583,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18104, version 1.0","md5":"05ed695ae85fef9088497eb060465a34","sha1":"5e25a99ba6a07c226c3b39afc54c4ab9c6f7b00b","sha256":"63a6e4cc712514dd1bf47007039cef38f1106b9ccb509e9ac010636a0925b98b","sha512":"d1032139dbb4f382ab83aa2cd16e6a59752de22cb47fea572aee14f14f4a8145c346cfd6f12aeb4e8919b96307e4050d6d7fc8cfd27c14df2f794c8a758a1ec4","ssdeep":"384:KTiHt3AX2x5gMNYLxWmE43E3FyTmcFQItZl4bEvcmLTVPDn7LUKxoFu21KZNP:JdAX45HNbU9juItZ/7PhUcZNP","tlshash":"0782d0e10e12ed12dfc56a3c12c4238899e7448cadb54d4b1c6525af83c53ee39b7a6a","first_seen":"2025-08-29T00:15:47.494978Z","last_seen":"2026-08-05T09:11:22.023065Z","times_seen":4229,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/checkmark-ChRAWbO6.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.920Z","timestamp":1781502556920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/checkmark-ChRAWbO6.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"c3260d6d9f73a36ce10704f776ad0820\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64bbfa8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396,"size_decoded":774,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (395)","md5":"c3260d6d9f73a36ce10704f776ad0820","sha1":"a4df3955b3aa70b81ee81af858861c3bfb685d4c","sha256":"1bd1e9589d71145297f801fc069de7fe760f1d692dc7e56e69e29fddb65cbe83","sha512":"453aeea300b9d0173010ef2733562459a036c84bc3326ef567bb2cb691e9b7b7a59a4879eda24691c593239ec398f9db86abc0cbabe5c796b7c968f06580a167","ssdeep":"","tlshash":"f4e02bba02441eb840178934c63d0d51470c1eeb3b8884d0830e1e2a46d61f4e51fa79","first_seen":"2026-06-11T21:42:13.239955Z","last_seen":"2026-06-15T05:50:01.184722Z","times_seen":92,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/support-Dcq8VVEM.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.262Z","timestamp":1781502558262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/support-Dcq8VVEM.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"e3e60d2183c17f528bf64c77517b5177\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29a88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":933,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (704)","md5":"e3e60d2183c17f528bf64c77517b5177","sha1":"04cc21c851f4d68769908198854a113d4b12aa14","sha256":"2ce698470f67433bc7b185c69e20708612ff60216b757f200212d57885a5699a","sha512":"bbd7ea40a42f4f9b9545e8847e20b1c79021a4af1187a52d453c5e2a05a888d9e2879c557934b029a236c9416894420cbb93e87b30af07141116d3419a7b13e0","ssdeep":"","tlshash":"0e01cbef526c16fc0923c6258e36f9101f1d60aa374a82e1074f9fb243824f0e81ba10","first_seen":"2026-06-11T21:42:13.298065Z","last_seen":"2026-06-15T05:50:01.185374Z","times_seen":75,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-feature-flag-items-uiie7Mc9.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.305Z","timestamp":1781502558305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-feature-flag-items-uiie7Mc9.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"d62d673ae67a8648c411d4684bc1ee3a\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6a8b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":729,"size_decoded":910,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (728)","md5":"d62d673ae67a8648c411d4684bc1ee3a","sha1":"3c7d10143cbc7fbf57fd9336c43ae9223a8c83b1","sha256":"e7d929f9127a6bbfb7cb658cc4e32f8235ea17a81bc6e0e4ae3d17acd42910e6","sha512":"6194c015190a451887cd56ab24763afd2087d4286749b7957bf969d781a71073ea5f14b217ee940ec5197ea37cec8e0f688f2f2fc84cf8902892f7babcbe290d","ssdeep":"","tlshash":"380110ad38c5e038c60248d21930a127b75442e1b119edc4ebae4a7784fb8c7802ef0a","first_seen":"2026-06-11T21:42:13.323549Z","last_seen":"2026-06-15T05:50:01.187469Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/useInfiniteQuery-0snrEpVZ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.256Z","timestamp":1781502559256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/useInfiniteQuery-0snrEpVZ.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"acd6c6aeebc13484edc933363171bb8e\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7358c08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1130,"size_decoded":989,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1129)","md5":"acd6c6aeebc13484edc933363171bb8e","sha1":"d6ca8c39f5ed75c687e8f0f91eae3434d315cf09","sha256":"4ec0478ce96da2516cada7738b86c820d3a4b45ee4615dbf5ed7a98893fc8a59","sha512":"2cfb7fb130c8c9d49fa06896431bf1d24868c5d7df968543209992546cff9b9055da0c7849438508974ab4e351fa997ca455693f7606fe47fd4d7a150ac0d681","ssdeep":"","tlshash":"da219b7136467f07e4a7c24fe30c0305e1115973787ac7fcac2c4aa5ba25402d38947a","first_seen":"2026-06-11T21:42:13.255595Z","last_seen":"2026-06-15T05:50:01.188592Z","times_seen":50,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=142\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.424Z","timestamp":1781502560424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /sports/get?sportId=142\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=zZIsPqNeAbFag_Px649zqWNQAIZn3FskQYH1jjYfisQ-1781502560.5078094-1.0.1.1-8_8VhLXue_SR9GqJBaoTB0XVSOLrBKzJSwEU32r7bb_RXTS7JTUXlzMT3Jjgzq3nykwo_R3Qsoqdt6GhPoxk0gQv7vhsIMrOvh9ymqUR_ptqgyH4cnInXD75drSyXD.EOvQhiozkjaXHB0c0idOI6w; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=qXaJq0HmbTmblPQ7yGYPKHO1tpWyzpjVya7rZjeR5mc-1781502560.5078094-1.0.1.1-mtF4w2EH7.Au02oX7q4ieoMcvz.YaMcZx35GgmicbIQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b2bfc568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":108,"size_decoded":1197,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adfa3977601d011114f9945ae731b007","sha1":"05fc8de7f7b8e2141cd85da4fea4061e4fc0f2b9","sha256":"fb3eccfbc5501e5d6810ce7c328a62888e8846b574f22d6bce6496f2ade6e763","sha512":"4ca349afd05cc1a1c076d1368a269da42bd89bde52574d665d8390f93876f3a3f84f51e5d36568ddd6d4c52eeef33c62b072d05b5156606f5446c5ac242eb210","ssdeep":"","tlshash":"d8b0126819008c7ca4004f70220eeec80078243766d7de0454df270c5c955ad371c743","first_seen":"2025-11-09T23:45:59.874432Z","last_seen":"2026-06-15T05:50:01.189617Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BkZBUjIo.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.942Z","timestamp":1781502556942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BkZBUjIo.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 13:10:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 2944026\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9288b3bff163efbdde5108bb632467cc\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64ec5e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":857,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (523)","md5":"9288b3bff163efbdde5108bb632467cc","sha1":"c758e81d560d37a43ae6cd198c743056632e2ead","sha256":"31da4c8eda95166c4263fdbe22ffc5cd86a8202a83a8fba453641b6df87fdb0b","sha512":"94622ad5c1381008c2fdb806e6ae89394e427a3153b0828a9535eddfb2ad8eb0ee2b7d6a74d7898c746518a4b04a9964857d8df0f6028a860853bb812b9f115f","ssdeep":"","tlshash":"fdf0753935f5408043b528fd40051131ea331a987c0df1d1f30c09bb9f5404085f39ea","first_seen":"2026-04-02T00:03:41.742429Z","last_seen":"2026-08-05T09:11:21.87612Z","times_seen":988,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Cen4jr3v.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.285Z","timestamp":1781502558285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Cen4jr3v.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 13:53:47 GMT\r\netag: W/\"5d2e09b7df74ca46e4a2546577e54562\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 314569\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a378deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181010,"size_decoded":46475,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50172)","md5":"5d2e09b7df74ca46e4a2546577e54562","sha1":"f4e0d874973a6c81efdbc40b11c10939edf0faed","sha256":"82e1c01d499b157ba4f2c70de783cb7f174e0b8c504d75470193fbaa275efe6d","sha512":"9ef818d4b42d42e3e14fb3cf1eca7923d164dfebf6e4e7b5d189ac718001c02ecead6ee88840263eeb96286f44edccfe0f6d873e8e776125d69bea687618aa4e","ssdeep":"1536:oQ9IemSVEvlWlgYcHe4r629i8/csE85cgx++sf9t3tGdqlHG0ancRbMSYNozN7zW:oRLJds9tPlG0ecRw1","tlshash":"fe043a50bf106a7ce733640ce75e0028a01cbfa8d60698d9b57f557b07cbef19262b5a","first_seen":"2026-06-11T21:42:13.21142Z","last_seen":"2026-06-15T05:50:01.191074Z","times_seen":72,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v1/user","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.415Z","timestamp":1781502558415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/web/v1/user HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-149f4fbfa04ac5fc8e22a0adbedc0a5a-46e7d44ba0f07e09-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 5\r\npriority: u=4,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\netag: W/\"5-fLbvuYullyqbUJDcLlF/4U0SywQ\"\r\nx-cache-status: BYPASS\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: a0bf4a6e1c3a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"BYPASS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":437,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-05T22:40:36.740619Z","times_seen":80016,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/bonus.subscribe-notifications/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.658Z","timestamp":1781502558658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/bonus.subscribe-notifications/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-df61ea51bef25ee1b0a31cae2a0dad77-d4b576e93a16641d-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 04:20:27 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"037506e34f8d9a9fc6862300ae104b6c\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6f9f908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":905,"size_decoded":954,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"037506e34f8d9a9fc6862300ae104b6c","sha1":"b7766811aa1dc2667955534c9603ace11c01ce33","sha256":"e9c0a2c52b9f6b6c7fc888fe351867ada9cf8806583a148816ea2eb4e51b7e52","sha512":"81e660220ba7a510af3654f8132096fd79e31236d9eb07757ce93754b05b9ff3cf97db689aa8a6ee00ddc2ad82a29f88ffb5416b1333c8856df89ed7363332bd","ssdeep":"","tlshash":"57115c4f99037fa00a6f92a2bd9a5eb41367831ef0aa4251bffb410722d134ceb33444","first_seen":"2026-04-15T08:17:19.376965Z","last_seen":"2026-07-13T09:34:46.786626Z","times_seen":522,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/betting/ui/wallet.svg","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.236Z","timestamp":1781502560236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/betting/ui/wallet.svg HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=pyhYnJKAyas_Zw.hNTNXseZLg.QSNAcvKSdEM7Se34Y-1781502560.131892-1.0.1.1-bvGUeVTKh0kUOEUjL9VH1WlXpXS0WlGvfdfwTzO6PNvMGTRCVBTh7DQCBGDNo02V0Rl7TdQWluwJZlYO0ggDiKdvj.BcDZJfRys0Spvmdq97oWc4m1.cJHcJpVzXKT2Rwz2yOKY22VIAYhdE751Big; _cfuvid=bjI0CChKQgARaHT_HEuWM35OSSWEJ0wEy_KLuamnNOE-1781502560.131892-1.0.1.1-2tX_fu7W8oAVxNzjHjumLxwrLMcD0yml6Be9YJvB85Y; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559; _twpid=tw.1781502559888.821034322867757848; core-sticky=ae220d3d7644fba3; _ga_548949LWLW=GS2.1.s1781502560$o1$g1$t1781502560$j60$l0$h0; _ga=GA1.1.1426029066.1781502560\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 18 May 2026 09:09:16 GMT\r\netag: W/\"2a82b1687a00a8cb3483b2958a885b22\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: accept-encoding\r\nage: 1974792\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a79783c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1398,"size_decoded":1186,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a82b1687a00a8cb3483b2958a885b22","sha1":"fdf7340481dc00efe69431bb345e20b41a039614","sha256":"757b1eca4f5ccfbb6bd763110b6990dd7e1ad91aebf564d6d0cecf62e2870022","sha512":"c77fa083ecdd899708e0342f6bbdb9f178af1e03d7c9dbc0d8cae6bcb79a154134b6094363987a1b39d9aa755fff06ba0b366b559b0e9d0763b22035427d26b9","ssdeep":"","tlshash":"0e2144d6f298f1c1d28c8360b112f092421b95bd2f0a9106324cd585f74a4a288cfe8c","first_seen":"2025-12-16T22:06:43.908115Z","last_seen":"2026-07-24T23:34:13.234648Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/list-item-BIddQQ8E.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.982Z","timestamp":1781502556982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/list-item-BIddQQ8E.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"f0709eac6dca6ed6ff6dccf8c3ac3ea0\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a652cdb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8001,"size_decoded":2716,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5217)","md5":"f0709eac6dca6ed6ff6dccf8c3ac3ea0","sha1":"f56373d4acedbf0d0170fbd08febca19358f7c18","sha256":"9ef3b8a60e8f915d610121ba8de2db7b9248b77fe5880ebe5f22a8ed1a391f0d","sha512":"cd3fe1b0a6b5a7d61bf6cc02330a7beea5658e94e46379311f071d747e5593afd2629739d133808cc1431132d6d0da1f7d5ea6b2a8bec3740ede68d3b458e162","ssdeep":"192:QqOfY6tK13w3pliM40aka7Z9FAv91P7oJ7ojQL:Qq16tKV2Ab0u/Ol1jSZL","tlshash":"02f134ef9615aafcc8e67423631e1469960cf02be9748ce4f1155b2947cf7e19270b4c","first_seen":"2026-06-11T21:42:13.246904Z","last_seen":"2026-06-15T05:50:01.194073Z","times_seen":91,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plug-CAl_c9_W.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.304Z","timestamp":1781502558304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/plug-CAl_c9_W.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319116\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ee13127b480dbf405c9d11a2ad41d864\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6a868deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392,"size_decoded":780,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (391)","md5":"ee13127b480dbf405c9d11a2ad41d864","sha1":"01a8a208d1605c2c520ba4328c4fff4b4274e6ca","sha256":"73cdf9445e25b344cdccc3c324b7e09e03b65a5b8bc1ad1d1121a24c0b11dd19","sha512":"0ad45c1e3ed20027c36bc5536b3d4c67a4cbcb7e84c5d18546f40fc76bf704cb407c771346f4d46362d88a084f0ea830830da34a1a1161d91b5d286b9f4a6f48","ssdeep":"","tlshash":"79e0f19202cc37fd4a06c380c63cf892472951e9378f45a8460d133e458f071ee9f358","first_seen":"2026-06-11T21:42:13.241854Z","last_seen":"2026-06-15T05:50:01.194622Z","times_seen":74,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.893Z","timestamp":1781502556893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/test-manager-lVaoS8w6.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"94a09e870203a5556774efd16699ec72\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a649b7e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264086,"size_decoded":93843,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"94a09e870203a5556774efd16699ec72","sha1":"ee6b4761fa791a096343464c2454856e295b2efd","sha256":"5db4994a10b5afc213510a63dbf1dbda0773b2d99a38758e5e0c1195619e794e","sha512":"3ba84c05f38f55fa04029f26cef188af26d5f9e30910ec381a112f4741ee7f46a78b46f45fe730bcaab034701ea26440ba056a8cb3e374ffdb9114a502812af2","ssdeep":"3072:PufxJTEL/fJSxRuCa22opUrFuFl0adRnZKBapjpN3NpnQ2oY8DGY3v0TlvIMBFSo:WfLTu/wxc22oqrrEZZpjoGzvIM3PpHh","tlshash":"a944f6c471c2b16247a355e8a03f0109f63a2954784dc498f22eddda3c77c8a967bf7a","first_seen":"2026-06-11T21:42:13.245864Z","last_seen":"2026-06-15T05:50:01.195244Z","times_seen":92,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Chi_Ep2Z.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.354Z","timestamp":1781502558354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Chi_Ep2Z.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"2eab9dcebcd5e6939a654d21cf26b135\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dbb578deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6484,"size_decoded":3527,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3376)","md5":"2eab9dcebcd5e6939a654d21cf26b135","sha1":"4a5bbdc2a0c5b83200dba530430b952d452592c1","sha256":"11048c089886bc5bc73dfaae1288b384e02da7fc45a9ad66983bc30283b99a75","sha512":"35b1d8f7e63864b5dc374fa67396f9de85d4e10f3d157b81e08b16754d308e78f3c5041c3720f0e9808d2a24768e6146f65b9a978e0e03b447dc1968b6e6f5f8","ssdeep":"96:j610w6jPLckGb6BnBKgNtnayp0GaImF3MMsDlQto0337W:Q0wsycnc6kxRihJQtBy","tlshash":"d6d1c567e5554cb6037c0db9dd5230d241f007469253e49dbf3a8dba7aa0c85902bffa","first_seen":"2026-06-11T21:42:13.345081Z","last_seen":"2026-06-15T05:50:01.196346Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/welcome-message-widget-Dw5FkXMB.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.272Z","timestamp":1781502559272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/welcome-message-widget-Dw5FkXMB.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"221f01106a36f0bfcfa9c6606e301780\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a73790e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9520,"size_decoded":3915,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4968)","md5":"221f01106a36f0bfcfa9c6606e301780","sha1":"619e83bd3ce0fa7bd39835f2e3f4e104ab373543","sha256":"28e3a42dbedfd08ac6294c1cf42c86aae773d2fad8e339d5bffa84b99bf14253","sha512":"8f7245b78ed4b507fb2bbf009a2d1b3f5f8bd45de3f4e230d0d54854af1d4f217c34239d7e0264c7483959f838160328d09d8aedb96f97ff03240cb4cc00be29","ssdeep":"192:+EjCGtMnfFkeJwZHko0RmiRCD80vnWlTkbWauyAOwACKR2yTig:+EeF9NJwZHvYrCAmATQduyAOwACKR2qn","tlshash":"8812a342ee989d3d81b7055ebe4d710c1568378aa9627dcadc3c0d7103ce8f926a3bb5","first_seen":"2026-06-11T21:42:13.226478Z","last_seen":"2026-06-15T05:50:01.197007Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.doubleclick.net/ccm/s/collect?auid=1925994040.1781502559\u0026gtm=45He66b0h2v894400803za200zd894400803xea","fqdn":"ad.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.70","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.310Z","timestamp":1781502559310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:23 GMT","end":"Mon, 17 Aug 2026 08:36:22 GMT"},"fingerprint":{"sha1":"CF:89:27:EA:FE:B3:AF:6F:E9:AD:E3:62:3F:E1:03:8A:BF:24:EE:E3","sha256":"9C:E8:34:32:FF:C4:8F:AA:75:6F:45:2C:3C:A1:80:B6:0C:88:CC:AD:81:6C:DA:06:97:6E:5F:50:76:7E:3F:91"}}},"request":{"raw":"POST /ccm/s/collect?auid=1925994040.1781502559\u0026gtm=45He66b0h2v894400803za200zd894400803xea HTTP/1.1\r\nHost: ad.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\ncontent-type: text/html\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":535,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/picture-v2-DX1Aygrl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.004Z","timestamp":1781502557004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/picture-v2-DX1Aygrl.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"a86ee82b4dfdacf7663f03db3e634ffe\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a654d2c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":1441,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1170)","md5":"a86ee82b4dfdacf7663f03db3e634ffe","sha1":"e883e86d6716b5884021d87bac71959afaf5c89c","sha256":"1e7236995eec645c576d25af43964648c279bc5f2ffaf99e9029347011e8f0aa","sha512":"220d8999c641edd0d442605cbc4bc693c65d581ba946eceab981d298f70569556dd4de0f005ee443379829f61790f50e0a2b3a3b88cffff861e9ceb21600de0c","ssdeep":"","tlshash":"bb3172355e75c571032740de7a386380beba52bf9a315ca476bc8c7e07f4c59c136650","first_seen":"2026-06-11T21:42:13.150329Z","last_seen":"2026-06-15T05:50:01.197667Z","times_seen":91,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CmBrB7Fs.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.277Z","timestamp":1781502558277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CmBrB7Fs.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"9e43365be1f7b51de2656c451b4a960d\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d3a098deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9889,"size_decoded":5018,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7495)","md5":"9e43365be1f7b51de2656c451b4a960d","sha1":"325951eaf45846fbb4ffed6d6425156932a5b3d2","sha256":"e3c388314f191def1cb9f02f8157ec8b678e1c79b2678675c18759fc05960c2e","sha512":"84388592685a31a0dcf09ed38a822c04541dcd7806c40a9f4d2a5955937765e81a06eac397ed6339189ad7df519f9e5f51726a6dbf1cd2fab1b1dc6d6ecfdf0f","ssdeep":"192:lpthnwzVy/2kpRNiZqwOLtIqep7qQvqEq+P4eaFsPHsmr7YnnGA/6IFouGr/kWhz:rth8M8q1+qeNqQvqEq+QqN7Ytje2NPH+","tlshash":"691208c21b001eb0526e4ccddf6e11c918e25faaae01c0ce3e7a6e7970468c5d613f79","first_seen":"2026-06-11T21:42:13.305579Z","last_seen":"2026-06-15T05:50:01.198784Z","times_seen":74,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/language-picker-BDDcg-87.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.310Z","timestamp":1781502558310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/language-picker-BDDcg-87.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"bd0e9d8fe504178988093dade51a1e8a\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6aa98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11768,"size_decoded":4310,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5891)","md5":"bd0e9d8fe504178988093dade51a1e8a","sha1":"35a8627ffc7a6602b8ecb53d409578a8438dd07a","sha256":"2c37986eb9af3180dc7f9933228bb31ac77953ea015f4b814bf98062f1f83301","sha512":"031c087be7d6cc034c0a00adc9d0b46a138c4795a9cb7ca012e3211addb981d42e2352e3c6d382184cfc3e25db14ccaa30bcd9ac8461192b26dc5dd703630335","ssdeep":"192:OWq1wDodjg6wEDvVmkPRE3yYZcEsonlCaPuBsjOwn4lzGFEAgD81TY6DWFxucqyg:OhO6YEDEkZYOonwaPYOnGzGWXxuK5DqP","tlshash":"80321a48b612f639b673590a37b5b84cc1186e368e956ef9db47401403cbbf9d2d3b09","first_seen":"2026-06-11T21:42:13.46085Z","last_seen":"2026-06-15T05:50:01.199369Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BQURsBDd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.325Z","timestamp":1781502558325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BQURsBDd.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"6b5dc49c2674473f0b25e921c1a94f67\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d8aeb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2117,"size_decoded":1656,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1262)","md5":"6b5dc49c2674473f0b25e921c1a94f67","sha1":"222304ae5d076983b4c449fd53fc28ff9a2f5f8a","sha256":"c98af471eebfaf674a4cb9cc943d46711ffa6bbccdac0952440e0b85ff578f1a","sha512":"e23b919147988be1988c8a7f890322156f9c41a7441692c6bfbd90d365332d928238cd1621f98a3193c60e0fd86c87993319f30b8fd27fcdc15dbb45640bd79f","ssdeep":"","tlshash":"d8417087508209b1426c4ec8de521be01ee88b47e068ceddb83b9c3a3260dac5026fb5","first_seen":"2026-06-11T21:42:13.381261Z","last_seen":"2026-06-15T05:50:01.200398Z","times_seen":72,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CP7zO4wX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.371Z","timestamp":1781502558371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CP7zO4wX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"4235f616cf0c0cd01bbfa3f51dec750a\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb9e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":780,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (419)","md5":"4235f616cf0c0cd01bbfa3f51dec750a","sha1":"4e18ee1bba7f738e8dab658c8ac5a0415c687f56","sha256":"30145423c125d6b92ca31026815c7a02e154748d0bd44a29e4325bbf184dc028","sha512":"3adedf7b3955f1d63bd947f5b2d6b3f7fdadeda8043c101d0df46be325b4b0ad12a4952385b2f64ff906184be7b977c8ace4f4e97fbeace959c0f34fdb2ae86b","ssdeep":"","tlshash":"cde0f1b78003c7f9287f44b0ce2cd88296e106c20781c3d251ff6b511a670d3401e10e","first_seen":"2026-06-11T21:42:13.13066Z","last_seen":"2026-06-15T05:50:01.201513Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CWRkmb5n.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.159Z","timestamp":1781502559159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CWRkmb5n.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"9aaba611945f5be23a12393d71684bfc\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72bf7b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":995,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1379)","md5":"9aaba611945f5be23a12393d71684bfc","sha1":"7f7fbd72a35f7edfa23a8e7c33991ea115473e5e","sha256":"d9790d14b26cd801c07dd83a79c14b4a8e9f9a5c034419e2b0f7d884c92f06ee","sha512":"8a9efce2ee36d891c9a15a3c899d449b01587369d4e59e1e9bc3f3a8353b7f6100beb100954a9a039913ecae9932804c2f673827efe35bd3ec9e2db37aa87675","ssdeep":"","tlshash":"ee212744e978a7b8cabd429f2b025083e4a431c3fd34d45167f51c7c6ed4581537b94a","first_seen":"2026-06-11T21:42:13.410539Z","last_seen":"2026-06-15T05:50:01.202108Z","times_seen":50,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/useQueries-hQCRIoX5.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.261Z","timestamp":1781502559261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/useQueries-hQCRIoX5.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"a21cee6801fa5775f1be5404155f3042\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7368de8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3033,"size_decoded":1843,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3032)","md5":"a21cee6801fa5775f1be5404155f3042","sha1":"77dca062a02138b8afa43425881b169038df4be8","sha256":"666e4f9cbe963b064e87672a712eca82b553b04f3d0f54ee2339ae98818d959d","sha512":"e5e453d074f0d4ff6022c834a6dd1c16aa9f99b2fa3984cceccbc047c088285be4fa6080c32e30569b9798c03bd9a9c3126a6e95aebd553e587f774aa9bd6cdb","ssdeep":"","tlshash":"b251524bb461623677a198d99c398066a31d6e0d700e40ecfbdd5dcb69438cc6a72f3a","first_seen":"2026-06-11T21:42:13.405229Z","last_seen":"2026-06-15T05:50:01.202806Z","times_seen":50,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/shared/fonts/inter/InterVariable-latin.woff2","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.838Z","timestamp":1781502556838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/shared/fonts/inter/InterVariable-latin.woff2 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 22 Sep 2025 15:36:02 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 2360717\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6a7353a6049da6d0c298d8b36a8bc8cb\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a643aa68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62164,"size_decoded":62649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62164, version 4.0","md5":"6a7353a6049da6d0c298d8b36a8bc8cb","sha1":"66b464c8ba4b10dee2b2137ac4f93f1556905c5a","sha256":"9c16a208f738f97584c76f5a4f4929863a40d0574ecd7b11017df9965829e8f9","sha512":"670c75e647532379918668b39810da5144223653235b141a2ee20b0328be7720fc7c34bd48929c5c4b15e6a8bb08e2945399de8dee775ccffc734fd6a6f7a272","ssdeep":"1536:Pd+94WUGwr2EI0EAZE5EedlOGcCX3+Nx4Vhkn50ffAOg8wt5zr:PdyUGwr7Zs5EejOmX3iln503Al8A5zr","tlshash":"1d53021f6eacf2e5c4ad9cec74420cea0a1e571309c74c1245a77e160a46b77d6e60f3","first_seen":"2025-06-23T00:10:28.466523Z","last_seen":"2026-08-05T10:46:18.270651Z","times_seen":4429,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/video-CuiRER70.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.319Z","timestamp":1781502558319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/video-CuiRER70.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"fd2753601c381fa2aee22a7bc17d31a8\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7aca8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":1193,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (825)","md5":"fd2753601c381fa2aee22a7bc17d31a8","sha1":"deabef9fe0747d963174c580d45c7072d1ed0e9c","sha256":"a701ffa10fce1db2bfc22323629215ed2765efb74ea5dc9386c1d63dd12725b1","sha512":"09e69f2461b43ab092503996aa23f9433f79bd2c31267081a0586cf4c670f14dbba632f36581fd3db7b5e62b4e08f2f6bcf56156b6a0ab86dba3d5c08dbf821b","ssdeep":"","tlshash":"602186262c93c4f416ed248b9c38a551e6e061b593a261a0c1fece3e83f4fd4441fa84","first_seen":"2026-06-11T21:42:13.216204Z","last_seen":"2026-06-15T05:50:01.204076Z","times_seen":72,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-scroll-container-CUwYcH3v.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.376Z","timestamp":1781502558376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-scroll-container-CUwYcH3v.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"6b94ba601cb414b3213841a0da31f07e\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6ddbb08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":1210,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1391)","md5":"6b94ba601cb414b3213841a0da31f07e","sha1":"a6348b04992de13c742a7d451d086fe5049ea105","sha256":"d3db4a03592c658e8d83d7d59919c458fa0e0f61dc27f942bc0067d6af505ddb","sha512":"20c1a18f1aed0e025d39355550eb326d86c3d3db8cb3799240883f87a18ac7be2a6d844d4f67508842a671ac9e9d02cd38a9dbbd33f8b3634f00f8c7e61e124c","ssdeep":"","tlshash":"5d211e671940a03857bc5dc7f8aa0500a6f103d77332e4e4f46e5e625a67bb3b2bf606","first_seen":"2026-06-11T21:42:13.131547Z","last_seen":"2026-06-15T05:50:01.204676Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/cup-CsUNi6_d.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.383Z","timestamp":1781502558383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/cup-CsUNi6_d.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"5d4868b6e3551cd11fbe2910f44fcb62\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debce8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":977,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (812)","md5":"5d4868b6e3551cd11fbe2910f44fcb62","sha1":"27776d641d4d9a4c7d6f1adeeaf0e0f239ae2196","sha256":"979b4d71976369e1149e9bc96060364e56e40456e28ec9e9d845250747896729","sha512":"d746e75415da5262d0ebcaadd1da4bf7c620ace0ecbd32c224ba833760b20e5a16c79406472c040ca9b1b36aed161cfee591acf84a0aa51b2729c94c6bc686a8","ssdeep":"","tlshash":"4001b1ee3729a1ed561ad80ece29444c934ea4f5371a51c40d4ecfb5070f4d1ea07930","first_seen":"2026-06-11T21:42:13.280378Z","last_seen":"2026-06-15T05:50:01.205233Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e66b0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.769Z","timestamp":1781502559769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e66b0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\nexpires: Mon, 15 Jun 2026 05:49:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154855\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446698,"size_decoded":155439,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"77b5afe8d55d26bafcd9f2d742c59c6e","sha1":"a00b1fc3979718673b747c4fbe5077866e35e903","sha256":"65b4f0804ff2257f62c3dc1e7e710a3e9a6bf5e4235c2ed49e742a382e406f42","sha512":"da17768a52176454a8b3c8e1f1ae7aecb6faaa58e516bf0a5d9bafc75279b88a1b2c74882a23377f8946e91c1dbac0c65193e014faa74fb5518d839f72d8af14","ssdeep":"6144:73isqANn9H5aa7p1u+Z18DPL3MdUHuVgNhXB3JWeyZO0K1KOn0:OGn9H5aa7NZ18DPL3bS/","tlshash":"d29409ceb3d674225392f478903f018ba57a69e2b44cc899f189ccd42e7469a4277f7c","first_seen":"2026-06-15T05:50:01.205794Z","last_seen":"2026-06-15T05:50:01.205794Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=236\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.448Z","timestamp":1781502560448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=236\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=aX_bJeVMwwObJXQL0nhwFTuL0h6ZJ4kJOs_hLO6HBws-1781502560.4467034-1.0.1.1-tPYOrXLchaRCF3eO1bbkyNxSNfonpfPA51LUNY8muJBbEHO2rXldiQNapkLH91cUtqkMapy2aGQtFCpG8QigfVpDuME3893GViL4Ht3YS.bV7M_Sv23_2.v3RcdLgkA6Q8.I8lJauupJ4aP7JAGxlA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=l32zoI450IIzmeVuior3NF4ESsaue_ULWHK3VR9STEk-1781502560.4467034-1.0.1.1-QbRvsGVtL4ZJKEoPX0XmzoC87TFWPVGN4MydLzBO8xc; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7acba1568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=989\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.459Z","timestamp":1781502560459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=989\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=nrEmjwQOhGgnGdnzhBsC._y7e1JzQ34gQOW9VNE3Jio-1781502560.4580474-1.0.1.1-T7mfKcq_bfo1tLrrmoeXVZ8h64poEYzomlR1EmH4zuOvxyHm6nLeiRrOSXlJYrLua6jRymurGp3dAEWIaOtoysGGtD5Egk.hVuNKMojO9J3W6dVjm.59BtPnpdtfsKcUJXvlKpRtMzhd3mrPdJ11ng; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=dE7GVCz6cCoiQN24_yyvc2a.ficrwOdcbxeJbHitMRk-1781502560.4580474-1.0.1.1-fotv84z8nTf0v2xmKKfV1xjTQzvwIiPU6_v2.SIjfbQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7adbb9568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=26282\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.560Z","timestamp":1781502560560,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tournaments/get?tournamentId=26282\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-server-event-BYTo5gKS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.903Z","timestamp":1781502556903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-server-event-BYTo5gKS.