| 1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder |  172.64.146.192 | 200 OK | 107 kB |
URL User Request GET HTTP/21xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder IP172.64.146.192:443
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (61633) Size107 kB (106735 bytes) Hash6c2091544fe14749b90a99c3ee9c3fd2 a57838e4552c702779695883095ff5eb5bac549c 65a457ef13ea34a464aaf8c0245e298e1be3f279838432ad1f166580dbca3e72
GET /en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:12:45 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=631, dt_total;dur=646.866, wf-uht;dur=0.649
set-cookie: SESSION=2b221270c4242bf124d43450bd390e0c; path=/; secure; HttpOnly; SameSite=Lax
ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
_glhf=1714896540; expires=Sun, 05-May-2024 04:12:44 GMT; Max-Age=3600; path=/
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; expires=Thu, 04-Jul-2024 03:12:44 GMT; Max-Age=5184000; path=/; HttpOnly
is_rtl=1; expires=Mon, 05-May-2025 03:12:44 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
visit=1-a074cdc546b39a9b8507afb0a4675a4d; path=/; HttpOnly
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; expires=Thu, 04-Jul-2024 03:12:44 GMT; Max-Age=5184000; path=/; HttpOnly
reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; expires=Wed, 05-Jun-2024 03:12:44 GMT; Max-Age=2678400; path=/; HttpOnly
fast_coupon=true; expires=Sun, 12-May-2024 03:12:44 GMT; Max-Age=604800; path=/
platform_type=desktop; expires=Tue, 04-Jun-2024 03:12:44 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=lax
v3fr=1; expires=Wed, 08-May-2024 03:12:44 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
lng=en; expires=Tue, 04-Jun-2024 03:12:44 GMT; Max-Age=2592000; path=/
flaglng=en; expires=Tue, 04-Jun-2024 03:12:44 GMT; Max-Age=2592000; path=/
typeBetNames=full; expires=Fri, 01-Nov-2024 03:12:45 GMT; Max-Age=15552000; path=/
coefview=0; expires=Sun, 05-May-2024 04:12:45 GMT; Max-Age=3600; path=/; samesite=lax
platform_type=desktop; Path=/; Expires=Wed, 08 May 2024 03:12:45 GMT; Secure; SameSite=None; Partitioned
auid=mjmZBWY2+S0mL2/qBXWfAg==; path=/; secure; httponly; samesite=lax
vary: Accept-Encoding
x-dt: 70
x-frame-options: SAMEORIGIN
x-time-ng: 0.647
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8cf7aad3568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/notify/main.3c9c5975d727e4878ec02d20d7a4e239.css |  185.244.209.62 | | 810 B |
URL v2l.traincdn.com/styles/css/notify/main.3c9c5975d727e4878ec02d20d7a4e239.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with very long lines (809) Hash3c9c5975d727e4878ec02d20d7a4e239 75b04084a9b1968479fd9372e1fcbdc1705fdbc5 3c60a1eed510f2de6512f21e07834480a48a6d6e3e4ccec04d5a1326a87aa383
GET /styles/css/notify/main.3c9c5975d727e4878ec02d20d7a4e239.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
content-length: 810
last-modified: Thu, 11 Apr 2024 14:19:26 GMT
etag: "6617f16e-32a"
expires: Thu, 16 May 2024 08:01:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-9c6e35ce8c98c1aca557ec59400e7306-5d1d14fc2c6ec705-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:00:02+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/min_js/common_socket_light.002dae4ae188651f2ee8e48faf9ea1cb.js | 185.244.209.62 | | 294 B |
URL v2l.traincdn.com/default/min_js/common_socket_light.002dae4ae188651f2ee8e48faf9ea1cb.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, ASCII text, with no line terminators Hash002dae4ae188651f2ee8e48faf9ea1cb 52b82bcaaf6be5815b328f846ee8e7ae9ae6bd05 7863074021bcb569ea320672c2d29ea6dc03aa21ba01c1ee9c4c02829b05fdc4
GET /default/min_js/common_socket_light.002dae4ae188651f2ee8e48faf9ea1cb.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 294
last-modified: Wed, 28 Feb 2024 06:49:11 GMT
etag: "65ded767-126"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-2d8de7f33f94bba4fc68c32cd479970e-17319d6a61174af1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/min_js/slider_market.28bdb175d3e500d4df575e15d44d87e4.js | 185.244.209.62 | | 259 B |
URL v2l.traincdn.com/default/min_js/slider_market.28bdb175d3e500d4df575e15d44d87e4.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with no line terminators Hash28bdb175d3e500d4df575e15d44d87e4 b893f662da306ba175f78858ef0ecb33c38a4457 987ac65f682f7d51cf819fdc665e17d48651330cba399d655f0b9877174969c0
GET /default/min_js/slider_market.28bdb175d3e500d4df575e15d44d87e4.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 259
last-modified: Wed, 28 Feb 2024 06:49:12 GMT
etag: "65ded768-103"
expires: Wed, 28 Feb 2024 07:15:21 GMT
cache-control: max-age=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-541026d392eb7e1de948963c9c5a0920-0065431afba45545-01
x-id: osix-hw-edge-gc4
cache: STALE
x-cached-since: 2024-05-05T02:43:33+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/min_js/main.6d2d6c8b32614cbd44503cb362369e5b.js | 185.244.209.62 | | 282 B |
URL v2l.traincdn.com/default/min_js/main.6d2d6c8b32614cbd44503cb362369e5b.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, ASCII text, with no line terminators Hash6d2d6c8b32614cbd44503cb362369e5b bfc35722b1060846de0087a8191b6e2b22b97885 0fddc239e3fd9da7b27cc8e65a325c11b8896018fc1e327b4f4ed33379a1cea2
GET /default/min_js/main.6d2d6c8b32614cbd44503cb362369e5b.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 282
last-modified: Wed, 28 Feb 2024 06:49:11 GMT
etag: "65ded767-11a"
expires: Wed, 28 Feb 2024 07:15:21 GMT
cache-control: max-age=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-7b5b9a492bd21f87b122228b7dba5f25-3043aecc0116b185-01
x-id: osix-hw-edge-gc4
cache: STALE
x-cached-since: 2024-05-05T02:43:33+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/bannerSliderMain.c884da33d080de7a84b9.css | 185.244.209.62 | | 235 B |
URL v2l.traincdn.com/bundle/app/Default/Desktop/bannerSliderMain.c884da33d080de7a84b9.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with no line terminators Hash1e95d3128604b085b8fc5fbc72353dcd f9ade71f7072cc6035b221349d65a19d11805900 7ef4bb2e3b294b8c1fd395435f9d7e639a6161f4b73c47d1867f0305018cde7b
GET /bundle/app/Default/Desktop/bannerSliderMain.c884da33d080de7a84b9.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
content-length: 235
last-modified: Tue, 16 Apr 2024 06:31:10 GMT
etag: "661e1b2e-eb"
expires: Thu, 16 May 2024 08:18:21 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-e0fc8e5d7504cbb7ced7d4f71325855c-1a34d848f8ce0fd6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:34+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/1984.png | 185.244.209.62 | 200 OK | 8.1 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/1984.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashba6204ff1ae209b7b3f55f32a4e55e26 5a9ad29c2da8eaa4ac30a781bbed5ab30316f62c 5d127ed1cf16fc17933b28b3a482a449efde2463ad1c7cfb34240a9e69b1709d
GET /sfiles/logo_teams/1984.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 8104
x-amz-id-2: 8JI03iaSwqesuO+6V6TBvDEr+iPQP85pTuTHO7gkVNolxTUmhVCEw7vQFx7pL9ekPSEqraTJ1F0=
x-amz-request-id: B2Q925FT8T9YFF17
last-modified: Wed, 01 Feb 2023 08:49:27 GMT
etag: "ba6204ff1ae209b7b3f55f32a4e55e26"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: 94wR5_uRYQVWVjq3QmNQOvU20VPa9v5p
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.051
traceparent: 00-891f8a2f658fe41392420e5eabcd4f31-86017f2f5308cc0a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T12:06:22+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/d3916206204ffc91b0471ff9484066d6.png | 185.244.209.62 | | 16 kB |
URL v2l.traincdn.com/sfiles/logo_teams/d3916206204ffc91b0471ff9484066d6.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash02441601c5ac83769cc0238fe1073c06 e5878e31deead1fd4e78cfa7e5a0e7fd4823f3bc 5baba3d91352af5cfaea28b5f840b598efd1b8e124c2aeb95e0b6bed13721577
GET /sfiles/logo_teams/d3916206204ffc91b0471ff9484066d6.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 15658
x-amz-id-2: B4KytmO5t8U0YyWW2s1PaIP3wlYU5X7rmRVDBpTOXjREx/702LkY+kIIkKjjcCMDdky+7ecUjsgoCHOzSlZH2g==
x-amz-request-id: CXP29T5GXWYRC1DK
last-modified: Wed, 01 Feb 2023 08:11:53 GMT
etag: "02441601c5ac83769cc0238fe1073c06"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: 808.o7CZoLFaBSNSRrs.YSp7a13uKpNF
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.025
traceparent: 00-263d490c87fa30273573015381bb1000-0b8ed52c60fe18d3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T13:15:41+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/1980.png | 185.244.209.62 | 200 OK | 10 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/1980.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash4e6490d8600afed41948945b4a2239bb 584add34ce411cf400886d7ae46733c26302f190 19396ae34a63b37b3c74901e3074d477bfb69be1e6931937645de0f1d6a8bd4f
GET /sfiles/logo_teams/1980.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 10500
x-amz-id-2: 5NjtV6fNLHZ952cuFnY1/KpfQcrYy0VNFOyVSdCZpacCcw0xypaCv/XgCVq2KQvxJEjDxkf+w4x44M40g4ZYwA==
x-amz-request-id: CAZ2JNFTX138HKQ6
last-modified: Wed, 01 Feb 2023 08:18:34 GMT
etag: "4e6490d8600afed41948945b4a2239bb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: 3sZMSxfE6N.z8lqKsghQTW5V0eSMcoLe
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.019
traceparent: 00-cfc2aebd72adfa6cd38e7c1ba2cec234-ca7e64e509e4522a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T13:00:50+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/167095.png | 185.244.209.62 | | 9.2 kB |
URL v2l.traincdn.com/sfiles/logo_teams/167095.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hasha26ce8bd0e17ec8f7b83796006c81c2d fdb8ff93c3518875a2dec2c5318e9148e6b8d1e4 75598dd0b52b981e4b347f8036e93c5ff868e2a5475d8b2cda968bbe4f1dca2e
GET /sfiles/logo_teams/167095.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 9236
x-amz-id-2: EJeAWmGP4JbnZhrECr7zjvf553vdThajy9FtsUC953HyTrhRASD9TSmSp3kiGKef6nv4NFSOn+lczghmGBv7XQ==
x-amz-request-id: D0R427NNDTY5F8RY
last-modified: Wed, 01 Feb 2023 10:50:02 GMT
etag: "a26ce8bd0e17ec8f7b83796006c81c2d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: NB6SVBMFoF1TGdb1IU1KFy2ZUH.47Z96
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.032
traceparent: 00-89a511cab6e61bdc0a0f8ae795af7859-e4eb0ca6c238eb61-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T20:27:25+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/3454.png | 185.244.209.62 | | 8.0 kB |
URL v2l.traincdn.com/sfiles/logo_teams/3454.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashdad35830c622b46e2cf0dfba78d511ee 68b4828cba061a355c72f494d17173174fd7b83c f00c1d7e8d8a33a3bc2ed85ee9fe95dd02e4b9da4d9b1801cc718bdba779e5ea
GET /sfiles/logo_teams/3454.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 8020
x-amz-id-2: 3CeIYqVsMNOIDvdO1lno3t6hDLNDqYcKBeJ2WcElodGTDWxFlG2hLTbGODfh/FRK2ymktcWpKUQ=
x-amz-request-id: WG1ZZZYB922YBW3W
last-modified: Wed, 01 Feb 2023 12:02:48 GMT
etag: "dad35830c622b46e2cf0dfba78d511ee"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: LFxXvblbw1xbcpZDKgnsipjTPOZj2kyZ
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.050
traceparent: 00-24ca8ed3a0711ebba58ed91b38e40ef0-94e52a21097d8250-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T12:01:20+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/3470.png | 185.244.209.62 | 200 OK | 8.9 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/3470.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash70c0734771866c00152841861d100de2 2b850d647ea0e5b67a85d05830b406f1d270fd47 d254f0a5a5e936b3eaed4a211059a60b7e8e440f97ad0dd5bb097e3fc474de34
GET /sfiles/logo_teams/3470.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 8900
x-amz-id-2: Mboh8OmceApR6l5hWqmz3R09W+hweX7axgtrD74qfT9h/Iv5C99kCWt0iC9C56olbg4u9XfYTaG1b9a7urmPUA==
x-amz-request-id: ZTGKSHSZA6VJTY8H
last-modified: Tue, 31 Jan 2023 14:35:00 GMT
etag: "70c0734771866c00152841861d100de2"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: HrVU0EdICM8_hzeTPzeVnsbL7ZSjvqv7
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.042
traceparent: 00-89a9181fa771d7189726949808525378-15ca7fd7c3c1f112-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T11:54:45+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1/desktop/media_asset/visa_mastercard.png | 185.244.209.62 | | 8.1 kB |
URL v2l.traincdn.com/genfiles/cms/1/desktop/media_asset/visa_mastercard.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced Hashf8983dd31b0fa2067266f68df3996eab 1f35340211a1510f6d80513be180e73db5541924 21ce8aadfc42dcf3109ce0c14dccee8678c0728aa138710172046e2c566a7b27
GET /genfiles/cms/1/desktop/media_asset/visa_mastercard.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 8107
last-modified: Sat, 23 Dec 2023 09:27:36 GMT
etag: "f8983dd31b0fa2067266f68df3996eab"
cache-control: max-age=3600
expires: Thu, 07 Mar 2024 09:30:20 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-1569e5e2fd3a262526323e397df6e88c-cc4ae40df70468b3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:20+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.png | 185.244.209.62 | 200 OK | 3.6 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashe1eb6e4adda0df3ef108df2dd55a4b14 1fc664d442a4cd6fa5e727d092e7bc5578ba2bee 4bb694aa22de366decc54a40a429512ee2180fa7142ea60f6ace42c011e09b96
GET /sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 3580
x-amz-id-2: bWONGdk1UOG1lOjxVRM6rRL4jCd2KKnViKpQGT9MyvvR/8vJs4P8EBsLEjgBt+GAfH4DvWsz40k=
x-amz-request-id: 0S38GS78GD0P02YG
last-modified: Tue, 31 Jan 2023 14:45:27 GMT
etag: "e1eb6e4adda0df3ef108df2dd55a4b14"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: wXYxcSm2e2Pax2ndc0IJW4ye1PS.tWCJ
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.018
traceparent: 00-ec79f9fbf3e891c1edb45717f2b33ffb-a3b95e3d73ec3838-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T14:50:35+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/4d19a56f7c6e34c48f0f5e0f07bf9ac5.png | 185.244.209.62 | | 22 kB |
URL v2l.traincdn.com/sfiles/logo_teams/4d19a56f7c6e34c48f0f5e0f07bf9ac5.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash4d19a56f7c6e34c48f0f5e0f07bf9ac5 d831f3f9a8e3c8531cb60af3363cf708670b0761 5c3177b0c5de6910cf614a0b841d2c7adcf36147bfb347587636f16735dfe049
GET /sfiles/logo_teams/4d19a56f7c6e34c48f0f5e0f07bf9ac5.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: image/png
content-length: 21504
x-amz-id-2: DB0lf2Jp4fhzCwoI6sH883Qe+fB1ceF93ZXLQVPpw+anjffbWVEiEtgAAGwtfTbPR2DjDJ7zc+M=
x-amz-request-id: CXPEYD3KCFHAA18R
last-modified: Wed, 01 Feb 2023 10:13:21 GMT
etag: "4d19a56f7c6e34c48f0f5e0f07bf9ac5"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: f6ESTbXeDrVRsJ_RQWJJ9yWXkVnjE6kS
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.047
traceparent: 00-7739ba862f158a65161cfbe3e7c5a71c-2720694a4b5ad662-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T16:24:57+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-242.png |  213.183.34.23 | | 14 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-242.png IP213.183.34.23:0
File typePNG image data, 100 x 72, 8-bit/color RGBA, non-interlaced Hash2596e3626a6097db5c57320beb4eb3fc 47bb0f68cd075daa88fa6ecd0f355bbb388c0ae4 ed9869a4d9ae8bd122c5487745cd5202a8ebaee4b9d1285813d6c9d7dc4e71d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-242.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 14109
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "2596e3626a6097db5c57320beb4eb3fc"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.478Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.114
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-185.png | 213.183.34.23 | | 7.3 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-185.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash0deb39d9e71c9ea8dcda36c7ac4acfbe 61c178fb6a496be98d4cd9fb5fecec0dd9dc01fa 00185dd966cece674b4a5045fbbd59d65a6224469efd59ebf6bcf2e20c3c88d5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-185.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7348
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "0deb39d9e71c9ea8dcda36c7ac4acfbe"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.683Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-438.png | 213.183.34.23 | | 6.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-438.png IP213.183.34.23:0
File typePNG image data, 100 x 43, 8-bit/color RGBA, non-interlaced Hash33ab1b584dc8ee1ef7034bfff65bbfdb 5e3456d98b5fd890e8ea7f56be83eefbfb27358b d431f559545860756aeabb9da53f23fa74586cba53471b3779f118e3a571f34e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-438.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6067
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "33ab1b584dc8ee1ef7034bfff65bbfdb"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.732Z
expires: Sun, 05 May 2024 13:19:30 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.080
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-508.png | 213.183.34.23 | 200 OK | 9.7 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-508.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 52, 8-bit/color RGBA, non-interlaced Hash336e1d4b10f67528feeef8e8d1111042 9566b9d3a90b2a1338ba54b07ceeddab85299d7e ff77f4dabd49b093bb457db7b7c3726cc7524b79a77db1807374cff41f900846
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-508.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9680
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "336e1d4b10f67528feeef8e8d1111042"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.957Z
expires: Sun, 05 May 2024 13:10:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.071
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-499.png | 213.183.34.23 | | 4.7 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-499.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash803cd1a28a3b57f115bb87659bf354fd 41205d31159349b85c259128ee28bb4e94d64063 97fc324543993486b0869c3b1e7e24478e0be77f2c04db2ad0301407dc7dc3c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-499.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 4691
last-modified: Mon, 04 Mar 2024 13:17:26 GMT
etag: "803cd1a28a3b57f115bb87659bf354fd"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.429Z
expires: Sun, 05 May 2024 13:11:12 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.043
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-316.png | 213.183.34.23 | | 13 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-316.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash9ba8ed3b628575f6f4db7a43f1ff4073 b2e78e2a39b4cce8022cb1d1703019bb5e8140c2 bda7631d92a2dc7e1d7fa4432173b592a9e4c46bd7aa8635c22b42f77cbbda35
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-316.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 13047
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "9ba8ed3b628575f6f4db7a43f1ff4073"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.105Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.067
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-439.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-439.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash4fd549dd3834f946692dadc412b91b2b c6e2c76ed7413196bd5ebd9c80760dcf5aa03499 79fd762eed141f3879b5d9fe58d5314666a507c97f557afc4588923704840dd5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-439.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11660
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "4fd549dd3834f946692dadc412b91b2b"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.950Z
expires: Sun, 05 May 2024 13:41:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-85.png | 213.183.34.23 | 200 OK | 17 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-85.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 81, 8-bit/color RGBA, non-interlaced Hashba449d4de8e5faf45879650fae67dcff 7a3985b5fea0b42f42277856804eacf4131d9e5c bcd6f098aac240b15ad45bcc0ed182d794081551c7f4e0023992ef172b5927a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-85.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 17042
last-modified: Mon, 04 Mar 2024 13:15:33 GMT
etag: "ba449d4de8e5faf45879650fae67dcff"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.140Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.080
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-117.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-117.png IP213.183.34.23:0
File typePNG image data, 100 x 92, 8-bit/color RGBA, non-interlaced Hash45bb95745fadd58a7e66157a4e890540 f97d5c05501d557b404d1c6b13e1f5a06b56a20d f4b32efff73cdefac1957bd92ab04960b087ea75b4d1dd20592aa73c0b6854ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-117.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10511
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "45bb95745fadd58a7e66157a4e890540"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.863Z
expires: Sun, 05 May 2024 13:17:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.060
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-62.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-62.png IP213.183.34.23:0
File typePNG image data, 100 x 79, 8-bit/color RGBA, non-interlaced Hash4b3943bb93a3b5187d1379271b2ac5e2 7d52fa21576a83b9f5aa49bbeb7efe7d4152ace0 19ed1ce28707e18fea8647a23f598614355b1df19edec8b2cc1453042ef856f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-62.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10588
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "4b3943bb93a3b5187d1379271b2ac5e2"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.827Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-496.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-496.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashee84c5e4c1e804b0e9cce4ed385323a7 f44c6372547e2b1d9446d7fe65098e1260f24a71 73a19ba79606ff2aae7c57f82d94720e1265a75f1cf42ed21699dcd8b39fa546
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-496.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11265
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "ee84c5e4c1e804b0e9cce4ed385323a7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.153Z
expires: Sun, 05 May 2024 13:20:32 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.047
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-485.png | 213.183.34.23 | | 7.9 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-485.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashd6ecf8db9b7f1b0b84d082a5ea577a56 d6599c093b641bcdb8e32601b35ede1f5b9cda82 ad2abf294310cb8f0dc0c8b4616cd856a75549707112516f1cad9a1c93bd9cff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-485.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7873
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "d6ecf8db9b7f1b0b84d082a5ea577a56"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.310Z
expires: Sun, 05 May 2024 13:20:32 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.048
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-241.png | 213.183.34.23 | 200 OK | 9.1 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-241.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 32, 8-bit/color RGBA, non-interlaced Hashdd19769a82805274e8cd362f031ce264 8520a2a7086205555d15da54e61e9331e86f9657 8203481292c242e3df28b62727d223b738ceeeeed36f85cbbf1ee81c850d9011
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-241.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9070
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "dd19769a82805274e8cd362f031ce264"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.033Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.083
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-175.png | 213.183.34.23 | 200 OK | 8.0 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-175.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashdd91061aa342590913f199a01effca1c 8987002758908f6d836fda057271f039f9fe26a4 de2bc278dc54da10631d599da523f854d225405202c04cc7f0ff6357648dfffa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-175.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7984
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "dd91061aa342590913f199a01effca1c"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.564Z
expires: Sun, 05 May 2024 13:19:30 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.090
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-66.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-66.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash4f5efd661b33d5ec7e0cbbc93674d3a8 43226628e96faa01b947f66dbc4dcaa9b410414a 097f408f43aa0c2ce48599aa4ef3124d6417509a8c9cad395bd884f50f561d12
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-66.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10426
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "4f5efd661b33d5ec7e0cbbc93674d3a8"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.962Z
expires: Sun, 05 May 2024 13:44:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.060
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-526.png | 213.183.34.23 | | 4.3 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-526.png IP213.183.34.23:0
File typePNG image data, 100 x 44, 8-bit colormap, non-interlaced Hash8dc885c743ae42c5d2be8dbbe1307fd5 5ad7f292704462b011538ccb9a41274ef357aa34 6995fc6e47f8d8b652295a71ccbff2fb42a81b617fbdb763305c5766e76a9557
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-526.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 4311
last-modified: Fri, 15 Mar 2024 08:40:16 GMT
etag: "8dc885c743ae42c5d2be8dbbe1307fd5"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-14T16:35:22.000Z
expires: Sun, 05 May 2024 09:20:58 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.058
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-158.png | 213.183.34.23 | | 13 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-158.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash51c469f78f3595c998611f2c4b1e84db e3381dd2f93f2c5682e763658c3162503001de78 4e9e1a271599eeab85cb4a0d6baf9dee9cbd6aef7e0aa368576730e39f2cd2d5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-158.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 13002
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "51c469f78f3595c998611f2c4b1e84db"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.839Z
expires: Sun, 05 May 2024 13:17:18 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.057
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-223.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-223.png IP213.183.34.23:0
File typePNG image data, 100 x 49, 8-bit/color RGBA, non-interlaced Hash82ff782c4380fe4afa005b0d27bf02cc de547246e955dfb113e6278a425247d1b50dcd30 987a7e028f839e64904a8fbaca2747d743a7b3a692312b2369920c1633de1bdb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-223.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11855
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "82ff782c4380fe4afa005b0d27bf02cc"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.659Z
expires: Sun, 05 May 2024 13:17:22 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.088
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-460.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-460.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashd8be05a5876b332928b7311f423438e5 876e224cb7a8b879c88717ae0d1bd059b28f5080 aa79d8e9eff5eff10c1f8f8860a78121c000f13bb5d8edd94f5be186cb7d1255
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-460.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11828
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "d8be05a5876b332928b7311f423438e5"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.707Z
expires: Sun, 05 May 2024 13:24:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.093
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-190.png | 213.183.34.23 | 200 OK | 11 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-190.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 61, 8-bit/color RGBA, non-interlaced Hashea4d4fb8bc7c36ee196e3d4e280767fc 385392c76c8da4ae505d14372fd776f5611ee7b7 b2820901a8c5788bf7b0d422708e690c93ded91e979fc26d4a3adf103ef9fffc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-190.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10895
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "ea4d4fb8bc7c36ee196e3d4e280767fc"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.526Z
expires: Sun, 05 May 2024 13:19:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.050
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-68.png | 213.183.34.23 | | 15 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-68.png IP213.183.34.23:0
File typePNG image data, 100 x 74, 8-bit/color RGBA, non-interlaced Hash3b45ea812af83922dbb5e37f4ec2db33 e6f68cb5619cc9a40d3e31b54132390776793aa8 f37634fea9b06193b19c33e2b33eaf42974ed886dd3710fb45d719d64651cda0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-68.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 14904
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "3b45ea812af83922dbb5e37f4ec2db33"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.851Z
expires: Sun, 05 May 2024 13:17:22 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.068
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-270.png | 213.183.34.23 | 200 OK | 12 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-270.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashb9ae028bac50d88a0e6231e7d17fb1c9 5ee5f484969ccd321a768735057840c1eda31d2f dc85c2581c5f765c16b758c456f473fe7f95bff44d08910a6596ad0558ed4e61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-270.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 12395
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "b9ae028bac50d88a0e6231e7d17fb1c9"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.987Z