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"7fee7df0d7d0c994ca2b68c876a59bb0\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64aba98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159,"size_decoded":616,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"7fee7df0d7d0c994ca2b68c876a59bb0","sha1":"e1cfbaa1c5ef9a5848ad9233bde52e29dd8757b9","sha256":"5e792d082173ca992a656c68990a3a298b792fb9d6e23bd7c8c1741b794cbd03","sha512":"c7d62fbd1fbcc9a3bbc7f22990acc041c68088fb8aefd3da18b22f14005bdb5b71b0c2ed1a83e0b385f42f9b45bdd10690bc6789cd881a4ddbcce399bcc11441","ssdeep":"","tlshash":"14c08c1b0c82c0b438289898ad11442382a9338933228ad8082c4a634a2f0e2c40fc6e","first_seen":"2026-06-11T21:42:13.228512Z","last_seen":"2026-06-15T05:50:01.207207Z","times_seen":92,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/get-region-by-code-CYxhYg5B.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.009Z","timestamp":1781502557009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/get-region-by-code-CYxhYg5B.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Mar 2026 14:31:16 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 3411815\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"2ef54af25afba19e741169f154f89f44\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a654d458deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":628,"mime_type":"application/javascript","magic":"ASCII text","md5":"2ef54af25afba19e741169f154f89f44","sha1":"3a962a1a0ab43a6c2581a8f0248feae40c56455c","sha256":"ebc220e944b156a536195f9f1aa40527063214aa24c7a14bd519c84fded8a882","sha512":"27c1896a3bf262eb458ec5b35bf2995a0aa4cc121411af155a1264fb2e9247f71a078b66560d12c5c11b6bfdbde7ecf7d001e3941c0846a4852173e804bee6ae","ssdeep":"","tlshash":"83c080463d11255143b1197b0a5e4db54869a408394a4791b11d94c72e754b115dbe0a","first_seen":"2026-02-20T00:06:55.063189Z","last_seen":"2026-08-05T09:11:21.970502Z","times_seen":1010,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/calendar-CgMJWzmw.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.028Z","timestamp":1781502557028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/calendar-CgMJWzmw.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"be85c8c15fd80bb8dc33d1bc5fafce0a\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a656d868deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1168,"size_decoded":1139,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1167)","md5":"be85c8c15fd80bb8dc33d1bc5fafce0a","sha1":"7bf44abeae229e539e111cf77e2ea7848d55c6e5","sha256":"800c7293bffaef0c13b7e360aa1acb24d0f924a828374825f920f1cd53608d38","sha512":"2663867be8177bdfe455985f1393f46d93205ab1e2016da616eb6bbecf34cf4acc76b69968da8d9883fd144f1cc46eadc964091bfdb1cc5d894b8f213fb72b04","ssdeep":"","tlshash":"3321eeb2571cb6ac46db23bbcf19fca0834498e83207a261d38e57d5048b156ef0f905","first_seen":"2026-06-11T21:42:13.392201Z","last_seen":"2026-06-15T05:50:01.208354Z","times_seen":89,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-B_6wsIFd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.153Z","timestamp":1781502559153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-B_6wsIFd.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"018728f3fb7fa26774b20692812fd621\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72bf598deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":597,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"018728f3fb7fa26774b20692812fd621","sha1":"c13fe672766c84c9847b5281c474faed09ad6d10","sha256":"3dfd5b1d937a4c6af56c97bbcd3cc371cbeb59d0bcef11d7afe347b4d642897e","sha512":"c42eb68ad6e3ae09eaea2c509d45d4bee741f5f89d61fb0a0f98f7cedab98d16274c3e39944f4adb5ce32ccbc56f982c9997d446b76af7487bfcbeeb98824715","ssdeep":"","tlshash":"17b02b0b0482c5b408160845ba0080427328a2040321ebc4b00e031015658c3920e00c","first_seen":"2026-06-11T21:42:13.148178Z","last_seen":"2026-06-15T05:50:01.208866Z","times_seen":47,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/matches/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.004Z","timestamp":1781502560004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"POST /matches/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 69\r\nReferer: https://1win.ng/\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\nvary: Origin\r\nset-cookie: __cf_bm=o2meAk4JvrrZyex2YlE0270tOjF0zVLN.KsUiWzUQRg-1781502560.084816-1.0.1.1-9eIO17_0KimuM86PYrS_tjeo5AZH6KpspfiquAvhowpGQB8G.6qHlYqzcAOE_qiZ09XIXphoCgzqOazDfgFxklaOrS4ld0Qt88KagIRUTyuM19oQkdUF6kdvr.6LjEMLur.xf1wmbyFKKwnqDuskLg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=dT2501APo2niAg2Yv95F0w6xMYOx3Ug7KQCWYMcvz0Q-1781502560.084816-1.0.1.1-W12HuXQ9fFXBaUOHiV.0.hem.L2sKxOau.LM_r2EBzs; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a788d58b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9108,"size_decoded":2650,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"926d337163ccf063d0bef8492f1a9254","sha1":"fdb1526701a0ba49c7ba4bec571a6a5222067e40","sha256":"b4507c4999615a50a469d39e7636a6e795dc6389dcec499eedcadf1e927c6fe9","sha512":"cb023bef698cb3fa931a91658b383b2e45327945412a2019bf661b89a0ac96ba6188b8aee3f84af7317ff4be2c8ef8b3760fdcebee1ecab778510b86d6110986","ssdeep":"192:7zgKb9hkREQ3XqQSKlmQc68QaZ2Q+C9ujs0OPwxF:nh7np5s2kj/","tlshash":"5112156e47280dfce61167e46ab9bccc50ad14265dd7ad899acdcf0c09d98ec132e872","first_seen":"2026-06-15T05:50:01.209933Z","last_seen":"2026-06-15T05:50:01.209933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=23\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.456Z","timestamp":1781502560456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /sports/get?sportId=23\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=X67.1wh1AiiddfV91PbOuKDdRkaBo9sQNijdn1Orp.I-1781502560.4567204-1.0.1.1-0T.Q.2Y4Vj_VK_3bAsIEvjg1UcnvClyj5yn8GOlqLlkZ2pnERCNjLDjAC8uqfxtzYIjfIGpNx35NJE170U.po9RGSgALX5OHRBzS344iV.QCKImHTy0gy0P5KGpYhZJ4xDivAG6mTV.JBKpdJYM6gA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=x2UoZHsyJUrPEM_vqER_lSt3Vv1qVCg3FGgtR7b5w8g-1781502560.4567204-1.0.1.1-W8YwHrUPIBn8geG0vS3brLKfmWMeyqMsXVVUCiw6s04; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7adbb7568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=40006\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.569Z","timestamp":1781502560569,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tournaments/get?tournamentId=40006\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v2/tracker","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:31.891Z","timestamp":1781502571891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/web/v2/tracker HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 12384\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=pyhYnJKAyas_Zw.hNTNXseZLg.QSNAcvKSdEM7Se34Y-1781502560.131892-1.0.1.1-bvGUeVTKh0kUOEUjL9VH1WlXpXS0WlGvfdfwTzO6PNvMGTRCVBTh7DQCBGDNo02V0Rl7TdQWluwJZlYO0ggDiKdvj.BcDZJfRys0Spvmdq97oWc4m1.cJHcJpVzXKT2Rwz2yOKY22VIAYhdE751Big; _cfuvid=bjI0CChKQgARaHT_HEuWM35OSSWEJ0wEy_KLuamnNOE-1781502560.131892-1.0.1.1-2tX_fu7W8oAVxNzjHjumLxwrLMcD0yml6Be9YJvB85Y; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU2MTI1NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMzIlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559; _twpid=tw.1781502559888.821034322867757848; core-sticky=ae220d3d7644fba3; _ga_548949LWLW=GS2.1.s1781502560$o1$g1$t1781502561$j59$l0$h0; _ga=GA1.1.1426029066.1781502560; _hjSessionUser_2606090=eyJpZCI6IjVlMzNiMzRlLWYxNGYtNWZkNC1hN2U3LTgxZjZlMTAyZmRhNyIsImNyZWF0ZWQiOjE3ODE1MDI1NjA0MzIsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2606090=eyJpZCI6ImI0Y2E0ZTMwLTE3MTktNDAwMy1hMzg0LWFlMGNiN2ExZjA4NCIsImMiOjE3ODE1MDI1NjA0MzMsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\netag: W/\"25-Zj67mG54TfZ031q1ea2QwFUXWX4\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a0bf4ac25caf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":374,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffd908939b60f1154b33016c6d2e9c6b","sha1":"663ebb986e784df674df5ab579ad90c05517597e","sha256":"9c3b25f260defd6991608963a30a67cad0981ecce13e5975b1a6304887514d7f","sha512":"786fb75180a4545de1e3d9858f421255beed81a5f0efe626b0ef1b9fae8565b4bb633bf8241d114a998f78d1f345d63afbd628e5a310c3cdf937c7fca79c852e","ssdeep":"","tlshash":"6b8000002c028002acc0cc8a03838030bfb23fa0802f08e8028ee030ca2a0f8e08ec28","first_seen":"2024-04-13T04:25:13Z","last_seen":"2026-08-05T09:11:21.910895Z","times_seen":10956,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/email-ziCO0z55.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.923Z","timestamp":1781502556923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/email-ziCO0z55.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"0613cbd66227c173aebd7c6d5cd8bd80\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64cc0e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1067,"size_decoded":1098,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1066)","md5":"0613cbd66227c173aebd7c6d5cd8bd80","sha1":"e821bbffe5688766b544942c6ba7c583cf9832f1","sha256":"0b4396297aaf2e0783fdd424bfe084e314cbaa58389c25209fb68cf47dbbd46e","sha512":"7ce670e3e0db7e767cf686e160f1ee3a27437b709734d3a8bf403009774624cef3bc599bd1c0e887b88d0973111f8f175d2b16fda9306b08bb15de2196d8a63c","ssdeep":"","tlshash":"0d1120e411346cfe06aa8b7cc72c29d2430f08fc3b1d4189a62ff67a88505b0e906e39","first_seen":"2026-06-11T21:42:13.1548Z","last_seen":"2026-06-15T05:50:01.212362Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/common.config/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.231Z","timestamp":1781502557231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/common.config/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-deca3ba4cfac9a13b63815ebe5cc3b38-734c7478259df712-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Thu, 11 Jun 2026 09:52:02 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\netag: W/\"8939efd47e6412e15e628cdf6eb909b5\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a66a8578deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13284,"size_decoded":4479,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (13237), with no line terminators","md5":"13728f79694909b39c7693cada84540d","sha1":"67e76e64e381d3ebe032f07c41794147becb09b0","sha256":"1cab1ab39c4d8de20dca837ac896867321b5805f08d4232d73f783ac4e748aa8","sha512":"7627dd8c866835d5bcc1a7aa4047c97abab8260e5764611676f24f63c0fbe720f91bca136b6a7be0bfcaf867911f8210ca8a7fd80375aa62b6014ba5a6c2713c","ssdeep":"384:hYKkHZc5hhhXuAdDx5Klz8Dr0qbLZH0h8cAt+UmDmbaoG:hY8nZMARUhkkoG","tlshash":"4e52652995401ef8478ddbc86bc3ad7964fed591384d6c29afec436d074fb50e0a3682","first_seen":"2026-06-11T21:42:13.474436Z","last_seen":"2026-06-25T00:12:58.764288Z","times_seen":237,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/star-6NorSvIp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.314Z","timestamp":1781502558314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/star-6NorSvIp.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"cc4deecf942777c9bcc2b78c1369fdbb\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7abd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":930,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (674)","md5":"cc4deecf942777c9bcc2b78c1369fdbb","sha1":"e0e6dff137746e77d8739566ccc2da810bb6084e","sha256":"2ed292fd99f67b518ccd08070ae758bdf1020fab27fa5b27d1a7eb2180e487d7","sha512":"c254bfb19b94104129f80a2d71b1eb5dfa2908a6e1ec0f04218e87a00f58e266d99869ee53db721203c0b322da8f23afefb5f137b234f9f41fe7ea0bb41394ce","ssdeep":"","tlshash":"9a01fee614685bbc8916d24987379510130ee8bc374ac4c29f4fd37680c74a1e507d60","first_seen":"2026-06-11T21:42:13.221062Z","last_seen":"2026-06-15T05:50:01.213775Z","times_seen":74,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/landing-token-sale.currency-converter-block/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.912Z","timestamp":1781502558912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/landing-token-sale.currency-converter-block/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-248ddc295d4949bfe1082f46f74aced1-4d1f8b744e8d3e8d-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 12:25:35 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\netag: W/\"0e08da6366708fed1e3590824e539725\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a713b8f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2931,"size_decoded":1849,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e08da6366708fed1e3590824e539725","sha1":"b3acbfc0fdc4b78ffeff550cd78d9fddd27476b6","sha256":"bdc10fb3709625acac7ad2ae41e1d2a77e104fcf5e75583861b7532f57d18327","sha512":"48bd91d5e8b45d6673de497804e8ba871c28395b96ba4a4a215fb1134dc77c30930bc469bae6b170a7bc0e83f4b639e8ffd7a51e272d31ea6473e6c4b5689be0","ssdeep":"","tlshash":"1851319f690a1ff97fc384fab88716e225bb109c491205b687e7c63d0b58744e36bc90","first_seen":"2026-06-07T21:51:34.56059Z","last_seen":"2026-06-17T13:14:58.087887Z","times_seen":142,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/telegram-white-ClJpQqVv.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.148Z","timestamp":1781502559148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/telegram-white-ClJpQqVv.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"c323dcf93ce6537c3356af0c3a0c08f5\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72af3d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":919,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (638)","md5":"c323dcf93ce6537c3356af0c3a0c08f5","sha1":"32363b733edc2d8e4b226b84c13094f336453afd","sha256":"4e9965c959482ba0c4f45384a891bb84dec9069e4cdd6d9c30b5088a8bf330f3","sha512":"5329dd74b74a1f4cff6119a215a0656a7eb6f6ecb027c4d4a417a9a55bba05e5ae458399142a164b8ad27e12a2e6bcf4e971a68b800187316d06896f52808427","ssdeep":"","tlshash":"5df02355132456f802a39de6cf780e405b0965ac7b4d90c4526b873163c58d8c88bd14","first_seen":"2026-06-11T21:42:13.482499Z","last_seen":"2026-06-15T05:50:01.215143Z","times_seen":52,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1976\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.435Z","timestamp":1781502560435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=1976\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=H4rooznk7VrcAfU5Qb..t1UPThOdVQBYeDn.0WzElDU-1781502560.4355888-1.0.1.1-r7n_DoIFnnMYhnsMbsUUX0K.VzK_0_6QUiB9Wqp8.WBAq8ElxZnFVuvIkrzDbfbJhTxwjP8miMDSvgL8FEnpEES1LQKSdsZKlGSS0H4ILOiAIcb1hz9HswoOQKFbU8xcdEAbcxCaYbBXZAoPCozOqw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=mgfmsbpqFVrsFKE_LV2Rj2N36PIpKP0oy4ayto1ZmTw-1781502560.4355888-1.0.1.1-4uqdaKJm2NbaOrV1A.KplBvsrkhc4K1Q.8EqIycziE4; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7abb9a568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/betting/ui/statistics.svg","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:26.755Z","timestamp":1781502566755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/betting/ui/statistics.svg HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=pyhYnJKAyas_Zw.hNTNXseZLg.QSNAcvKSdEM7Se34Y-1781502560.131892-1.0.1.1-bvGUeVTKh0kUOEUjL9VH1WlXpXS0WlGvfdfwTzO6PNvMGTRCVBTh7DQCBGDNo02V0Rl7TdQWluwJZlYO0ggDiKdvj.BcDZJfRys0Spvmdq97oWc4m1.cJHcJpVzXKT2Rwz2yOKY22VIAYhdE751Big; _cfuvid=bjI0CChKQgARaHT_HEuWM35OSSWEJ0wEy_KLuamnNOE-1781502560.131892-1.0.1.1-2tX_fu7W8oAVxNzjHjumLxwrLMcD0yml6Be9YJvB85Y; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU2MTI1NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMzIlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559; _twpid=tw.1781502559888.821034322867757848; core-sticky=ae220d3d7644fba3; _ga_548949LWLW=GS2.1.s1781502560$o1$g1$t1781502561$j59$l0$h0; _ga=GA1.1.1426029066.1781502560; _hjSessionUser_2606090=eyJpZCI6IjVlMzNiMzRlLWYxNGYtNWZkNC1hN2U3LTgxZjZlMTAyZmRhNyIsImNyZWF0ZWQiOjE3ODE1MDI1NjA0MzIsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2606090=eyJpZCI6ImI0Y2E0ZTMwLTE3MTktNDAwMy1hMzg0LWFlMGNiN2ExZjA4NCIsImMiOjE3ODE1MDI1NjA0MzMsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 29 May 2026 14:20:33 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nage: 635777\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a2112a4e3bf4a93044f634f091d347c7\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4aa23fc58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599,"size_decoded":779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2112a4e3bf4a93044f634f091d347c7","sha1":"24e57c0a266ec40035b456c0b84ff7dc9f23c554","sha256":"c791089bd7edd7f6b40c66c035349b46d93eae66829ae2750a929e92006b7177","sha512":"81fbbc5c4f497d3635e99877669e4f77a36a7a5775455df9c3a1e68210f675c8e6f673773835bf990605802500eb20fef70b8aa5edcfbde936968fe805c2309e","ssdeep":"","tlshash":"8ff0bba68c5089445a84f933bf5c6ca17357148c5f9f78601694ea1cf0c75715f05cf9","first_seen":"2025-12-16T22:06:44.104497Z","last_seen":"2026-06-15T05:50:01.215806Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/social-button-BKYvO_tW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.922Z","timestamp":1781502556922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/social-button-BKYvO_tW.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"d524e4d2461cb54ac0919fe70b2c6874\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64cc038deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50160,"size_decoded":12329,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46334)","md5":"d524e4d2461cb54ac0919fe70b2c6874","sha1":"e0c22a8a5677eb132f7b05410b81297a542acd97","sha256":"b89df2563dd6baedb540c019606fcc1741defad330451dbda49a1d15d525902a","sha512":"be91bfbecaa26d0f86f7466be425d87235c2e7849c7b754ebb5fd5a5360c7d3889fa5f2f2e9ce36ada8de3a2c111e909ac236d15346a8f933cb6a3fd1ff6b4c2","ssdeep":"768:dhcku4mku4/2BvqId/tbLOzsJCDMf3Zaw3Zayd7I4:IF4mF4/JE/tb0BMfpnpX1","tlshash":"133375fca320926e29074ba5ce255185074ff6bd7d550aa0671cdf38f6cbeadea47800","first_seen":"2026-06-11T21:42:13.37861Z","last_seen":"2026-06-15T05:50:01.216371Z","times_seen":92,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-B7nUddwS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.268Z","timestamp":1781502558268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-B7nUddwS.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"05c517863e3bc24276f0f7d01dc9d467\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72517\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29cf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4010,"size_decoded":2407,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2823)","md5":"05c517863e3bc24276f0f7d01dc9d467","sha1":"0cce8ec4897aad29ea423df22bd693df3957fb5a","sha256":"d472824a9792c7068c2d49f8f2834c0603148ca242ef04e00498504b9d31c432","sha512":"76884a21f2f838dfd3b4404064609ca882952486a598b975ceaae8e31514f23a126ba2e00115d8f14846ae5c4a9e6b22f20d45d0472dce96642f2ec2c03dd878","ssdeep":"","tlshash":"ab81b612985068bd126d1cc9de2a21d276e20b91f125c0edbe3b0cb935518d0942effb","first_seen":"2026-06-14T13:48:35.263057Z","last_seen":"2026-06-15T05:50:01.217032Z","times_seen":19,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/button-_zqq3Qiu.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.365Z","timestamp":1781502558365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/button-_zqq3Qiu.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"f2b7100f86f13d3d9d92055ad5e0e1f7\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb7e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":1163,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (713)","md5":"f2b7100f86f13d3d9d92055ad5e0e1f7","sha1":"6069483b6c29c1c5171b411d2aac2ac94c3f6d34","sha256":"fbed11055a3cf3601f62086a652d5dba8db395f2ada26bd3e087907b8ff06d47","sha512":"8a3ea5204218bc7d3341e995e1d040e8bb2e0bf21873e83aac1dae71dc028dd85b273b3d402dfc18ffc9a9f11998fee1b49a164d6a48186a70331f6174e6db57","ssdeep":"","tlshash":"e1114257bcb64770672b000f143ed161b588f5bea36334d006eec9b997ecdb4841e589","first_seen":"2026-06-11T21:42:13.16287Z","last_seen":"2026-06-15T05:50:01.218084Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lab.amplitude.com/sdk/v2/vardata?v=0","fqdn":"api.lab.amplitude.com","domain":"amplitude.com","tld":"com"},"ip":{"addr":"151.101.130.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.892Z","timestamp":1781502559892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lab.amplitude.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 04 Aug 2025 19:03:11 GMT","end":"Sat, 05 Sep 2026 19:03:10 GMT"},"fingerprint":{"sha1":"9A:E7:DC:01:EC:D3:56:A0:85:91:59:2C:7D:7B:DF:53:82:64:46:97","sha256":"6B:3D:43:99:3C:18:F7:36:41:EB:33:53:54:26:65:B9:16:7D:40:53:F7:34:C6:C1:46:05:4F:FE:65:78:5F:F3"}}},"request":{"raw":"OPTIONS /sdk/v2/vardata?v=0 HTTP/1.1\r\nHost: api.lab.amplitude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-amp-exp-user\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET,POST,HEAD\r\nx-amzn-trace-id: Root=1-6a2f9183-7af802b362fa9c6723fba18c\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\nage: 104\r\nx-served-by: cache-bfi-krnt7300063-BFI, cache-bma-essb1270070-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 218, 14\r\nx-timer: S1781502560.924690,VS0,VE0\r\nvary: Origin,Origin,Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\ncache-control: no-store\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-allow-headers: authorization,x-amp-exp-user\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":830,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=34892\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.444Z","timestamp":1781502560444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /tournaments/get?tournamentId=34892\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=_.foxtWrBhRiwNYsN0Hk9aQHFltQf1dQ77CgxJXnvsk-1781502560.519925-1.0.1.1-r4ga.4o9UyAWalzmgUS1GuBQ_hpJrBRljS_4cKbDtcwmAjx.xjR3WLJKF96i7YLq44FWcUUtEupwv6pDJXM8SyM3lIogH5a3RG9teW5pnjyppZGKHou4kQOCuZixNEGhGna7IFeP8N0mw8NYOct0hg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=UGcTJIENRhtES8jErybGdnfxUT5Zur3V3d1B_nwuKgw-1781502560.519925-1.0.1.1-4aM_dVJDaCW88TUDNzFQKq7jHHo6pr4krKh2sko0aG0; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b3c29568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421,"size_decoded":1342,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"524032c5255e24d634b7396f6672a038","sha1":"d13e4ab11cc74ed00da1ee7f21d575a236209360","sha256":"592c202f690bfeb2d03c98ab25bfa7700c2d2638e2cf7c3bf06496d9f15d362d","sha512":"57a3588532ae8cdf8f6b0b68c7f4242494aae01873e5b34f5e212460441e9b0cce7d061bf989fcab7c564db3966d8b713a8bcb615993779009f1e30323b5f807","ssdeep":"","tlshash":"3ce0e55e13988efe230012a1027a798865090625aa933d85dacadf8c98e89ac632d163","first_seen":"2025-11-09T23:45:59.965139Z","last_seen":"2026-06-15T05:50:01.218994Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/web-vitals-BV2z3ijk.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.226Z","timestamp":1781502557226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/web-vitals-BV2z3ijk.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/resources/v1/app/assets/test-manager-lVaoS8w6.js\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"ec3367fbd30c5359861352e080586c26\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319116\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a66a8428deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6206,"size_decoded":3043,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6205)","md5":"ec3367fbd30c5359861352e080586c26","sha1":"a9c73c897d73b9312d87bc5e780717a83434f885","sha256":"1909b30bad1921f4d418f3c73df730f360d59711460d0b9c4bec59ca5d813a8d","sha512":"4cb076209333577688bc09a85509018406a1d151a7890704fbbf3c451dfaf11432c05595e7f0215295e385e1dd77e51f4d3f9f7f49d148cdfd4d8a24a5344156","ssdeep":"192:gSnzIhtK3cLtr0bjXRi/rbL9JngBZUxPBUVsuEaV+:gIzIzKG90fRinppTxw7T0","tlshash":"b4d182ecfa48753913a7b1b6d07f520a633b66c034054489d23ddbc11d3988e566bfac","first_seen":"2026-06-11T21:42:13.214404Z","last_seen":"2026-06-15T05:50:01.220145Z","times_seen":90,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/array-response-validator-BILV73Wz.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.282Z","timestamp":1781502558282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/array-response-validator-BILV73Wz.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b422f34fbf25baa4758bd2a5d7166e3f\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a238deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":819,"size_decoded":913,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (818)","md5":"b422f34fbf25baa4758bd2a5d7166e3f","sha1":"37ed0a0261947e4f92857ceb6e91c89747a64ca2","sha256":"98427fa7c4460615c312693c103a715ca1b1dc4f3dc49234e40e24e48b798472","sha512":"ac750832ca813f1d92e148d8bc6717452ec0d546929d270325044f3daaad7e7814d93705c8f44fd39865a3cd8bbd848f41ac189d8d30b48198eec1cc50fcc9f6","ssdeep":"","tlshash":"23019c2f4b449bbc403a2548ce4f3d344c589fed81e989849cea4b2257265e58a37bcd","first_seen":"2026-06-11T21:42:13.393126Z","last_seen":"2026-06-15T05:50:01.220735Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/fss/socials?h=f1e3ddb8ce74cb16","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.413Z","timestamp":1781502558413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/fss/socials?h=f1e3ddb8ce74cb16 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-a02c73f7c568b3a8da0ca8184cc4a8c7-5de901fae2dad28b-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-trace-id: 60ef780855819b87e722543342ab65a9\r\naccess-control-allow-origin: 1win.ng\r\ncache-control: public, max-age=2678400, immutable\r\nx-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nage: 1178644\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6e1c338deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":744,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2281569878da7a0baf410aef408e5ec3","sha1":"db53e8274b8d290e97b5274560240e17b3377d00","sha256":"b1b751fbe3c6389c2853e2ef6167ef45a88c56eec903ae0f95f6dc4c005f4b1e","sha512":"54ddf2c8a35ba8c159dee815e72260bb2163d02b0acb7fbead6704c51ba126e57ca2377c8a631063638a3d608030150a110bb835b9482a331a3b80e96e67f726","ssdeep":"","tlshash":"97f08ba233996930171327f944d77638d029516ffcf8d9a3c549e912c4e9be161222d5","first_seen":"2026-06-15T05:50:01.221306Z","last_seen":"2026-06-15T05:50:01.221306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/matches/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.016Z","timestamp":1781502560016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"POST /matches/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 73\r\nReferer: https://1win.ng/\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\nvary: Origin\r\nset-cookie: __cf_bm=0YigrJO4UeQd539xNca3yLC6.sUWxTluWV5wm6lduB8-1781502560.1017582-1.0.1.1-A7OyxnfdKNtSBJxsgEmdoByYcxH8tORL_97wkhkWdTYYMN7QVAoKfeDzKQ4hxWSxn6vdMa9Cy34IzW2oukRGIHIjB1NNYFmQafEln.SpbPcYJwWVvsG6qSxLNGzpaioHrSDQRKZa5oIBjzdTRfJsbw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=t4LeqpNKImZW7LU9WDZij0DMjXvXrNFvF0mW.7C1dK0-1781502560.1017582-1.0.1.1-SMw_.2E_jgv3FmGKj9xYJKxReF4RGOzsrmGKy7WxCdg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a789d6db50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11587,"size_decoded":2793,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"97803775603094ada10dfc56e7ed9f30","sha1":"c4bb34f3567045c447b5c90a22f9e02d78f83181","sha256":"996210df1e19408970b8b6999909089d7e6d147f39832a3603adb3eed832323b","sha512":"0d0539a6d59a8cd33860515c1d8cf19eb067bc6bd516ab1eba3060bd116190ea95656e1ee07c8fc8086cff2678320879d392a47fc3374c2fdfe4392be857c084","ssdeep":"96:7OhUfO6d00iKkOPBF0Vi1VJTO+CO7Ct+XCtDUO2hsWCWyMO8IegJRpbOyObw6XV3:RW6hdJ2E1PqH74SxtP1TCxZzyY74y3P","tlshash":"9632337f426c6cf9b72217f209aa3edda8a920254ce06d46d7eddf0c24d84e9135e4e1","first_seen":"2026-06-15T05:50:01.22238Z","last_seen":"2026-06-15T05:50:01.22238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=47\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.563Z","timestamp":1781502560563,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sports/get?sportId=47\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DRg7FJAv.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.320Z","timestamp":1781502558320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DRg7FJAv.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 15:51:43 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 1617522\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ef83be97c8d8cded7efb9d0b2f7edf0e\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7acd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":630,"mime_type":"application/javascript","magic":"ASCII text","md5":"ef83be97c8d8cded7efb9d0b2f7edf0e","sha1":"4c9c284a7eeca8d6fc91b64046a2be5d02ec63a9","sha256":"4f9568000853130a37e55ce7c0692dfac5b2dfc11ed8a4b034188d0f87aacc60","sha512":"d11d3b854b3eb8d49cab81246c3eaec2ef19ef855fa8ec0a5424051c96c66c759f5481cee48c41e1a8e0b9a1869334994f79cd6750af651f1c79a5274e203fd7","ssdeep":"","tlshash":"e2c02b3118ad2ced3cc105ccf105407d4e0a25cf619061c2ee8ed303d8d7014643e820","first_seen":"2026-02-13T00:10:19.580155Z","last_seen":"2026-08-05T09:11:21.980687Z","times_seen":895,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026auid=1925994040.1781502559\u0026dt=1win%20Casino%20%26%20Sports%20Betting%20%7C%201win%20Nigeria\u0026en=page_view\u0026dl=https%3A%2F%2F1win.ng%2Fbetting\u0026scrsrc=www.googletagmanager.com\u0026rnd=678990649.1781502559\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He66b0h2v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776793~119381662~119456239~119456247\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1781502559132\u0026tfd=2641","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.617Z","timestamp":1781502559617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:19 GMT","end":"Mon, 17 Aug 2026 08:36:18 GMT"},"fingerprint":{"sha1":"29:88:63:13:7D:77:C4:B7:BD:5B:53:D3:3E:6F:29:37:9F:14:93:44","sha256":"E4:13:4C:BC:32:C0:C0:97:65:99:C6:84:AE:0B:6A:C8:49:B2:D7:55:46:D9:34:DF:DB:61:1F:A0:D9:A0:E9:CB"}}},"request":{"raw":"POST /ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026auid=1925994040.1781502559\u0026dt=1win%20Casino%20%26%20Sports%20Betting%20%7C%201win%20Nigeria\u0026en=page_view\u0026dl=https%3A%2F%2F1win.ng%2Fbetting\u0026scrsrc=www.googletagmanager.com\u0026rnd=678990649.1781502559\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He66b0h2v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776793~119381662~119456239~119456247\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1781502559132\u0026tfd=2641 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":536,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=39109\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.585Z","timestamp":1781502560585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=39109\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=QfC9qvYu7RWKnVqQNItHsnjrbzKgIYBybffzMuuZe8o-1781502560.5841575-1.0.1.1-AaQWJjkiIagvtpyVh0gjRp64MEdqbgRtfVHWcTN_KfuH14dLq4ifLNyhm_EAyC_TYLvgJb_UI6c.Z3xk05PXlWQ32ChV0RFtAMeJaEJBhaA3ITvU5Dwb2KuTYWVTlO5MRxjIpu1bSae8kta05XMbkA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=9vCSFvD3D3QFgxNd6DFPmKBSEXrofQBseCzWdM21xgQ-1781502560.5841575-1.0.1.1-TUVbtUU02NJnY1YOCA.Lru317GegyECo0eZZHCPd4SM; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bac87568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v1/sdui/templates/css-variables?h=5645095df2836a25","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.541Z","timestamp":1781502556541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/web/v1/sdui/templates/css-variables?h=5645095df2836a25 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400, immutable\r\nserver-timing: cf-cache;desc=\"HIT\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 333541\r\nlast-modified: Thu, 11 Jun 2026 12:19:46 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=X13_Ll5nKqqwksAGcpwcku3Ju6BDj588m09JDv8B4Z4-1781502556.5417118-1.0.1.1-cM5cKexRtwOm4RanlHXH_UsgNqPnh4gsO1Dhvi1JxSR9HeQTFiH1VKLuoy8mg4zOPJR2b64DiKCuyQzLzNhe0SjnR9IXRiwnOv02fB99d.81lRnvazx7U9GITDDd.R6mhk9bBkIeWz8oE.3RxAeTSQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:16 GMT\n_cfuvid=PP2fTb14K6OVg2LnQJoev086JeVw977xNEOQAHBxQ88-1781502556.5417118-1.0.1.1-HdJ7OlwyWjB4o3yxxjug0JcDGElV86Kk51j.zHe4uq8; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a626d0bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128337,"size_decoded":21790,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b64c047c2ba25f52118d7b682ea0a657","sha1":"b1c2b5b269916f595a93671c2ad1a1944d58981f","sha256":"9b4fe020075fed0bfe3df5554854f183f5eb1204ef35285f48eccbb326432d2a","sha512":"b3ebae083b46c2109344dee2786de23c540f00ba5adaf2e2d924a4f8c7d3bbc2812284a846b4e41508f7c85ce55be75b15450f60ed4bc971bc02a9eff1727174","ssdeep":"768:PTvJ0mtf1NT0ymX5mBlDttdEbtx8vBhaNXXHOLaDRj3BxpsRlY5fNILERYwqTsNK:rv2uvmX5mBlDttdEbH82c+lxpsTYHH0t","tlshash":"12c321b8f990a03f676b187e9358f5799208b814ce115feebb6180067dc7de311d2b1a","first_seen":"2026-06-11T09:27:12.112119Z","last_seen":"2026-06-15T08:29:10.905266Z","times_seen":95,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/main-A_yihrp7.