expires: Sun, 05 May 2024 13:17:16 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.061
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-425.png | 213.183.34.23 | 200 OK | 5.5 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-425.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 25, 8-bit/color RGBA, non-interlaced Hashea2f99254cfc1ad0fcdf0a71fa0da9f5 6bdde48aee0a491cc7c30c70f24090eb14c8a0a1 ddd0e26362a2f87152abdca6bf32eaf932fbe3e053c779dc543012ad575b91df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-425.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 5538
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "ea2f99254cfc1ad0fcdf0a71fa0da9f5"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.288Z
expires: Sun, 05 May 2024 13:10:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.051
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-384.png | 213.183.34.23 | 200 OK | 11 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-384.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 61, 8-bit/color RGBA, non-interlaced Hash9ec2f341204a5e483637c517edf22dcf f407a0c1de2a9afcffb5ecfaa2f850efcd0bc6b0 4b32b5d2c22e2cb6db21198fbfaf10f40119ebc051a96b84341c5aaf93287c6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-384.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11073
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "9ec2f341204a5e483637c517edf22dcf"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.891Z
expires: Sun, 05 May 2024 13:17:18 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.073
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-343.png | 213.183.34.23 | 200 OK | 12 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-343.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 55, 8-bit/color RGBA, non-interlaced Hash1d16d2980a3330ae0173300ed0a5760e 61c0470a7ae6d8b14e08cae39b8215f5674311bd fb6b6c5316e8ac14494aa7e19b28709c6ae4b0bdddfd6e859df4dd3baefd46b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-343.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 12109
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "1d16d2980a3330ae0173300ed0a5760e"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.970Z
expires: Sun, 05 May 2024 13:17:23 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.056
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-446.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-446.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash073122a86d65dd039934d473aa112f84 f9c8b43aa8431a6e0ef2ae7ef415846d037c7cbe 9bf3861e86a66ae0a9dbe963a3cee29e4924c4717109a5e2a1b0b2c94e161e11
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-446.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11619
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "073122a86d65dd039934d473aa112f84"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.033Z
expires: Sun, 05 May 2024 13:41:45 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.047
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-127.png | 213.183.34.23 | 200 OK | 44 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-127.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hasha1093055fbc2af3c003c2c6d33070028 6243eae5fdb028ea78adaa7276a383592abb820e 130a071269d5ecd4cb2709a7215d34c7f7425b9f9a83c293de7dcc80a862d95e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-127.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 44378
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "a1093055fbc2af3c003c2c6d33070028"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.276Z
expires: Sun, 05 May 2024 13:19:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-484.png | 213.183.34.23 | | 9.5 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-484.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash38e402b150d17a0c1ca5a8942f8f023a eba55cbbfb776a29b956b3ad7b78589cf3212717 2609caec561bbb5a61682982c5e0971dc95a36ce93c5240b8f008e7b283370fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-484.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9456
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "38e402b150d17a0c1ca5a8942f8f023a"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.743Z
expires: Sun, 05 May 2024 13:19:38 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.094
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-276.png | 213.183.34.23 | | 6.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-276.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash035290f570d9765b5b32f4b469b45e29 f536669ef74391221dbe94d8d49ae2b7a4f9c377 b087c3edadf5bc84d12f3369f3ac837df41033037d417105f230e2fda2b356fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-276.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6002
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "035290f570d9765b5b32f4b469b45e29"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.103Z
expires: Sun, 05 May 2024 13:10:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.075
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-386.png | 213.183.34.23 | | 8.3 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-386.png IP213.183.34.23:0
File typePNG image data, 100 x 53, 8-bit/color RGBA, non-interlaced Hash4512f37dbbc1a7fb120d6cf09afda255 626571c50e499251cfba5f6b4665be2f188666cb d730c14d5b03037cdfbdb5876356c682ac8e3236cdc6b2b01932d5deb019e07a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-386.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8257
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "4512f37dbbc1a7fb120d6cf09afda255"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.157Z
expires: Sun, 05 May 2024 13:17:23 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.052
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-388.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-388.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash75686e44e5b5e787f8414a2002a90322 6f44db03c2b5c894b9f2d5625be96c46cd420adf d5ae1370fd1b423afea4d73ce4cd08326966a2b9373adaf411993ebf2c576f30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-388.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10849
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "75686e44e5b5e787f8414a2002a90322"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.540Z
expires: Sun, 05 May 2024 13:19:39 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-214.png | 213.183.34.23 | | 6.2 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-214.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit gray+alpha, non-interlaced Hash7804d929d22dca49b5e0ed1488dc236c ca8ea00081fda1641fb93f39aef17b37e2e7a1ae 36e99eab3dc06aa5aeca39100a80472277efc3b6a58788e737d879c361373255
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-214.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6162
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "7804d929d22dca49b5e0ed1488dc236c"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.528Z
expires: Sun, 05 May 2024 13:17:23 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.070
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-307.png | 213.183.34.23 | 200 OK | 9.2 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-307.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 37, 8-bit/color RGBA, non-interlaced Hash96408264264a57b8c1e95c80bd47a630 f314710119772e4fedccf0563da33dee5346d58b b485898b6b6bcbfeca070028a938144fea259ade1ae5a3e00fe611827a8ddbb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-307.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9236
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "96408264264a57b8c1e95c80bd47a630"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.336Z
expires: Sun, 05 May 2024 13:19:39 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.087
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-482.png | 213.183.34.23 | | 31 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-482.png IP213.183.34.23:0
File typePNG image data, 100 x 71, 8-bit/color RGBA, non-interlaced Hashf25aef0c398b78d65e08c3c6e4560bcd 2d6462f18b9b792c2ce2f6306b05f273c4cc01e3 689ce8a87d8c99b27910bc9d232c294262bfc5b0a196fb131fdf7efce9a31021
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-482.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 31207
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "f25aef0c398b78d65e08c3c6e4560bcd"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.999Z
expires: Sun, 05 May 2024 13:11:07 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.076
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-202.png | 213.183.34.23 | | 22 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-202.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash5bb53488f569dbcf9d30fdb5610b4bf2 961f43acac3e19a86c14cb0e643163a1d75ca742 0437d44de804ac081dc8ae4e53cf760f43f6c62b596aea8189eb251443434b83
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-202.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 21870
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "5bb53488f569dbcf9d30fdb5610b4bf2"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.491Z
expires: Sun, 05 May 2024 13:17:30 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.094
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-122.png | 213.183.34.23 | 200 OK | 17 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-122.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 72, 8-bit/color RGBA, non-interlaced Hash902907ec147fae2c186c2b83ae56af30 409a6da696c760b970d6eb0e2875b24569bfcbbc d62485f5d8d286f46476d907916f4e482df1ff9a95123f9d15c4a3a0833cc3a9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-122.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 17111
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "902907ec147fae2c186c2b83ae56af30"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.044Z
expires: Sun, 05 May 2024 13:19:38 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.060
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-464.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-464.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash2771bc366e2178093740ac680f69d1c0 e5d274546f1f07d964e2ff248e7dedad96947916 6309399eda1909974069ba3b55a3d3e810d8e8ac20d7a7f75eb20244fd447ee3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-464.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11267
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "2771bc366e2178093740ac680f69d1c0"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.755Z
expires: Sun, 05 May 2024 13:41:30 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.044
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-181.png | 213.183.34.23 | 200 OK | 12 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-181.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashd556d90f5694c0f2156c2403097330f5 8ece322f9b7ca7264ee0a1f6a594c38e8eb1ebf0 a533342134b804619dcb6b4306b69215c9d3f0d9bdfe6cc2b50fb253624576bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-181.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11834
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "d556d90f5694c0f2156c2403097330f5"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.447Z
expires: Sun, 05 May 2024 13:19:38 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.043
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-219.png | 213.183.34.23 | | 17 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-219.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash072a10fa3dbfaf50b3da26dabab004c2 6a8676dade70742a2575f7d3258ee9b533b3caf6 6f4e9eebccaf4ed121d30914b4f1f491851446eb523ae112054b4058778a3a27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-219.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 16932
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "072a10fa3dbfaf50b3da26dabab004c2"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.008Z
expires: Sun, 05 May 2024 13:09:33 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.060
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-269.png | 213.183.34.23 | 200 OK | 8.2 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-269.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash45b9da952dda5ee52854a0a52e0ca828 2528fb87f4423d63c517cdf3cd6095285cae5a5a aec3ec38d5bd82e2c6872f2ef34f0c200b0fccababd4534a1116d33d2363775b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-269.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8213
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "45b9da952dda5ee52854a0a52e0ca828"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.974Z
expires: Sun, 05 May 2024 13:17:18 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.068
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-324.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-324.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash249aed93ddbbfc90b256c63cba2a646f 630bfb7e7bca965caee9a53355fbdfac5d5e7251 05320b8891b9b572ebf70a14b80bbb1a0ec102eb6c862d8a614db50ca7b9595b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-324.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10175
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "249aed93ddbbfc90b256c63cba2a646f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.575Z
expires: Sun, 05 May 2024 13:13:39 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.100
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-90.png | 213.183.34.23 | | 8.3 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-90.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash0a9e48477bc3c9176882d6992142a1e7 ecc66fcfe332b386198a8cb29ea83bf86ef74c43 7bbe2e58990eee3da558ec68e39a75bdbcdb9389c434a50dbfbaf38782bc6b27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-90.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8344
last-modified: Mon, 04 Mar 2024 13:15:33 GMT
etag: "0a9e48477bc3c9176882d6992142a1e7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.538Z
expires: Sun, 05 May 2024 13:19:38 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.045
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-226.png | 213.183.34.23 | | 23 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-226.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hasha0c046257dcc89b903e6af4222f6bed0 255749f6a505f9207406004fd5dce4a14c18436d f4ca8f2b59b01f4d9b3c6f1fed523c7465048f1545c37e6bc80796dbe0148428
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-226.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 22902
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "a0c046257dcc89b903e6af4222f6bed0"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.418Z
expires: Sun, 05 May 2024 13:19:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.099
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-171.png | 213.183.34.23 | | 14 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-171.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash9ac20066c1abfb3a27e76297933a85d5 3521cdcf01754b39930ad573889194efa0e80465 d5fa4b4bee677f2406983bf927ac98a98a671373f74bf9a9c43dda5623a0f723
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-171.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 13517
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "9ac20066c1abfb3a27e76297933a85d5"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.560Z
expires: Sun, 05 May 2024 13:19:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.051
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-290.png | 213.183.34.23 | | 7.4 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-290.png IP213.183.34.23:0
File typePNG image data, 100 x 37, 8-bit/color RGBA, non-interlaced Hash9905df49a96c9ff6403809b2ca45f414 d66007f462f98db40800c16daae3bf340c61432a e56cb6a08f71230a3970dc1361dd6c7d9d05f904362a23f8661785628d4f15a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-290.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7423
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "9905df49a96c9ff6403809b2ca45f414"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.595Z
expires: Sun, 05 May 2024 13:19:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.086
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-359.png | 213.183.34.23 | | 8.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-359.png IP213.183.34.23:0
File typePNG image data, 100 x 57, 8-bit/color RGBA, non-interlaced Hash81eba15ddc2182c5e2f7ac9f93953ece 45a16ff01d2b9582de61f41d1f27e98067aacfb1 ddf995878a80002748ff90528ae51a4b7897a8cc1acc486db88965ea9518db8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-359.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7983
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "81eba15ddc2182c5e2f7ac9f93953ece"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.080Z
expires: Sun, 05 May 2024 13:17:19 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.088
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-421.png | 213.183.34.23 | | 6.5 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-421.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash0eec15cef34749a63d79bee98f382166 10bcef34a78c9722e65ba3cfee0386fc0e6c976b 6c6d167703783675b0221bd2034c1703761e13c913f8fb6663247ca155409e18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-421.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6503
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "0eec15cef34749a63d79bee98f382166"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.944Z
expires: Sun, 05 May 2024 13:19:39 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.092
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-130.png | 213.183.34.23 | 200 OK | 11 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-130.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 51, 8-bit/color RGBA, non-interlaced Hash5f29bb706958e60c950983207ec84977 ee99668392b76e480d83b362dcb7df47d3408286 4f9cdbda661c55565d594ff7b5f7da21d4a6770b9e9d38930df5f1ff29ba894d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-130.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10779
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "5f29bb706958e60c950983207ec84977"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.264Z
expires: Sun, 05 May 2024 13:19:39 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.097
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-488.png | 213.183.34.23 | 200 OK | 8.9 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-488.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash2be8671a2243f0c17507bc83e8e36bae 4d0534512fa5504d544dcc2226d7d0d54f43600a 0e7d320695bce48774be7c1c91386193435cc90ae4b08c91666b77432a97b95a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-488.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8904
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "2be8671a2243f0c17507bc83e8e36bae"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.481Z
expires: Sun, 05 May 2024 13:40:22 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.059
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-74.png | 213.183.34.23 | | 6.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-74.png IP213.183.34.23:0
File typePNG image data, 100 x 19, 8-bit/color RGBA, non-interlaced Hashb6edd52da0ce4b2277ae19a3110dd88e 3ff83b3f8c990854a8a6227f8379af73015250af 5640304a28c90694e8859af492607a1607926f81285c7d8ffd2c7dffa415d5e8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-74.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6001
last-modified: Mon, 04 Mar 2024 13:15:33 GMT
etag: "b6edd52da0ce4b2277ae19a3110dd88e"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.300Z
expires: Sun, 05 May 2024 13:24:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.045
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-517.png | 213.183.34.23 | 200 OK | 18 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-517.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash6c1f611ca5e0dd1c11d3e87b83f2a1fe 3c832c189ead94d1a862905971e1e2f1064ceb6b efa1a98091be0acb239ee01b132ed58c07891c8da2a3f976684dc51793cffb3b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-517.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 18290
last-modified: Mon, 04 Mar 2024 13:15:31 GMT
etag: "6c1f611ca5e0dd1c11d3e87b83f2a1fe"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.117Z
expires: Sun, 05 May 2024 13:31:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.092
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-54.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-54.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashc22f493835098b47d081c11239f20426 43b31f4c61325d3e585cab34e9361c11b907ebf6 a77e55713e9f1b17661e10b4f9dbd21f299486c13409b791763aa109fb5b6426
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-54.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10084
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "c22f493835098b47d081c11239f20426"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.069Z
expires: Sun, 05 May 2024 13:10:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.044
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-137.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-137.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashb10237b278b45ee720e2c161d01f68f2 2eb6362707f2563a3f53c16842cb8a26515385dc ba09c6c4baa139ba14a0149abe9e9b5fccf3c2d8d492dc0fcf820399bf5b4326
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-137.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11008
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "b10237b278b45ee720e2c161d01f68f2"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.390Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.053
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-71.png | 213.183.34.23 | | 9.8 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-71.png IP213.183.34.23:0
File typePNG image data, 100 x 43, 8-bit/color RGBA, non-interlaced Hash314f49918d754893cb33c6d6d60fd838 c1a8907624ba0e83b39b81cd49be21ea2d6a42b6 2120fa486f8cd929f62c2926ad049ae687232f45e489a2eba2424256cc64834c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-71.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9778
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "314f49918d754893cb33c6d6d60fd838"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.502Z
expires: Sun, 05 May 2024 13:24:47 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.058
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-142.png | 213.183.34.23 | | 18 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-142.png IP213.183.34.23:0
File typePNG image data, 100 x 92, 8-bit/color RGBA, non-interlaced Hash76e6ef6584d88b4564d42a48764c2988 e404462628348b70c553b9f362235205952aee6e 8c5e8a88b40cac6574f89200e0496f9fc69a9de61209071daf446891e9e1aea5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-142.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 18543
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "76e6ef6584d88b4564d42a48764c2988"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.405Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.093
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-139.png | 213.183.34.23 | | 7.9 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-139.png IP213.183.34.23:0
File typePNG image data, 100 x 58, 8-bit/color RGBA, non-interlaced Hashb997711fdfb51b73aaaf3053a59f5dda 64f5192d90769c221260d5cf8d3b689dea1e1459 88078f0722c7c8b01b27e352523a37f996d67176aa779c5045350918c062638f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-139.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7876
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "b997711fdfb51b73aaaf3053a59f5dda"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.358Z
expires: Sun, 05 May 2024 13:19:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.043
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-164.png | 213.183.34.23 | | 6.2 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-164.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashd5b7fbb2cc058e38510be4cf5db1c425 0d468825b08f505ddfce901a4491d4b1859a358e 220d427faf46b4715e7355dbc5a38342f7692072d23f0048527d93be318bb740
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-164.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6173
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "d5b7fbb2cc058e38510be4cf5db1c425"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.115Z
expires: Sun, 05 May 2024 13:19:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.073
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-228.png | 213.183.34.23 | 200 OK | 11 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-228.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash8d144daf2be3eac130c2571ef56d3fa2 e438893e62662e81c611ed898763b734a7f5cf7c ba6f4fbbb29b23cda92ad82ca3f73927cf11f8fc754bd3b1cb32c2bc13f6e810
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-228.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11087
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "8d144daf2be3eac130c2571ef56d3fa2"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.635Z
expires: Sun, 05 May 2024 13:31:08 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.073
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-230.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-230.png IP213.183.34.23:0
File typePNG image data, 100 x 53, 8-bit gray+alpha, non-interlaced Hasha87d9e6fe116abf18a3ce7a259c537a8 695c382494c365c8b0ae63f70dd7c13e9ed0fee6 38c26439a6f89613428b5c28e5e5462100a91c0a71dfbf378659b8a730caa41b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-230.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10530
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "a87d9e6fe116abf18a3ce7a259c537a8"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.239Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.070
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-173.png | 213.183.34.23 | | 13 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-173.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hasha40c40be58172efb0a6b5439b0a054c7 9504b93ce83577fb1d31e42aef2ee2314f46b2f0 92864af77ae17b4a859508a1c61766e5425a0c3300b39932452d70e19df59cf0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-173.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 13374
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "a40c40be58172efb0a6b5439b0a054c7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.503Z
expires: Sun, 05 May 2024 13:10:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.070
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-72.png | 213.183.34.23 | | 9.9 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-72.png IP213.183.34.23:0
File typePNG image data, 100 x 59, 8-bit/color RGBA, non-interlaced Hash45420c530b4bf1fdffe700b669f89424 cc053311193a8ecd5569d665fe050c2cfdd1e84b b3320684baa1a78ed70960d56685b3dba02b2da649e412da46c715ac75eaafb1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-72.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9883
last-modified: Mon, 04 Mar 2024 13:15:33 GMT
etag: "45420c530b4bf1fdffe700b669f89424"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.441Z
expires: Sun, 05 May 2024 13:17:18 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.090
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-128.png | 213.183.34.23 | 200 OK | 7.6 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-128.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 48, 8-bit/color RGBA, non-interlaced Hash6f4965ce9f5f0ab848bf0212ae21bd68 170d68d8fc7db711ea0c32373a90a3d98a2805cc 9b85b27f87cb695a22252268920988ccfc79dbe4d7f2be551d159404aaa98c08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-128.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7633
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "6f4965ce9f5f0ab848bf0212ae21bd68"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.413Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.060
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-167.png | 213.183.34.23 | 200 OK | 4.1 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-167.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash32c6b682957e3fa7ebfb148487986eb1 1faeb98f69d2065ba1dedbddb875341ad707c0d9 0e024bade64121e9536d828edf6c7f85a45c10b40aa8538725e2808dbf256224
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-167.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 4098
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "32c6b682957e3fa7ebfb148487986eb1"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.514Z
expires: Sun, 05 May 2024 13:13:25 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.066
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-412.png | 213.183.34.23 | | 4.8 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-412.png IP213.183.34.23:0
File typePNG image data, 100 x 22, 8-bit/color RGBA, non-interlaced Hashcddc8e4d81e209ea932c555006a4b4ae f2ac2e81d6affe91833b51a0254a5c4453d69ddd 414d6511c1204b5c70df4d069fab2420836e96d952fd506faa4eee65fb513943
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-412.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 4787
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "cddc8e4d81e209ea932c555006a4b4ae"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.204Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-207.png | 213.183.34.23 | 200 OK | 8.7 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-207.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashf228ea992fcfe5906a28cd124bd6642f 8382ca82f6377289c51666e1d0e92356105da3a9 78e17b756d2b2aa666844eb34d65dc75386f5180ed5be82c0e3c2091e034862b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-207.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8683