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.358Z","timestamp":1781502558358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/main-A_yihrp7.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"fc546d3751ce66e70864e50e60ab048d\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dbb698deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":722,"size_decoded":766,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (721)","md5":"fc546d3751ce66e70864e50e60ab048d","sha1":"224ff967bd9946e9595c1e49ea4f0ec49c48f50c","sha256":"e0594ab5b4e4697a7861ce732f1480423da5c5b96d76ef8d77cc0cce302d606c","sha512":"7e763c6563369e2c6a0ddfd6cbdcc2b17d30be9981864fdceae8f03845c89d5e277f2d5d84b7286079db8eb60667471bc44794dc3acdd4c7a8b849b610331deb","ssdeep":"","tlshash":"b301f7d8b1a8937888ede69dcb528493d0f421c2f665c890c7b50e2c4aa04c753abe5e","first_seen":"2026-06-11T21:42:13.476295Z","last_seen":"2026-06-15T05:50:01.224885Z","times_seen":72,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-table-controller-DTBTrNZi.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.382Z","timestamp":1781502558382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-table-controller-DTBTrNZi.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 18 May 2026 13:02:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 1224438\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"3e89acac7cc3aa9b87b8389fc1c9bb1f\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debc28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":904,"size_decoded":951,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (903)","md5":"3e89acac7cc3aa9b87b8389fc1c9bb1f","sha1":"a8868a958c950d1a4356380b8ff88f78648c32ff","sha256":"3a703006f5b25e529bd2a1affe88ed0208a044e973006974fd19e1e49d227a55","sha512":"7bd6150b7b8e2763b84a5c70fd53ea4775ec980df61efa31f714312df1b7745ac8d0945a14df30a516c36f91a94dfc51a0811142232620e58c75295cb9b7e2cd","ssdeep":"","tlshash":"5c112f063b019cb881decbcea8b00ae9e14a119fb62241f4a127dc780891fc1312ac7a","first_seen":"2026-05-26T00:02:54.944107Z","last_seen":"2026-08-05T09:11:21.869783Z","times_seen":287,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/copy-BEecZH4d.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.397Z","timestamp":1781502558397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/copy-BEecZH4d.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"79a6531ee34d72a81a73af31f0bd90d5\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dfc018deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968,"size_decoded":1015,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (967)","md5":"79a6531ee34d72a81a73af31f0bd90d5","sha1":"f13e9963936b2d97b3633a986049e3fbc225322a","sha256":"e7a0cfd003e402021106f6d9025bb83c0a66e73ae570eb6eac31ef76fdf6b337","sha512":"b07f6c9ec651dbcb58a63e3890903428f1aa7490240713298959367f911e6b8c6f5f4f338f085d3ee4de05e59fee39fb1665f42e2f1f6a81153267e7125c36cb","ssdeep":"","tlshash":"4d119ba91309377c80138d69efb94810c76f6cac36b584c945bd4fb5c1c289ada67e60","first_seen":"2026-06-11T21:42:13.415141Z","last_seen":"2026-06-15T05:50:01.226221Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/loyalty-program.modal-level-set/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.654Z","timestamp":1781502558654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/loyalty-program.modal-level-set/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-f911d168ddde118265e36ddd8a4041aa-a763059ee23d9156-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Tue, 21 Apr 2026 15:18:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"201fa6fe7f90ea2b83fb1ad1e4b6787f\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6f9f838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":765,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"201fa6fe7f90ea2b83fb1ad1e4b6787f","sha1":"97a71a9d9ad6c6f5872cdb2838e72d7c9186c74f","sha256":"d8d12736b95188becdc6ead36a5f60c058003c6dae86333bba288646306bbd68","sha512":"eb91ec0b6737223cfd08b420568dc37cce21ff8ff1e5b77b4de8e410009bcd52be966317fa53b62125e1bdde0621f86580cbdac1145e4c848cd42c38bc58c11b","ssdeep":"","tlshash":"51d09767cbc09c9003e002812cab18b0b6bc874cb6c8cc34d3d6c028821af838f3f640","first_seen":"2026-06-07T21:51:34.617697Z","last_seen":"2026-07-09T05:37:08.819582Z","times_seen":477,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/giveaway-Bx0c57Wb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.264Z","timestamp":1781502559264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/giveaway-Bx0c57Wb.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"92ac5924cfc82285dadb7a1bdb5cdc78\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7368e68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11556,"size_decoded":4846,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9355)","md5":"92ac5924cfc82285dadb7a1bdb5cdc78","sha1":"3d4e91e4d42044a2f15265d53af4415f0f8fd077","sha256":"bd90c4be4d40c2e28a97bc5f039e39005c6e0e1bfa893f62c23cdcb062ec545b","sha512":"be2470f5400018203ea0846681130c0434b00b53f5c233609bc93db0d380b1b124e3acbcbc5c0aa883c8b6754ea15cda2cb722126e4dbe413f2a4965788f1d12","ssdeep":"192:snX8CN+oKCTfAY4RZYXMt5ITMqltaMJR+tvFTQ575/5n5K5J56PB7kXTf5+5Y56f:ssClXfABZSMtgjJ+BFpGsJ0iLe","tlshash":"41329502bc8c1da403fd4ed4ee2610e081d44731a66cc4f9babf4bbd7645d9889e9e79","first_seen":"2026-06-11T21:42:13.362248Z","last_seen":"2026-06-15T05:50:01.227485Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/freemoney.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.787Z","timestamp":1781502559787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/freemoney.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"freemoney.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RImMwODE4ZjY5NjQ1ZDM4MmFiZGUwNmY1MGFkMjBkZDk5Ig\"\r\nx-request-id: o3zxAi3weAXarUL0Hqi1-\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2934582\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a76ad954c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2595,"size_decoded":1876,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0818f69645d382abde06f50ad20dd99","sha1":"8dfcee044d2c333c10b2ab13d54264bee1555ec3","sha256":"6cd9113967e0a5c4ab21d0a06ae1f9a49c7f1af3d6ab66fd8fc976b1c937bee2","sha512":"052a70bd64ee60df300eeb8e86ff5f97ed5814195f544162ff239431e1e3e6330acb7c733a2578ff51df426b2723079ee46fb57a50c685180301cff1801e9327","ssdeep":"","tlshash":"d2511cf753aca2c8d50beba8e52659b9762f3c7a3f86175083c6ea8127110498d9ccd0","first_seen":"2026-06-07T21:51:34.672699Z","last_seen":"2026-08-04T07:42:36.655046Z","times_seen":438,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=24\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.430Z","timestamp":1781502560430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /sports/get?sportId=24\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=ZFzGsIyZBzOpRFtqy7kCF1A7fJXObNoZ2YqPgQwjcJI-1781502560.5109248-1.0.1.1-071Z_R48lGhqH87IwbLtFuiw6Q94Hvabo1DCNwfLvW7qw61bNEcUFbM3bpb.EEibJZVoF.jxpKTcE4TasE5MToiixwCLMxak95xObgEIoExE_IJdCJw0Di0I.naqtcYoED__0wSL9bl1zqEOADCIxg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=7vZmuqZbDePJVyFeKOyciovF5_T7h87j3IvVAmFSQ6w-1781502560.5109248-1.0.1.1-Kqx6J7vj83bJwQ8b8XhE1sF9XATNPo41A63nGVBmNBE; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b2c04568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124,"size_decoded":1203,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"49d0368be94db0b7935a5e7838bd6aa8","sha1":"02c8d174706b3121aa0c1557d7fba9304fcea080","sha256":"5536260f1342b9f467311a900a15fac55b9455a06a43f66461392219a22e7b90","sha512":"984ad0853b8dfd2e68b81cc45166223a273a952ce7a6f47c2e4aba3c1e221693c5843567734678bf58cc3265dba99a0a192ad2501c2879951e19ecd77ac8eb1e","ssdeep":"","tlshash":"b4b09b54671475d84114cd54d101c9f54043151762477858b4ed05585595384330d631","first_seen":"2025-11-09T23:46:00.026575Z","last_seen":"2026-06-15T05:50:01.228559Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/shared/fonts/inter/InterVariable-latin-ext.woff2","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.839Z","timestamp":1781502556839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/shared/fonts/inter/InterVariable-latin-ext.woff2 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 22 Sep 2025 15:36:02 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 2965017\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ba59b77c516a5b15bccfe67260227423\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a643aa98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85748,"size_decoded":86233,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85748, version 4.0","md5":"ba59b77c516a5b15bccfe67260227423","sha1":"5a654fd878f64afe61ed7b20a8a2758602c78675","sha256":"0ab79615e89169448921911e649950223796846a7f1062dca013e65dc94ca6ec","sha512":"85e5fbc52f8e0efa5396ae2db2b1ae23c18fe48a661eb4eb3e4b814320edd8e05813e5b8ac8ff4b84d8ffc44763e9973e79a26fa3a6fb7f393c8e568797b7afe","ssdeep":"1536:8+tsATEdsiyyAR78SvTd1N93MqNrQvzGzVLdjwg7IiIH:8AsOxbNl30DH","tlshash":"5c83127479b02402c872ea3b36445193310de1ad53882eca36d72fc5c95da6bd6eef4d","first_seen":"2025-06-23T00:10:28.581602Z","last_seen":"2026-08-05T10:46:18.327823Z","times_seen":4407,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/plain/favicons/android-chrome-512x512-v3.png","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.632Z","timestamp":1781502557632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/plain/favicons/android-chrome-512x512-v3.png HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=7BhbzWFZv6NhLpkWcRCKvDLa7VvUa2_ATWCGcPsq8vk-1781502557.2433527-1.0.1.1-Zrkc9C4R23cIWao_J9c4G3Crg.8agJXY9.Z7EFCZSIS19CszF0xZ2zcVtmxXUcZS2C__YFXkIOa3VTgggkZbtqMhQ0jIFVHrFpCSNIIOJr1xPXlHH0NwiyrLL9SsuNBH6UvNoM8oAGFhda8aAdaSdQ; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Sep 2025 16:18:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-polished: webp_bigger\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:85,h2pri\r\nage: 2875859\r\ncf-cache-status: HIT\r\netag: W/\"26760007c70c3a40cbdf8e981b13146d\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a693f928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6722,"size_decoded":7249,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"752ff846470e9816667d49a50022ce87","sha1":"68b6c3a93a79702b3d43d2b3fe9c00417be36fd7","sha256":"0897987ad9d91201791748793b00e084fc2401318f1d990eff7d99117fab8000","sha512":"e168de7620d25ba497a5d18a9623e21d20ce91601d3695c31918ba0fa51d1c9558f0954aef3e64fe1b5b56d2bc38bdd321667bf6fe0898bc9adbfd8bc92c5048","ssdeep":"192:ygWSKUiK7EqYZDBhcrqdONuw4v1jU+gd9V1:yJePhMoqdOEbjz2r","tlshash":"63d18df9174cd5b38523baa7f55ca69474d2164381236eb3bc9201f50e7ca10b2be18d","first_seen":"2025-07-10T00:15:29.539976Z","last_seen":"2026-08-04T07:42:36.458789Z","times_seen":551,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-src-to-imgproxy-picture-BKtU_dgb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.257Z","timestamp":1781502558257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-src-to-imgproxy-picture-BKtU_dgb.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a8270ed5e466c906618ba65ba569c992\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d19938deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":797,"size_decoded":1001,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (796)","md5":"a8270ed5e466c906618ba65ba569c992","sha1":"82354df3b92bff61a52595041c3b1c46406a445d","sha256":"9ec88554212bdfe211ad9aa597fa8ba47a7a8262dd749adea1944cd0bca64ee1","sha512":"59b42866b8abcba826a99c03e9c182f13c25242b01b32f8b73a10b07e3b1dfa1ca9953ec4662f534c8df676cc97c55a8bb5647246fcd59420c4830ecfe320c87","ssdeep":"","tlshash":"8701f1aaa6c5d9b4e77044e8d2318022f13c3e42312cd5d1f57e0c6fae39592c026c6f","first_seen":"2026-06-11T21:42:13.235734Z","last_seen":"2026-06-15T05:50:01.230755Z","times_seen":76,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/more-vertical-DaIU6j76.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.291Z","timestamp":1781502558291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/more-vertical-DaIU6j76.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"0486fba0a8c70bf6cc19dc890329c4e8\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a558deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2167,"size_decoded":1402,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (2166)","md5":"0486fba0a8c70bf6cc19dc890329c4e8","sha1":"fbc368a16e8d5d2c8af53e0ee27f078fbdf5b1e7","sha256":"4bfb8f468fe3d6de58fdd0bb42e71ecee87925111a3a9c6711c6205ba43d67d6","sha512":"84918b3a578c779246f0d86b6c6551a58fde1b2b5fa3d9e43f51de191dd4b81d00af2989eaaf3455625a60668ffe1316e1feacb8af49680be69919bd9b8e71da","ssdeep":"","tlshash":"9841d0f8039d29bd90678724db195c50030915b7b68e84e09f0fa23b82835e8ff47538","first_seen":"2026-06-11T21:42:13.438064Z","last_seen":"2026-06-15T05:50:01.231299Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/accordion-body-DAIOhvvX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.379Z","timestamp":1781502558379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/accordion-body-DAIOhvvX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"2ff8600bb5a40feaae92f7d1aa4ca1f0\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6ddbb78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1821,"size_decoded":1343,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1023)","md5":"2ff8600bb5a40feaae92f7d1aa4ca1f0","sha1":"82a8efefbf5570fefc73924073818376d133ff1d","sha256":"02a1e7f56ea3c7de4862cddc30016d1138bf1b20badabdc8dc4af27f973459a5","sha512":"ab0f0872cea312785871886797f08b4a6bd76235b37531e5269c0c67de51be77b637b07a2dfc9549a161f9ad1f48ab3072d77df93460a0fe8c9c5f24daf86fee","ssdeep":"","tlshash":"083197a66bd8d1708a378c26eb257e3d4010d4b5c68d7dcd8117c92d17f8bf30a58b89","first_seen":"2026-06-11T21:42:13.414201Z","last_seen":"2026-06-15T05:50:01.232027Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-D8_bzOYg.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.941Z","timestamp":1781502556941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-D8_bzOYg.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"349fbf277b16d6241dd3631175c4a680\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc588deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3005,"size_decoded":1980,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2027)","md5":"349fbf277b16d6241dd3631175c4a680","sha1":"25a35fe624c322a6e5047a29e540daecc332bb42","sha256":"4dfe1a1e8d9176e5806b0fc96660b1a5953bab7bb81b3ddffdd03adcc8ad992b","sha512":"8c6f6f08fe9ccb8f90c81213ce386e670be1f501a5b3746b1269fed67d1ae28f81e4ac879495904f0bf20e936fad06a6eb830d82b0b02c802888e4ae5e22f27a","ssdeep":"","tlshash":"dc51b6156e02c0bd8aa78842ab5ce84096c93363c667a4f326ee4c2d83f0d64ce6706d","first_seen":"2026-06-11T21:42:13.400993Z","last_seen":"2026-06-15T05:50:01.232564Z","times_seen":91,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/x-white-DUVQ_yKN.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.146Z","timestamp":1781502559146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/x-white-DUVQ_yKN.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"8bad9778aa00496b09646180766a7717\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72af358deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412,"size_decoded":811,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (411)","md5":"8bad9778aa00496b09646180766a7717","sha1":"395bc211e3d3ddc41338c5550c94e85ba12a1ffb","sha256":"d4f437d7d945d20795ca82ff07f908b79875f6314529e92692a2660bf68c92eb","sha512":"280f3f14397158e6003abb7ad5a82fb0216df47d6d73c7bf81919cb8c7edf852fc62cc9895b086c81a945e7496cff04d009c2201005953180ca3618a87b232b5","ssdeep":"","tlshash":"ebe0abcb208518b187680e88e26c6ca5495029dc278e96c29a0a945392e90d0789df6a","first_seen":"2026-06-11T21:42:13.426109Z","last_seen":"2026-06-15T05:50:01.233555Z","times_seen":51,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=39109\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.566Z","timestamp":1781502560566,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tournaments/get?tournamentId=39109\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/helpers-BVRNAj2t.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.279Z","timestamp":1781502558279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/helpers-BVRNAj2t.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Apr 2026 07:58:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 2634357\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ed51fbf722966cc2be991b35726a8dff\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d3a1b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":583,"mime_type":"application/javascript","magic":"ASCII text","md5":"ed51fbf722966cc2be991b35726a8dff","sha1":"7c89b789efe6e84c66a4d7bd305a5734254e8113","sha256":"0105bdf37d7fd44da0b90a782e043a20bbe4c5777e853a1c5f1aa5f611d4c439","sha512":"c54ab28b21764047338b99f5a42094c3d8bc9f2acc392a59274bdd928e9ba2022a9c7a654de267696017d7d14c91455b9328973cd6e8275306a8ad5577760640","ssdeep":"","tlshash":"61b012da114013fe5b05828021d35604f562036c24a2b2470eb027d115c0043e10ed8e","first_seen":"2026-01-20T19:14:14.321823Z","last_seen":"2026-08-05T09:11:21.919997Z","times_seen":1146,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-categories-all-Bl4d48BQ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.259Z","timestamp":1781502559259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-categories-all-Bl4d48BQ.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"cd9266e68b55b18d804012ef88edc470\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7358cc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1950,"size_decoded":1502,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1949)","md5":"cd9266e68b55b18d804012ef88edc470","sha1":"774ba5a2f9f97a2b561eeee9bb91dcab61addefe","sha256":"86fb267a3a715a1166d40054bbff1ea0f0aa716b9cc91557e323b3b8cf170dbe","sha512":"18e88bbdf09841a22efcbe294066b1a06e1c2ebf9b6c39ea4be9cdc8214cd889f2053263849d17424949ffff8ef7772d2a8a7f9314c636adf4427416fdb5508c","ssdeep":"","tlshash":"1e41747a950a4227245b99d4d91004aa3a5115c4f26fcfe0d5af8eb4394368fd027b3f","first_seen":"2026-06-11T21:42:13.339527Z","last_seen":"2026-06-15T05:50:01.23459Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.230Z","timestamp":1781502557230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=NFLBk2vWctRHnxcoYTdX.HNMD.vsg6gVnPXmaWA5VNE-1781502557.2285578-1.0.1.1-FZHuHib6J.slir2XB2Saf4sxHPQRQR8IGUs_PiWYrfRlJwQoNBOjWkIKJCwGNBS3v0su1S30jbqF6VYgA5zjOQFu0HWjVB4_sRLiL.8E_Z.NUKVKW2aB9mAiCOCyx6FmMR5o64QrtehmXh_dyXL7yg; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:17 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a66a8548deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-CSC7xuQf.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.324Z","timestamp":1781502558324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CSC7xuQf.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"dfd63942c24c7c8e6b433c0688d6edda\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d8adf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":1978,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2005)","md5":"dfd63942c24c7c8e6b433c0688d6edda","sha1":"0a1f426e98edf11663839704aaa215985a5a3ab6","sha256":"d2105e511960b781a8c7d61284685535f70047f408ec0c3597445ece98a52c76","sha512":"49bded63a38b28c4005e59930841b50613b41f09b00daf9322abeb374d5a11a5426f3edecab1051fa8f8f1abac704047e51f92aa4b1f601d40dd7f540d2bdf52","ssdeep":"","tlshash":"d351a55ba8e94ebd41299dc5a9512463c7b403c5fa00e4f4f37d4d3c7a8a0dd811ef69","first_seen":"2026-06-11T21:42:13.258161Z","last_seen":"2026-06-15T05:50:01.23514Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BFMUjEch.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.367Z","timestamp":1781502558367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BFMUjEch.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"ae40d214ee61dcd902e6abcff8ab7efb\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 72517\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb8f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":1771,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1410)","md5":"ae40d214ee61dcd902e6abcff8ab7efb","sha1":"0f53fbd4d52f7c4f6c69a4d1316499f0240431d5","sha256":"a45566e9cd63753b90b28157745fb06c6375816d9b0106668782a59d81a19df2","sha512":"57a67334cf9872b0bd53b45c99f82376ce7a2f1a8462727552cf918ac3c87f76530909db888b70ecb908996604fcf733967dd4f3f8f7b1e5d04f2ed804808751","ssdeep":"","tlshash":"8551724a5f85acf5047d8dc8ee6264e159f14341e111da8cbe3a4c3c35a1cb2800dfb7","first_seen":"2026-06-14T13:48:35.252304Z","last_seen":"2026-06-15T05:50:01.23566Z","times_seen":18,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-theme-Btwoj3hW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.152Z","timestamp":1781502559152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-theme-Btwoj3hW.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 2903494\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6993b14b3ceb08d61cff4ffb85353b67\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72bf518deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":817,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (457)","md5":"6993b14b3ceb08d61cff4ffb85353b67","sha1":"4cf3aaf4a0d08ba1281b46cf310bc48f110ca3d0","sha256":"ddd59f6082eb2667d307338c6977a29baed8fc7b992c066cc183c67589865e77","sha512":"a052bc6aeed4e1e429217cb74b752ea0058131605e8f55fe58b4ed3c8a67591c3279160ae320d5544c9c1c71989589002f225ff9a3c9c4c268ef40118d2830db","ssdeep":"","tlshash":"0df00ef1ab78a93812200cbe933055a2fe18259db7629151e13998ce1068c0083b2f74","first_seen":"2026-05-26T00:02:55.156535Z","last_seen":"2026-08-03T23:19:56.563634Z","times_seen":289,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=46382\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.422Z","timestamp":1781502560422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /tournaments/get?tournamentId=46382\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=ngWOHFPotfZRxCmxboLr2T9fb9MktIbiy5QeZsLVh6E-1781502560.5036178-1.0.1.1-qp6eWKCj5OAhHZC0s5Bh66DG03735cuU7VVGLSaz1Kw5dciGxcKzN.ZrkdU3xIPyv_OTCwJ_NiSws03WrTueB0bSIj2n_aQqZBUBMgOA6K_Bxl62JDXXI_o1XwvbuBUl_T6II_b4rRwgFlWC0Gh1Rw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=AqVt45TM9Yz7K_JvcNHNV24oTOZ08tULhM8qVy9F_EQ-1781502560.5036178-1.0.1.1-MWb1KEYOtRkRePl5Talg0Asr1vJgw_9m2od3T1g13QI; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b2bf8568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":1336,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"14c30460812929c6c3890e9e54b32ee7","sha1":"3c6e1cd19e57448afa73728b7a02cc33ade95dcc","sha256":"80baadddb7141ab4309c19882439b816982c6bc7f66f89316ac311dc7927c228","sha512":"66f197e63c4f17c6877f8b92ea69b016089e66389c91d5d9e4cd77da8835b67332e9e04c99eaeb76e29715d230f5c44abbdddb5b81c62b57213e92913588e79a","ssdeep":"","tlshash":"65e0e5ae57140da4b70203701508fc4ea81b2c268efbad00a9f8cf0cd8e694d571e16b","first_seen":"2026-06-13T12:45:13.618321Z","last_seen":"2026-06-15T05:50:01.236727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1666\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.546Z","timestamp":1781502560546,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /categories/get?categoryId=1666\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/notification-D8dId6PX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.292Z","timestamp":1781502558292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/notification-D8dId6PX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"e3c53acb9c7e2ad205040f2ed0a62641\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d5a5d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834,"size_decoded":1008,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (833)","md5":"e3c53acb9c7e2ad205040f2ed0a62641","sha1":"76c3bb8a960ab1a7ffb5c3a7f225d0811ef91bda","sha256":"9e3410aff2b9f4092943bae1d0b315a1806414adf87f73c9cdd940ed55e32985","sha512":"c24f2640767a20370ddbcd9b6639090dba9d87e2132d08a763a33e8a6f9a168f837e01d37269949360cd0167e8181ae8516d6c822ed25093a78e4b30df8c5753","ssdeep":"","tlshash":"de01c0c6413077e89eb38a5de73868a1075f80f936554150096fd374c18b564a946a24","first_seen":"2026-06-11T21:42:13.230771Z","last_seen":"2026-06-15T05:50:01.249024Z","times_seen":73,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/common.uikit/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.414Z","timestamp":1781502558414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/common.uikit/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-4e0c6a1972fe817d2eb488af25899447-513e1cee14a47a65-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Tue, 09 Jun 2026 12:02:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\netag: W/\"5a8fd31a22b622f063084fbe07349c69\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6e1c368deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13214,"size_decoded":5164,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a8fd31a22b622f063084fbe07349c69","sha1":"268b19d960065f904d2ffb13b1b53e33639e53ed","sha256":"448576c809d345e44745434b9726c2c88817ef28f2335e4c0f88bd18b1f3856a","sha512":"fc1aeaaf5eaa834b916429d128a99c82286d92e5edc5dc078bb913c409349d8654cb2c58d8012b1a676f8bdd9d74b2078ff3d60f8dde2cb6f528cf88d668a87b","ssdeep":"192:/U885XINTVak2KUjmsElrhXwPGbStBCJ9mPG:p85XINZz2Rp+X0tcO+","tlshash":"3b52b42da820dbfdfdb483ca71c6393b14b2024023b668979acd4b6813d65dcd162b36","first_seen":"2026-06-09T12:14:43.007128Z","last_seen":"2026-06-29T06:23:23.484379Z","times_seen":347,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-C39cDCPl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.269Z","timestamp":1781502559269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-C39cDCPl.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6c65ab41237afe887683344c19bc1e62\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7368f68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":502,"size_decoded":730,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (501)","md5":"6c65ab41237afe887683344c19bc1e62","sha1":"2af14e907a11d0efe9616845a5c12b4ac2ba4a48","sha256":"2ad172e75630ba133fcb4c645d0f69a4facb4b06edf5294f8d26871f50333098","sha512":"252a77bd067ce644b1eb6b5dbcbf50e67b1228ec158b0e10bf6270f86222e0848ac95ad44d5cecd31ffc8d0c018bb4129c0360e05a41badc5f48fe4d6acbe050","ssdeep":"","tlshash":"40f0278d64a8a3b898ed81eeab51c493c9f920c2fa35c54087f90d284f911c753abe0d","first_seen":"2026-06-11T21:42:13.478546Z","last_seen":"2026-06-15T05:50:01.251455Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.amplitude.com/2/httpapi","fqdn":"api2.amplitude.com","domain":"amplitude.com","tld":"com"},"ip":{"addr":"100.22.108.205","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.795Z","timestamp":1781502559795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amplitude.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A5:CB:68:FE:12:80:56:24:2C:11:00:13:EC:13:7D:30:2A:4C:FB:14","sha256":"99:9C:FF:37:78:C0:3D:4D:12:AA:49:AD:70:1B:EC:4A:BC:CF:76:46:4B:CD:C0:CE:A4:86:F4:30:46:B8:C0:AF"}}},"request":{"raw":"POST /2/httpapi HTTP/1.1\r\nHost: api2.amplitude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 770\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 92\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92,"size_decoded":293,"mime_type":"application/json","magic":"JSON text data","md5":"ce164d1fbea23cd628b89400b0df383a","sha1":"63d9c85b6d98eb8bd15b26ed105aaf4dcc209383","sha256":"be4a256524a7cd5d734e7c8cb5ac7dd4e82d17ac490ece1eb5e4e52f1a3023bb","sha512":"7b3a0fd7cb3f73322dbfda5bc2672fc2fab71f89a3df3e32c9c5a889503bd6ebe93c13056c90b79fa8c8c8d5651b5dd0c291252c99687ee67230d3c57957a161","ssdeep":"","tlshash":"90b0120b040cc0142625105c1b4bc982a2366019b04008e0cb216eba40520281046c18","first_seen":"2026-06-15T05:50:01.252712Z","last_seen":"2026-06-15T05:50:01.252712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/support-row-D3YLR-dm.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.142Z","timestamp":1781502559142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/support-row-D3YLR-dm.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"3665f834dbe0b9b59c87449fdd2b7eec\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72af258deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8734,"size_decoded":3646,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4846)","md5":"3665f834dbe0b9b59c87449fdd2b7eec","sha1":"2f3522f2aed14202d84121efd1e965124b51a43b","sha256":"bef8310c7d97cbd0565233744a43ed1b4965677d81d10019c59e42e572a230d2","sha512":"702acce02ddb2aeaeed695d5151cd70848c256d85001f15e6f0d196153da4fe9e78b5fc3b7dd969ddd456bf703e90b57dcf19ed72e09499ac3c6baad1799fe06","ssdeep":"192:hnbv5NXinIfNDnsRBNGnIxM0xBzBmcxJaXAKPObVFqm4:hNRinqtsFGnIxM0/aXnPORs","tlshash":"7902d742ee745eb4813b0c6bf41e14539464a61acb89c9e8e0bc87f643f6cb1c13db16","first_seen":"2026-06-11T21:42:13.195576Z","last_seen":"2026-06-15T05:50:01.253825Z","times_seen":52,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-L9inHqpd.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.273Z","timestamp":1781502558273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-L9inHqpd.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"b16e9c39da72194bb40c911cb8643b3b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d39f58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5320,"size_decoded":3168,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4344)","md5":"b16e9c39da72194bb40c911cb8643b3b","sha1":"37fb7b1c7d52db8877accac183a2bc30f27b60e3","sha256":"2c2439d6564dee6d3629408e923638dc08ed17ca2dc59268077ae2a20d85cb66","sha512":"7806ef26d6b4fbadefa46532bafa5e2c82b91393ebafd6faf1826b5e7252f59dae1ee6c768625beb0f05be87583b6270ca57e03833dc60449baf0137490e3157","ssdeep":"96:j6gBbVo0inz3PFtIj6LJYyelIJ0bfHYPjLaDhaDJYydeDGhEj804BlvbEBDHFniX:mg5Vobn7Mj6L6yelk0bf4rLaDhaDJYyn","tlshash":"c4b1c595798c29750bfc4ed0fe3615e092c54b71e519c0ccb9bf8f7e228289485aaf39","first_seen":"2026-06-11T21:42:13.139947Z","last_seen":"2026-06-15T05:50:01.254399Z","times_seen":74,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/footer-container-CIsvTw0m.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.129Z","timestamp":1781502559129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/footer-container-CIsvTw0m.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 13:53:47 GMT\r\netag: W/\"cc452a503fca22dc6e368d8f2411d365\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 314570\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a728ee28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4193,"size_decoded":2487,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3557)","md5":"cc452a503fca22dc6e368d8f2411d365","sha1":"bc07caecd27dfb775a20835b20659a2c9f3976f9","sha256":"832f23c24d19b611d5683aa910ca140b5c527ec14ad274560fc0b318b3e8de84","sha512":"682f33dc60b8c17ebe339d8bde4eac6f3c3e5de7689f48037ed46d0eeaefa8fb6293b420875e11eb93d278ffb5fd57753932743847cf47ab4c32dfde6147a3ab","ssdeep":"96:QYHzDnUCcfyX/8gsZ/8Fj0o0vjxTsJh84:QYvnRc6P8pVF8h84","tlshash":"ac813013ee1185708166cdfae162e034567bb17793d1d7b0e2ef9736478a27cc816487","first_seen":"2026-06-11T21:42:13.352393Z","last_seen":"2026-06-15T05:50:01.255037Z","times_seen":53,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=1378\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.428Z","timestamp":1781502560428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /tournaments/get?tournamentId=1378\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=LqPoipsWb3PgfNOo6dPcPW0P9GnaBCYCKGmd6V4B6AE-1781502560.5123446-1.0.1.1-XNQhjPN3A3KqowtWXWSZVaKTEJm4uckbH4IEOIrL2vsbabhlYblQap6Mz5mF8cD6tUySnWL0Qu7ojvl9WDrTRJCwb1gFgo37SrhPWMnSeUGZHNq8kS7XsSrAQpzBG2zn1HpaZXmJbQdqRjNIPJ4AGQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=CaqySb6HoYGZrlOck5YP1H9aHEwLE7qN5wm0bCzPMRk-1781502560.5123446-1.0.1.1-b8g5DqoR5uZLQ4nUoavpLCu40z4XVwpY5QLPmHrWGi8; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b3c09568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":1335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f4242a1947131850cb147de9a74ee23","sha1":"b9dedf4bd12a40b8b5b7e0639c3b11f5529ba341","sha256":"06e44eee66fd4bb6b4519b8e7d4d84daf2da87049b43439981e7bb789c5eb305","sha512":"7d88ea2fbef97a5b63fc182bddcc1bd55a999774d5930b42f4c102004ca901aa79c6465d69b2791ae2020f06d42ec5d699bfc9407a11cbcd44358b91db089f8b","ssdeep":"","tlshash":"76e02b2e9fbd58d953201dd0a708bc9da8811d1a6aa72e45a7dc8f0c14e52a4225c2b4","first_seen":"2026-06-15T05:50:01.25554Z","last_seen":"2026-06-15T05:50:01.25554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/custom-html-wJnABmzc.