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "f228ea992fcfe5906a28cd124bd6642f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.236Z
expires: Sun, 05 May 2024 13:24:12 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.085
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-126.png | 213.183.34.23 | 200 OK | 10 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-126.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 39, 8-bit/color RGBA, non-interlaced Hashb3def3dcf05a6d2929e1fed1d0cd9c01 a7db3088759acc33d9486d29b08c665ae47caf2a 98f954961518b3662d979aca3ade977597f4933548dd25c8587a5f3bc05133ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-126.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10228
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "b3def3dcf05a6d2929e1fed1d0cd9c01"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.333Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-265.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-265.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash39e931554a66bffea9c35b7695a9981a 055e6f77da4b426a7fa90c40960b134607115f35 d65469420b11878c2dcfd3a9f398854f67e8f7ed3a3ece656ea62972ee034819
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-265.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10718
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "39e931554a66bffea9c35b7695a9981a"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.586Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.063
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-394.png | 213.183.34.23 | | 8.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-394.png IP213.183.34.23:0
File typePNG image data, 100 x 47, 8-bit/color RGBA, non-interlaced Hashbf0c4bcc5aa5018b3cb518a1e4538e32 fc5689e6aef07987ca00d9d44ca319050c107a27 5387b0725c20705f43ea708309f8f20f3d51260440dc78ec81020f0a7b1965af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-394.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8119
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "bf0c4bcc5aa5018b3cb518a1e4538e32"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.045Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.054
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-116.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-116.png IP213.183.34.23:0
File typePNG image data, 100 x 72, 8-bit/color RGBA, non-interlaced Hash9614cc097bee66b14b8d8ca8ddec3b2f 3eb2760de9a0705eb85833def42896c6220d807f c6aa9653fbdbc331b067746169996bf389d0ca356b825d350d4dc91bd315305c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-116.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10673
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "9614cc097bee66b14b8d8ca8ddec3b2f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.081Z
expires: Sun, 05 May 2024 13:10:26 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.049
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-345.png | 213.183.34.23 | | 9.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-345.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash000f7b8c3fa913c984aea910f49b0f73 3ab098082f4c5784a1f3544869b03c9e43df79cf 029f2c9693c4d3db8b784518c0cdf85ce847dc950db9b9e7439423a6677de002
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-345.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9051
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "000f7b8c3fa913c984aea910f49b0f73"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.822Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.070
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-180.png | 213.183.34.23 | | 7.6 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-180.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashef1a0fe1381c9aa61cdbb9f2d7883028 f855741f53b81bfb0357d750e2dc2f0f16cbcd06 2c57f893fa4ea2af3072b6b187e8a5c7f8ae1978a341f1ad8a98f9f4b539673e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-180.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7605
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "ef1a0fe1381c9aa61cdbb9f2d7883028"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.492Z
expires: Sun, 05 May 2024 13:10:27 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.057
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-174.png | 213.183.34.23 | 200 OK | 12 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-174.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashda6aa85327cd792da4897f7041e14f58 f40db08165033816d2123078b819833dde2b8f8e c1ab31673f914caaefc5570191364e0f96b34693a6bd0e294a711b3984955f2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-174.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11687
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "da6aa85327cd792da4897f7041e14f58"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.367Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.088
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-195.png | 213.183.34.23 | | 7.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-195.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash40e93d1b0d54c9e4f4793ee2f8b36605 df91554cd0882923a12fb34fcceea37e6f4dd7f2 b8edc80bbc353ee765ddababf02c1248591cc923e12a49dbef2a8c401a117345
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-195.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7004
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "40e93d1b0d54c9e4f4793ee2f8b36605"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.458Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.069
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-210.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-210.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash73f11fd66906fa64aa55b90c4d09320c 6ff0032b3c51aa5c33cc20821f9ac87cb75eb562 d31c4eaddd11eb9659b3f6ef66a9f61ac20b568273d1a328ad389ae2c84ba12b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-210.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11626
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "73f11fd66906fa64aa55b90c4d09320c"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.513Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.071
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-152.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-152.png IP213.183.34.23:0
File typePNG image data, 100 x 70, 8-bit/color RGBA, non-interlaced Hash8d9f7a71d53b30f657562d0025656424 6e2b4aa23292d6dcd5f47bfbe7fd83a9965f666e aaedfb5cf74f652b3dfd42a7703a899eb0408fbfe09c2bfa3b0c1b3968499a7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-152.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 12394
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "8d9f7a71d53b30f657562d0025656424"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.264Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.080
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-285.png | 213.183.34.23 | | 7.4 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-285.png IP213.183.34.23:0
File typePNG image data, 100 x 47, 8-bit/color RGBA, non-interlaced Hashe70e642309bcf02b769b08b7cd68be45 44d7cdc106184a6c4b28f7ad469abef3441a2767 84070b9f1e80ca6d134a8f3f52bf7ab9d9872e549800b6e4dbbabefd7db10d5f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-285.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7363
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "e70e642309bcf02b769b08b7cd68be45"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.168Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-398.png | 213.183.34.23 | | 5.8 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-398.png IP213.183.34.23:0
File typePNG image data, 100 x 24, 8-bit/color RGBA, non-interlaced Hashb7869d4ee2aa8787190c959303bf3871 99ccb0d546e28451f0dd578799f9e26acf3a2342 9e1f61b97f378a2ee86d3e18181537c94d4c6805702a5bdbb05500f756e31c40
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-398.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 5775
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "b7869d4ee2aa8787190c959303bf3871"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.212Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.063
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-297.png | 213.183.34.23 | 200 OK | 7.9 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-297.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash6f169aa7e5edabeaf40570673bbe6cea 150f355ed614fa943778d11a97ae95e8305f92df d21af75bd7a708a59ca6a5c33d702ad42f175948a1f33cf2e9d8b35cf37c6acc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-297.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7944
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "6f169aa7e5edabeaf40570673bbe6cea"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.766Z
expires: Sun, 05 May 2024 13:13:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.076
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-298.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-298.png IP213.183.34.23:0
File typePNG image data, 100 x 54, 8-bit/color RGBA, non-interlaced Hashbf1c9fd0c80451c0e00a78eb74810e82 0051665f1fdda80b026f9fccd04749eadcf2d103 108c039be23c1cd4de1c53e3419ee539473815c32cadba493a43f1f55c2765be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-298.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10500
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "bf1c9fd0c80451c0e00a78eb74810e82"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.224Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.056
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-341.png | 213.183.34.23 | | 8.4 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-341.png IP213.183.34.23:0
File typePNG image data, 100 x 43, 8-bit/color RGBA, non-interlaced Hash8845f77600a5dfb9912bb098846339f5 82146cc5784b2b940e4350012c2789cabd046de4 93de3b86cd9a6a58f3a8d110c279357558c85995fc6d4c7c638af63139da86bc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-341.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8430
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "8845f77600a5dfb9912bb098846339f5"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.164Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.062
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-262.png | 213.183.34.23 | 200 OK | 6.3 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-262.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hasha228c56e7abca6cbfeedc468f94f3966 3de261cf120b16c4c65a01e4f39b901fe670f80a bfab12281eec0a373c543b0ff4d2e991bf1f3b0a1faaa1af0abac906205b059e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-262.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6322
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "a228c56e7abca6cbfeedc468f94f3966"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.695Z
expires: Sun, 05 May 2024 13:28:09 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.052
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-263.png | 213.183.34.23 | | 8.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-263.png IP213.183.34.23:0
File typePNG image data, 100 x 33, 8-bit/color RGBA, non-interlaced Hash50ed6b2b65baf5c8b5b145a9961ee0c9 502b94e1c659a5bd9fd52d29d610d0abb18e323a b9e7cfc1e63f0e8857422058991d44481eddc5c20b08e9e2ba57d28591d32e36
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-263.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8036
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "50ed6b2b65baf5c8b5b145a9961ee0c9"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.538Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.044
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-286.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-286.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash31550b234ab6b75a3ffe17a08a9ae509 7ab4e72ae465a3ee0a8bd2a344352b0c60c5843b afee3edfb6554140224dcd22a105d2bfd4d843835eeeb13ecb14a69987cba5dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-286.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10977
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "31550b234ab6b75a3ffe17a08a9ae509"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.598Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.044
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-233.png | 213.183.34.23 | | 5.2 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-233.png IP213.183.34.23:0
File typePNG image data, 100 x 21, 8-bit/color RGBA, non-interlaced Hash12c36d2b17425097c6fa4c0b72e11ed1 fe69fa9b74a7cbf32c9d7bbcaf82302ebf44a985 d8eb4a6f75b9bc655822398ce85c4f89a62809ce297cc61d536f3c76d50ee5e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-233.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 5249
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "12c36d2b17425097c6fa4c0b72e11ed1"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.996Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.102
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-70.png | 213.183.34.23 | 200 OK | 10 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-70.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 64, 8-bit/color RGBA, non-interlaced Hashca01492ec0280faa323e9d41090ad57e 4221d44ba9cc9011f03e468d37dabc5803e4b49b 65b1fb14b73dd430d8e19a0ad159b71a006b8bfcf27bc0dbb3b4516286a69343
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-70.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10538
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "ca01492ec0280faa323e9d41090ad57e"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.465Z
expires: Sun, 05 May 2024 13:13:40 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.057
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-317.png | 213.183.34.23 | 200 OK | 7.8 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-317.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash3f4757c39ed4255eb3309be09c98d71d 24787d241915654edaf913d904326cfa484abea2 e761de21f175b0670a0a838231a67f27f752966d94ca17aea53281736ef14591
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-317.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7766
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "3f4757c39ed4255eb3309be09c98d71d"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.192Z
expires: Sun, 05 May 2024 13:11:07 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.065
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-434.png | 213.183.34.23 | | 14 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-434.png IP213.183.34.23:0