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.908Z","timestamp":1781502556908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/custom-html-wJnABmzc.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"0a7f35a7c32f2e11d23d5cd014cde584\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64abc18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23530,"size_decoded":10246,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21721)","md5":"0a7f35a7c32f2e11d23d5cd014cde584","sha1":"6b80a591887467f635a4e6d2826183418cea95c7","sha256":"311190c20a810211cba1246133507f571a631ea2328257ef0af349b775229f40","sha512":"3a8df668073c62d00feb858d3cab71e26dbf7116791543f716e1257cabfff7df6b436351060205ade0874a7c6aea3632a7df07835d85019f0cc72cb5bcb027a8","ssdeep":"384:Z17/0gCBRwvZDWj8WUMsP2s1J8WJT5DE9WLcLw8gqCVAccR9eTXomnaFwk2Eev++:Z1j0gCBiKj8VMsOs1J8WJ9YQLcLw8g1D","tlshash":"4cb23c69b94569b74fdb41d8a47b5a0ca1bc111a700cc450d6cedcb628fbf89206bf2f","first_seen":"2026-06-11T21:42:13.119954Z","last_seen":"2026-06-15T05:50:01.256794Z","times_seen":92,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/error-captured.vue_vue_type_script_setup_true_lang-CAKKD8xl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.938Z","timestamp":1781502556938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/error-captured.vue_vue_type_script_setup_true_lang-CAKKD8xl.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:13:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 2935731\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b91f108f7b3aaab7558d8eaebb43eea8\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc4f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316,"size_decoded":730,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"b91f108f7b3aaab7558d8eaebb43eea8","sha1":"643e16e680d033e9cdbe78bfcaf0866c5653775a","sha256":"8446ba48a8b8bd8cdc2e422a23493bb006781dae4fe53b8682c829cf675cc831","sha512":"b6bb23466e55e1d5d031554c999029ad81afe3dbb0159379a5d42a0f96e9b547f2d6dd0a191ad3c8c5cc088786d54cac0b852b5f69f1fb6e9b01fb7f9d564fa5","ssdeep":"","tlshash":"18e0e7087cb6ed764d500d4b5d371570c8ccb8e65637d0c35145607b370d949ce1796c","first_seen":"2026-04-24T05:21:34.992274Z","last_seen":"2026-08-05T09:11:21.996668Z","times_seen":603,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/control-BZBpiAJi.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.965Z","timestamp":1781502556965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/control-BZBpiAJi.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"92f8ec0d414d0493da6c169d6b1e7ba9\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a650cb28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13867,"size_decoded":4501,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8414)","md5":"92f8ec0d414d0493da6c169d6b1e7ba9","sha1":"1e1e8a1d5a9352aa6655c0bfefb636ffc39534b9","sha256":"2cda4923efb9617963dbabb9fc4b3ed0487241526378be4e81ce5741c0eabf43","sha512":"b8d3f6b659c91bdff695419a52ee76dbbc7f20407d8e5a82e56940b3cdcd60d0cc2658c6a5d4ed8ac8ea9ac00a6139acf50a60964ac9bd297ed029fa84cb5f35","ssdeep":"384:kgR7uAikJHv2HPRVSVrCr7u5qACGArbr+:kMlqPRgZ0GT","tlshash":"9552a57c6eb07f39cab7c45c7b0ce5268a51d324de1b1686e720b83b47ca4b16263751","first_seen":"2026-06-11T21:42:13.234352Z","last_seen":"2026-06-15T05:50:01.259001Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/base-input.vue_vue_type_script_setup_true_lang-CxFBSRCk.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.970Z","timestamp":1781502556970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/base-input.vue_vue_type_script_setup_true_lang-CxFBSRCk.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"f71db266de90b4a941c8aa2641b47309\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a650cba8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2841,"size_decoded":1854,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2840)","md5":"f71db266de90b4a941c8aa2641b47309","sha1":"537775e4a15b8c2f5883fb27272433f53c0b74f3","sha256":"1576a422bca9342190823d22f013314bd15372473a59fde2edc2029ffbc507f8","sha512":"8a345479d578c0549feb82d399c4571d34d138daf3410ad7c589107fbe2d0e1ea706d7aa1bdd529298db31d74abdbf14cdcff9141c0c260db07c2b544dcfdd7c","ssdeep":"","tlshash":"0f51fa1f565c64730d9bca9af8ef50609a18a36962c000f058cfc6301faded0c01ef92","first_seen":"2026-06-11T21:42:13.219585Z","last_seen":"2026-06-15T05:50:01.259856Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Dp9rU1ko.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.060Z","timestamp":1781502558060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Dp9rU1ko.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"60dd9c67c97fde574be2a6e9035d08fb\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6bde9b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2286,"size_decoded":1706,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1730)","md5":"60dd9c67c97fde574be2a6e9035d08fb","sha1":"8612247ccada30c919bf683b6c917070c6ba16ca","sha256":"f87c944bcd6634be5703fc129c2894ee0c3ce41db40c80dc7afe85d87e64d214","sha512":"8404f7cc93853c8005ae4e94a6f35530ca7f04f8ccf520e377112278aa18e9e11c8f3545f2acb0ec3316485cf4211710b9a50e87ca669216cbe7d29aac1a197b","ssdeep":"","tlshash":"4741834ac944c8b6557e8dd9cae6262445f80b86b851c4c8ba3c0d7852534a6e016fbf","first_seen":"2026-06-11T21:42:13.13896Z","last_seen":"2026-06-15T05:50:01.260886Z","times_seen":80,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/avatar-gwTPURep.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.306Z","timestamp":1781502558306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/avatar-gwTPURep.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"8269618dd7ed4ce55eaceb9645bd85e2\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6a928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2848,"size_decoded":1777,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8269618dd7ed4ce55eaceb9645bd85e2","sha1":"68aa387bb1172f0d09134e30dc04a74fa4dfdb56","sha256":"755f3f0f81c4ba784ec95d3f18efd2b3cde51eb794ceb7b6a809541aa5622d87","sha512":"b1c16a670ab40aae0b08e4c4ab03ba0445f4b5206f42c8b4bf3145c021a471a0f98fb3209e970c60a030228b5dba43e6e4d50fef93a6c396cf9ac3d6cb178575","ssdeep":"","tlshash":"c5517212bd148678aa179822ca24f3c0a08c51b5d71e3a56fd7ece7d8bc46eb30d66c0","first_seen":"2026-06-11T21:42:13.26118Z","last_seen":"2026-06-15T05:50:01.261756Z","times_seen":74,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-footer-DVbZehuP.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.321Z","timestamp":1781502558321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-footer-DVbZehuP.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"d4209d871016f135ec9cf9ac1b8f306b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7ad28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":1135,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (790)","md5":"d4209d871016f135ec9cf9ac1b8f306b","sha1":"ec4d74cf01d3994fa24fed89b5f247fce0c6c2a5","sha256":"f1642356c9fe724c9e80e1580cad58100673a33189b251b3abc21ff5dedb8994","sha512":"274b42416da57d5d70e2aaaddad58893ae7d6cf29633bb9c8ac258f1676437fd187cd57d5bac6a1967acc63bc0d48620e026b2fbea0fb619950aea34ab5de7d3","ssdeep":"","tlshash":"e421d04e7ff491f8484f9087f63f9f9892a4a4716a91b8d1983cc43e0bc69e740c2758","first_seen":"2026-06-11T21:42:13.168271Z","last_seen":"2026-06-15T05:50:01.262527Z","times_seen":72,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-D41BR_HC.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.370Z","timestamp":1781502558370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-D41BR_HC.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"dd5ed40fcf9e2ee94a78cd6d29df70ab\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb998deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":750,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (384)","md5":"dd5ed40fcf9e2ee94a78cd6d29df70ab","sha1":"4dd0d757017611c4fd71f186c157836f221bb56c","sha256":"863c846731063df1f6f98025fa5855a72096c284507386ff1cf08327a97b3245","sha512":"cf6d6af9a3fa2203cb16acda7f0b0328d75b0cb1c60049e246870298587cbacac29e872b8ca1f4297e3500b0019fe7164f60a9f2288b045bcc1443da85ba7175","ssdeep":"","tlshash":"5de068b38443c6f93a3e44b8c944940218e212a59784c376429eab21265a4a6d00e50b","first_seen":"2026-06-11T21:42:13.22509Z","last_seen":"2026-06-15T05:50:01.264335Z","times_seen":71,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/search-input.vue_vue_type_script_setup_true_lang-Da2AB6GW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.990Z","timestamp":1781502556990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/search-input.vue_vue_type_script_setup_true_lang-Da2AB6GW.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"fb476f2425f2a1f3c9bb3cd69bbccab7\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a652d028deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":942,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (675)","md5":"fb476f2425f2a1f3c9bb3cd69bbccab7","sha1":"958c033235accf22490f66193a9417bcc0f04fda","sha256":"9b31303d31a42611ba95590164ab439387af9b5e8f7d5bd1b9856f89f7f440fb","sha512":"4be0c35ca4e819db49bce8e4fcda4e1dca432969c0597eb918a66c5fb2ebb1abbabf200f18b551933e3c15de28f9bc3de3bd8f8d65f2266e19845e4ef7f1125b","ssdeep":"","tlshash":"620168120900c37737504cd7d767b06b4964107f27410de089d8d56557645f5ec3ff65","first_seen":"2026-06-11T21:42:13.409516Z","last_seen":"2026-06-15T05:50:01.265121Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-back-C7jRwOw1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.912Z","timestamp":1781502556912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-back-C7jRwOw1.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"2b84b5b61cd34adf503dde1cd28ff0da\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64bbd38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437,"size_decoded":799,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (436)","md5":"2b84b5b61cd34adf503dde1cd28ff0da","sha1":"be4a1f44449527edbabeb0937a4d3d18eead8de7","sha256":"8eebd83880a24ae940dc539d53bce441786f84c8805da47a69611e70db4c1364","sha512":"5913e91e3d5916a4ba01e0e4cfc57d067f650542b4a62a409995706d62baf5f8cfb94213091cdb70361731d38eb6c2af5e303436e98b585df3c885c69c3aaf2a","ssdeep":"","tlshash":"25e05c6c118959fcc56359e0c27599150b0c61d9370fc8d39b0f003a4226ae1d48f339","first_seen":"2026-06-11T21:42:13.394558Z","last_seen":"2026-06-15T05:50:01.265798Z","times_seen":92,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.7900639290145799:1781500013:3LexbouceIeEWcVNjU4pASsbRQnP8zUrvmv7DUaRy_k/a0bf4a624cc2c759","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.635Z","timestamp":1781502557635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.7900639290145799:1781500013:3LexbouceIeEWcVNjU4pASsbRQnP8zUrvmv7DUaRy_k/a0bf4a624cc2c759 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13285\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=7BhbzWFZv6NhLpkWcRCKvDLa7VvUa2_ATWCGcPsq8vk-1781502557.2433527-1.0.1.1-Zrkc9C4R23cIWao_J9c4G3Crg.8agJXY9.Z7EFCZSIS19CszF0xZ2zcVtmxXUcZS2C__YFXkIOa3VTgggkZbtqMhQ0jIFVHrFpCSNIIOJr1xPXlHH0NwiyrLL9SsuNBH6UvNoM8oAGFhda8aAdaSdQ; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: baKyQ/d13mKD26Djfyu942P4+4bHcEfIXDXzNcVbbbY31Ydwdy8TnXPsEt5CRffSxBS7dPI+bOs9vziwPR2s1X51Hj4GlxusNJ9cdvYC9TWcQ9ZwKKW5Pr9pSCXVzgQNLTu+XR365yiuwAAmeP4RHpSZDd5HFyjF5betBtv3OwpEFIQqO31SYIQBLbsoAZoa72SW+ez3D9tsu/fLzkCkVIUb1bsqHptIninaVhx2CeSbIq2EITtH+nbd260PGzL2UgmEf8K9EM56LiyCoTuUmw==$/PmZHldnQJWsAD4XsbHGVw==\r\ntiming-allow-origin: https://1win.ng\r\nset-cookie: cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1win.ng; Expires=Tue, 15 Jun 2027 05:49:17 GMT\n__cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:17 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a693fa48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":16168,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/seo/v3/public/cached/text/get/by/location?path=%2Fbetting\u0026locale=en-001","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.883Z","timestamp":1781502559883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/seo/v3/public/cached/text/get/by/location?path=%2Fbetting\u0026locale=en-001 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-fcf0aff5e621146c14d4222be4e8218a-aec82bd740aad8e8-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 19\r\ncache-control: public, max-age=60, must-revalidate, stale-while-revalidate=604800, stale-if-error=604800\r\netag: \"87kCjtIJALcmVisK4GPoLtCrA1M=\"\r\nx-cache-status: BYPASS\r\nserver: cloudflare\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: a0bf4a774a448deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":535,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"31f9b025102f2b636cde6c43ce442ec8","sha1":"2d5cf2424bad799e11703cc2f28f4c5c8196636d","sha256":"f92a5f4ddda509f6f4acf8dd25c26a34361a11b3adbd3cd544af2e5195aeed1d","sha512":"2400f885d42d15c81b58a5b67e20799f8a16a53efda4af11f898dc8fd3eec63abccdf4ea2184f19a08f94970d7437a3a7f21e78225a0e0a35914069cf3f9c54a","ssdeep":"","tlshash":"6170000000300023c000020208080a8220c0880028208c80828202c802020008002002","first_seen":"2026-06-09T03:08:39.172171Z","last_seen":"2026-07-29T05:21:14.857951Z","times_seen":10,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api-gateway.top-parser.com/push-server-v2/?Language=en-001\u0026externalPartnerId=44ba10e5-7df2-47ab-a44d-dc93803c7a6e\u0026EIO=4\u0026transport=websocket","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.989Z","timestamp":1781502559989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /push-server-v2/?Language=en-001\u0026externalPartnerId=44ba10e5-7df2-47ab-a44d-dc93803c7a6e\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1win.ng\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Adn6MF7QeK0+LK2czmgSSg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 15 Jun 2026 05:49:26 GMT\r\nConnection: upgrade\r\nSec-Websocket-Accept: suUzzDD53tPEwPDqRUDwDQAmo3Y=\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nServer-Timing: cf-cache;desc=\"DYNAMIC\"\r\nSet-Cookie: __cf_bm=NIkBEgMRK8isxGZ305zAzDEacsD_LbeJg.WbPPmtgGI-1781502566-1.0.1.1-39LdR9za3OI45hFtxH5RamZVQdx77BGgtkArTkpsA2w7iF4ZEg8wiWZ5w0Ue9vHl9W2jvBIGHPAKb7q2GRJLPspsoPJI_qO3F3VDUl_2DEQZC2P7WVaW6TcHj8M0qCaQ; path=/; expires=Mon, 15-Jun-26 06:19:26 GMT; domain=.api-gateway.top-parser.com; HttpOnly; Secure; SameSite=None\n_cfuvid=isLVguPoxyDv9KjRD0qQfBK2tIshsYjtbEtlpQBhA00-1781502566593-0.0.1.1-604800000; path=/; domain=.api-gateway.top-parser.com; HttpOnly; Secure; SameSite=None\r\nServer: cloudflare\r\nCF-RAY: a0bf4aa0487f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":800,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":13048,"timings":{"blocked":-1,"dns":6445,"connect":6442,"send":0,"wait":155,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/matches/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.018Z","timestamp":1781502560018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /matches/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\nset-cookie: __cf_bm=7Nc6cEnAzvbW6fMKIQUh_x2UaulW0whxGgyc_nvtccM-1781502560.0400221-1.0.1.1-J7w60ucx.PPXoQjua_2PPLyNYDj9uQrI4BrCeOFOlsnVHDzYRDm5VbpVDHWdGGQQh3ooHWHWsxmz7dghQY4_fidsLVaFH01GdhyKC8VXEmpbp9aEVuW7hO6u25XHy.yfUJTkgJ7ZFy9zADQZr.L5MQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=Q7BX22rqBgZcT4.por0FfiDkW58LLs7RJLZ9VO2IxvA-1781502560.0400221-1.0.1.1-y_jM8wz3z8SbxuAOb649bmUOhJwWYje3PZDgen_OBfs; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a783d22b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1130,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":38,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/highlights/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.216Z","timestamp":1781502560216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /highlights/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=RsESiB4ksbjlp1gRAzs3xNbrWpkiP4eutXzST.B6LGg-1781502560.2170546-1.0.1.1-1mbpzQ5bPZkUt1U0xLcSfraN92NQtqvJ.i3Pr7SANiW1m_urq.pNSUMYVDQtXzu8C570yz900ZVrgHJuCs8qGCGmy9Bd2Jrmr.BG2X1Jc6EBXawE5QGboccvJ3u0_F0Eo6vcmFrUs4dZRarcoqLU9A; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=BJx0kUSSsvGs8xFzNIdVhf9rKBrrr5jmHsjPo0CFq9M-1781502560.2170546-1.0.1.1-MiTS4vPcImrGwYDIw0WSAx5_h28c1Ic3N43SAI5lXU8; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nserver: cloudflare\r\ncf-ray: a0bf4a795e23b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1130,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=39555\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.548Z","timestamp":1781502560548,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tournaments/get?tournamentId=39555\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrows-B7ALf-uX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.365Z","timestamp":1781502558365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/arrows-B7ALf-uX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"2fad6a279a9ebd20517655920817b7a8\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403,"size_decoded":1218,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1120)","md5":"2fad6a279a9ebd20517655920817b7a8","sha1":"9f32fb4757d5702e5a1bc3f0e1965ea1b27651e7","sha256":"6d07340569151d132e576ec3fa770ef53f496ea4a2df48d17bfefbabca1a1fce","sha512":"298520c9098901fb61966a0c10c95151cdd564872becf059ac2b238d1cef2ee3e81288ead5ff01c2eb166706f7ce180fb0b9a316d2037cc8e29af7caca7d198b","ssdeep":"","tlshash":"2d2166076dbb8eb5a85b4002e93662937659027fb76b34e0479e5f3c1b7c6b0400aee4","first_seen":"2026-06-11T21:42:13.279437Z","last_seen":"2026-06-15T05:50:01.267154Z","times_seen":72,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/language-picker-BjkLWfhO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.140Z","timestamp":1781502559140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/language-picker-BjkLWfhO.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 13:53:47 GMT\r\netag: W/\"b042295c83d9fd91c00435211709469d\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 314570\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a729f108deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2208,"size_decoded":1508,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2207)","md5":"b042295c83d9fd91c00435211709469d","sha1":"a996316c368c1e048d972aba95ebf856f994376d","sha256":"bf4f48ca00b57c37cfed60f8ff1701750fd94a0bab4e36596a34330924ea5f36","sha512":"19844f5e99f36e2576e3f1e3038efd2c9bb5ba2284c093f8ee1a8cbead90cdfd329e543d5c4681205644f8714ec587273bdaba2ceb91d86f1d829eccf7125963","ssdeep":"","tlshash":"9c41e913dc054ab24235cdf2e06be2719577626393c1cbb1d1ef433a4b9a2bec89645b","first_seen":"2026-06-11T21:42:13.146937Z","last_seen":"2026-06-15T05:50:01.268167Z","times_seen":51,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/casino.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.786Z","timestamp":1781502559786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/casino.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"casino.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RImY3NzY5YmM5MjdlMGU4NGQyZmFkNGU1N2NlN2M5N2RiIg\"\r\nx-request-id: oZDOONKBXQ3S3FsEMXhSy\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2989116\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a76ad944c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3100,"size_decoded":2008,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"394a863e9265030dbd8dcef83969fafe","sha1":"371ce9e8eec8899e2f4bfbaaa4af64741e016e59","sha256":"2edcc82b4ce53c374924d57b30ff5074830579aa87a42cd75adcf60e81a54e26","sha512":"c4c98145a096d23a37ef6ae728c839326d93b3124fa602d3c739983c13466fd753c118700ec424aa1434c3dfd81ccd6c46908101f87ae7c5d795cccd27ab4438","ssdeep":"","tlshash":"155133e637c9f1c0a04b9f20dd175dac2a6f287a3e6885ce50f5a6e4e726280c94cd95","first_seen":"2025-06-23T00:10:28.508644Z","last_seen":"2026-08-04T07:42:36.504549Z","times_seen":3761,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/bonus.bonuses.app-install/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.890Z","timestamp":1781502559890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/bonus.bonuses.app-install/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-35b74f15f926e94347c6f166c17daaec-a50c66d8d3346b4d-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 04:17:28 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\netag: W/\"d87b47af3ccc13376e9692b43a51161e\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a774a6e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":864,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d87b47af3ccc13376e9692b43a51161e","sha1":"b79e79c528fd060d035ff5635429223ed4f934fc","sha256":"6332d2655b35a26328e9b3b94e84e83879358bd6f409bc751c1aff1fb7435b34","sha512":"8e3efb86ee088f1d21573e392a4156f5203a4647ab9b99dc9e98378864c6cd418532a5bb9ab58c4c5de31321b87dbc6ffe3da554217e902b8c877fa819060988","ssdeep":"","tlshash":"94f02b44da011773394417dfa18f0d893ab5a56640123599dcef404c369eda1b7f7b27","first_seen":"2026-06-07T21:51:34.600611Z","last_seen":"2026-08-04T07:42:36.476561Z","times_seen":329,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=142\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.443Z","timestamp":1781502560443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /sports/get?sportId=142\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=d7RhA21vDo5Gj8jeGPPBIhKNlLaazr10m5fPXz8sZ9c-1781502560.4420881-1.0.1.1-Sr2nX6XuZI4PJ_GAQnsG9wawtCfP1obatDyuFWcpmi47Zet75nw6xmAz6RoZWaoaV9Kc3X1fmRUuSHxhP.aR4zHvfx8Tgqn6bPp_GgkP71MMrTLCEV0lw4kgousvM4HX8XG3oT5e3btJBjubvpuhxA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=6oCKYGKAQjTfxvjRwk0Q6J6JPG0gPDXy1LaRDFPsc_w-1781502560.4420881-1.0.1.1-amO5pCCU8GSUDJIY4gdyt5Y87jPgvgD5CfNDpPNqx6c; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7acb9f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bstatic.live/promo/1.e84454b9-fae0-4863-b87c-2bca22a89602.jpeg","fqdn":"bstatic.live","domain":"bstatic.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.645Z","timestamp":1781502560645,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /promo/1.e84454b9-fae0-4863-b87c-2bca22a89602.jpeg HTTP/1.1\r\nHost: bstatic.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/common.common/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.387Z","timestamp":1781502558387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/common.common/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-418dbcf595ab199d03fa6d6bc1343875-8e7ba4b21b48369e-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Tue, 26 May 2026 08:22:31 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6b1925a4617b04d2f2f72f0df9214d4d\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debdd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"REVALIDATED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3397,"size_decoded":1878,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6b1925a4617b04d2f2f72f0df9214d4d","sha1":"a53456ad75138183011ca915727503f7e487dd5a","sha256":"153ec55cf0495137c93860471b21767f4e459fcd9e81baa8db0124f62c399231","sha512":"ffc494e852ec1e22cd79ce2177d5d16ddf61a025572364ce1cea18b7a1b3572c0acb40637d2fab80121b4840cd21eba0c8c5cb666eb99e07f6225cc5342e9d98","ssdeep":"","tlshash":"1b61d95b4534e8af3aa6135374c6fc053ea444a75305fc8a6bb4439fb0cb762e61d0e4","first_seen":"2026-06-07T21:51:34.632573Z","last_seen":"2026-06-23T14:10:56.292574Z","times_seen":288,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.smrtwheel.com/visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517","fqdn":"img.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.682Z","timestamp":1781502559682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smrtwheel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 May 2026 13:57:20 GMT","end":"Tue, 18 Aug 2026 14:57:11 GMT"},"fingerprint":{"sha1":"0D:86:B0:B7:FD:CC:29:56:13:BF:65:6A:29:34:76:BB:66:8A:FC:5B","sha256":"5F:11:4E:C4:59:52:BB:7B:6B:63:82:E3:23:94:68:E1:39:4E:E1:E6:72:8E:68:FD:1E:D9:05:9E:EE:BD:A9:67"}}},"request":{"raw":"OPTIONS /visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517 HTTP/1.1\r\nHost: img.smrtwheel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\nset-cookie: __cf_bm=qbJjh_4ZXrYq8yAiy_fVq_pggB4oOHngnE5kt0GOAAQ-1781502559.692416-1.0.1.1-XwSOfdvTGUR62B1FgwB2Yxd6CuwYXmojG1Ds_i0atiAaV0_6BcQMJhyH7.qd2hJ16RzAfn2W8SDRAMy4NEE2TtMnuuBTjJcSPSN50Eu.PpxK3.mVnXNbCqdJJQ7cV1Ja; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=ILDcsyjJDwy0KltlnnOIQJRx9QluI1CijFI5OfTstIg-1781502559.692416-1.0.1.1-N6SP4VNruJgLbJCRTqSaFYyzOlX.GH6KiCRd7Li3OLo; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com\r\ncf-ray: a0bf4a7619e0a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://1win.ng\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nvia: 1.1 c6ba27a7ed18cc9b3d19d0b88a394c50.cloudfront.net (CloudFront)\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-max-age: 8640000000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: TWIDEKrrr2E8wMVXiVV0abT95hajvKLCfRfeWwlS0xCyTZWeVOPdDw==\r\nx-amz-cf-pop: ARN56-P4\r\nx-cache: Miss from cloudfront\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1149,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":328,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality_2to1/plain/https://v3.bundlecdn.com/b02632/plain/freemoney-sidebar-banner.1/compact-v1.png","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.877Z","timestamp":1781502559877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality_2to1/plain/https://v3.bundlecdn.com/b02632/plain/freemoney-sidebar-banner.1/compact-v1.png HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2175\r\ncontent-disposition: inline; filename=\"compact-v1.avif\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"AmGf_LkIp8ADvyjj7LDvvKSHTTUH53jweN_eKjA1hT4/RIjJjZjliMzY2ZjdjNzFlYzhjZWI0N2NhMmQ3ZWI5N2UzIg\"\r\nvary: Accept, accept-encoding\r\nx-request-id: RUJ4jBwWgDdCxULByVnf8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 4581971\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a773ef64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2175,"size_decoded":2873,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"40dbfa0478cc8008325042b21af5d233","sha1":"c5437bec47f8b43dd9d0bf396d541ecc0dbf103b","sha256":"6b418fe952efbdd2c86ff383b5b2ee72c11245ccdd252666f956640873ac1f77","sha512":"5a8a4865c1c9bf0e9c0677025bb1b41d0ed23d2c3d92d82812fa65778ac44c599e3c5e24095dcb00d9f20403137eee11caf3dba6781d7478c4eea4d2e7f2b054","ssdeep":"","tlshash":"054108673b500cb9c516823149882716f221c9b16daeeb37ec04f3a49cba726ce98c5c","first_seen":"2025-11-16T00:14:20.5571Z","last_seen":"2026-07-19T22:53:23.93449Z","times_seen":2175,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1566\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.582Z","timestamp":1781502560582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=1566\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=162yzIMtCKOa22nPRkIBegiYg6Ti7OXKlaTXkPrTYCA-1781502560.5810747-1.0.1.1-DjBlFIeGi1S1krKIvRtixUqBZLbW8QWnSQoh7Iswebrmi9iggr2aYQoyjnYWcgMFOEPFSxWDpGpgDPK0CaxEzQoxrGz7cpZ4UXoIljoOv6ePl2E3iK.cJ_RFKedGS.RKCRWTmD4X6mb7ZrAu2aH8ow; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=mmiCPCoU5ba6j3umWzernozgpxVl_tiOtYPniP6TFGo-1781502560.5810747-1.0.1.1-JJM5nUAUTfaWZsj43R.9OAhGyyOnyYOG5bm5fG4Lolk; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bac85568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/arrow-forward-zv5O6ZeJ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.298Z","timestamp":1781502558298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-forward-zv5O6ZeJ.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"0213ad0d1cec89a89b5fdd60fee471c3\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d5a6e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441,"size_decoded":801,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (440)","md5":"0213ad0d1cec89a89b5fdd60fee471c3","sha1":"322c430064c9a9d3904c5b053de4ec4666f0c9b6","sha256":"ff451fe3a5cc5c0c3cf1f69da1bc7bed8593ab809d126ddacb604311b9dbd553","sha512":"1ccb92eaf297584a3acf5d73ae4f5ca57c972a5ebfc70fafd23147fb90a43a980bc5c3cc82d8d0a9e56ddf01b717dd92c07a429c159336cb68996f17c4995471","ssdeep":"","tlshash":"07f05cbc214e62bc011342a4c7ab3d140b09aaf737c984f50a0fd93a46625c4f95b27a","first_seen":"2026-06-11T21:42:13.423891Z","last_seen":"2026-06-15T05:50:01.271569Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/messages-D_WCSePY.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.260Z","timestamp":1781502558260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/messages-D_WCSePY.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"f2169f1c45f520d73ce56a7a97c35de5\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d199e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":911,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (585)","md5":"f2169f1c45f520d73ce56a7a97c35de5","sha1":"9ab2be8dbce3c0f686fc0a18e9b5567b0ce27856","sha256":"ce40a6636e33bc803e77d835ff8bf7f64573da44587e59a0a2659f2d82f58250","sha512":"dbb57d5a683f02eedf49b7406da9dae77dae3ceb76d7d56d21427e1469240903ea23b2315e147a5ed3be19dd32b0ed2ae6de65893d55fb89ee41ba2b3ef8a9f7","ssdeep":"","tlshash":"07f041790379296cb163818cd37808108b0c049d3b8ec8cc1b2f8e628326ea0cb0fa35","first_seen":"2026-06-11T21:42:13.29718Z","last_seen":"2026-06-15T05:50:01.272593Z","times_seen":75,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BOqbfn6j.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.266Z","timestamp":1781502558266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BOqbfn6j.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"72d72c9bcbc9dc1f3adff6cd9d7ac2cd\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29c18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9363,"size_decoded":4327,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7521)","md5":"72d72c9bcbc9dc1f3adff6cd9d7ac2cd","sha1":"bb584585c8a3bbfd32141d26d92606a3e597ab33","sha256":"3be914d6bfe62618f97bbe88f1175ba1bfe974038059880662ba714ff255932a","sha512":"57e49ce19f82e5ee2e9fdefd02c301104fb915b5d4959248fe83ccaca647ac713c4165cd30b5919b6ce009ddbbe30d988f122c6c781f043c3c5b470976532c0f","ssdeep":"192:3a4nruUf+znDP+UviahubT0MV+B/z1djvHqh61i5mcME1RrUy:NruCjUviahuDV+BBRY61i5mgGy","tlshash":"f012b640a095297452be5e88dea480d086be4b12f430c4edfe3e0d3d79d7958a1b7f76","first_seen":"2026-06-11T21:42:13.437039Z","last_seen":"2026-06-15T05:50:01.273268Z","times_seen":74,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Cm-9mgDs.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.278Z","timestamp":1781502558278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Cm-9mgDs.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"8ed1a2148d016e8e86d334195d6a7f3a\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72517\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d3a0e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53412,"size_decoded":16878,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31178)","md5":"8ed1a2148d016e8e86d334195d6a7f3a","sha1":"db160bcf99deec924ddc0c73387571234fbd353a","sha256":"546399e8e16b2dafa10165dc0e736efe9288c2f33e6667712cc8b6d1ca14aaf0","sha512":"33852a1ae055de29d5846e36e2d50dabd674aae639112c93e82d7430e4d958ea09b8314495408d958a2aeb498f91156e171b592af4a2dc56f329521b9ed26562","ssdeep":"768:fCLMU+8Jt+q82aSwId45nCGGGOuuNIUBhi+EugJUIfg9+COH2K8ZpblRnQs2Aqqn:fhUhn9hK8ZKswGH","tlshash":"d4333a81be506168133b1c98ecda415017a92f147007cafababd2d7926cedd9c1b6f37","first_seen":"2026-06-14T13:48:35.25022Z","last_seen":"2026-06-15T05:50:01.27405Z","times_seen":19,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/adaptive-balance-Be3KAU7v.