File typePNG image data, 100 x 63, 8-bit/color RGBA, non-interlaced Hash1eede2d0afd84abfbc01ed66c521d7d7 d3cde032dc742af486029fa3ea48f0bd8b836d72 0597b8f8c26bb4d09ec31fcb2d9702f274ca79513fab92949cffc0fd3ce4f2ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-434.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 14212
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "1eede2d0afd84abfbc01ed66c521d7d7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.068Z
expires: Sun, 05 May 2024 13:24:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.054
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-196.png | 213.183.34.23 | 200 OK | 9.4 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-196.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced Hash6412df7a29da2f771a499bc01afef658 44936dd21d1e2ec978e473f884184fecd6f12673 8369b756bd09295f2ee0f4a1cdc248647f1b8521e2e3b3bdc6787f9d2a02d413
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-196.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 9361
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "6412df7a29da2f771a499bc01afef658"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.144Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.103
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-390.png | 213.183.34.23 | | 13 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-390.png IP213.183.34.23:0
File typePNG image data, 100 x 55, 8-bit/color RGBA, non-interlaced Hash767f1489012c4e867c2d8c806c64e997 bcd2794349f7dd3bf9c0e2469b669187e514c9c8 a3b560d671f2c5d1f53bb232c0c263aac8bb32183d2179b11071770ea9f97d2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-390.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 12844
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "767f1489012c4e867c2d8c806c64e997"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.176Z
expires: Sun, 05 May 2024 13:13:29 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.047
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-197.png | 213.183.34.23 | | 12 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-197.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hasha8d9c38f20cead1ca4c0dc6e4b1892f9 d6a5b9bd09e2a02c897c556f4c9f3a9878b316d2 a0ffe0a5ae413eb3f4c757425079f298457a278153b07add1446b00ef73f0ece
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-197.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11566
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "a8d9c38f20cead1ca4c0dc6e4b1892f9"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.322Z
expires: Sun, 05 May 2024 13:11:07 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.070
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-418.png | 213.183.34.23 | | 3.2 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-418.png IP213.183.34.23:0
File typePNG image data, 100 x 70, 8-bit colormap, non-interlaced Hash6efbf0fc0617dca33d5e88a3d96a7a72 c6b9e27de9336a222240930ca20f34ffe9bab2dc 140cb2032ab6a9098ae816d3787890264ab1c911a06c3f1e708b199ceec51f1d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-418.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 3186
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "6efbf0fc0617dca33d5e88a3d96a7a72"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.454Z
expires: Sun, 05 May 2024 13:11:59 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.058
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-172.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-172.png IP213.183.34.23:0
File typePNG image data, 100 x 46, 8-bit/color RGBA, non-interlaced Hashdef29da30c97eafadd636196fa3cda32 f5d783ad38b4ce16544506c3efb21d256473f88b 3b7bf512ec19d443765064b04e4e373e88f17a6ce15fe2095454e86040ce58fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-172.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10379
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "def29da30c97eafadd636196fa3cda32"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.276Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.092
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-363.png | 213.183.34.23 | | 17 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-363.png IP213.183.34.23:0
File typePNG image data, 100 x 65, 8-bit/color RGBA, non-interlaced Hash24ec0059d16965c6e0d998c9589f8e03 8937dd9fae21682cf8702d0085aebac49371fcae 09840d09520f26e6697b73e9f69e5006e1aefcd627d790755265fc3f0ebd2c07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-363.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 16727
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "24ec0059d16965c6e0d998c9589f8e03"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.356Z
expires: Sun, 05 May 2024 13:41:49 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.057
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-168.png | 213.183.34.23 | | 3.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-168.png IP213.183.34.23:0
File typePNG image data, 100 x 75, 8-bit gray+alpha, non-interlaced Hash824de001a0194801091cceab8fad1481 81d06728dd315b029545e54fa5af88057ad01382 465688fc6cedf418a8f3d1703aa727091d7cbcc6ffc8d03d652013a5dc84e5cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-168.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 3128
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "824de001a0194801091cceab8fad1481"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.378Z
expires: Sun, 05 May 2024 13:13:28 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-224.png | 213.183.34.23 | | 7.5 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-224.png IP213.183.34.23:0
File typePNG image data, 100 x 36, 8-bit/color RGBA, non-interlaced Hash46d2834f2c0b9255827bcca04610ccfe 2eccf5b88b9483a5593fccdbc768daf5f79aaf5e 87a8239c224989e7bf762bee66d8abbb05d55d7bed9503f9fe9a00c2541367eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-224.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 7500
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "46d2834f2c0b9255827bcca04610ccfe"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.248Z
expires: Sun, 05 May 2024 13:11:49 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.094
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-220.png | 213.183.34.23 | | 3.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-220.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash6cd2b80cf04f5b1d68831f01b88754fa 278820873fbaf0a864c22279d13556607a4beaca 0e5ef72440d948a5994dd867df1ee1102916e6ae947ec7815a062edcd1281f49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-220.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 3055
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "6cd2b80cf04f5b1d68831f01b88754fa"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.815Z
expires: Sun, 05 May 2024 13:11:59 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.057
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-339.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-339.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashc84b2443b658b6432d5b5a3cae261398 3bb98b4d87b8d6d65e0a0844045a0d1a9e04635e cc7afc581b1aad2ee1ae3f74c13975d1fb18c60edc543157e757369d8e908c8a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-339.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 11288
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "c84b2443b658b6432d5b5a3cae261398"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.983Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.069
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-76.png | 213.183.34.23 | | 10 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-76.png IP213.183.34.23:0
File typePNG image data, 74 x 68, 8-bit/color RGBA, non-interlaced Hashae76f75a34299324bcef439faa3d48c6 1388483aa2e5cb20d9bd831f9e69d47042f2b3db cabae3b5d403adfb58de3974a7f9798152c88659d1fd54e42839694e8dd43256
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-76.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10258
last-modified: Mon, 11 Mar 2024 09:28:25 GMT
etag: "ae76f75a34299324bcef439faa3d48c6"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2023-07-17T10:20:12.172Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.067
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-314.png | 213.183.34.23 | 200 OK | 12 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-314.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash0bc7e6604b820e01d85b2b1607a6fb1b 1aca8cadd3e1881ac7fb883607b317c11d935ff9 6e4d25283f6c33debdb1836ebb8a9d80fcd409617f6a96bc35c931338644c69f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-314.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 12211
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "0bc7e6604b820e01d85b2b1607a6fb1b"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.611Z
expires: Sun, 05 May 2024 13:13:28 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.040
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-432.png | 213.183.34.23 | | 14 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-432.png IP213.183.34.23:0
File typePNG image data, 100 x 93, 8-bit/color RGBA, non-interlaced Hashdb990227f5cad0aff638eef81074ae20 2a61f9807ce6a0753ff2680888fb423035d4349e 78635cf1621f984cbf6c9e8198cd868c93dc03859ffbb7ac99e5609ef6882d36
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-432.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 13774
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "db990227f5cad0aff638eef81074ae20"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.526Z
expires: Sun, 05 May 2024 13:15:24 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.054
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-227.png | 213.183.34.23 | 200 OK | 11 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-227.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashc6add0977ba0f85c7cfea50389890210 6d4316c83fba34588188a6fa5d6841ffcff90507 12e2fcf578f7856dd489163e1d68cf8af6abff7f9c73023d6e21dcf7658447a4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-227.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 10908
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "c6add0977ba0f85c7cfea50389890210"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.092Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.041
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-519.png | 213.183.34.23 | 200 OK | 6.6 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-519.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash0b0f07edd3abb3776121e059c5c3eb16 18ec7bdcae5d0b45da78f5f7158d3022f4490f35 d4858384558a1d9477be27bc4cc62d8f3d7c3ab42267bf98dd00970137ca60e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-519.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6582
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "0b0f07edd3abb3776121e059c5c3eb16"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.918Z
expires: Sun, 05 May 2024 13:11:49 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.080
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-253.png | 213.183.34.23 | 200 OK | 18 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-253.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashea936788ef9d0565bb0b069e395192fe 250e3375b2daa6c5c77d161451ed02e0c0afe683 1df6f7f577ff5c8967b24cb01d6449f463e14b721dc4cce2cd6dbd815eee61ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-253.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 18444
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "ea936788ef9d0565bb0b069e395192fe"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.370Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.065
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-217.png | 213.183.34.23 | | 13 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-217.png IP213.183.34.23:0
File typePNG image data, 100 x 76, 8-bit/color RGBA, non-interlaced Hash9434921fee2371e3d9ffdfc20e26fbbb 6a8c41cddcc32d221f74a7986c3edef880ec6e80 a8afe2d8ccef371e80cf408d997735cc3d4fa47409963435512883288be5a947
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-217.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 12721
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "9434921fee2371e3d9ffdfc20e26fbbb"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.904Z
expires: Sun, 05 May 2024 13:13:55 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.067
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-221.png | 213.183.34.23 | | 14 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-221.png IP213.183.34.23:0
File typePNG image data, 100 x 79, 8-bit/color RGBA, non-interlaced Hash6408d5d56c8e4389d2daa013ef162f79 d7ff131caf46ef86d6c474a552ad9894799af16b e33f522a7e874e998f3a8bfbbd3eaf41d77e368b43c85964f441b20cc9730305
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-221.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 13798
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "6408d5d56c8e4389d2daa013ef162f79"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.271Z
expires: Sun, 05 May 2024 13:12:02 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.057
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-229.png | 213.183.34.23 | 200 OK | 6.3 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-229.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashcb3646cf7a554519f33376e4f4243d44 df39706554ae025d2da46cb8e1032c6c5647b91f 02573d262a3b167a9fc8fefe6ba54a2f341ea369f5e27f057444a99811922128
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-229.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6290
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "cb3646cf7a554519f33376e4f4243d44"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.325Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.063
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-118.png | 213.183.34.23 | 200 OK | 6.5 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-118.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 86, 8-bit gray+alpha, non-interlaced Hash8e9a40217b9962036e2b65e2b7309914 7d70a3980f0c31bf0bb799f711b675207d00f805 977c5beb5c45f658a66677949fca753ddbbefdcaeb0be9189abb7479bd729101
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-118.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 6514
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "8e9a40217b9962036e2b65e2b7309914"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.287Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.052
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-431.png | 213.183.34.23 | 200 OK | 14 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-431.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 93, 8-bit/color RGBA, non-interlaced Hashcc14281f8f07d1e9459a1a93415648b0 4e4bae6fe5a06881255b0e82d86751c50f0791a8 1d2b7e594f4a4f8e8ca391e147abb03274cb42dcca3f3c59b715a1dc4cafead1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-431.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 14268
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "cc14281f8f07d1e9459a1a93415648b0"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.671Z
expires: Sun, 05 May 2024 13:15:24 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.059
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-183.png | 213.183.34.23 | | 8.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-183.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash203bb426d83c096b29084e9a7860ff90 09bbdad68ea544f3467a7beffa5c0cf7d3685ca6 f95c88553b2fb55ba2baa8c589200008d64ee3ea82ffbf8a00b9204ec4c1f334
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-183.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8044
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "203bb426d83c096b29084e9a7860ff90"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.021Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.074
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-377.png | 213.183.34.23 | | 8.8 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-377.png IP213.183.34.23:0
File typePNG image data, 100 x 41, 8-bit/color RGBA, non-interlaced Hash6236882ffce3df5081a0591df1ab4f20 47ca184af3d0d4a975c41fd98d203056e708898e 6a99f30a99bac507f7999ecdb0ea2cc128443c0ab08574f104299b45e8d12bd6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-377.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 8792
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "6236882ffce3df5081a0591df1ab4f20"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.790Z
expires: Sun, 05 May 2024 13:13:56 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.061
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-413.png | 213.183.34.23 | | 5.6 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-413.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash7089e4d578b474e58b63ddd9dc3670a6 6c25cc1786531972f48bd49f3556a7a703fd10c1 02b7ad77e7eef35b3e8e17e412bbd16182ba6598d2311415907339cdcd4c8f4f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-413.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: image/png
content-length: 5606
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "7089e4d578b474e58b63ddd9dc3670a6"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.503Z
expires: Sun, 05 May 2024 13:11:59 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.088
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-182.png | 213.183.34.23 | | 15 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-182.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash568521f65df7c875696f69cb30b1c73e fd5a6a468a0b16e9653551b562247f3f56c2f91b 9e2bb13325c6a09b7121468fc5349ed0843c306e14823b39a6f6f649815e4f99
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-182.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 15040
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "568521f65df7c875696f69cb30b1c73e"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.010Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.049
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-361.png | 213.183.34.23 | | 3.4 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-361.png IP213.183.34.23:0
File typePNG image data, 100 x 53, 8-bit gray+alpha, non-interlaced Hash8dda84dfdc9a04a64f905e172e88091b a39dde908f96606251001cb1bc30f0b5087d141c 1ecf89b5b18f8235a8de90dde12c52f4ac868f58a120b000deba385228917fa4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-361.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 3421
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "8dda84dfdc9a04a64f905e172e88091b"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.551Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.061
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-417.png | 213.183.34.23 | 200 OK | 9.8 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-417.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash967b20a67d1376a550455f699a3f2e3f fc3f97a80442b1015bcaba05a6d94cde4dfc4bcb d6aed0cfc4239085c8884fb1e2c7664ad95bc858dacb20c74b9b00b1ea1195bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-417.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 9789
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "967b20a67d1376a550455f699a3f2e3f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.931Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.043
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-222.png | 213.183.34.23 | | 6.6 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-222.png IP213.183.34.23:0
File typePNG image data, 100 x 60, 8-bit/color RGBA, non-interlaced Hash9219f3937a4ee1af1c968ed68c50cb84 77fbce03b6f7c484cbb8076f496ffddd96876699 4eee6c7aff33b5f7a5f2766b74ab4789467fc549481facc5730b9b0ef1b4b9b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-222.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 6602
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "9219f3937a4ee1af1c968ed68c50cb84"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.647Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.068
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-188.png | 213.183.34.23 | | 9.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-188.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashaca2311842e62147748ee53254106421 211c2014e852ad8ea7ab355ead840760aa8131d2 89f7b6faa47d59ee71c9159f6ddbae85340f37e8852d23c3385d0c76b987ed3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-188.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 9147
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "aca2311842e62147748ee53254106421"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.479Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-236.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-236.png IP213.183.34.23:0
File typePNG image data, 100 x 47, 8-bit/color RGBA, non-interlaced Hashedc34d70c89716f579c67ee98ff535b7 741707b531178992ea460ddfae398ee79735d28f 40a03caa4c211904cefff67011bd9c60385eed9773dc95c2aadb642e94a3d990
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-236.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 11242
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "edc34d70c89716f579c67ee98ff535b7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.863Z
expires: Sun, 05 May 2024 13:13:57 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.069
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-312.png | 213.183.34.23 | 200 OK | 4.9 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-312.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashc6097a90651af2d7aeeb1f936eaf2564 5e55d25da8d881d279b0056b56faca88072c99a0 5b564fcad049e191eb4aa3652b89f18f24f57f3401ec03c05f2d41f8e8420dbd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-312.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 4902
last-modified: Mon, 11 Mar 2024 09:35:36 GMT
etag: "c6097a90651af2d7aeeb1f936eaf2564"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-11T09:34:28.563Z
expires: Sun, 05 May 2024 13:13:58 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.046
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/dailytournament.png | 213.183.34.23 | | 16 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/dailytournament.png IP213.183.34.23:0
File typePNG image data, 100 x 63, 8-bit/color RGBA, non-interlaced Hash868667d2700e54303850bf63f2fe661f e00cf0c689e1005830734009925865282ac900a6 66aa2601845ec041c206beec863b6941da1402df00881d8efeec0d60db0664c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/dailytournament.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 15568
last-modified: Mon, 04 Mar 2024 13:15:17 GMT
etag: "868667d2700e54303850bf63f2fe661f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.876Z
expires: Sun, 05 May 2024 13:08:55 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.130
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-58.png | 213.183.34.23 | | 15 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-58.png IP213.183.34.23:0
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash81ecbf252c9af58da4ea2dda211f6d9a 4a8c12f60dfacbecbc6f67ee21f77b25e7b40e36 8ee80a7b8bcd9305dc4eab7e633a148bd494768c28acb3ffca8dc8592216aa3c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-58.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 15384
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "81ecbf252c9af58da4ea2dda211f6d9a"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.600Z
expires: Sun, 05 May 2024 13:15:24 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.111
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-364.png | 213.183.34.23 | 200 OK | 13 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-364.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 71, 8-bit/color RGBA, non-interlaced Hash386ee9fcf987c1668641bddc47d61472 1e0582b845bc701d297eff948ca1b05837a42420 a844b606cb20c604af7b7e09cc7a9732c7a7ac8b7b1e68600b1b30bff20ed924
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-364.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 12863
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "386ee9fcf987c1668641bddc47d61472"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.251Z
expires: Sun, 05 May 2024 13:24:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.052
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-383.png | 213.183.34.23 | 200 OK | 6.8 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-383.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash12436c4f7dd41347756875af60876171 272e97c36a0536172a27c321399944e357effcf1 64ce1c58e392b3b6d7f6c23023233a2035ec6b06519d7b95acea70e29663e1b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-383.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 6837
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "12436c4f7dd41347756875af60876171"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.424Z
expires: Sun, 05 May 2024 13:44:03 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.078
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-208.png | 213.183.34.23 | 200 OK | 21 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-208.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash187426646f88a77730b973e559206462 79b398469360ebd9c16b48b2e615611b9563742c 0fdfe6de40d6595d21b87f65886685a542eadc745663dec111ecb8de2495b3a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-208.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 21376
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "187426646f88a77730b973e559206462"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.938Z
expires: Sun, 05 May 2024 13:11:59 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.053
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-371.png | 213.183.34.23 | | 6.3 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-371.png IP213.183.34.23:0
File typePNG image data, 100 x 23, 8-bit/color RGBA, non-interlaced Hash311b2c5fa4d2885599ab2b4e9985402b d075a16b1f1c5c9c53a503acfcfdc97e9d850278 ee1cd55d115c227e4f1083d54a0d90eddac864836d75c64b700b0c9f120e168b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-371.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 6332
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "311b2c5fa4d2885599ab2b4e9985402b"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.299Z
expires: Sun, 05 May 2024 13:16:16 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.095
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-249.png | 213.183.34.23 | | 6.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-249.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash082f37c90b3d9b95c1980d3bed0bd086 21b63dded7d6bd8545e4267cedced6791eddc877 e233fa0bd786a6ef671e93c7ac06ef8ea2fa577b5fa13c27ad8e4f97c2123b1a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-249.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 6122
last-modified: Mon, 04 Mar 2024 13:15:24 GMT
etag: "082f37c90b3d9b95c1980d3bed0bd086"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.837Z
expires: Sun, 05 May 2024 13:16:04 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.042
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-69.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-69.png IP213.183.34.23:0
File typePNG image data, 100 x 86, 8-bit/color RGBA, non-interlaced Hash5e1952c9f9cc37c91074e03c4f4bde26 1371573cde828c4525baa01e09575203c79ae364 17a750e5475d1060975f9390012de91a3b10dc97d5010e0337d71a29218cbae2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-69.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 11313
last-modified: Mon, 04 Mar 2024 13:15:32 GMT
etag: "5e1952c9f9cc37c91074e03c4f4bde26"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.259Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.061
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-184.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-184.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashf16928cd48cf1772aeacbb4bbb15a6fb 38c9bed7e249787480cf1dafb7b3b242e5a8e634 88be99747ffeb1f6477523c2d5f65b7dbade5f08a15b8dea72a079deb0a32e77
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-184.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 11198
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "f16928cd48cf1772aeacbb4bbb15a6fb"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.188Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.067
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-456.png | 213.183.34.23 | 200 OK | 11 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-456.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash418dff6889d07989f86208f3dbc69e3d 77cbc7647fd0f9bc46f534c6af8bedb87efd0b0d 0580e1a5ef82e6690f73e0329341681aaed2a407cb08dc3a6c33684ac7953a36
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-456.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 11305
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "418dff6889d07989f86208f3dbc69e3d"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.513Z
expires: Sun, 05 May 2024 13:20:14 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.045
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-373.png | 213.183.34.23 | | 7.5 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-373.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash31bdb79b5a751519f10834a0a047477e c181f11342840ca8a6f34e2fc8eee9e2f81cd9a5 5a5e9c9ca4eec1741e7317eee332989e60c90a04a68697003150b99fee1cbeca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-373.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 7491
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "31bdb79b5a751519f10834a0a047477e"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.401Z
expires: Sun, 05 May 2024 13:19:40 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.283