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.287Z","timestamp":1781502558287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/adaptive-balance-Be3KAU7v.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"f06f71dd9cfc0d1529f9527d0e97fd03\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a3f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4785,"size_decoded":2549,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3693)","md5":"f06f71dd9cfc0d1529f9527d0e97fd03","sha1":"675def3a3cfcccf642376df17a3b7bb31af25c65","sha256":"d03458c760f00fa8a28b1a5813d34c017049d93cf798af21d34182d7d713ff03","sha512":"883f4882edf7058a1882a2e8e915b77978ced9b21788040134dc4f0f9171a10200f56b77ea32d92e27d72ffa6ae0b86c7cd039869e3f2d8ce32140c0ea9c2f08","ssdeep":"96:02onDL07gDSIfFUan+Sp4C8woXAkYfIpZeURC0N7JoTiHyA1R4HO79Kg9P9n09F7:02onDw7gDSMOy4CoqgfxsadIOJuO79Kp","tlshash":"eda17230b77a60bcd372580641a89499f626b324f35f44e7933e802d179fd6072e6a6f","first_seen":"2026-06-11T21:42:13.223847Z","last_seen":"2026-06-15T05:50:01.276174Z","times_seen":73,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-token-sale-view-model-CozL5DeI.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.356Z","timestamp":1781502558356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-token-sale-view-model-CozL5DeI.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"8d3b9370a86e3159dc70fb702c790989\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dbb618deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":803,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (551)","md5":"8d3b9370a86e3159dc70fb702c790989","sha1":"d1dcbd84835c529b6b2b47377df2e2e952295e70","sha256":"e4a3ccfc1f632f6d3b2e4c2fdf7b0bd7a55d8d5abaca68a5c405784426f2e1f3","sha512":"8d2e6c578b9fa09c8579de4cc94871a673266b5885b9e35a0f1e6645dfa4debed6a61fa262b07d58f0bfecaf379aa6f0a2651eda02ae862670e82351a332bcc8","ssdeep":"","tlshash":"7df08bc7a4954be90e13a6eef8445c6253f015b1f250c8d4821f0f3a4f908c3e59f606","first_seen":"2026-06-11T21:42:13.412536Z","last_seen":"2026-06-15T05:50:01.277139Z","times_seen":73,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/result-empty-BPeVQhUx.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.395Z","timestamp":1781502558395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/result-empty-BPeVQhUx.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"620c0d613f380ee72a4a1b418c8f622b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dfbfd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3079,"size_decoded":1717,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1763)","md5":"620c0d613f380ee72a4a1b418c8f622b","sha1":"049ac07267b2bfebd9412284c91be40c1482b580","sha256":"eb94968d029659c8c8a028dc7e37d18a4b6b0ea367f15ce0b09bfd2acd9b4aa2","sha512":"548f02bf375d31c70a148b3ae0cfabe47982f33e9d4ea0b527f7d0584604daee87002776be5549172809397c2722ae36952ba7223eb406faa8a56c443123d4e4","ssdeep":"","tlshash":"cf511385ee20e36cf5331c167b2a601cf048f55e469baaf8d59a864c47dfde2170cb46","first_seen":"2026-06-11T21:42:13.346059Z","last_seen":"2026-06-15T05:50:01.278442Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/lazy-render.vue_vue_type_script_setup_true_lang-XVdMy2YD.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.138Z","timestamp":1781502559138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/lazy-render.vue_vue_type_script_setup_true_lang-XVdMy2YD.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a3feb76578592a26b056f2126d5a5251\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a729eff8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":988,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (767)","md5":"a3feb76578592a26b056f2126d5a5251","sha1":"9bbf3b78da95c9819d9ed23697d51ee98708ed1c","sha256":"c8bfbde27283b12e5a748806316c684b9dbc00e88718fcd3447ef2dfe735ec12","sha512":"ba0b2af9cd7c0af56d7678f7fa20b17ff854021e7602d811dbe0f5bf58110202d2f8289bd3ca252aee3ac7b97dc211b145481cc519f8b477469db107c3df5ac5","ssdeep":"","tlshash":"d801200bfc19deb4e4541bdbda26b92487461b9e0badf8a383ef038e538e405110c709","first_seen":"2026-06-11T21:42:13.435809Z","last_seen":"2026-06-15T05:50:01.279685Z","times_seen":53,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/PROXY-SERVICE-CDP/v1-landings-ListLandingsInfo","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.621Z","timestamp":1781502559621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/PROXY-SERVICE-CDP/v1-landings-ListLandingsInfo HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 13\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nTraceparent: 00-f06aaed5187a21bbadbc19fef2398b9b-3e751ad71654e46c-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTE1MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\npriority: u=4,i=?0\r\netag: W/\"12-A4Nh3UYDZsAckjrU4PyNgzVXY40\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0bf4a75ae558deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":355,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5150062760fd989e7672c0299888c1e5","sha1":"038361dd460366c01c923ad4e0fc8d833557638d","sha256":"e857bc61b7902c22c859af108f56fa9e0acdadf4169bd22ec67b61743618af31","sha512":"38f57996aa7ded61f5244c89bdb154495a819c3411d86a2d10e229aa89083b45a4e68c4a67a235c260291faf7b10025045d90d05646d820a06aaa0856a2d489e","ssdeep":"","tlshash":"087000a00000280028c83222c800000088280020002080a0082800002280202a820000","first_seen":"2025-06-28T00:22:08.248251Z","last_seen":"2026-08-05T09:11:21.920609Z","times_seen":1521,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/sidebar-dynamic-section-DtFGlEJn.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.165Z","timestamp":1781502559165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/sidebar-dynamic-section-DtFGlEJn.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"78db84002eae8861089f68e443611e10\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72cf928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9476,"size_decoded":4075,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9475)","md5":"78db84002eae8861089f68e443611e10","sha1":"5600ce178d43c5cbba42b64cbb85d211df9a45c7","sha256":"a37eebfded0dea38cd2621173e721d313783129f27389315fd5fbe4d6553ae20","sha512":"04353f76a22609fac8070b6a83996708dff46939c9b6cb2987b2ce64ff2db0534a38ab299103f59f0228c09ad3c768130c3e5ed93f0b6bff565dfb48d5ce2c49","ssdeep":"192:UmrfjIFBnpGQd3wXX+tttQGoIAGwkD/kDrG7iowwp9Lv1:vMHrTWQTp","tlshash":"5112c90ae00404391953b6f6ddd880e8e11a13b9e3d646e2b9ff8e390b2adece571157","first_seen":"2026-06-11T21:42:13.383985Z","last_seen":"2026-06-15T05:50:01.281012Z","times_seen":50,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lab.amplitude.com/sdk/v2/vardata?v=0","fqdn":"api.lab.amplitude.com","domain":"amplitude.com","tld":"com"},"ip":{"addr":"151.101.130.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.847Z","timestamp":1781502559847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lab.amplitude.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 04 Aug 2025 19:03:11 GMT","end":"Sat, 05 Sep 2026 19:03:10 GMT"},"fingerprint":{"sha1":"9A:E7:DC:01:EC:D3:56:A0:85:91:59:2C:7D:7B:DF:53:82:64:46:97","sha256":"6B:3D:43:99:3C:18:F7:36:41:EB:33:53:54:26:65:B9:16:7D:40:53:F7:34:C6:C1:46:05:4F:FE:65:78:5F:F3"}}},"request":{"raw":"GET /sdk/v2/vardata?v=0 HTTP/1.1\r\nHost: api.lab.amplitude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nX-Amp-Exp-User: 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\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nAuthorization: Api-Key client-Ss5BFx7UDrTj948TJHfc5ZUoTW67EjvZ\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=utf-8\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-allow-credentials: true\r\ncache-tag: client-Ss5BFx7UDrTj948TJHfc5ZUoTW67EjvZ\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\nx-served-by: cache-bfi-krnt7300088-BFI, cache-bma-essb1270070-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1781502560.943357,VS0,VE209\r\nvary: Origin\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-length: 3733\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34967,"size_decoded":4357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cb1e5978adc0e15e7e433b98e709e083","sha1":"1dcba205ed961b747ee3bdb73c0595249754dc53","sha256":"3c57c43a577b771318e81f01df59b5d1909ed2d90a9445b72dd3961c6eab3165","sha512":"47d97f12eb60ca5d6cda68bc8cb3c75ae00fb1114bc1edb58822705873c19c12b6635e75d59e42075150e41066bd7e90af6f8813bcd6101178bafb275b02310a","ssdeep":"384:V0AipjAg0l5daCiXrgqfuAFk5fzmgdkF4DlHry:PdVnaxXEcPF4HkFELy","tlshash":"23f28cecb018857f0b9bc655c31ca746b6ba7072e1d05850d1eca8b11d7fbe81763a3a","first_seen":"2026-06-15T05:50:01.281644Z","last_seen":"2026-06-15T05:50:01.281644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.twitter.com/1/i/adsctp","fqdn":"analytics.twitter.com","domain":"twitter.com","tld":"com"},"ip":{"addr":"172.66.0.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.954Z","timestamp":1781502559954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 05:44:39 GMT","end":"Sat, 22 Aug 2026 05:44:38 GMT"},"fingerprint":{"sha1":"65:92:0C:4C:EF:65:F7:C4:1E:4D:7F:D3:39:49:8C:7A:AE:DA:D2:57","sha256":"84:6F:17:C2:E1:A3:45:B7:CF:3F:06:A1:B7:E4:0A:02:E1:E6:B8:6F:8F:EA:29:37:FE:80:C5:0F:ED:0C:2B:02"}}},"request":{"raw":"POST /1/i/adsctp HTTP/1.1\r\nHost: analytics.twitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 537\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/gif;charset=utf-8\r\ncontent-length: 43\r\nperf: 7402827104\r\nserver: cloudflare envoy\r\ncache-control: no-cache, no-store, max-age=0\r\nset-cookie: guest_id_marketing=v1%3A178150256003663627; Max-Age=63072000; Expires=Wed, 14 Jun 2028 05:49:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\nguest_id_ads=v1%3A178150256003663627; Max-Age=63072000; Expires=Wed, 14 Jun 2028 05:49:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\npersonalization_id=\"v1_gI8/kAf4sGWZERj6Tp4HfA==\"; Max-Age=63072000; Expires=Wed, 14 Jun 2028 05:49:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\nguest_id=v1%3A178150256003663627; Max-Age=63072000; Expires=Wed, 14 Jun 2028 05:49:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\n__cf_bm=WMHZN114EonPWeo3Pm.LtB._lVpENAnHQWxvfKr3ZlI-1781502559.9754293-1.0.1.1-fDsUh7kz0DlrX6m5p92R7xQR1._8dzkvYeXEBi0LJFM3AITUAaMASaTgl4y3NapSOvLq6WW7qCjmkS.5Z0La8yzwWNmk9rJcJijHISwnrb_aPlR.YOlIegkp_Ek52NdN; HttpOnly; SameSite=None; Secure; Path=/; Domain=twitter.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\r\nx-transaction-id: 72719056f2172c6e\r\nx-response-time: 75\r\norigin-cf-ray: a0bf4a77da2e32fa-ATL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-expose-headers: X-Acted-As-User-Id,X-Rate-Limit-Limit,X-Rate-Limit-Remaining,X-Rate-Limit-Reset,X-TD-Mtime\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0bf4a77da2e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":1586,"mime_type":"image/gif; charset=utf-8","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-08-05T04:28:35.323766Z","times_seen":1385,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":190,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=23\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.440Z","timestamp":1781502560440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /sports/get?sportId=23\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=_vrkpdCatGe6s6xTs7X08GRX9O4ERDHVLTIUAoMaHMQ-1781502560.5156856-1.0.1.1-e6pMDDwA8PwKKgST5ak8L5hokrWhNf7HwHeKkpjU9JnFTq35wK5d5VwCR.cGpdEcswIOycpHOlpM8CopB9QUc4jtZ42Fn08QClEKDGZ9l01HfxnL.mmAwBYCOW7ZQG.Z6gMsqM0GDjqwkFh.OCD2RA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=D1R59uelUdQvKaoDq8jgZSxeXWio9RxByDGIF7Cl4xc-1781502560.5156856-1.0.1.1-pP3gPjQK8nZBJ6TNNIFbXerUwnNORn8xH9Gkh2nAgCU; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b3c16568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":118,"size_decoded":1194,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"022d0cfca2aa68ba5132e88fd463d22f","sha1":"8d501be4b3d29c11fcc26ec6b9ca4d03050e51f9","sha256":"a3d99f133e3ca44163bc3e89b32c429fe83c27a8aa83d42caf37538ff8ad0fea","sha512":"c695a9e6c3ebeb61a112409ea2966762b6509c341aeecbad9668896b67b41cd6d1f6bf7f67fd25c36c120e93bc6ac8dc4cba1cf1c5a3599893005400243127e8","ssdeep":"","tlshash":"41b0124b3b015cdcc32b0b31c12c4fa8540c1408eb9b7803d4dd011815845d43248b3d","first_seen":"2025-11-09T23:45:59.998655Z","last_seen":"2026-06-15T05:50:01.283216Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/define-widget-BAvTujtf.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.259Z","timestamp":1781502558259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/define-widget-BAvTujtf.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:13:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 1372320\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"03e1de2845c0b028ff02b3e5ef8e528b\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d19998deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":693,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"03e1de2845c0b028ff02b3e5ef8e528b","sha1":"8e2ea741fa744f7bb59d2143edc99a2d51cd60fc","sha256":"91b4211ef8a09d3c771796106321a810547844f32b5edeeac0115966497cf17e","sha512":"b26e2fe5fd12422e900bb6ecf6ee6442673122130427645ca889c9e14b602227942f9f6565577132d65966d4be29f950fc2a194b24f2cf7f5bf192d0ec7e056a","ssdeep":"","tlshash":"cfd02b29eca450b858007d410f28e84611dcfcb7bd965590a246a8e98bc91924d2186a","first_seen":"2026-04-24T05:21:34.806088Z","last_seen":"2026-08-04T07:42:36.592878Z","times_seen":559,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/language-icon-D3aRi9wp.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.311Z","timestamp":1781502558311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/language-icon-D3aRi9wp.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"b450e0b3573635ceab25344e4ad62d3e\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319117\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6aaf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1585,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (992)","md5":"b450e0b3573635ceab25344e4ad62d3e","sha1":"c12a01936ec912f296389198c542544bf2ae2984","sha256":"ec1f92ca305dee38fb6d3979b77f98f277871a6344814ead40bcb2c33ff78258","sha512":"2dc725c8d968e071c8955c8e29c7976a05291c201250e141c1b07779ca0e5052b2cf2320af09fe420d15e58edaadc95f81bd223275cb3832e302bfa71f359862","ssdeep":"","tlshash":"ff31ed1ba63261a6732b0846f4e4bc75a06100afef22bf59c3ed4d3876e543c542a69c","first_seen":"2026-06-11T21:42:13.355997Z","last_seen":"2026-06-15T05:50:01.285123Z","times_seen":74,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/page-heading-bDwiMowF.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.316Z","timestamp":1781502558316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/page-heading-bDwiMowF.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"68702ecb1a028fc0e4febcb8a68ac306\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d7ac08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8187,"size_decoded":3003,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4767)","md5":"68702ecb1a028fc0e4febcb8a68ac306","sha1":"888ecf3af4eb06c4f9a7c1a5e354971bb688b34b","sha256":"bfc0090210eef103ff3c48a8c33b71b7b14a95f23a5f42b4dea373d7acf5f035","sha512":"9ef2504b8c135d815d299192bde242d3ae945734c76489710e2360805a853dae316a7f38a8d0ca0720e8141593df2dbf071f14c6d961ac669b3b018d87373e59","ssdeep":"96:ssZzjRLGshsqvwSsaWgXzCxjkn7cNz6vXDjn7cNet2vTTHpF590/4:ss9drhsqv1BzgjKyq7y/pF30/4","tlshash":"35f185496e20da3cfe335c50375a3a18b08c9a2f961197fcb8f78b6a47c28f18750749","first_seen":"2026-06-11T21:42:13.287153Z","last_seen":"2026-06-15T05:50:01.285667Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/MS-BONUS-BALANCES/v3-bonus-list","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.622Z","timestamp":1781502559622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/MS-BONUS-BALANCES/v3-bonus-list HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 81\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nTraceparent: 00-e0b4adf9ddade6eb0587f9ec078f42b7-a724d3dcaea9c0ae-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTE1MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\netag: W/\"47f-6dAU2Db25Sh1fkv2ZnwTplDyowc\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a75ae568deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1151,"size_decoded":992,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d99ca7f9bc1d22a9df1d73fcad193809","sha1":"e9d014d836f6e528757e4bf6667c13a650f2a307","sha256":"e36745da15ef81563bd262c00a054eed70a0058d08ea8cdda416e19d521f63d2","sha512":"87915cb2cdecccecc5e143262bb371098b61d03868388fefe951b257459bc585efc37f125821b25728612b891c33c60207d1345494c36e441edcc2258a38ce4b","ssdeep":"","tlshash":"6a2100425a6c8574bba2b3d078ea2ebb97f8112e42850df104cd3e640bd68d5126a921","first_seen":"2026-06-15T05:50:01.286182Z","last_seen":"2026-06-15T05:50:01.286182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/matches/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.028Z","timestamp":1781502560028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"POST /matches/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 80\r\nReferer: https://1win.ng/\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\nvary: Origin\r\nset-cookie: __cf_bm=6UZ0MDoKySGCcX44P_4_h0YnM6luI1TkOT1xXweX784-1781502560.1219118-1.0.1.1-OSpQoqj9GRcKYDeL.OjIZtw.sBiRY5XuFW5cnn_OgZh4bK7FsUO.gpPI816v7plbE.duazXUpRmj7DXiU_1XxYgWsyj9cNU5FHuBA9RN6LmUPQYs4Mzz4nNEfM6sFjNoL5J6o3BZiZNRJebFKA10mg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=619eYqusrCt5.8.mk1R4D35i1IskIZRg0A7VMoIMbDI-1781502560.1219118-1.0.1.1-mGUqJnQCX7dQrbLwuhV32bl7sl4ALjXXv5ux2IihIlQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a78cd8ab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9005,"size_decoded":2585,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03ef10ef0e9f143df35151849d2bea99","sha1":"26bae6c49b7fc007b353402f49c3e98747cc888d","sha256":"315f877ba9dd924dd4b7cfb30a0205ccdf41476a4da744a08ca54a3acb6afd3d","sha512":"fe7f591343c7adccc88f4c05ad970cce77b3941fc94b135ddc1336ad034697df24bceeb37924f4785f02ce02e6c7044721e6f40d96d86467b02fed84ecb32d82","ssdeep":"192:7zgKb9h6e+IPZU8dSc0uLkwMA+neAS68GML4t1FCFXEFve:nic4qF","tlshash":"0b02ab7f02185cfcf71023a419ae7dca54ad24268de2ad44eadecf0c4cd59ad131e9b2","first_seen":"2026-06-15T05:50:01.28709Z","last_seen":"2026-06-15T05:50:01.28709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=236\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.426Z","timestamp":1781502560426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /categories/get?categoryId=236\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=XPlWyDj43KsOz2_jmuMTD_XFairCXnAjmsaia2XhSSM-1781502560.501769-1.0.1.1-9TREozaQNsDJX3PlseTa_M2IVv7HRgx_V_9JA1_ezeE9zrv25z21AoLJdVHb6e7T7jSkQqtpeB_4_CPjuKc46KRlEKuh___j.nwaAP.fGoiUTvgNDB2UKuqg9ghx0y97fAVSukSwm14T89lG4gbkdA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=xwA5fcVnMyTJ.f62wMikBQFdDM48UltF_Y9bK36TivM-1781502560.501769-1.0.1.1-CkFZ2cAM_9PYrQ7W4rhDrvhtIxTTpM8WgzoGmj0b54o; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b2bf6568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":316,"size_decoded":1285,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c70e818c88fa12da2378211d50f5f240","sha1":"553a22e662b4e1374def17d8c7c067a431a364fc","sha256":"efcdb47292e5411f815832848aa3d734f02887d19311b5aa3881984f118ae4a3","sha512":"e6727033a368edd769318d62d943a9f068ee9be701452d8c0921e9c9fbab969d5b684d8eabe8678f110f2597ebd6786597a13b80513a62e052d8237000009abb","ssdeep":"","tlshash":"83e0cd7a5f14706d57119af3851cf9995981172ea9b63940d2d88acc54707d8670f160","first_seen":"2026-06-15T05:50:01.288035Z","last_seen":"2026-06-15T05:50:01.288035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/tooltip-D6lNM5SO.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.972Z","timestamp":1781502556972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/tooltip-D6lNM5SO.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"61c00aaef1f07dfe3d8a2722ec9ef739\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a651cbf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28387,"size_decoded":11880,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26960)","md5":"61c00aaef1f07dfe3d8a2722ec9ef739","sha1":"4a5532b1ba8e5650634d90de6aadfc85b872e56e","sha256":"420a6f71baa4cb69b5376280b96fdf6cd9197c7553cec16548bb51f8109827cc","sha512":"5647df1e4d498267d5316c3aafd17047aee1a4c62f3e43a736146ac54ffadbd5946277af7f50fdf47813e1f2eaa1cf46bf9fb2d56560813f4f04b44064e70343","ssdeep":"768:UFCuD6yLkkc7kf5PgLfqRWUYmAv6cUYActgt7eUrxUnlCApyfaF18rMhDsQVy60t:ANLkkhmjqRC1v70kp0Wih","tlshash":"d4d219d471a67065637f4697907b420eb3360650320f90a0f27daa9e3c76d6253b3bbe","first_seen":"2026-06-11T21:42:13.417249Z","last_seen":"2026-06-15T05:50:01.28922Z","times_seen":91,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/email-input-CJbS3w7r.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.985Z","timestamp":1781502556985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/email-input-CJbS3w7r.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"be7415a1a4ffc889161c1fd4eaaf09e5\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a652ceb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11248,"size_decoded":4963,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10852)","md5":"be7415a1a4ffc889161c1fd4eaaf09e5","sha1":"28f3438795864198d7c03d5284c1a48f760c6e2e","sha256":"769b8b5bf5f8a889f581b134b6317f0b691251324e8f958b81103392c3ac9700","sha512":"fba7a22805096ae35c0a3ba52f2d06dba0218c5505bf245ba6926f287bbf7736a26da643202bbddcf8e38f2708eeee03cd4b2d5c86ffd9508bcb5c2b3185e5c7","ssdeep":"192:9TRJUxKqMsLfNRG69IzbrxQ+DfEZQdgYdWvHrwB9m92A5DCj2LNtWPreo5KaxQub:9TEAiz9InrjDfEZQm5Hrw/Mh5zbaxQub","tlshash":"5532d75475e5edb241d708d82c3f780ce47a6d352258f4e0f3af8ce12e68a4590b6d8d","first_seen":"2026-06-11T21:42:13.459913Z","last_seen":"2026-06-15T05:50:01.289753Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/component3-composition-Cx3jgoEb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.998Z","timestamp":1781502556998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/component3-composition-Cx3jgoEb.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:13:20 GMT\r\netag: W/\"1668d526d07afbf8e49b7f6115189006\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 2185223\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a653d178deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62223,"size_decoded":19004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62162)","md5":"1668d526d07afbf8e49b7f6115189006","sha1":"e280ef30f656fdcb57aa50af39f06c34ee37b5f1","sha256":"78d87a4b28e04e455082af20db20c8fde81075126553947a77f5b74710e6cd8a","sha512":"6076e3cfbdb0129374ef0840e97291d9aa1ad68677121a5bf02d11535d8f89e3145a7e8e33add5e42db25cfad44e906575e832f19611221a737524dc7c6c09f3","ssdeep":"768:3cmUMGfv70yYqsLw/qt8RkS49TDA62WnzMidTMfdoEWQhyFQBUmrxeroCrwDUT33:1ZDUzg+SNQBUfOLQSOReY1","tlshash":"7b53b5d033f6a46683e8d8d44cb102a3e3327b843445869df47da6df293ed4261bab75","first_seen":"2026-04-24T05:21:35.09444Z","last_seen":"2026-08-04T01:13:27.495032Z","times_seen":611,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/shared/fonts/coolvetica/coolvetica-latin.woff2","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.840Z","timestamp":1781502556840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/shared/fonts/coolvetica/coolvetica-latin.woff2 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 22 Sep 2025 15:36:01 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 2287591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"5d8f526e0d7cfe6d8bfd4b41ed8687bd\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a643aad8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18988,"size_decoded":19467,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18988, version 1.0","md5":"5d8f526e0d7cfe6d8bfd4b41ed8687bd","sha1":"7f9bd2cbff5fe407a25dc0e393ae5fd1c38034c9","sha256":"f79b337789aafa371a62603204a649f9ef6c2ce995b7d64c2b16d4ea70cdda5e","sha512":"02eaa1ed099a4f3819dc21aaa506f5ae6a5e95e9f54eab94afdcc2a289dd3c600ce071d6a1ed3715aa71e91e4cb302998e7f16ff232d9a4ff513df03336883d9","ssdeep":"384:iiZBam+gE9RyI+jICXw7ifDee8Qp3m9w5SuD4hZZu8ZqKr0LPGRUwL:R3+gpjICWiLx3pWpHsAr0LPGKM","tlshash":"5282d03035618436de5a30bc24a32fdd2f614ca46b938cf136e3a7ba4c273895585ace","first_seen":"2025-08-29T00:15:47.493986Z","last_seen":"2026-08-05T09:11:21.956939Z","times_seen":4234,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal.vue_vue_type_script_setup_true_lang-Dg6ukzuI.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.910Z","timestamp":1781502556910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/modal.vue_vue_type_script_setup_true_lang-Dg6ukzuI.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"5a60daf9cd61c0ba3642c5dae8934448\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64abcb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12181,"size_decoded":4795,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8563)","md5":"5a60daf9cd61c0ba3642c5dae8934448","sha1":"8dd063a1c684468871d55445f2840579bc0892e8","sha256":"bf24b38ba5e0000cdaa9b904aa9297c7772fe05356f5957320ef012346ec8984","sha512":"7d66c372b318ff27728b3db66b5edb0c2e5fdafdad04aabcb3951db8a85daceeaf5f006db587b1b3599afbcccd8a867d1e3867dac060aa8942d4baac6f2552c6","ssdeep":"192:n5Lzu262no18JOkP0Iz39IbUi8EsEBgp0YRMDbjK7NJI3HuH4D5zPuCPNwwP:n5LzUk3JOkP0Iz3tZEmV6vuH4ZPuCPNF","tlshash":"c542d787cdfc9a31497f9047b279cf10431c4a5ae2216c9772b89ebd0bcbd991191a7c","first_seen":"2026-06-11T21:42:13.259694Z","last_seen":"2026-06-15T05:50:01.291261Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flowmetric.life/api/v1/product-visits","fqdn":"flowmetric.life","domain":"flowmetric.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.045Z","timestamp":1781502558045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowmetric.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 14:53:26 GMT","end":"Fri, 04 Sep 2026 15:53:13 GMT"},"fingerprint":{"sha1":"9A:77:6A:A6:89:74:A1:CA:A5:72:30:D0:EE:8A:76:AB:3E:DA:D2:59","sha256":"9F:F8:3C:32:C4:D2:78:C7:C4:CC:17:DE:91:65:DB:F0:E7:91:3C:9E:DB:E4:FC:C5:9A:25:63:CF:61:AD:92:FB"}}},"request":{"raw":"OPTIONS /api/v1/product-visits HTTP/1.1\r\nHost: flowmetric.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-unique-key\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, x-unique-key\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=AFyA_clB6Dmu8WaYHRAz_YXoP9iuvNh.rF4ulbsVfgs-1781502558.0575297-1.0.1.1-zH5GcPHklc4PJhaE2gxzFle9F7JriXuAJsRd8_26cMHieTZVvC.vn.jT8Kg4jC2Lp4VFAnZZMlkxw_yEw82fwd_yDJxJBM4tWbNPs3_Z9ZCIzTp5g6UXgs8pnjIJ0lri; HttpOnly; SameSite=None; Secure; Path=/; Domain=flowmetric.life; Expires=Mon, 15 Jun 2026 06:19:18 GMT\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nserver: cloudflare\r\ncf-ray: a0bf4a6bd9d20b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1054,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":43,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Dk8VhSIV.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.369Z","timestamp":1781502558369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Dk8VhSIV.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"b6f63f1df007c31b68e3fb7978b4dd01\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb968deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":1517,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1232)","md5":"b6f63f1df007c31b68e3fb7978b4dd01","sha1":"2451bc70744586c09ae10ff8369424f811a19a1e","sha256":"149379789569e6dff10717607efc9a85996ca070229e2d01bdd52e76adc08c76","sha512":"90fb02a455388b7a9107c31330d0a1599c4c4a43e004183dc99a729a04d7c9a1965e7ba8c3e6aaedf5cdefcdfeb0ee970a02fa83298399e4b84d3ee71f6ab359","ssdeep":"","tlshash":"014133025ec45db2951c0ecd9d1a20e159da5f01e514c89ebf724d3d62b8cad901af7f","first_seen":"2026-06-11T21:42:13.242653Z","last_seen":"2026-06-15T05:50:01.292107Z","times_seen":71,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-Bc-LNsfl.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.161Z","timestamp":1781502559161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Bc-LNsfl.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b1d4c12e45746d92faa420a41fcbec99\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72bf808deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123,"size_decoded":598,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"b1d4c12e45746d92faa420a41fcbec99","sha1":"402c22b23b63e7e113952a7ab09a945b2df1738b","sha256":"72cba5c3fd684a4bcd007d37c18a5525b4889c12de2561552f0993e504990eed","sha512":"74696889b2d51a3161720875c941733e92f08ec5ca9962480cb842774b14fbe9098e631e88fe14ded4653275f534f1122eec70e7bc8036356bbb39de84ebe180","ssdeep":"","tlshash":"dbb02b0b0882c9700a070c857e008402a32862100321ebc4a45d17101730483430f00e","first_seen":"2026-06-11T21:42:13.20815Z","last_seen":"2026-06-15T05:50:01.29265Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o230566.ingest.sentry.io/api/6214573/envelope/?sentry_version=7\u0026sentry_key=1fbce2bb08464b11bded9708cfa299d4\u0026sentry_client=sentry.javascript.browser%2F10.57.0","fqdn":"o230566.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.609Z","timestamp":1781502558609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/6214573/envelope/?sentry_version=7\u0026sentry_key=1fbce2bb08464b11bded9708cfa299d4\u0026sentry_client=sentry.javascript.browser%2F10.57.0 HTTP/1.1\r\nHost: o230566.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://1win.ng/\r\nContent-Length: 438\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":495,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-05T23:01:10.317827Z","times_seen":755480,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":28,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.646Z","timestamp":1781502558646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\nexpires: Mon, 15 Jun 2026 05:49:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 15 Jun 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157739\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467986,"size_decoded":158389,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20304)","md5":"dfc01b3bd18cf8a72f4289a9d2ad868b","sha1":"3bac717b1ceb7db8517b243c64a7d7aae6442ea8","sha256":"5f5ac36d4bebdeb1b365b4fcdef3eff8e04c3518545331b5653fb1356181a55c","sha512":"9f084e027e78ede1ab0e79fc5973f1282f766e2fa97e6c9a465092a907404e3f3b610eb1f5ef54d650f90af8bbf575f2de4d5ab6e44b6934a1289573f2669285","ssdeep":"6144:McqqAww5av7p1u+ZUL8DPEBMdv8HuVgNhXB3JWOMZo3ctT0:l45av7NZw8DPEB4gAHO","tlshash":"e4a409cdb3d674625393b478903f018fa17a29e2b44cd898f18ac8d42e7469a4277f7d","first_seen":"2026-06-15T05:50:01.293719Z","last_seen":"2026-06-15T05:50:01.293719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":49,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/button-RR21fBtg.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.915Z","timestamp":1781502556915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/button-RR21fBtg.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"1229b7470547cca5f0d754c90fe292b1\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64bbde8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12834,"size_decoded":3874,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9220)","md5":"1229b7470547cca5f0d754c90fe292b1","sha1":"0d0d189db7cae237a2a06b8adcdf14f2e08b3ad7","sha256":"9015087d73f2f1c4ab8d383652f03fcd22321346c53461d7aa54f34f88e6e820","sha512":"e73f332c35d28173dd110e84dacfa4a8a27d31eff55529ed860bc1ce91b2db747a4b7c53457978b09607e84dd35f512fc9bc4badb7689517f7a4c325f4b58350","ssdeep":"192:nR5SEuKfJYgMK1blJwyzFq/8vhQxYupqyzO4Jwg8P:nqfmJWKdlGz/mhQxYuVO4JwrP","tlshash":"cb42b6aff600f53dbf939509531ea0ec920ce8b59e155becf41c999806d2ee16297307","first_seen":"2026-06-11T21:42:13.295823Z","last_seen":"2026-06-15T05:50:01.294599Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/phone-input-e954s37t.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.021Z","timestamp":1781502557021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/phone-input-e954s37t.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"25e31eeb6e419d9637229ad0661a6a01\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a655d6b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129684,"size_decoded":38140,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64711)","md5":"25e31eeb6e419d9637229ad0661a6a01","sha1":"a9ea65c4aca88d78c3704695998b14f2f5d5ab6e","sha256":"7a2a9f004f8057f97821bfd3c4b17127aa78d4078cd4d1e7f07f69f5426ff745","sha512":"266cf3c57f3b020c24817de36e6783bcceeb7e94617d0d9d6050b131c25c50f6dc6b8575b3a63e2c5bfef3caa1f1abc2cb30cb6cbb57ad90c1128e3b3ed63f9e","ssdeep":"1536:wcCOe0tNo455wjcQLgJWrKRDkGtPe9UTQMR45O8m3RDJvftuqWNORBE4n9Sm636s:wxOe03o4PwjawUUMFlvtBBX0rq7SFB","tlshash":"0bc385b77a40ab6775b13f18cf06e28e9fcc8c92dc98a08c9be7d9db1950821607d715","first_seen":"2026-06-11T21:42:13.455281Z","last_seen":"2026-06-15T05:50:01.295486Z","times_seen":91,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/content-load-error-CsiDyHgT.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.295Z","timestamp":1781502558295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/content-load-error-CsiDyHgT.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"245153d35fc171f77d0bc699bf567403\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d5a668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3014,"size_decoded":1679,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1661)","md5":"245153d35fc171f77d0bc699bf567403","sha1":"9489e9f5dfc72c465c50358aab1dace15499131a","sha256":"1fcd8adb2c94e5e3cbb1d6341c8033e432ef73d5c163f2f3d83b5232582421c1","sha512":"ec388f1c4b6e36c00fd2d744b0a41d7383d655ca8a10ed9150420e9dcb5eb1e6a79fd5bc3b2763085cffaf0498be29afc97768ffbe338409218c30ecb840c92d","ssdeep":"","tlshash":"d25143a5ef64e139f7734c4f2f2a7008e444d16b8523e5f8d2a5460c89c6beb07a4b09","first_seen":"2026-06-11T21:42:13.32029Z","last_seen":"2026-06-15T05:50:01.296041Z","times_seen":73,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/b/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.037Z","timestamp":1781502560037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"POST /b/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 42\r\nReferer: https://1win.ng/\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\nvary: Origin\r\nset-cookie: __cf_bm=rnm5ULfDCiOQwqjEfBNgoRTgNe9H28Ni.ol_VleL7SY-1781502560.13363-1.0.1.1-EdGZmJ6GGHbLPQoVMRoI5pcezdb8RE3KR5M3zZld8F9czv_rksAYBu.OGEIqObiPY.yulDBAWRonOWlwQyvwsDDRqBB_U8wl6hIXg1bBM9pcSXylQXCj3H7_NMCacmDz8cJ3EM9FWk9h3.32.i4ASQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=HULXmeI_5iPQlqAqdKTV43lHxvZOu2Ek3A_51Y9dKNo-1781502560.13363-1.0.1.1-KujrZDM_bWo0Sc7a3VG.T5u5BiM5iGBPG8Z9MeP_.qM; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a78dd93b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16819,"size_decoded":4197,"mime_type":"application/json","magic":"JSON text data","md5":"4af70bf9bb44cf40aa053bbedf1de7f8","sha1":"8ae28f455b6bc588526d2725d588ae261fa09751","sha256":"ab41336067657114e1ec62d84a7801fa721a2168d735164c0a75b821ab6b426b","sha512":"91919bae8538c28369d6e6e4d1f6b00fecb8d6bafebebb903bdb162ed0d83ad620033bb27141598e66acec9ff3fd504280266ef02016d09a2de61fcf3efcd014","ssdeep":"384:s3M6LScKmO9vpAXq4ScKmO9vpAXZf3lUA31UA3MzjY6YS:GM6+mO9vpIqjmO9vpIR3szEjS","tlshash":"6572303b52673ab080b251ed33fe65c726f120a0f6819e15adee8b9c83dd82336715c5","first_seen":"2026-06-15T05:50:01.29661Z","last_seen":"2026-06-15T05:50:01.29661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-recaptcha-DRQDabdY.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.904Z","timestamp":1781502556904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-recaptcha-DRQDabdY.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 13:15:18 GMT\r\netag: W/\"a180d43ad8e404bedb40cb0e71b38536\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 2600609\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64abb08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2088,"size_decoded":1663,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2036)","md5":"a180d43ad8e404bedb40cb0e71b38536","sha1":"96f0ce29d59cc09e02e3a67060b8afd3a4ef2122","sha256":"a0372f572e2af8713b4fa37865f776e20db9fa4a864f5c94f479510619076b18","sha512":"7522eb9f28cf847fe6b70936531c8ee7293682c181413aade1d5bcde5c656a5bd298080f4054e0823c09eeadc824f91ab44c1fbcc22c1cc0dde206388d2026e5","ssdeep":"","tlshash":"0441b51741a45bb60c080a43b07da3d4f77402a9f124588472bc4e7ab39eec2c69bf99","first_seen":"2026-04-24T05:21:35.188562Z","last_seen":"2026-08-05T09:11:21.938965Z","times_seen":613,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/currency-DJIdQx_-.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.035Z","timestamp":1781502557035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/currency-DJIdQx_-.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"01edba3ed698bf628a3d637863baea34\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a657da28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1648,"size_decoded":1417,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1112)","md5":"01edba3ed698bf628a3d637863baea34","sha1":"87cd1ea0023cd2bb8153045a01bb0256ff1b9d47","sha256":"70fda426605936651080c724323ff9e0e1776c9f3c5513b9cfdc429fb092465c","sha512":"246036171caad8efe1c77e7b98a721d5c0d554df06c0007c23b84f10e18b951ddfdf8ac30e7011faa0a7a75367b610dbe12e634982a583b3dd4e20118b08d029","ssdeep":"","tlshash":"dc31b692ee11e2b0a1260c8bf92cb0a4d0c861f71625c4f4d1bece2c83d8eb94209f85","first_seen":"2026-06-11T21:42:13.374428Z","last_seen":"2026-06-15T05:50:01.298138Z","times_seen":89,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/vip-badge.vue_vue_type_script_setup_true_lang-DIhxBap6.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.309Z","timestamp":1781502558309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/vip-badge.vue_vue_type_script_setup_true_lang-DIhxBap6.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 12:08:11 GMT\r\netag: W/\"38b20db8dda7db973c6ea23521e1b515\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 2136897\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d6aa08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3390,"size_decoded":1920,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3389)","md5":"38b20db8dda7db973c6ea23521e1b515","sha1":"f705382b2184fd8bf9a57c679fbcad4835cd5966","sha256":"214a57efa7ec4240f689cef13b986f93ecdcc5f6f5a391eb5ebc9f3e203e80d5","sha512":"527fa17b01a77e6ced0e5cdcb6904bb3a862cc61d7b033fa2fcb5fddfb4e766bb02c721bad57c6524fdd62baa4e693936b9297538d1413dec28d0d1acad7641f","ssdeep":"","tlshash":"46612454f7b0d2d5450b9bf9fe3b64a011bd38ba9bc09d90b3d27828dd9c0de58058d5","first_seen":"2026-05-24T17:27:32.502333Z","last_seen":"2026-06-15T05:50:01.29883Z","times_seen":174,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/countdown-CqFvZSXc.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.363Z","timestamp":1781502558363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/countdown-CqFvZSXc.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"baecdfe87fcac9c5d0b0180e8dece57f\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dcb7a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2184,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3916)","md5":"baecdfe87fcac9c5d0b0180e8dece57f","sha1":"52c8c877508a01caeea9fb96b556c539f0743e6d","sha256":"8a9a18f55f4ec3ee586fb1ddade77e98bff7c649abfd54c496e8a682d6e7936e","sha512":"d43c15d5dbd6d53daab4971e45840cdc3b3a349b44ec3c04d1e79963ef02eb457598cfb1bc70e68b9982809a323d27e20a5e7f9c859076e019fe00c07ae01df1","ssdeep":"48:W+PtE1pMsAy0lcH0gEvxT0hk2ssXLQeuhcJncac5MeRIx4BK9cPIK96MZ31K9WaA:Wu0pMty0WUg8r2tFq3geMtyzjRUn4","tlshash":"f4c1f1d0e9f0f93a6cb3d9a6735a336c85859c67c9168ad8c19d190c1af7ef30b85701","first_seen":"2026-06-11T21:42:13.44934Z","last_seen":"2026-06-15T05:50:01.299394Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/freemoney-sidebar-banner-BO2ivXP1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.157Z","timestamp":1781502559157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/freemoney-sidebar-banner-BO2ivXP1.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"1c15519636c2ec4dfaf8f183ece1d201\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72bf668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5458,"size_decoded":2596,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2746)","md5":"1c15519636c2ec4dfaf8f183ece1d201","sha1":"09c3bb1f4585417ec324bd65d195ea175b8478e5","sha256":"b1ba3530ce561e36a1d7e5e1a318d192389ab66738021422583b9faa6b7afd30","sha512":"71da73a8585c7e6f4eed1d7789595a99095ce6c0f58047ac5f01e9a5958061728d128c1319e99f35eecc86af87712a0a32fa2c6b1915eb1daed2080a5eb6e74c","ssdeep":"96:O/mF7DnMXFoMcA8tdEZ/LgGKf8H1y6DSPdr4S3Ewy/eC:O/mFnnMXSCYdXGYmQ93ER/x","tlshash":"e1b1a5127930a5bc95b71cac1ecd1d71c09ebef9da11cdc6846ead3003f6ad2874a388","first_seen":"2026-06-11T21:42:13.135583Z","last_seen":"2026-06-15T05:50:01.299886Z","times_seen":50,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-games-by-category-XrbZSTkk.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.168Z","timestamp":1781502559168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-games-by-category-XrbZSTkk.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"2ed575ccae5dff9a1d9f737c567fb962\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72cfab8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1536,"size_decoded":1351,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1535)","md5":"2ed575ccae5dff9a1d9f737c567fb962","sha1":"b59c342cf46b3a6b72de601513a806596f203bc4","sha256":"8614a1cf576e9fb9e4e280cbc79d5e8fc920cd1f9576c1fb4abdd57b51b29ba0","sha512":"c2818863508a6b9314615a52da0252246496b521da63ead16b2e20cfb8ff5f45f6f0cfe28f6b0f5c301dfe231c9585c7d45adf448200dc9d18428568a697ae5b","ssdeep":"","tlshash":"1f3133ae499a63bb84999cddd46010b54530454c22ab8fd0959faf9602476cec05fe1a","first_seen":"2026-06-11T21:42:13.363554Z","last_seen":"2026-06-15T05:50:01.300488Z","times_seen":50,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/casino-v2.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.467Z","timestamp":1781502560467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/casino-v2.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"casino-v2.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RImU1ZTlmMDYyNTQwMGQ5Y2Q3ZWY2NGZkYTlkNWU4NTAwIg\"\r\nx-request-id: -FEDjFYcLSdrmGlAnaD0x\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2203756\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a7aeda576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3163,"size_decoded":2036,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5e9f0625400d9cd7ef64fda9d5e8500","sha1":"4440aacdfa0ae24ac1082d51480212d579ebe53c","sha256":"66e49267ef18c6fad55fcf4ffcbe14ca7d5342c5891b9137a19070ddd799c6e1","sha512":"336b2b30ce9e1d1360dcce72ad4c496aac9f649994d91ceecc7380c865106a95a149daa6492781d95ca8d952a21b37c551f2a222dbb15a232fdbd6d6ee97afb2","ssdeep":"","tlshash":"f75143e637c9f0c0604b9f20dd175dac2a6f287a7e5885ce51f1a6e4f7222c0c84cd94","first_seen":"2025-06-23T00:10:28.504563Z","last_seen":"2026-08-04T07:42:36.62018Z","times_seen":3380,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/bonuses-v2.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.469Z","timestamp":1781502560469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/bonuses-v2.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"bonuses-v2.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RIjcwODM3NWIzMjQzMDEyYzlmMDMyMmFlNWNjMjg4NjcyIg\"\r\nx-request-id: A4NlzkmjPrxjR_unmgfkh\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2891375\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a7aedad76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":1595,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"708375b3243012c9f0322ae5cc288672","sha1":"f8b5649f6171180e6574394fd13d5eb5f7925790","sha256":"2b5a95a2f74a1312bf5c90a08d9739ac865b4049d1698e30c060816b35413fdd","sha512":"fe8c3d6f7dc389409125e84684bad29539d35d61c395b609bf9c56eda89f3492234d8730b9b427b583f4b05fe6a2195f984afaee59b7d99d10876e51ed9dabe1","ssdeep":"","tlshash":"1c4133fb705cc3d6048fdf64c9335caa9027bcfd2b858144a2a56a60bd1a1f5ce08d98","first_seen":"2025-06-23T00:10:28.436426Z","last_seen":"2026-08-04T07:42:36.564598Z","times_seen":3478,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-oauth-finish-DgCg7dm1.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.907Z","timestamp":1781502556907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-oauth-finish-DgCg7dm1.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"48cd41fe3ef3e06f4020474eaa4a8797\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64abbe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17951,"size_decoded":7514,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17950)","md5":"48cd41fe3ef3e06f4020474eaa4a8797","sha1":"a65ccf5d32d78381ec89c30068d33f3e5f3becb8","sha256":"c828a52a465a46dab65ba3757176928ba63452c9293fbf7e8f8332c1f52a05e3","sha512":"41977f74b928afb878318c1a5d53a5621432f479b71e58a03ac1f8237d82f6078dbdef2258c5fecca9c4e0f8593ec15c95cb05a2dfbe5b1429f93b9493bacba7","ssdeep":"384:lcT3YoljKcNeO2t67FbXr23TGtS9bVCHprRmZI5Q5VMtpULgd:2zYoBKjO2t6mTGtS9xCHpdm25Q5VMtpd","tlshash":"0d820b92a2f316b58ef358c1c6387170d2284a14b41d95e1f9dd8f1f541bd06ea3bf29","first_seen":"2026-06-11T21:42:13.388539Z","last_seen":"2026-06-15T05:50:01.30363Z","times_seen":92,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/betting/ui/search.svg","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.130Z","timestamp":1781502560130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/betting/ui/search.svg HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=JQBjjPWHk4WaftKDkzMzw6e4JbkjXrmZxYF8VO40ErY-1781502559-1.0.1.1-yViIRy93WfflBl_gR_Sg6EfURX9MyQB0bK5FurPZLpdbhjNVMeMXkxvULDd34s1ug76t8OYq.5QVbe7lOKrIPzPMxl1H6lG3wcr4nUIv.iro_zOkNVjxHQWXqi3pkdI1; _cfuvid=L0TTdoh6x2KZ6h4CDsLJ5vIgcVePGiHenSotMurTZoE-1781502559916-0.0.1.1-604800000; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559; _twpid=tw.1781502559888.821034322867757848; core-sticky=ae220d3d7644fba3\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 15:19:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nage: 679607\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=pyhYnJKAyas_Zw.hNTNXseZLg.QSNAcvKSdEM7Se34Y-1781502560.131892-1.0.1.1-bvGUeVTKh0kUOEUjL9VH1WlXpXS0WlGvfdfwTzO6PNvMGTRCVBTh7DQCBGDNo02V0Rl7TdQWluwJZlYO0ggDiKdvj.BcDZJfRys0Spvmdq97oWc4m1.cJHcJpVzXKT2Rwz2yOKY22VIAYhdE751Big; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=bjI0CChKQgARaHT_HEuWM35OSSWEJ0wEy_KLuamnNOE-1781502560.131892-1.0.1.1-2tX_fu7W8oAVxNzjHjumLxwrLMcD0yml6Be9YJvB85Y; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng\r\nvary: accept-encoding\r\netag: W/\"227d2739336f998ec3f586d0d747407a\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a78de568deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":1269,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227d2739336f998ec3f586d0d747407a","sha1":"6b608726d7fd45708ccfd7ac4fcf35e0d05d891b","sha256":"a4d00c5d703c59ee660c82cd51c942e2eeb4d5d31a1fbc7b6ea050bb6bb3e922","sha512":"7242cb1286ad9914236ca2223fef40e809e0d24455d7d2a0cf2fee463afd413f11501af8b416eda0ee40a78158dd6c7cfe081c5fef9f4b172786564bf75fdd88","ssdeep":"","tlshash":"41e055b66068d14c0e4f4630eb3c30ca833d34bdf14c14a4b29c65689c4aa75ee03151","first_seen":"2025-08-22T07:28:00.948813Z","last_seen":"2026-07-24T23:34:13.343746Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=18\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.445Z","timestamp":1781502560445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /sports/get?sportId=18\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: EXPIRED\r\nset-cookie: __cf_bm=.HbBs6gGFiQpaS3K0ROb8m2Mtpl0WJGkNal1Y5qNB8g-1781502560.5216296-1.0.1.1-0mJD6qwcGL7JA8BmEpM8zvfkwbiB2AD88ybJUWWZ5h0ezCquD__FIc9XNR9dO6Qgx7qY0KtO01ComnyLGfIp.1ySb0VEwpjM3bCGemnSnHUT8EHheZeqvbWEm7dbkmAOJTJH8bgfNhVccsVvEgUkCw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=CT8CpDwSdwFqij7wbND.9WuRu0.PqwuMqfx5XgjvaAU-1781502560.5216296-1.0.1.1-l1SgQC8XwyWZmpJpxBljebG2zLf1rCl6zWffY1xW45g; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b4c2c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"EXPIRED\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":108,"size_decoded":1207,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"02a9484d8dcda8abf545a9422190cd4b","sha1":"3216bd53ba99b05cc77d91dba740ec2d52d9c54b","sha256":"a96309b992da83c389f26dc92c69ec636707f0bd3606b3ab94417c80f4791789","sha512":"63b3a8eb230fc9d3950b6341bcbf93e1674bef1d22e0a9a7b6a27bbf4f240f4036fad24da41fedf4fabf1f6edba6dee86fbcf50f7e032d5c10e68d0473f1eac7","ssdeep":"","tlshash":"abb01248310054ec690e4f9893801d8801602508e6c77c02c4ee952c2ccc5d8324b343","first_seen":"2025-11-09T23:45:59.897635Z","last_seen":"2026-07-19T19:33:51.481091Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=39951\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.602Z","timestamp":1781502560602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=39951\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=t2vQnWopYG4k02YYHLSjXrOai0kuxjhXXl4LrJbJTcY-1781502560.6019392-1.0.1.1-gAuwsEw6bT9f3I9YaMikQAGBCICW6Or8aLx8bmNYX1Gu9OovLUh8idZ.bkYbBUmV5M9zqhX4NO.Gjlcu9ApdnZPmZA6P3Ftn0S1tx7gCeZsLfts_T8S0_rYGCr.6n2tGRvG.ZWAzaryo4WUOxJYNaw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=K4.v1T.rseCg2DRptQ8GsiVfX_I8YFQoBvWP_1sWoBc-1781502560.6019392-1.0.1.1-3OR6MOMFRTEVWvM9DYwPUhevC45FXtrxv98Kf00MfEE; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bcca6568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/segment-control-CtvxQ7JX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.936Z","timestamp":1781502556936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/segment-control-CtvxQ7JX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"30693b6466fb4c29bef012a157ed8bf6\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc438deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6353,"size_decoded":2748,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3490)","md5":"30693b6466fb4c29bef012a157ed8bf6","sha1":"86b7d09e38bf7f8c04761b9c472ea724af10b6d8","sha256":"892c573dcbfdc4adf10e971017d76f1d66dae9a305a378a9ffcb32f4fdfb6d3c","sha512":"ae1662eca5c380157927765ed92f1f9e08903da1f4d379412cd4ea50035488e06e403165adb26620e09fd7c20b5b87b44ff8644b92721d636bd6de4268342543","ssdeep":"96:6MOwTfNqJyoTaXDOXhryZSn06Cc10UisuzOKRoOmfWyhBkpDFdvpb4eIYdwqhjAM:6ZGMkO/z11+OKPcWMBkpDn5jpwqLT","tlshash":"2cd1ec99a8f0be3765b7880fab3cc0a09439f6b4ca5591eaf0787f2703d9e44411fa05","first_seen":"2026-06-11T21:42:13.428932Z","last_seen":"2026-06-15T05:50:01.307217Z","times_seen":91,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/mask-input-Ua9sCGnA.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.002Z","timestamp":1781502557002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/mask-input-Ua9sCGnA.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"a9bed1a5b9137f20be00eb8498d7276c\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a654d258deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3556,"size_decoded":2177,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3150)","md5":"a9bed1a5b9137f20be00eb8498d7276c","sha1":"bd050b1b15ae0b54022c0910833fa466d8936685","sha256":"b4d0b9bc169cac55a56e500204dd23f35ad7c41e416acdc3204f31c168ee5f9f","sha512":"41df38e1e235d519878cf99e20c087539c4f56a39f5d9d20112a98ba873b27d80514e126de828c9e23ad5d07b0e934df6ebda0049e82f68cc8c3e4ba03cebb7e","ssdeep":"","tlshash":"9771b412759c60730bbb8996f0fbd8a0ad649358e2f114e1089ea8281badcc4c51ff96","first_seen":"2026-06-11T21:42:13.278151Z","last_seen":"2026-06-15T05:50:01.307903Z","times_seen":91,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://1win.ng/v4/socket.io/?xorigin=1win.ng\u0026app=frontend\u0026Language=en\u0026EIO=4\u0026transport=websocket","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.740Z","timestamp":1781502559740,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /v4/socket.io/?xorigin=1win.ng\u0026app=frontend\u0026Language=en\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1win.ng\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZHjkS4Ujc7QWiEc2YPkIFw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 15 Jun 2026 05:49:19 GMT\r\nConnection: upgrade\r\nSec-Websocket-Accept: 6OSW6Qmej2hTcX8wL/RHxNwJmmU=\r\nSec-Websocket-Extensions: permessage-deflate\r\nUpgrade: websocket\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nServer-Timing: cf-cache;desc=\"DYNAMIC\"\r\nSet-Cookie: core-sticky=ae220d3d7644fba3; Path=/; HttpOnly\n__cf_bm=JQBjjPWHk4WaftKDkzMzw6e4JbkjXrmZxYF8VO40ErY-1781502559-1.0.1.1-yViIRy93WfflBl_gR_Sg6EfURX9MyQB0bK5FurPZLpdbhjNVMeMXkxvULDd34s1ug76t8OYq.5QVbe7lOKrIPzPMxl1H6lG3wcr4nUIv.iro_zOkNVjxHQWXqi3pkdI1; path=/; expires=Mon, 15-Jun-26 06:19:19 GMT; domain=.1win.ng; HttpOnly; Secure; SameSite=None\n_cfuvid=L0TTdoh6x2KZ6h4CDsLJ5vIgcVePGiHenSotMurTZoE-1781502559916-0.0.1.1-604800000; path=/; domain=.1win.ng; HttpOnly; Secure; SameSite=None\r\nServer: cloudflare\r\nCF-RAY: a0bf4a76898056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":919,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":14,"connect":14,"send":0,"wait":156,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api2.amplitude.com/2/httpapi","fqdn":"api2.amplitude.com","domain":"amplitude.com","tld":"com"},"ip":{"addr":"100.22.108.205","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.810Z","timestamp":1781502559810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amplitude.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A5:CB:68:FE:12:80:56:24:2C:11:00:13:EC:13:7D:30:2A:4C:FB:14","sha256":"99:9C:FF:37:78:C0:3D:4D:12:AA:49:AD:70:1B:EC:4A:BC:CF:76:46:4B:CD:C0:CE:A4:86:F4:30:46:B8:C0:AF"}}},"request":{"raw":"OPTIONS /2/httpapi HTTP/1.1\r\nHost: api2.amplitude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:21 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=15768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":284,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":1723,"timings":{"blocked":-1,"dns":0,"connect":170,"send":0,"wait":338,"receive":0,"ssl":1215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=46382\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.438Z","timestamp":1781502560438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=46382\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=t3zsa21ABnjnXI7GIGnUC44riU_84cRVBnhdDdKMclE-1781502560.4391556-1.0.1.1-HuPsjIRruWKNPy9LNkv9NeO.4lY6qCR.aa8KU1veiyWFFBs3W3UoMtRj3TK62kH.fPOrD5RLjQS7MPvzH8yz0y1jN1UgJQmRRUkXSn9EiFQE5QXPQPnHm8Tmucjh5ZTA22MEntTzO7XeuPehlDxysw; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=tIbPQbKySO3KRO8D8jdo9OXIQ1pnS_sAxBo_xqvlP0w-1781502560.4391556-1.0.1.1-bHO6Ry8HrOpmQ28C987Kyw0kIBJUA.rHiC586t5PLnQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7abb9c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-BzLCQsKF.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.263Z","timestamp":1781502558263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BzLCQsKF.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 13:53:47 GMT\r\netag: W/\"7fffd492dd4b65be97dc854cfad8687e\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 314569\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29b18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2816,"size_decoded":1955,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1677)","md5":"7fffd492dd4b65be97dc854cfad8687e","sha1":"5a8cff00c5f0b263ecbc15c54e7b4353503c846c","sha256":"c7f85c2ca155238c2a4937d60cd3b2a96ce18f57018616a628b6ddfaba1ba095","sha512":"908d57c7270087fea35dbd07afc8bb19745bb2acf66b3067f1674e51f3ca95649186e5fbf3f064e8e18fd398317e21dc88ded44fe6f55b75db68726634f21cd8","ssdeep":"","tlshash":"4e5174eb94845db1127c4c99ddea10e095f85b86e440c89cbb3e4cbc7261ce8a01afb6","first_seen":"2026-06-11T21:42:13.368174Z","last_seen":"2026-06-15T05:50:01.308521Z","times_seen":75,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/wallet-BPdiJ6lb.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.285Z","timestamp":1781502558285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/wallet-BPdiJ6lb.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"4007d0040a1683a0458f3a33d0fdfd7f\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a3a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":807,"size_decoded":971,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (806)","md5":"4007d0040a1683a0458f3a33d0fdfd7f","sha1":"3578ff6821026d7b6d14a54ad38d66c29ac17874","sha256":"d767d53d3cbf12e0e2d1a6e55718af4a84153c604ca45714cc4ea1488e195faa","sha512":"aeaba92c5360d1d96de7d4f245420fc4ee3ab3d1840871f56260a4073f51668594823393475ec87d2b29e1c49e9d17dd6dc4243b77f9965a057dbb8515c54896","ssdeep":"","tlshash":"72016bfcd2492a5e1b1b83788b2c78f0431d14bc371a46909a5f1271a08a5b5cb8f9a0","first_seen":"2026-06-11T21:42:13.36119Z","last_seen":"2026-06-15T05:50:01.309965Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/experiment.esm-fQdpNBFK.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.126Z","timestamp":1781502559126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/experiment.esm-fQdpNBFK.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"7b9f384393c4f36e5180c09999cda546\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a728eda8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70217,"size_decoded":23691,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b9f384393c4f36e5180c09999cda546","sha1":"2c52605d6dca814b780684901f0ddce4002aff53","sha256":"0abce1a68a9123f363329c976b0b088aa8d8a247ef9f9515140794852ee64b28","sha512":"98d697e48d9882478e33a98f926f200f460bb434e7747abe5ff608ac2283a80cf6f09b90d95d45e258b5feac5b0f1e60c66114a770ae54f60eaed0055e44a72f","ssdeep":"768:l4nGqDBiD22WeoCSKAuwVazRqmd4UQIFOFlBjY9mqzA0mmj7n+VD1ua/2IaDtdYo:+nGqViBS1uwVyw+sFjngII0agAoq5","tlshash":"0063f8ddf1cab4354396f8a8d02b0416bb3f3d18d90c81b8f52ae6d23eb9545412bb79","first_seen":"2026-06-11T21:42:13.281776Z","last_seen":"2026-06-15T05:50:01.310791Z","times_seen":56,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/shared/images/languages/en-001.svg","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.781Z","timestamp":1781502559781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/shared/images/languages/en-001.svg HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Sep 2025 15:36:06 GMT\r\netag: W/\"0aed825968f6b0be5d053a71c6ecac99\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: accept-encoding\r\nage: 2213086\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a76a88d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2071,"size_decoded":1484,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0aed825968f6b0be5d053a71c6ecac99","sha1":"454eee1e372143c4db4b5d99f5aa7f59d02d4593","sha256":"0c9593376b290cf36d46e884463927334ada8f26482b85776da94a2286ff4a73","sha512":"96c59e7abfaafb1b7cc104d0cf7eb2230f5f33f4ec90408616315933d89fd8222c9394abfe4a7fa895cf6ced66ab72823df981157f8fe1a3a7e8d30614d85e58","ssdeep":"","tlshash":"d54111d163e8b2cc09879a7def387484677f68bf7e9040a8895fc520a08759af507c54","first_seen":"2025-06-23T00:10:28.56792Z","last_seen":"2026-08-04T07:42:36.534919Z","times_seen":3734,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026auid=1925994040.1781502559\u0026dt=1win%20Casino%20%26%20Sports%20Betting%20%7C%201win%20Nigeria\u0026en=page_view\u0026dl=https%3A%2F%2F1win.ng%2Fbetting\u0026scrsrc=www.googletagmanager.com\u0026rnd=678990649.1781502559\u0026navt=n\u0026npa=1\u0026gtm=45be66b0h2v9235556381z8894400803za20gzb894400803zd894400803xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938466~115938468~117776794~119392697~119392705~119456239~119456247\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16795866810\u0026tid=AW-16795866810\u0026tft=1781502560238\u0026tfd=3748","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.248Z","timestamp":1781502560248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:19 GMT","end":"Mon, 17 Aug 2026 08:36:18 GMT"},"fingerprint":{"sha1":"29:88:63:13:7D:77:C4:B7:BD:5B:53:D3:3E:6F:29:37:9F:14:93:44","sha256":"E4:13:4C:BC:32:C0:C0:97:65:99:C6:84:AE:0B:6A:C8:49:B2:D7:55:46:D9:34:DF:DB:61:1F:A0:D9:A0:E9:CB"}}},"request":{"raw":"POST /ccm/collect?rcb=15\u0026frm=0\u0026auid=1925994040.1781502559\u0026dt=1win%20Casino%20%26%20Sports%20Betting%20%7C%201win%20Nigeria\u0026en=page_view\u0026dl=https%3A%2F%2F1win.ng%2Fbetting\u0026scrsrc=www.googletagmanager.com\u0026rnd=678990649.1781502559\u0026navt=n\u0026npa=1\u0026gtm=45be66b0h2v9235556381z8894400803za20gzb894400803zd894400803xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938466~115938468~117776794~119392697~119392705~119456239~119456247\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16795866810\u0026tid=AW-16795866810\u0026tft=1781502560238\u0026tfd=3748 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":536,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/betting-v2.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.468Z","timestamp":1781502560468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/betting-v2.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"betting-v2.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: W/\"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RImIxOGQwMTk0ZWJkY2VmMTgxZTBlZTZkOTE5OGQ3MzlhIg\"\r\nx-request-id: d81Z_vj2TGph3g7a6AAUy\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2816723\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a7aeda676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4391,"size_decoded":2744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b18d0194ebdcef181e0ee6d9198d739a","sha1":"df77d9d6e8558316a082221706251cae8b9aa514","sha256":"7b2d193ca660184d2b96e4e8e8cca53bf89e01d3a0d6f4d18a9ca57cdba6897d","sha512":"c8dcfdc47634cc61cfb7de657ebd5027f85be001defaf682366c0a43ca91af3a4ad50fb89d2d73401f37374ffaa3a9cc8428afab6b9653ac0bfb9a5e279e6cae","ssdeep":"96:5cYh3his/BmGf4SU0eAl/c06KB0MFFdLW58NdgTI53BD6LF0Eg:5VhiqBznU0/BB0M/di2N6QDquH","tlshash":"c09163faa688b1d09c0b9b75ee3648a9b65f3cf93fd482890149fd94df150a8cd48dd0","first_seen":"2025-06-23T00:10:28.505816Z","last_seen":"2026-08-04T07:42:36.564141Z","times_seen":3417,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1566\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.565Z","timestamp":1781502560565,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /categories/get?categoryId=1566\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/checkbox-DkVHYUgW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.036Z","timestamp":1781502557036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/checkbox-DkVHYUgW.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"84fa4eeba6b4d4b578855fab7440e541\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a657da58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5182,"size_decoded":2342,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3163)","md5":"84fa4eeba6b4d4b578855fab7440e541","sha1":"42ef4628a4be9dce61006082d3c01d350a942b10","sha256":"3cb40624ad6043f8db659c2226ba73654016840c23c356b216768bdae17ed170","sha512":"46194a80b82f5f35d5c2ea82f3e6b3d5d4269a5866408cf96bb96783ac161b199bd7805484953b4a794731c9324e0a542101bae65cfe8d4bc9e639a2d91d1f0b","ssdeep":"48:BK9tX1vOvMT01LG1mqOBjsXYl9l9KOCyqe7LsuvN5c5SDtNrbvIbvBzeNsexeGh1:Uv1vmQELG1mdFsXYQaUs/EI+G+8Vzo3Y","tlshash":"9cb1437aad11a47a6d37753a6738b24f4139201a8f221ebd93d4c0394ade9db730790c","first_seen":"2026-06-11T21:42:13.143683Z","last_seen":"2026-06-15T05:50:01.312684Z","times_seen":89,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DUkFwHbL.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.270Z","timestamp":1781502558270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DUkFwHbL.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"2386570ab8ac82075cf8e84c7e137788\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d29e28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9654,"size_decoded":4275,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8227)","md5":"2386570ab8ac82075cf8e84c7e137788","sha1":"2b3981768d2eb7160649271d657feb420e1831f5","sha256":"8335ceeda008a79a6d1eda0ed261e2305b2a0c982974b09468a81e511b3b177a","sha512":"9fe3b8fcdf8e1fb0c1359383db828cec844a3e7deb5bb1e2f54625d618c8239436106bd55deceb7c302ad795d732a757baa6cdfebb84888ad1e3446064043919","ssdeep":"192:AAOF6PnSQBd5iF8XbJPQv6FqejGFaJgYVHHdH2HLnWOKJJPQLJMye9yckgWVOZ3/:cyBiF8546FqejGFaJgYVHHdH2HLnWLJ5","tlshash":"ef12d8b2e89d65b8017b4c809c9d05c572bd4f40a00ce5c8fa3daf7da482e54497bfba","first_seen":"2026-06-11T21:42:13.434903Z","last_seen":"2026-06-15T05:50:01.313311Z","times_seen":74,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-category-ab-tests-LHNufiXV.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.258Z","timestamp":1781502559258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-category-ab-tests-LHNufiXV.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"ddf60817720bd6aa220cb413d4e8ebc0\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7358c78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046,"size_decoded":1094,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1045)","md5":"ddf60817720bd6aa220cb413d4e8ebc0","sha1":"c629afec2cf5fabb865f91e6e1c3c82f71ee3830","sha256":"9acc7304bbf0fe3de46e0e9c10f4ee748fa53cbc069c7571e39885ec6d3db76d","sha512":"e6073e2ccc315733435c59000d2e7cbf37639cf7a8206dad760559b5f5306b4d6e347de87746895c878c2f1852411d89871be21d2b7bce37d0252f562ddeb835","ssdeep":"","tlshash":"101132da302aac37a23595c7911291a84b1e63d03477cbe1312d4aeab339d82459ce6d","first_seen":"2026-06-11T21:42:13.178163Z","last_seen":"2026-06-15T05:50:01.314561Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/footer-partners-link-BxoJ12XF.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.144Z","timestamp":1781502559144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/footer-partners-link-BxoJ12XF.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"346aad25757c43a55a2b31e9aa358835\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72af298deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14363,"size_decoded":4124,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8535)","md5":"346aad25757c43a55a2b31e9aa358835","sha1":"b32ceec0638f9941f13aabb8f51ac05ed8decf2e","sha256":"a5ad876bb04002cbffddd4fb78eaf50ba59b0616ecb05e104fd0adb7fbddaa26","sha512":"a39d797a0f328740d4009dfea4153e22b1f2ba09db80c2fbc9cb0c7bdd26d41447cf809ce548b8e3d2a3aec445e5f22b44bf7deac0b515c3928f3490921bfd4a","ssdeep":"384:yIM8aKIwdQR+oyKdmixcwhuYm7xkCuSrTDj:yIMQIwdQUoBdmiSZPxkrKTDj","tlshash":"ba52c671fe60a97cf6378c09f61e1818d00cc52ade4beaeae16d672c07c7bb25185b01","first_seen":"2026-06-11T21:42:13.217039Z","last_seen":"2026-06-15T05:50:01.315715Z","times_seen":51,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/fortune-wheel-floating-widget-BsWLnToq.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.269Z","timestamp":1781502559269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/fortune-wheel-floating-widget-BsWLnToq.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"a4e8bf6d4958d597c6ee62e54739b326\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7368fc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6022,"size_decoded":2741,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3428)","md5":"a4e8bf6d4958d597c6ee62e54739b326","sha1":"ecbcf863414035883867fc968a209f0c75757cf4","sha256":"afd3556aeea63b3171b3a461a291de5098982a61e3ff8c9bf047f2130fab9045","sha512":"987c34fbe3427b0a2328a0a9c5a6007764f438ad2deb205a3db9f6b38ab321fa0c593d8abf65bc5d3306135d800f736015f638de9a9f36c0f4c84b6698e9d34d","ssdeep":"96:Jnse4Dnh4FMeipXj8HdX+mnGS4i0yTmVgDM8py83XefQOWcVHLsy2VdsASzjKVfP:Jnse4nh4Ffipg9OmnGSx0yTmVgDM8M8z","tlshash":"fec18631991046bce1734a8b7e832211601ccbefe8068edea76c679645c78e5437fe1d","first_seen":"2026-06-11T21:42:13.197572Z","last_seen":"2026-06-15T05:50:01.317414Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v2/tracker","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.623Z","timestamp":1781502559623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/web/v2/tracker HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 22306\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTE1MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\npriority: u=6,i=?0\r\netag: W/\"25-Zj67mG54TfZ031q1ea2QwFUXWX4\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0bf4a75ae588deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":374,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffd908939b60f1154b33016c6d2e9c6b","sha1":"663ebb986e784df674df5ab579ad90c05517597e","sha256":"9c3b25f260defd6991608963a30a67cad0981ecce13e5975b1a6304887514d7f","sha512":"786fb75180a4545de1e3d9858f421255beed81a5f0efe626b0ef1b9fae8565b4bb633bf8241d114a998f78d1f345d63afbd628e5a310c3cdf937c7fca79c852e","ssdeep":"","tlshash":"6b8000002c028002acc0cc8a03838030bfb23fa0802f08e8028ee030ca2a0f8e08ec28","first_seen":"2024-04-13T04:25:13Z","last_seen":"2026-08-05T09:11:21.910895Z","times_seen":10956,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/billing-xa_o0RKS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.762Z","timestamp":1781502559762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/billing-xa_o0RKS.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"2028a691fbfeee935cd5679b76b0901d\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a7688498deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886098,"size_decoded":248221,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25854)","md5":"2028a691fbfeee935cd5679b76b0901d","sha1":"f83353c08f3da36416decbcf30aea1d8d3e131a5","sha256":"ba1da5c5c4ec6205166b749b76f8aa1af755184c830235540edfab4fc1249099","sha512":"adc804d66ce7a99a9c835b5934e99b1311282138f10f0ce6226883b613f7b6d8333f4c922ff3099fd107eb5fd30de470462b9c3b4c3e045f25e268d68fa9522d","ssdeep":"24576:0WoSE6jWVqUqgZl3kltPeHcNEcFRnVvxV5kIgGIvsTsjBQDbpi5JcVS:noSE6jWVqUqgZl3klheHcNEcFRnVvxdi","tlshash":"6d158d007b54b4bc4bfba25c20a85519727c1e65f012c9d1eebe8f290bd6db24176f3a","first_seen":"2026-06-11T21:42:13.289345Z","last_seen":"2026-06-15T05:50:01.31816Z","times_seen":39,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sport.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.789Z","timestamp":1781502559789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sport.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"sport.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RImNiODlmMmU1ZjQwNzhkMjE4YWYzM2Q0OTQzNGVmMmQ5Ig\"\r\nx-request-id: eJzVy2Cdxz-Mpjzx7Y2Ns\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2430514\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a76ad964c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4253,"size_decoded":2703,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1705285260a032e111169458df306572","sha1":"eddddef15ad4ad7bb1a394fb335cb7b5d7fee72e","sha256":"126e3d4138ebedeffc52114085f741a5edcba8abeebbc412426406c9043c4ce4","sha512":"02697778921a38ead4976a723cda96470e19a96ec47002588668d9edf06f34c5f04094270bc82e8ab7a4326f4259f89b3f2b7fbe52f8923e3afce7923d06d119","ssdeep":"96:gcYhKis/BmGfFSU0DAl/t06KB0pFFdLW58NdgTI53BD6LF0Eu:gMiqBzIU0k0B0p/di2N6QDqul","tlshash":"7a9174fa6798b1d0980b9b75ee3348a8b65f3cb93fd482890149ed94df250a8cd48dd4","first_seen":"2025-06-23T00:10:28.531687Z","last_seen":"2026-08-04T07:42:36.619551Z","times_seen":3755,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/vsport.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.473Z","timestamp":1781502560473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/vsport.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"vsport.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RIjgxNWE4MDE4NWE5ODU5OGU2MTVmMTI3NWNhNDUwM2Q3Ig\"\r\nx-request-id: M6gsn3fEhmyfe8RcILDOn\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2432335\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a7afdbb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2424,"size_decoded":1687,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"815a80185a98598e615f1275ca4503d7","sha1":"8c9764f79a685ffd8c34391f92f8dcd0549c9f9a","sha256":"fa64d58ffee18a8a3454bcfc6a61c2b3d16c24282c7f3439f0683657a55123c3","sha512":"228fd0b98880ded39e10129634bf9d80603e1b45528be3670a5c2a0ca622b8b8aee7826291afba5cc8d4c8ae8bb8cffc8a79d972c76a33abbeb424ec62d1269e","ssdeep":"","tlshash":"0041dffb548caae4fc47dbbcdd339c66d57f18b42ef2528401809d81eb011a98d1ce59","first_seen":"2025-06-23T00:10:28.47867Z","last_seen":"2026-08-04T07:42:36.6452Z","times_seen":3413,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=26282\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.575Z","timestamp":1781502560575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=26282\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=sv.X.Wl9THrq2FTU3c9LVAG5hF.vqA_VRuQB8gjKInw-1781502560.5744262-1.0.1.1-P1bwtanKFXYmC8e6_5GTDc46WOddKL.uiudV32xNjJLOV3gPVt.T2lz.D7mHk.ULIIkGrM5msD6bQeUTewYdP_s4J58zlxxlQqcnFAXKMe5mhSA3GYc_DQ0yZuyaJm4MHKumhBWrcKLJgbLKammdmQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=XI2lQwB_KTVLxuUv2xUH8pkb9nmqO0tz0gyC4NUzbec-1781502560.5744262-1.0.1.1-bcg1Ex2LpHDqPCo__qqwm67j4sc3mCOAiyR.fIhUquo; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b9c7c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/web/v2/tracker/events","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:31.889Z","timestamp":1781502571889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/web/v2/tracker/events HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 3785\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=pyhYnJKAyas_Zw.hNTNXseZLg.QSNAcvKSdEM7Se34Y-1781502560.131892-1.0.1.1-bvGUeVTKh0kUOEUjL9VH1WlXpXS0WlGvfdfwTzO6PNvMGTRCVBTh7DQCBGDNo02V0Rl7TdQWluwJZlYO0ggDiKdvj.BcDZJfRys0Spvmdq97oWc4m1.cJHcJpVzXKT2Rwz2yOKY22VIAYhdE751Big; _cfuvid=bjI0CChKQgARaHT_HEuWM35OSSWEJ0wEy_KLuamnNOE-1781502560.131892-1.0.1.1-2tX_fu7W8oAVxNzjHjumLxwrLMcD0yml6Be9YJvB85Y; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU2MTI1NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMzIlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559; _twpid=tw.1781502559888.821034322867757848; core-sticky=ae220d3d7644fba3; _ga_548949LWLW=GS2.1.s1781502560$o1$g1$t1781502561$j59$l0$h0; _ga=GA1.1.1426029066.1781502560; _hjSessionUser_2606090=eyJpZCI6IjVlMzNiMzRlLWYxNGYtNWZkNC1hN2U3LTgxZjZlMTAyZmRhNyIsImNyZWF0ZWQiOjE3ODE1MDI1NjA0MzIsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2606090=eyJpZCI6ImI0Y2E0ZTMwLTE3MTktNDAwMy1hMzg0LWFlMGNiN2ExZjA4NCIsImMiOjE3ODE1MDI1NjA0MzMsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ndate: Mon, 15 Jun 2026 05:49:31 GMT\r\netag: W/\"18-nFH3jqWiPj11OG7ZMRfvlYmxWyk\"\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0bf4ac25ca28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":6701,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/mf/shared/vue/3.5.26-p2/vue-guarded.esm-browser.prod.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.843Z","timestamp":1781502556843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/mf/shared/vue/3.5.26-p2/vue-guarded.esm-browser.prod.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 13:09:48 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 343704\r\ncf-cache-status: HIT\r\netag: W/\"400c04beb2994088bcad3fa58c77fc51\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a644ac48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3574,"size_decoded":1813,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"400c04beb2994088bcad3fa58c77fc51","sha1":"5f99f5802285dfb1222bc76d124b1b83fa682468","sha256":"78e73e11fe3ebf5d78b9fbaebce7ecd858f3931fce7047d55f8136c9e01aafd3","sha512":"073720fc135c6241a03b078643ea82c3a3bc752c2878e0bb8d402b5845d3ca995aadf44e49e52f05967b05873bebcf1802d13a6a7369be1b829aab291d00eb4d","ssdeep":"","tlshash":"9571eeaf60f724710526d03e97cbe41574b94633664dd8e8b59e42181fee128c6e2b8f","first_seen":"2026-05-24T06:38:59.55628Z","last_seen":"2026-08-05T09:11:22.039099Z","times_seen":997,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/lock-Bz-YT4bB.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.025Z","timestamp":1781502557025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/lock-Bz-YT4bB.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"938f07fbf177ffc65f9b71c85b5e460c\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a656d7d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":1144,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1112)","md5":"938f07fbf177ffc65f9b71c85b5e460c","sha1":"f2a30761916062d7ecba857884567131a92bb86f","sha256":"735f48eaf4ab42bacf1c63bd928a8e7ca45311a25bacb44d45da6fdf1ae784f7","sha512":"5169315856915983fd74193f6c3b655fdbf464364eeb8c106eab1f4cf856d8c756a8633ceef12aacbaabf249280f56084f35a11c8539fc600f3a541fb8126a9f","ssdeep":"","tlshash":"892123e65338639c846be43d8a3fed88430e94bd3f2a41e40e1ec374909e060e507874","first_seen":"2026-06-11T21:42:13.446303Z","last_seen":"2026-06-15T05:50:01.320569Z","times_seen":90,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/betting-DOEV8t8G.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.150Z","timestamp":1781502559150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/betting-DOEV8t8G.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2026 09:17:56 GMT\r\netag: W/\"f6f5f517390851b6a53c97ca40c46eec\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 72040\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72af4a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600579,"size_decoded":174884,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64407)","md5":"f6f5f517390851b6a53c97ca40c46eec","sha1":"c52128b9b22522916554df7bd9d1a02f58bddc26","sha256":"536c1035802d3505e1b1ca47820db5d7a0995f478e66e87011fb274ce8b05794","sha512":"3dcdecf2325a22f592bc1710507e5a13e6d369635d3100a1a20bc400f4ebffbb92e3175b28319b9dd3ff833bf7a66ba67c992758a8b157130c501d6f66837c98","ssdeep":"12288:Q3o4ho8U32SPkXX5T33NNo75cgVSsPgik9bQPVeohNt/aOHpH3okSe:Q3o4ho8U32SPkXXtHNNQ5cgskgikbQPv","tlshash":"14d45d0f3643753fa77f44f194790640731c9a25a6b388d9e1afcd2a1bea9605263f0e","first_seen":"2026-06-15T05:50:01.321111Z","last_seen":"2026-06-15T05:50:01.321111Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"script.hotjar.com/modules.c3d712579ef0b1b5af2a.js","fqdn":"script.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.164.240.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.927Z","timestamp":1781502559927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:D7:88:CA:28:DD:38:11:3F:A8:6A:9B:5E:7B:E7:88:2B:B9:C4:16","sha256":"C3:77:09:D2:3B:D8:CA:6C:D2:9A:5D:EF:E6:BA:B2:15:99:3D:88:F9:6B:A7:3F:18:8D:8E:C9:99:D2:F2:F2:38"}}},"request":{"raw":"GET /modules.c3d712579ef0b1b5af2a.js HTTP/1.1\r\nHost: script.hotjar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 57267\r\ndate: Wed, 03 Jun 2026 15:14:07 GMT\r\nx-robots-tag: none\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\netag: \"63b87078c3bb878bb813d7750f7859cc\"\r\nlast-modified: Wed, 03 Jun 2026 15:13:16 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ad3ce7688f48f2bfb8279b49c6c4711e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: LWCzN0rRudoVazncykGRAfUA3kDoEcOxl3pvktHKlOMUnDDPy4mncg==\r\nage: 1002912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":233084,"size_decoded":58005,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65450)","md5":"9dcce081aa57c1e7bfae4e3d859554d6","sha1":"c4eeb7f8383b1e647c92a9eb86fbe9ecc26897eb","sha256":"89a44382f0a0140a16ecc25f0f1cee35fb83f13b21f1d96378bdc0de4a302f13","sha512":"3685c9642b2e050b936e83b33b75275e98dbf55ad93151b7cfeba20cbe3a58b3a37830223799c93c504085c8928acadc77af3e5f50a335c48032f6657184240e","ssdeep":"3072:4RwvwE/wMwkZTi84np0hdFohUaV8YScY/:4Rwvwxku8YMdeuaOlcY/","tlshash":"6534f9ac76c6b0ba13b72079903fb10ab3371459680d8060e229d9d47d7da9f9723f6d","first_seen":"2026-06-03T18:47:30.551539Z","last_seen":"2026-06-29T07:34:43.439483Z","times_seen":220,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":12,"receive":12,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/sports/get?sportId=18\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.461Z","timestamp":1781502560461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /sports/get?sportId=18\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=CwvLtWTWtJCz1C4Sqf_7SxBGj1m8kXox_TPX4SmpmDg-1781502560.460892-1.0.1.1-UTw1x.Xrv5OBCEWtGxHibmSi7vMRvVya7o0sKjl8L2ltpn_F0Tp7vxpqTEfPasjv0DFwa9Q4P5ZGVYHkGNaCOdd3.KIogr.ft4lOUXrqoN6Wf7pYp9pXla8U5zhPvDGUarGAIRn_25Kdvtl4iOAfcA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=PCXDsZJ9xIBPVdXTHrr6vBFRZkPJlmx8oxmG7sVNfNI-1781502560.460892-1.0.1.1-4m5jszWAELC4eqr6t5C6W7MFATAPvETgm4SUGEMBvR0; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7aebbd568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1138,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=39555\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.553Z","timestamp":1781502560553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=39555\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=clmoov5cF4I1pWjZLnWE8WQ6efFtIeCakbjQtmkOisY-1781502560.5527813-1.0.1.1-cLVkn0Y8eCOphGNS8e_gTtMhu7KbwPzkd3mCWfWsAlDDR404vhuJgFKNqA4ML_kdc3gSdcqgH4S4_D0QmolWMLFqHgGEnHHreoK4XIhMlU2JGoqxizXwrz.ROWggsCD33EfzvwD2NaKs5DWnz0yYLQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=5Sn0meewk7dAypEeDMFIdow4gDQ8Ka0vK8xDRhSM6dw-1781502560.5527813-1.0.1.1-UZKnz.Z1JvfLD_wLaQF0Amb7doH__lR7jDEZYAqqwVo; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b7c58568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.bundlecdn.com/healthy","fqdn":"v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.058Z","timestamp":1781502557058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /healthy HTTP/1.1\r\nHost: v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\nvary: accept-encoding\r\nserver-timing: cf-cache;desc=\"\"\r\nserver: cloudflare\r\ncf-ray: a0bf4a659d7c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":351,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-05T23:01:10.077606Z","times_seen":359978,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o230566.ingest.sentry.io/api/6214573/envelope/?sentry_version=7\u0026sentry_key=1fbce2bb08464b11bded9708cfa299d4\u0026sentry_client=sentry.javascript.browser%2F10.57.0","fqdn":"o230566.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.841Z","timestamp":1781502558841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/6214573/envelope/?sentry_version=7\u0026sentry_key=1fbce2bb08464b11bded9708cfa299d4\u0026sentry_client=sentry.javascript.browser%2F10.57.0 HTTP/1.1\r\nHost: o230566.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://1win.ng/\r\nContent-Length: 438\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":520,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-05T23:01:10.317827Z","times_seen":755480,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/seo-text-D1EO7Mko.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.156Z","timestamp":1781502559156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/seo-text-D1EO7Mko.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"05c7256bbcd8c660894a8dea673110c8\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319115\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a72bf618deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7797,"size_decoded":3413,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4322)","md5":"05c7256bbcd8c660894a8dea673110c8","sha1":"4df8acbb15eb36a56db34a99a23298aa73c7278b","sha256":"eef7020d5cb182c0db61b35a36aae3ef9b335670f60ba3da9a9b62bc1ab1bca1","sha512":"5a0052d0abf55354c8ab5537bf720949bc4efd25cf0d92b903d3894c17ac9202e22e33f9ea975d0ec81b377fe1edba4b5cd5a72c599f3ddff54f74949ab2e9ca","ssdeep":"96:7ueMpVhm3w7Dn/whisKO7Gf0U0GceZD5gvpkrRW6/X9JboWT84:CeMpVhHn/whiOGf0U0GcYDgKW+Dbr84","tlshash":"d2f1b791d922d67dc33348aea23b3448b20c9c57df96c7f0d5a50a4dabc9bf11615b0e","first_seen":"2026-06-11T21:42:13.237123Z","last_seen":"2026-06-15T05:50:01.324181Z","times_seen":50,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plugin-server-updates-CmWmVcng.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.899Z","timestamp":1781502556899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-server-updates-CmWmVcng.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"577736777cae2079b05d5f0ca15045fa\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a649b9a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1860,"size_decoded":1482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1859)","md5":"577736777cae2079b05d5f0ca15045fa","sha1":"c1152b9adb56364d71198a2c313103e01a454e5b","sha256":"a15b93c8e3a657baf3617ded0f60b4a220dcf1339716eb10ec8e26451e2e2505","sha512":"21d09c91c9104a0f95225650ba0087a6bfe43d29e8b63a8058a107c05c66c85731786fd2828de27f4b5244c8f860834c323e9385dc61af8355a7ab3b72a82aa1","ssdeep":"","tlshash":"3e31c66df5d660b752eb1d9ee83b6830ebe013947056c4b0a33c24d60da65c0e5f5f09","first_seen":"2026-06-11T21:42:13.372071Z","last_seen":"2026-06-15T05:50:01.324785Z","times_seen":92,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/modal-header-C_rOLoaX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.914Z","timestamp":1781502556914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-header-C_rOLoaX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"e65c08556416e8192e9b2bc10a19a48f\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64bbdb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15452,"size_decoded":4258,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9631)","md5":"e65c08556416e8192e9b2bc10a19a48f","sha1":"ca0f34cc4f713d72d8232bc6e2d6205fdd9b4eda","sha256":"76dca63e19201dab674beada92cb0a39d2b19eea926d4a9b38305c3ea64ea7ab","sha512":"922b2be4fad871cf6fc917ef10778fa98a7c6e7d6d66fc4731a9158044b24e174a2afa91af7db803d4e7860878a9735afa4d4738f5db1e53232545ad118e0e98","ssdeep":"384:xC1o4STfxhNZrVNP7PbPvpzpvpJAtelAsxU:xoo/T5hNZxNP7PbPvpzpvpJIQAs+","tlshash":"1e624fd1ad3cb63cdabe2417f2df5c14a668e23e84559dfab93d014f03c05b1a2d8686","first_seen":"2026-06-11T21:42:13.389474Z","last_seen":"2026-06-15T05:50:01.325264Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/matches/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.033Z","timestamp":1781502560033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /matches/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=4dy3LTkfe2GtddvksxFIems1ULfwyqHJ1LyVkrfJdTM-1781502560.035807-1.0.1.1-0s92q55qMZGT55rzxe83dsOU1KTy.la8cMBzhQKC_hVKHByXnkr.QiZa8uOSaBIHFlIfydNyBP4qoEk3UoQRzH8BIm21IJzvloaPdSlSckGR341PtvI2YorA9a.g7SB5pTnuO5GgD6sKnqPw18.lmA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=vPbs7MPgJ.f17qi2xY5axudcIIQ78mLKDNTFNOdt.3E-1781502560.035807-1.0.1.1-hvJ3LwlvQGE5xJ2sBBKpuf0ghiuSN3X8fqgiyNoQQTU; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nserver: cloudflare\r\ncf-ray: a0bf4a783d15b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1128,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-548949LWLW\u0026gtm=45je66b0h2v894728184z8894400803za20gzb894400803zd894400803\u0026_p=1781502557693\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=1426029066.1781502560\u0026frm=0\u0026pscdl=noapi\u0026rcb=15\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=115616985~115938466~115938468~119456239~119456247\u0026sid=1781502560\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1win.ng%2Fbetting%3Fp%3Dfgux%26sub1%3Dclk_6vnmoh3gi9pt6l7z\u0026dt=1win%20Casino%20%26%20Sports%20Betting%20%7C%201win%20Nigeria\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3646","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.177Z","timestamp":1781502560177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:19 GMT","end":"Mon, 17 Aug 2026 08:36:18 GMT"},"fingerprint":{"sha1":"5C:CA:77:C1:0E:54:63:9A:9C:25:2F:54:7A:70:43:2A:C5:6E:1B:75","sha256":"64:72:3D:A6:4A:AB:7E:31:41:4B:87:CC:0D:55:CC:76:4A:62:1E:CE:81:FB:E5:60:31:40:11:6F:C4:95:72:F1"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-548949LWLW\u0026gtm=45je66b0h2v894728184z8894400803za20gzb894400803zd894400803\u0026_p=1781502557693\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=1426029066.1781502560\u0026frm=0\u0026pscdl=noapi\u0026rcb=15\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=115616985~115938466~115938468~119456239~119456247\u0026sid=1781502560\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1win.ng%2Fbetting%3Fp%3Dfgux%26sub1%3Dclk_6vnmoh3gi9pt6l7z\u0026dt=1win%20Casino%20%26%20Sports%20Betting%20%7C%201win%20Nigeria\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3646 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://1win.ng\r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":831,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1789\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.431Z","timestamp":1781502560431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"GET /categories/get?categoryId=1789\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nContent-Type: application/json\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\ncache-control: public, max-age=600, stale-while-revalidate=10800, stale-if-error=43200\r\nvary: Origin, accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Jun 2026 05:49:20 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=cTBtqpXSWWOmssEIMG_aHeOiAM_R5Q.5Ah0whwBHKFI-1781502560.5173495-1.0.1.1-cDrNO1C9bltLnf33itFPUt5fdZ5oeXKoxvSBjy2mSNvwH6a5KieWGCDBTWQ57V6YKGQEzBW.1QlppNX_7ByALbi86BZ6qkgiP0PPEKRi9RFAUdq0C3bsr_qhHS48hfIQJ5yATkW2C26GOmOyNXlGfg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=tzpT_Ezf26dIgUK75XM1AODgNqHwKpVtcofxDLam0dU-1781502560.5173495-1.0.1.1-d81tQPoZZ1URRTE.dLaIVjTR34jyQLFHhTZjOGWADYQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a7b3c1e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313,"size_decoded":1290,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6533b172c60dfaa92d8077e927193b8a","sha1":"ef372c135d38de4508bfa8932883729a59c8e928","sha256":"65ac085b05af228e38862d6dcc59d5861f41273ac760671f77e4820d5786e01c","sha512":"85824102f170b27a952bfc03f9192074aebe0caba97955cff6b41144339a02cc0dcc46d00798a74bc34991311bb1cd3536affafbe080e48f765fa04962a3248f","ssdeep":"","tlshash":"87e07d7e135a14d6575072b2050ebc9ea8c7282b4cfe780ec3de998c10702b4135c8e5","first_seen":"2026-06-15T05:50:01.325751Z","last_seen":"2026-06-15T05:50:01.325751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/badge-deprecated-DSgKfIFW.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.931Z","timestamp":1781502556931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/badge-deprecated-DSgKfIFW.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"a16c10826640275e97941d6c53b06cae\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc338deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3887,"size_decoded":1756,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2393)","md5":"a16c10826640275e97941d6c53b06cae","sha1":"055335cc12c5386768618132ee227862c62cc906","sha256":"ba872e426408cb1a5c960b6ec40849b9d43cca563787406f639dda13deae7960","sha512":"db41464d6238258ca03bf17673e89f5795fab2040e1922951050c23d4723c94ad2dd63c48d7b37e246036fdbe0e8217a92db59a252d492f8a34fb33fb75a9239","ssdeep":"","tlshash":"5f81ae77f19b96a1bf1346bbb90ee075d04854f88b291ff6f299421a17cdefd018a900","first_seen":"2026-06-11T21:42:13.390506Z","last_seen":"2026-06-15T05:50:01.326649Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/tab-BsuaasQK.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.933Z","timestamp":1781502556933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/tab-BsuaasQK.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"34e8cf944605db3b8a2ded0b7afefe91\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc378deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8083,"size_decoded":3056,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5006)","md5":"34e8cf944605db3b8a2ded0b7afefe91","sha1":"0ec53aea1fbcda2602efe449d45d1aeefd729ba3","sha256":"9df52cd8e29291cab2f25a5acf0abb1c7f7ac7ef47b521b99f61272355494bc4","sha512":"f3c985858d7222821df20b347016d3e1e7b431bd3ec54421c9eca97efeff338d21c217f329b71943cf14131875ec1b035ed6eebce86f4b7889d39a436d4ff476","ssdeep":"96:3a7f9QxToILjw9moB2gRw405DlkLF94cF++lduvqyzwO5rObmo8S8X64:Wlsw9jB2gQkLF94cnbuvqyz3WN4","tlshash":"e6f16815741cd5bb5b1f756a1a28d088f10ce27eaca03bbcf16fd57883cf9a68507a42","first_seen":"2026-06-11T21:42:13.459051Z","last_seen":"2026-06-15T05:50:01.327174Z","times_seen":91,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/page-container.vue_vue_type_script_setup_true_lang-Ex_BvB15.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.289Z","timestamp":1781502558289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/page-container.vue_vue_type_script_setup_true_lang-Ex_BvB15.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"07a390cbe204fd73c59f1d2e369d978b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a4a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4609,"size_decoded":1887,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2457)","md5":"07a390cbe204fd73c59f1d2e369d978b","sha1":"3001fa536a35522bd79ac0f9ef4f5d5b05f1f63e","sha256":"70352b29f17d1245dfb04d3463ebc6fce9e9dbc78a1abdd5f002a1447d855edb","sha512":"f2eabee54f82aec209d334509b84fe9c7cef54ea334740d2272b0212b97c453e6aa9f052c3d32bc0319eb33298e47c65f7c2c8bd90a5247c955c987c541e09c2","ssdeep":"96:hi+UTpv+cT70bofvbMaVP7lD24l2fPyvDML:hb6W0Ab8bRuTL","tlshash":"0191fc229fa0ecbda97e39ccc63f70aae74c857bdb0558d3d24cb22a07c75a8654441c","first_seen":"2026-06-11T21:42:13.411384Z","last_seen":"2026-06-15T05:50:01.327616Z","times_seen":74,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/socket-io-adapter-D33fnrtS.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.898Z","timestamp":1781502556898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/socket-io-adapter-D33fnrtS.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"3b0bba8bfe817e394f3bb2b6aa3dceb9\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a649b928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":996,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (944)","md5":"3b0bba8bfe817e394f3bb2b6aa3dceb9","sha1":"34f4ae3fe53cc48cb259d2ac0b50db9c65f89765","sha256":"01450e61cf38606afd8a122c4ef25dcef4f5fab8b6dbda673fd217f15f7d784a","sha512":"60cbe6474c2ecc57e02a9b1a8c87e30a3d111a7fefeec7759c8326e363f8e20aab2981cbd98696b386d10e46334b00baf07ffcfaab296fe42bd1f29828eefa42","ssdeep":"","tlshash":"e711dcc626b662aa3bbf20ee286080446500ab74a741438d3f1c1fe1d03f5d4e49bbb9","first_seen":"2026-06-11T21:42:13.348539Z","last_seen":"2026-06-15T05:50:01.328096Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/flag-0TSrC0PX.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.005Z","timestamp":1781502557005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/flag-0TSrC0PX.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"36aa154f4f2726fc22f8d225fcc758be\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319120\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a654d368deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":1259,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (962)","md5":"36aa154f4f2726fc22f8d225fcc758be","sha1":"413b96a78d74c96c9a043539813f82a73d3aa673","sha256":"dbd80eea1deccdbd35c7a358340a2b3ae26a561d8c9cc74ee69cdfba20b3880f","sha512":"a060631ad16883ba92802c0c4cba6935d22d6f04f94a62792c1f83555cdf9bc5ca199bb6dd896f7eb8fe25286600196dad98568b953b0a8fdf4c4394da5383a6","ssdeep":"","tlshash":"6721815b0e03c1f4256f48cedd3790a0a2c810666b6494f0c2bdae39a711fee401a988","first_seen":"2026-06-11T21:42:13.373626Z","last_seen":"2026-06-15T05:50:01.328545Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/scroll-top-CzXxLC_p.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.290Z","timestamp":1781502558290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/scroll-top-CzXxLC_p.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"7ebd7aa4c54f715ad4e2eb61ecdfa601\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d4a508deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":833,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (493)","md5":"7ebd7aa4c54f715ad4e2eb61ecdfa601","sha1":"d5b4c598231f82ff44738cd9dc7e1d240ed1c88a","sha256":"1479a2ab46c1ca146879d61a248e7324e28abff1bd871508bdf6be048769057c","sha512":"e728d7edca45515aa4fdaaddef50050cd455ace02146c3055bc2f004ad9b2406362c92df9d99c24cec50926ce9ca9504e082625e9bec8a0583241190d34f5669","ssdeep":"","tlshash":"70f052fd12092bbd403e8b34c3290c925b2889fbbb8a50e0174e253b06c24fce54b5a4","first_seen":"2026-06-11T21:42:13.2128Z","last_seen":"2026-06-15T05:50:01.329044Z","times_seen":73,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/seo-content-CsSc9G_w.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.381Z","timestamp":1781502558381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/seo-content-CsSc9G_w.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"b6dbb5d414ab91ad7956bcd0d6ee4f01\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6ddbbe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9098,"size_decoded":2517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7730)","md5":"b6dbb5d414ab91ad7956bcd0d6ee4f01","sha1":"eb1930e7f6bbce5d55091891b0dd31be2c745771","sha256":"3e79c356d7da2927563888e831b7f00a572d0e1a561bb68deba0fbe0688d3071","sha512":"ece191bbf6a251be6114001649a44de730a34e1e876462706534c4638d0087622b470aca681382aa352c0e30a00dd58d86a804c5a2a01af9bee3581b427f1311","ssdeep":"192:o79SJvSFgDr87TTWv+vJvIwI8AzviIPtnb+o3cTYbub4+Pk9+PkL+PkU+Pkg6CNI:04FSFer4TTW2RwwI/zXPtnb+ocTY60+b","tlshash":"bb12ed74bf31b068ebb34d59772ab85ca529fd1a4d4543fcd5ae460c87cbea20380b16","first_seen":"2026-06-11T21:42:13.439014Z","last_seen":"2026-06-15T05:50:01.329707Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/plus-nFBL9AuA.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.390Z","timestamp":1781502558390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/plus-nFBL9AuA.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"f3ffc7e7faa1c001f92df3b40c3bf2d1\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6debeb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370,"size_decoded":754,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (369)","md5":"f3ffc7e7faa1c001f92df3b40c3bf2d1","sha1":"dfa77f6ca49fcbb60493339d3e76299dcb1734cd","sha256":"2e8075371b8b4435374e1a202f2f703a198a5b0f2a6b1b25b773b1fbe6e6322f","sha512":"51fd2c2f62a7440c096fc4efbe55c262a2dd23e257f278716c6e4bb9d5d55a6cec224c03bd132c4f3e94358ace9f7809e99030dece68326f6d2650938752eece","ssdeep":"","tlshash":"e1e0d8fd02481bbc8016c378d73d1c872b1505ef678d81f0964e553a02d70e9a45fab5","first_seen":"2026-06-11T21:42:13.37025Z","last_seen":"2026-06-15T05:50:01.330269Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/FREE-MONEY/v1-bonus-pwa-amount","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.418Z","timestamp":1781502558418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"POST /api/FREE-MONEY/v1-bonus-pwa-amount HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 18\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nTraceparent: 00-3f365f4febd4412c990a35a523a77e21-8680145448ba1119-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 29\r\ncache-control: public, max-age=300, must-revalidate\r\netag: W/\"1d-lKUSr3f6az1d+AalF3INwxZdJ5s\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a0bf4a6e1c468deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":419,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b920750c645fa643c8be994f784fe733","sha1":"94a512af77fa6b3d5df806a517720dc3165d279b","sha256":"980fff79d8f448bc205a4fe4f3a7775ee451e390b2b57c4d01a71e3a96e66a7c","sha512":"29ab52aa1856fc7e6b7ef47b8d808ce3022374fe1f5e2ad8bed7cc5da9806e55ab282196c8ee7940f67fd22697015c001fcd6b385e28513ad3ea80b5ea260768","ssdeep":"","tlshash":"8180000b3c00a0aae8002280a83a2e202aaca02b82000208a08e0028aa280023283c0b","first_seen":"2025-07-15T00:18:52.693067Z","last_seen":"2026-08-05T09:11:21.950673Z","times_seen":4180,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/sf/v1/sports/static/prod/themes/v1/1win/config.json","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.880Z","timestamp":1781502559880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /sf/v1/sports/static/prod/themes/v1/1win/config.json HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nTraceparent: 00-1725d31a4fc94912deafe9b3eb9d3f2a-46c1aeb6f425b650-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 06 May 2026 17:36:15 GMT\r\netag: W/\"a3a8ebcb0c06b6ff89480413d99d233f\"\r\ncache-control: public,max-age=86400,must-revalidate,s-maxage=86400,stale-while-revalidate=1800\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront)\r\nage: 56801\r\nx-cache-status: HIT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a773a348deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7783,"size_decoded":2251,"mime_type":"application/json","magic":"JSON text data","md5":"a3a8ebcb0c06b6ff89480413d99d233f","sha1":"68fbeffd473c2ee1f3c727f74d03ea307391cf00","sha256":"dc8e2932abe616eea6b19ebf80dd1207e755007a500c04f61552a88891c966e7","sha512":"15cc6691cfa0fc2f552d3932d3d1edadd8d124d867e82a6b41c64cc14ac493731b2ac13821b09465abac4c319db359798b30328bb20afe65145d5db83ea7e884","ssdeep":"96:Zs6lGTRKlSbZNEhHzKYyEGyE5u2UGslS0zNEu5ZcKYyEbZHYkMxnNn3:5eb7uH1yEGB057ZkyEb2NxNn3","tlshash":"e2f1e122db0e2abc63aa8dfb67457663471af444f3c24ec2741dd179bbd0c59934828b","first_seen":"2026-06-09T03:08:39.218306Z","last_seen":"2026-07-24T23:34:13.341073Z","times_seen":12,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/tournaments/get?tournamentId=34892\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.460Z","timestamp":1781502560460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /tournaments/get?tournamentId=34892\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=7PJKnJMipICcLlS1pMUgd._jjQ7Sd3xu1wmro3Ge3hk-1781502560.4594421-1.0.1.1-c_PUVM2AXIYmwUQSSWnCMiDRi92meKogFnX2V2S8RYqwuSGJeRo3zY2_gJA4Dp9i0sd6gZSfHws4QTxLc7LDr826kOQTDa5KjG7sLw4f0PovOE.0KkhZboNphPqBwKev72l_zkcAh5_p4vbB72W46g; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=NUhB9iERTrPkDrXkJ_A_M0z64USlUafL6p0nrUvasZ8-1781502560.4594421-1.0.1.1-fa.8aOg8Y7YhRmUr7_.S9ocXjQ447eJ5nKNARO9mzx0; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a7adbbb568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/static/mf/shared/vue/3.5.26-p2/vue.esm-browser.prod.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.847Z","timestamp":1781502556847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/static/mf/shared/vue/3.5.26-p2/vue.esm-browser.prod.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 13:09:48 GMT\r\netag: W/\"361c6d150061d19160c841e2e79179ae\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 2132369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a644ad48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166282,"size_decoded":63682,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36861)","md5":"361c6d150061d19160c841e2e79179ae","sha1":"9ae95d11a78aa50b2451a93af249addf00fb758d","sha256":"4f54d5bbd4851282c0acf2ca284a7a82c8ff7927261e5e5391479bc462ba95d9","sha512":"7bc144dd799da22d689d47013c6c56472d45f57e43941dd6e53980b33f37c202af41210c7a78482d3513b09609dca49fd79f08ad399898e878e4fa2a583f48a4","ssdeep":"3072:C68kAooM+MIYh6PvuE+fLjLITxWyZKbs613A2x7dQFU:C68k6M+MeeE+fbYWiKrRZ9","tlshash":"e3f328fa3352b13393ed51a640bb4002f3aa64692c0d046cf674a9df366494961fffb6","first_seen":"2026-01-03T11:28:52.135254Z","last_seen":"2026-06-15T05:50:01.332076Z","times_seen":223,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-i18n-Bi_QR6fz.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.905Z","timestamp":1781502556905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-i18n-Bi_QR6fz.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"3db2b7364b98e7653ae3712d96dca6f9\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64abbd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":658,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"3db2b7364b98e7653ae3712d96dca6f9","sha1":"3126dda54f53ccbcc8b94ba60b0267bb0efd542a","sha256":"875e9e89dbe7dae1f93e89389d507ce3e9e3f07f725c75e194c5f48318d1ea38","sha512":"90575921fd23633f954cfcfbc4058e1885b90bb1ea9e4284bd7c1d123abc8da33d5d85ba122c5a5fa8803663590184f5db7a9d0f536f15cafff53b2d01dbc61e","ssdeep":"","tlshash":"1dd097830881c3707bc84cc0e9201024432041c2732aac91719f01364ba52cec0e966b","first_seen":"2026-06-11T21:42:13.366408Z","last_seen":"2026-06-15T05:50:01.332566Z","times_seen":92,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/badge-base-DeWzFzwQ.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.261Z","timestamp":1781502558261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/badge-base-DeWzFzwQ.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\netag: W/\"0d314fc9dbc554da47f69c8909421c1b\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d19a08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5742,"size_decoded":1932,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"0d314fc9dbc554da47f69c8909421c1b","sha1":"ba8b631147a7ee1069ebbb7d07a27df56f8a452a","sha256":"8db6831977582a02bdf076019e5ec6feae6b44886b39dd95399979c46cf3e32c","sha512":"e14ea95a3086f5ea7fe6470c140cd59904a05b95a30d13f2d40a8055baefa319a257cbaf3a0a57a6a1e2d60b9470a47180aba5bcc53b42b3b69c818ef22440fa","ssdeep":"48:Qbgk1voUFzP2FOkyuKwGHRqbEMEYtqi95+3YLceVk4kgyVEB7wzaaDMTM9LlP:Q9voUFRkynHuj6io0NvYY7ULP","tlshash":"8bc1c04de752d579ff331d9bfe1db0a8c008a8f989251fe9f1120c195adadee2203649","first_seen":"2026-06-11T21:42:13.222843Z","last_seen":"2026-06-15T05:50:01.333037Z","times_seen":75,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/b/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.043Z","timestamp":1781502560043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /b/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=M08j2OaoA78UjPOMakOyrZxb5o1OgK8opjhtvjqJQhY-1781502560.0423799-1.0.1.1-XPtRoT85_vqh5g_L_.svxjXv3uy6CV_NH7nZ2ZLF5RD._v3wQ5.oXp0rxjUCi9B_KUrZ4LsNr.ThvTvBaqdl1EUq2u4grclH6Z37plM_7rX5eA_yRcYokpk6xfiQvWT3Cp6C.ZL4DQsNmlSLZ3FHRg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=7U1k8Hq6C3_mqaKcz9gy25dZzGEu1qi.ehkK6eBcIMo-1781502560.0423799-1.0.1.1-aFlhuCI_SbgSEiuLOQuUJ1nlQtx2iGKdTJJEFZPD4fI; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nserver: cloudflare\r\ncf-ray: a0bf4a784d26b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1130,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/highlights/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.213Z","timestamp":1781502560213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"POST /highlights/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nReferer: https://1win.ng/\r\nx-lang: en-001\r\nx-user-location: NO\r\nx-external-partner-id: 44ba10e5-7df2-47ab-a44d-dc93803c7a6e\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1win.ng\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=6WKMZ3FWK4SxH4RDDmzpRDoszpuH5qCgVSZWdlNtMCM-1781502560.2728643-1.0.1.1-H2on7hO51Hza1uRkf904PFR7cpvpSgTdbrEj2H9lJCvQfA9yFqRkr_lpGeqglRLTnIKM5ergAdWvjT9Z1s1zMm3m43IBDaO.qKW1Dyh_imvDwEMWzZJ1OO8eiEJMoLlvEHY2yogW2hba1ouq7YgWmA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=bYr5be_lHJXSakXh7oyG7aC8nhgQJzv8Z6cgPBWxJDA-1781502560.2728643-1.0.1.1-lGFYiELbjMLyU78Ca7hivdmCuys5nzsIbtNeK54khZ0; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0bf4a79babc568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2033,"size_decoded":1554,"mime_type":"application/json","magic":"JSON text data","md5":"59d71f793003383d3379b006eb4c396d","sha1":"1e18fd1e877c73873222dabf8a2762e16660ff86","sha256":"62eb3f0188e0bd1916c83a2c201a97eccfa88cdffd2c9f905f9069948e419f4c","sha512":"8ca3f7a5c01b9950624f058c76eae95ba279e06817ca0cfae8ac288d526632ba6fe203be56b8727a4765a9c7a2192555d5ced55c278db9700adc21406952032b","ssdeep":"","tlshash":"b9417976161c9cbe1a065bf32acf6e4fc4d6206d8dd0b234c189cb1d92cc5ad930768a","first_seen":"2026-06-15T05:50:01.333501Z","last_seen":"2026-06-15T05:50:01.333501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.g.doubleclick.net/g/collect?v=2\u0026tid=G-548949LWLW\u0026cid=1426029066.1781502560\u0026gtm=45je66b0h2v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=15\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938466~115938468~119456239~119456247","fqdn":"stats.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.147.157","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.246Z","timestamp":1781502560246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:18 GMT","end":"Mon, 17 Aug 2026 08:36:17 GMT"},"fingerprint":{"sha1":"8B:E8:3D:B5:F6:29:C1:F0:D9:0B:C3:43:35:65:1B:A6:BF:75:01:4E","sha256":"4A:36:56:64:61:BD:0C:82:B0:4B:24:23:14:7E:F3:76:67:04:FB:66:F7:E9:F3:D4:FA:8A:4B:52:D5:3F:5D:07"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-548949LWLW\u0026cid=1426029066.1781502560\u0026gtm=45je66b0h2v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=15\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938466~115938468~119456239~119456247 HTTP/1.1\r\nHost: stats.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://1win.ng\r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:164:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:164:0\r\nreport-to: {\"group\":\"ascnsrsggc:164:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:164:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":831,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":4,"connect":24,"send":0,"wait":40,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/poker.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.472Z","timestamp":1781502560472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sidebar/poker.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept\r\ncontent-disposition: inline; filename=\"poker.svg\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"O28U0zcNYQLD2ZjZDv9kdUoromy6SlTgWQ86RinMtwU/RIjM4ODgzZTBhNzcyODg2MjdmZjI2MjhlOGUzYmE4NWQzIg\"\r\nx-request-id: umo4es-tDTiONt6j2YQQZ\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 2891320\r\ncf-cache-status: HIT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncf-ray: a0bf4a7afdba76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2499,"size_decoded":1856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38883e0a77288627ff2628e8e3ba85d3","sha1":"b1a20eb87271bee011288efb311d4130fe56496b","sha256":"84567abda94aee9e8f34583d8d735ac4484b73f38dfef02d41327b50281935e0","sha512":"8bb5b14a22ee2509aedcf24d2a9b35eff84962093f62bdab55e4d92a5a163515b1433659e47be48aff35762daee2055a1adda723668ae7d1a51ce7bdd5803ad1","ssdeep":"","tlshash":"2051a8f996a4e6c0400b9734cd37ead4a25f347e2fe6c3964181aaa171b42f80dcdcc5","first_seen":"2025-06-23T00:10:28.530777Z","last_seen":"2026-08-04T07:42:36.469512Z","times_seen":3414,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/categories/get?categoryId=1632\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.588Z","timestamp":1781502560588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /categories/get?categoryId=1632\u0026l=en-001\u0026p=44ba10e5-7df2-47ab-a44d-dc93803c7a6e HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=4UvF7kN8TsIvwgR0dKwCc_qCTne3ioULgQGlcAUcV0k-1781502560.5875452-1.0.1.1-FAwfbQ9pNedCT5yrU.8ETMIibUtHMoJKAvy7mQXvbgSHswV10iq6hSBbQiGjyhMcNzamZjS.uNKRw2tIFcAP1U6cfjp0lUSV4CadV5brpsetcfsvXNOFEz31PHcnnSLbyqyQp6LKmOOKhsUGrrGU.g; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=XsH4W14VoILg.yjreuF.GsyJ4RGtH_G7j2G7HQu.iwA-1781502560.5875452-1.0.1.1-YN3b3H_yzXQOxeG3IUWP32GJah_v4xJjR_OKVGHSGww; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0bf4a7bac8e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1140,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-15T05:49:16.510Z","timestamp":1781502556510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-trace-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\naccess-control-allow-origin: *\r\nset-cookie: cdn_cache_id=b7b4127636f1b731c4bf096cf5; path=/; expires=Wed, 15 Jul 2026 05:49:16 GMT; secure\nclick_id_2=705358dc-4877-4150-9a20-0f18a04539c1; path=/; expires=Thu, 16 Jul 2026 05:49:16 GMT; secure; httponly\ndevice-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; path=/; expires=Tue, 15 Jun 2027 05:49:16 GMT; secure; httponly\n__cf_bm=n7lKGqGB1B7XukMKgcVDN8nHLlO7ykMbAw8ApMyAB0A-1781502556.5290096-1.0.1.1-5yG4JFGm06C9kDTFNduJT_3j.83BFnTLxcK_4tM1Yr54H51bUcZwFCMbh40WQbykfSoOkYzqNuwhuIOUGJivnTfqOW6ccjTlLEsM6g7tLre5ugn4Uy_ERmNPpF2pS0SMz.CC00U_Z_oRc3QVvXke7Q; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng; Expires=Mon, 15 Jun 2026 06:19:16 GMT\n_cfuvid=gub9hok7DngfUIHhT6cGCeyQka2LdUIWbjiy6zpRiIY-1781502556.5290096-1.0.1.1-CWfCRJ2qLyz1TlRo04Ejgmnw9NoHmfRLljDJhxIwesI; HttpOnly; SameSite=None; Secure; Path=/; Domain=1win.ng\r\ncross-origin-opener-policy: same-origin\r\ncache-control: no-store, no-cache, must-revalidate\r\nlink: \u003chttps://imgproxy.v1.bundlecdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://v1.bundlecdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://optimize.v3.bundlecdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://v3.bundlecdn.com\u003e; rel=preconnect; crossorigin, \u003c/api/web/v1/user\u003e; rel=preload; as=fetch; crossorigin=anonymous, \u003c/resources/v1/app/assets/main-Do5NBxN1.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003c/api/web/v1/sdui/templates/css-variables?h=5645095df2836a25\u003e; rel=preload; as=style; crossorigin=anonymous\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a624cc2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144898,"size_decoded":52433,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21497)","md5":"e7cc7953dc174e15c2f9706ac510807a","sha1":"4e02f06fd9d767d501afdd37f7fd94d984497841","sha256":"9e8cad884b33dec473a818f9deee7a4420f40a5d6472f08980cd2652f701b67b","sha512":"4c567363ec54d8324feb0802d5fb0fa920d2087157f2e3283a0cf3740033db03d7b3e75bf6db39195e5dc327e8436667b4c1728c4ec143a7480e31bcd7f9777c","ssdeep":"3072:qit/aSdog+7RBotNqR9SIfSOfMfj60nlznFY0:YSKBfSO4+0","tlshash":"ece35bd87351f0794367146efd7b1101b23ba826a41d80e1f0ae8c597ae6f468273f7a","first_seen":"2026-06-15T05:50:01.334901Z","last_seen":"2026-06-15T05:50:01.334901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":6,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/use-languages-FygAD77f.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:17.039Z","timestamp":1781502557039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/use-languages-FygAD77f.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"0e7eaa7048f06939411e781eedc50169\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nage: 319120\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a657db58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1594,"size_decoded":1241,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1593)","md5":"0e7eaa7048f06939411e781eedc50169","sha1":"96a1a15cda385ff624f9eba58a474dda9c99d8b7","sha256":"b9a360f57a92e705763add3341c354e8d0375f03e481042a8e77804a3560cd4c","sha512":"1358c038860c6aa3cf9866c2fb879175db5c7d80fadaf9003e0f2c1429319d4c2842760621f84e6e217a37b8f542edf316af35cc53fa4a57e933b51ac5d8a907","ssdeep":"","tlshash":"6d31b9a1d1876f7fe2863bca9c80165404580e0f222f8ff9567f4d4a140ab7c84fe936","first_seen":"2026-06-11T21:42:13.166515Z","last_seen":"2026-06-15T05:50:01.335879Z","times_seen":89,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/seo/v3/public/cached/meta/get/by/location?path=%2Fbetting\u0026locale=en-001","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.881Z","timestamp":1781502559881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/seo/v3/public/cached/meta/get/by/location?path=%2Fbetting\u0026locale=en-001 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-a938f84e85fdf7be4f3303b9579e71a1-351b822f114d5b5e-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1OTY4NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBNiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 20\r\ncache-control: public, max-age=7200, must-revalidate, stale-while-revalidate=604800, stale-if-error=604800\r\netag: \"Pgrhgfu8kS9CKRTcBSUDOpx/sZc=\"\r\nx-cache-status: BYPASS\r\nserver: cloudflare\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a0bf4a774a3d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":522,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03a62037646941397eff7726ca77520e","sha1":"17bba1babb7abd01eb567db5feda667c67f8106b","sha256":"c84083df4457429406b5781c1632a9cca470a50f4cdf65a60dc9a47e58ba4adf","sha512":"afdf9d3dd688be3eb3b02d79c0a9dbed332fa9b9c72b941b6e81899e0fff0ce6d40cdaad5606eb465a6bf10f4ce3ebcc3d6827cbb7c2874566466a32e7123d7d","ssdeep":"","tlshash":"f670000000300803820800000882028800c80a0008e00c000082c0c800828a0c002003","first_seen":"2025-11-25T01:37:05.86378Z","last_seen":"2026-06-15T05:50:01.336423Z","times_seen":13,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/skeleton-TqhFCWue.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:16.940Z","timestamp":1781502556940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/skeleton-TqhFCWue.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nCookie: __cf_bm=FHZvR1Y15dUcSZINqB.hALsr8CEg5MSLUZQQe0xh0VQ-1781502556.5382514-1.0.1.1-CXTymAotc8o2FLSyepSEYeUTHYkat4VqOipFhGVhRkEG21p6foRplRtk8wZwMDgNG6sfSk.sK3MYyejS.kZdDbtJJRLVmQ1djIrduhERedpdFy06Y88Isr3L9glqKBF2EEM3YECdgv1kgArrgJKYOg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319120\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"5a2ef08c610657c7cf2317059dbfcdf0\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a64dc538deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":1002,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (488)","md5":"5a2ef08c610657c7cf2317059dbfcdf0","sha1":"70c97feb2df75871fefc66ad15a26bfaa12dd73e","sha256":"5258215b2d03fddb918fd50187e5b8230e8dfde9abff94a3674945cd10c8e874","sha512":"00bfb14ffa18494f8580001cdbda58bc2b288bf4a09dd356e3795d53754276c2034ddbec0259ad4d981461abaf618e453a10e0481da7c07113589a520acb2d90","ssdeep":"","tlshash":"7211cc04afe580f4a19b1053b23ca6e0986e59b39352d578823efcf8279499c412ba88","first_seen":"2026-06-11T21:42:13.133048Z","last_seen":"2026-06-15T05:50:01.337015Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-zI75IRDE.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.280Z","timestamp":1781502558280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-zI75IRDE.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"ecb4ae5e290185804e2c68eb0cdbdf6d\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6d3a218deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19860,"size_decoded":6936,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14523)","md5":"ecb4ae5e290185804e2c68eb0cdbdf6d","sha1":"8bdc5a101d94a776ad6a46c4126feef7773b6069","sha256":"18205869b768cf069846a675bb2f2d146856dd0ea4c86b16e5c2645e40fbc211","sha512":"ea6c55a157e6cb1dac933af4d988dc8233ba64144ac8ae99103698387f499cad422020fe1bdcb5c6db76de4431aed978c105fd5a4145bba5b5653bc4a5e3bc97","ssdeep":"192:l88nYntqy/mB+7XcwUKmalvVttV+aq8RxxF0KV4ir7skKHFpNHlnzHCkHOXO4XHA:7qEZ+zJxlvtV+al37PsgReCp2AHYobjA","tlshash":"9592851b4b005a7502fd0ecc6c16359144e08b09b569c86ebf776efe746ae5c80b1fba","first_seen":"2026-06-11T21:42:13.298948Z","last_seen":"2026-06-15T05:50:01.337749Z","times_seen":73,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/index-DLnNEn6D.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.360Z","timestamp":1781502558360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DLnNEn6D.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:07 GMT\r\netag: W/\"746392d2604256d13b52537bfdc49300\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 319117\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dbb708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24344,"size_decoded":8571,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18108)","md5":"746392d2604256d13b52537bfdc49300","sha1":"c7bd63bf8a3d8cc40000fcef5c7eb65d9aec72a6","sha256":"2915cb3307af438cd7ed78dd7c8215dd78b345160d9081f7347bae6a8867855a","sha512":"817fd5f74511d5061c5ad79121547164cab78284b348a8d43ef7eb5c6d28359ec076018e02c0e79246e6bacbbfeb6d51192a9c08f14466e9405c9d7ec2b4a323","ssdeep":"384:/jxPi8SL7PgQj5VlLbTb0uNHI8UAQSlX8RQb4PIwHqn8TiWG9pz3i0gWZL0:/N+fPjj5zTb0uNHIjAQSlXj4AwHCWMzo","tlshash":"05b229a4b110ac38c6b70a0cad1a4545e6e01fadcd41fcf4b57e493507caef0c29aa9f","first_seen":"2026-06-11T21:42:13.456266Z","last_seen":"2026-06-15T05:50:01.338286Z","times_seen":71,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/dice-BBTPZI_q.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.394Z","timestamp":1781502558394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/dice-BBTPZI_q.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:06 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 319117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b6f3b9c4b8a126992cad1c8396cb5950\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a6dfbf58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":1009,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (940)","md5":"b6f3b9c4b8a126992cad1c8396cb5950","sha1":"042fc286be8420d414a22e317e2195430dc970be","sha256":"8f291c956e3e3c5e733ad5e6b28ccc9b9437984dd51a1b3f21a7ee10c35cd22b","sha512":"56d53bae5c930a04856ce2495f60d34f880c766496bdf6aafa1fc33c6687fba6cfb18dd267c09974b6e8d35a92f1c39e1f2df6967d0bace6da149503d98efd2f","ssdeep":"","tlshash":"491104eb6e4595bccaab4ef9ce3a36000f97926a325d0059e7dd2577008b950c583c54","first_seen":"2026-06-11T21:42:13.176386Z","last_seen":"2026-06-15T05:50:01.338748Z","times_seen":71,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o230566.ingest.sentry.io/api/6214573/envelope/?sentry_version=7\u0026sentry_key=1fbce2bb08464b11bded9708cfa299d4\u0026sentry_client=sentry.javascript.browser%2F10.57.0","fqdn":"o230566.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.840Z","timestamp":1781502558840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/6214573/envelope/?sentry_version=7\u0026sentry_key=1fbce2bb08464b11bded9708cfa299d4\u0026sentry_client=sentry.javascript.browser%2F10.57.0 HTTP/1.1\r\nHost: o230566.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://1win.ng/\r\nContent-Length: 443\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":520,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-05T23:01:10.317827Z","times_seen":755480,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/api/translations/v1/frontend/crypto-token.converter/en-001.json?v=0.3576.0","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:18.911Z","timestamp":1781502558911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /api/translations/v1/frontend/crypto-token.converter/en-001.json?v=0.3576.0 HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nContent-Type: application/json\r\nTraceparent: 00-71240d5ca24c4a181c561103b5a352af-50963d05507ba3f3-00\r\npage-view-id: deca3ba4cfac9a13b63815ebe5cc3b38\r\nX-Origin: 1win.ng\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 04:25:40 GMT\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"bb97ca0e0dd9e34b6f6e450f20aeb7ee\"\r\ncontent-encoding: zstd\r\ncf-ray: a0bf4a712b898deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1009,"size_decoded":1007,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bb97ca0e0dd9e34b6f6e450f20aeb7ee","sha1":"7efb82c0d6f5422a0d7e9b8a411058197640d16d","sha256":"702717dd90801c8992cce210e5749078b3babfdc8e8c83ff2f8c2e443f0cd3ef","sha512":"7e6056c332970a4270a1dc5a8d5e3aadc5a9f2dd501b353eda1a4e9f433cb4af4710d45fa166927e2884ada5f9cdbffe801e54218e10439520665a5027be3a76","ssdeep":"","tlshash":"0211599f580a2fa2bbd281f6788746d225b321485a630ab653f7cb780ba9710d757c50","first_seen":"2026-06-07T21:51:34.612337Z","last_seen":"2026-08-05T09:11:21.937092Z","times_seen":707,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1win.ng/resources/v1/app/assets/infiniteQueryOptions-Kf6x0a2l.js","fqdn":"1win.ng","domain":"1win.ng","tld":"ng"},"ip":{"addr":"194.67.193.49","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:19.254Z","timestamp":1781502559254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1win.ng","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 01:48:54 GMT","end":"Wed, 26 Aug 2026 02:48:16 GMT"},"fingerprint":{"sha1":"8E:19:38:A1:2B:44:22:8C:11:9B:B7:96:E3:76:D0:D1:D6:A6:D9:9C","sha256":"3D:19:95:1D:3C:CD:7F:6B:23:A2:ED:C3:84:12:E4:80:C9:07:57:AB:11:64:DE:63:39:1F:69:1C:CD:2A:1E:E2"}}},"request":{"raw":"GET /resources/v1/app/assets/infiniteQueryOptions-Kf6x0a2l.js HTTP/1.1\r\nHost: 1win.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=hNY_GZM6j4.50E2xvdcPIrW7L4yIoqBCUqfnjOOI3oQ-1781502557.6345446-1.0.1.1-ZX6BF.aSD4nuIygHSEi5qnZYd8KfvODHVymdctbxpmKLxTunq29w.asYAkicHOGV9kop0vDLp2lA84nrv0AMqVyPmXVKsW.oSDqniFsu.bQ7YGmSJ.YTINFFBSA6Sbybs82IuESpkV9zJcEGVmR2xg; _cfuvid=jUJObhU16efKBMS4Dm9eVDZXEAYMj2DCwp7PVpSq.Js-1781502556.5382514-1.0.1.1-8phKptscItUJGpKmQTmqFHIn94OYNdSUAdZMfDA0ogE; cdn_cache_id=b7b4127636f1b731c4bf096cf5; click_id_2=705358dc-4877-4150-9a20-0f18a04539c1; device-id=cda8691b-05d5-4d9a-8f34-5c5b8133faea; OTA_device_id=df34c58b-67ff-4331-82f3-44e530fee5de; project_locale=en-001; partner_key=fgux; visit_domain=1win.ng; sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; session_partner_key=fgux; session_visit_domain=1win.ng; session_sub_ids=sub1=clk_6vnmoh3gi9pt6l7z; cf_clearance=qaO6Tl9Ag.PWkKP8xnAzi5iH6jU59x33XqrVwi9ugG4-1781502557-1.2.1.1-5tXzHsLgVNnIcfQxtPFbmcX5A0WBz99zKeoI8zJ.v9Op1JliJoUu6chyMFxX9cJKFlO1gfrD2fO_n_FBfdTNKoHTICwW8txY7OjnVMSjSITiuNRbp_MbbLZRrCq8ExAu.Lu1pM3.EvtiKaY884c76lFy4X40C2.IAfSpzQ8UteMy2jatOEnMB3ZlTked8vdw2mWq2B1g38zfrCk3KBayJwYJAZlfT36fYampDDI11v1PUJ.s6RDw.4dWMQ.3qEt3qMruf4WPBgayQUhKx_vORpkrayQXqWu9HMx41Stw4oGjAdvrunLoqYGSIcHs7fsSySMhG4mKtQvQYVCuMQHDPg; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwMDY1YTAxNy1jNzRhLTRjZTAtOTNhYS01YjE5NmI2YTg4ZWQlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNTAyNTU3NzYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTUwMjU1Nzc4MSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; click_id=2ae85b33-e9d8-45b1-b961-400396fd1e54; visitor-id=5907b00d-7c25-4904-97fc-ffd9223291d0; should_restore_hash=true; _gcl_au=1.1.1925994040.1781502559\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 15 Jun 2026 05:49:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 39\r\nlast-modified: Wed, 08 Apr 2026 15:54:17 GMT\r\netag: \"36074a4ad1ee712f187f8a9017574356\"\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nage: 2856531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a0bf4a7358ba8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39,"size_decoded":537,"mime_type":"application/javascript","magic":"ASCII text","md5":"36074a4ad1ee712f187f8a9017574356","sha1":"09e567f710fc27c5a03f2396ae8dc1d9a88cc989","sha256":"146d9737b192711c6cb3ac1635aa88f9e409e813b163ab4d9b5ef6aa7243bced","sha512":"3732bd7f8aba0a9448ea0d35aa4f5c6b7c26e41f98e3b727e700ed02d4ceaf0d728136879946d18004f9ca8284220d60c15fe1a081d68662c628ef344290958c","ssdeep":"","tlshash":"c690044530c170745111313445377c05d114c45cc5d5d735c104454035100f0531fc0c","first_seen":"2025-09-20T01:00:19.497611Z","last_seen":"2026-08-04T07:42:36.547581Z","times_seen":2950,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-15","alert":"Sinkholed","trigger":"1win.ng","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.top-parser.com/matches/get-many","fqdn":"api-gateway.top-parser.com","domain":"top-parser.com","tld":"com"},"ip":{"addr":"194.67.193.129","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1win.ng/betting?p=fgux\u0026sub1=clk_6vnmoh3gi9pt6l7z","date":"2026-06-15T05:49:20.007Z","timestamp":1781502560007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top-parser.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 12:39:35 GMT","end":"Thu, 03 Sep 2026 13:39:23 GMT"},"fingerprint":{"sha1":"7C:4A:DB:55:11:B1:4B:DF:41:A2:EA:16:20:4E:74:E6:5F:8F:6C:62","sha256":"B8:92:A5:23:B8:21:70:60:DA:6F:DE:76:95:1C:EC:B9:F9:3F:21:4D:21:F7:FB:AC:21:77:E9:78:E2:81:D3:35"}}},"request":{"raw":"OPTIONS /matches/get-many HTTP/1.1\r\nHost: api-gateway.top-parser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-external-partner-id,x-lang,x-user-location\r\nReferer: https://1win.ng/\r\nOrigin: https://1win.ng\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 15 Jun 2026 05:49:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Type,Authorization,Content-Disposition,Type,X-Partner-Id,X-Lang,Token,X-External-Partner-Id,traceparent,X-User-Location\r\naccess-control-allow-methods: GET,OPTIONS,PUT,POST\r\naccess-control-allow-origin: https://1win.ng\r\naccess-control-max-age: 259200\r\nset-cookie: __cf_bm=IRM5r8MGaCyCiM39Fx1sVO_OR3WPvKFNb3OjXebIzIc-1781502560.0309289-1.0.1.1-BajYt_FKLqBZWTX0EnMJA49TWVJc.PIKlT9_gCEZ.DN9IcUiBZmw381.kpcXravyRDR3DtZR.xskGFYsZVb__591LnlGJGsCLsYtyfiANyaryoR_HYFimtiZ3EGF8MTpnXmIAOaXLeSXirDsVUgQ9g; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com; Expires=Mon, 15 Jun 2026 06:19:20 GMT\n_cfuvid=T.ngMK29m5mpWb2ObSp4gfDJTNEcd6A9WBFjqoRCvyI-1781502560.0309289-1.0.1.1-XtTXEk9YrZ3ZpEoGjvKSuJvpKOoU46KZ.5ts58d8ark; HttpOnly; SameSite=None; Secure; Path=/; Domain=api-gateway.top-parser.com\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0bf4a782d0fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1130,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":3,"send":0,"wait":42,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}