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-189.png | 213.183.34.23 | | 13 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-189.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash34175547bf2c2f5f54b65115be9f710f aaf583ebb7241ae4201c0f4dff87ba5cb948a8d1 dddcff47bc2a0a24c381c024f75ae103fc798a7f6805528b012720b705c72194
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-189.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 13331
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "34175547bf2c2f5f54b65115be9f710f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.249Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.106
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-138.png | 213.183.34.23 | | 9.2 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-138.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashf6f01f3c8f24a1710f9310530e3efecf dfb02aa333ede6f91d5ea74daa267c6c4d37fec4 8d5a5d7ff133d98643e65a766b3f4e0759d340d88dd266c891c07989553640b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-138.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 9163
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "f6f01f3c8f24a1710f9310530e3efecf"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.057Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.066
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-169.png | 213.183.34.23 | 200 OK | 16 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-169.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash34e05f02a3f93ce51cc6196b4fc72e81 0d3edac25f2b64862a2b8abb91d92eab8c0dc8d9 ff4345da1e6d75df59c9165ac33c89977ab7ef86664b7b59713648666475d75b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-169.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 16083
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "34e05f02a3f93ce51cc6196b4fc72e81"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.552Z
expires: Sun, 05 May 2024 13:19:39 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.066
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-156.png | 213.183.34.23 | 200 OK | 12 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-156.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashd489fbfd97ab83ea17d2d25921b29c27 4d54a6420ee091b6387a6914470a57eed8838c33 5f1920e064d48b5c4c0faba1831a05289c5d14815aebd97508659cf3456095a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-156.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 12050
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "d489fbfd97ab83ea17d2d25921b29c27"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:01.850Z
expires: Sun, 05 May 2024 13:17:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.059
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-401.png | 213.183.34.23 | | 4.8 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-401.png IP213.183.34.23:0
File typePNG image data, 100 x 27, 8-bit/color RGBA, non-interlaced Hashcbf34f294012512888dd13b8d04a67e2 a994257eeaa8e300c5d9e65d2f884c245507ab5c bd60dc6a61880c1c6fc081de9cae5f7c7233add6cdb188102177b0f84a68b04e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-401.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 4789
last-modified: Mon, 04 Mar 2024 13:15:29 GMT
etag: "cbf34f294012512888dd13b8d04a67e2"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.469Z
expires: Sun, 05 May 2024 13:13:58 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-454.png | 213.183.34.23 | 200 OK | 7.8 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-454.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 56, 8-bit/color RGBA, non-interlaced Hash8a0f604826f1647792c89781c976e2a7 0bb634472f6d648bd28c159fb602818cfa1c26f5 1ea9fcb45e071e0fbf7215e701d663e79d6f65ce5506e22cd2476b9607a8246e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-454.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 7799
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "8a0f604826f1647792c89781c976e2a7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.056Z
expires: Sun, 05 May 2024 13:13:58 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.055
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-212.png | 213.183.34.23 | 200 OK | 5.6 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-212.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 29, 8-bit/color RGBA, non-interlaced Hash80355637f402e85628db4a5e9a2123b7 cb03ac42e54e21d2e3d5d5e3ce3dbc07f0e8762a f380c64fd8976f98948a267e38163b013c1caa83f1479c0b4f88f6d153c6063a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-212.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 5580
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "80355637f402e85628db4a5e9a2123b7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:36.127Z
expires: Sun, 05 May 2024 13:13:45 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.045
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-357.png | 213.183.34.23 | | 3.1 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-357.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit colormap, non-interlaced Hash290db69cb48414b9864c1f594b05db71 25018066547d52bd01e5e0f40a9be27a00ca236c e64bda384a039efe5e8b81470fe0dfde0aa49d621ef79dcb1af075a2463a27e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-357.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 3097
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "290db69cb48414b9864c1f594b05db71"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.216Z
expires: Sun, 05 May 2024 13:13:46 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.056
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-179.png | 213.183.34.23 | | 7.9 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-179.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hasha9092314ed66b3003365a407034722e1 745e62793319b8b1ac284f31629315e0c8f910b8 b3ee32941b18182fa6f3720f34469e990b59352645d50f4ce2609e3be2eb5b98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-179.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 7913
last-modified: Mon, 04 Mar 2024 13:15:21 GMT
etag: "a9092314ed66b3003365a407034722e1"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.537Z
expires: Sun, 05 May 2024 13:13:45 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.039
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-140.png | 213.183.34.23 | 200 OK | 8.7 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-140.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 40, 8-bit/color RGBA, non-interlaced Hash0a121e4593031a52a9548e0df38b815b 8fa3c73fe416513788acf4b0ea4e00958d15a992 495f64ee552657b9ddff57e168988e3be996275e8dc2ff14369a538dbd184f04
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-140.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 8688
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "0a121e4593031a52a9548e0df38b815b"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.131Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.059
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-433.png | 213.183.34.23 | | 16 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-433.png IP213.183.34.23:0
File typePNG image data, 100 x 110, 8-bit/color RGBA, non-interlaced Hash65b1cd4721dde3ee26a6533a85cced6d 47555406d9976aa2f250799b45e6a101d97326cc f2385425933ffbdd8892f264727854dea63e8f86ad0b1465fa0f865ba20891ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-433.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 16316
last-modified: Mon, 04 Mar 2024 13:15:30 GMT
etag: "65b1cd4721dde3ee26a6533a85cced6d"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.576Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.059
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-273.png | 213.183.34.23 | | 7.9 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-273.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash4d966a573b0690ebb0ca5038886660ea 014ae012b184ff2ab7cb039994dd539cfbadff7d 3ed65dfe817115d0df1ac7bcca089e5c7227edd186c0025bca993dcd6abdc147
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-273.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 7927
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "4d966a573b0690ebb0ca5038886660ea"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.093Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.091
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-362.png | 213.183.34.23 | 200 OK | 4.7 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-362.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hasha64af55429446d2a1368d1572764c5e6 21819c31bdb6a1d8db0348f1757ecec84f002cf1 5f8a90212939b6d2470f0ff90000dcdd53aef686f759f37358ec4f524d6f1262
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-362.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 4661
last-modified: Mon, 04 Mar 2024 13:15:28 GMT
etag: "a64af55429446d2a1368d1572764c5e6"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:52:24.516Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.061
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-328.png | 213.183.34.23 | | 8.5 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-328.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash9038c782ec1bb27b3d513d86608972f7 c68f337bea77da849189d00cfdc3146b23a69eca 957d47ac825ecdcbad72a7a45cd1b35fb8428f2e7b1e0dfa87f3b3fee32b02db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-328.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 8479
last-modified: Mon, 04 Mar 2024 13:15:26 GMT
etag: "9038c782ec1bb27b3d513d86608972f7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.572Z
expires: Sun, 05 May 2024 13:09:50 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.083
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-170.png | 213.183.34.23 | | 6.5 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-170.png IP213.183.34.23:0
File typePNG image data, 100 x 47, 8-bit/color RGBA, non-interlaced Hash072de3e002100fde0c7d33410109b815 c2acbc58ba1051371055b8e2f56b886e2cf80f8c dd35b2c3aa8f0815de5dcf1ba0c4f27c6ea7c0e00880c515db34040e9fef529c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-170.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 6463
last-modified: Mon, 04 Mar 2024 13:15:20 GMT
etag: "072de3e002100fde0c7d33410109b815"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.778Z
expires: Sun, 05 May 2024 13:09:50 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.073
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/user_messages.83ec8a550243dd8b25de.bundle.js | 185.244.209.62 | 200 OK | 176 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/user_messages.83ec8a550243dd8b25de.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size176 kB (175907 bytes) Hash9ad3980fe6427df61d0e64df3637f94e 4b30f4401f7ade0a366c9150a4fa637cee895b1d 7b916fcdec70f3acc6e1f1a69224adcdd3732cbcdc11e391f3b7c9e881753c53
GET /bundle/app/Default/Desktop/user_messages.83ec8a550243dd8b25de.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-7c2b8"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-ad6a997a43fa86bce05212250d701032-198fb4e0b3e4c328-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:25+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/new_store_bootstrap.1ed7fa8280424ae36146.bundle.js | 185.244.209.62 | 200 OK | 201 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/new_store_bootstrap.1ed7fa8280424ae36146.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size201 kB (201271 bytes) Hashcf48356d437bd7d94a0598a90527e9ad d185f3160e8ae536bb2ab2e6dfb511225752cc4c 4409c264404427a9c657b0240d7f5d56f93767f4f13ceca7e656c5105127ecca
GET /bundle/app/Default/Desktop/new_store_bootstrap.1ed7fa8280424ae36146.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-93733"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-fba20b437fc3502b125ebf47c9e33cb1-f7a2e7610d2371da-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:24+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-143.png | 213.183.34.23 | 200 OK | 9.1 kB |
URL GET HTTP/2www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-143.png IP213.183.34.23:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subjectgamccdn.com FingerprintBD:98:0A:5C:96:08:3D:B7:6F:B6:12:2B:A7:6B:5A:5B:2D:55:C3:45 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typePNG image data, 100 x 74, 8-bit/color RGBA, non-interlaced Hashfbacd7bb55670f3dbc6ffed11a606ab8 5578405c561432e7e8ba449726cc07649f146fa4 cbd7824b1805fdf49ffee7f32441d3aae939453585ffd03c83cf2813a8e714c2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-143.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 9106
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "fbacd7bb55670f3dbc6ffed11a606ab8"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.228Z
expires: Sun, 05 May 2024 13:24:50 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| verification.curacao-egaming.com/validate.ashx?domain=1x-bet.com |  157.245.28.47 | 200 OK | 61 kB |
URL GET HTTP/1.1verification.curacao-egaming.com/validate.ashx?domain=1x-bet.com IP157.245.28.47:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.curacao-egaming.com Fingerprint1A:06:FF:1F:E4:BE:3C:05:00:7C:C5:8E:17:F6:F0:6A:3D:2D:09:39 ValidityWed, 28 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File typePNG image data, 200 x 222, 8-bit/color RGBA, non-interlaced Hash0001a6098de4d3b2d080bf726688330f d9cb2eaab6bde39270eaad338f31ee064d573ed8 c6d403289ac743a57f968e641cd9a6dfa064b49dfbb934304c5df8defcbbaf44
GET /validate.ashx?domain=1x-bet.com HTTP/1.1
Host: verification.curacao-egaming.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public, no-cache="Set-Cookie", max-age=120
Transfer-Encoding: chunked
Content-Type: image/png
Expires: Sun, 05 May 2024 03:14:48 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
Set-Cookie: ReqId=e5190f0e-64b4-47dc-a0e2-7a269bb93f2a; path=/
X-Powered-By: ASP.NET
Date: Sun, 05 May 2024 03:12:47 GMT
Connection: close
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-213.png | 213.183.34.23 | | 8.2 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-213.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashc84b4d6ef7972cbb33ef4517831a3f2f 0ec5bb6701b5a2d618ab15e8f38c131bda4063dd 0cf67917b14783725ee521d0f28f65d86f2dcde7052abf558d3910fa6089e6df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-213.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 8235
last-modified: Mon, 04 Mar 2024 13:15:23 GMT
etag: "c84b4d6ef7972cbb33ef4517831a3f2f"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.344Z
expires: Sun, 05 May 2024 13:24:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.090
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-278.png | 213.183.34.23 | | 8.9 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-278.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hashdad5853c1658406f332d5a716e9984e9 4e0aa5c327e077eb63703dea39705d01992576d8 40786dd21a72c2af5476385b2e9ae5baedcaf241c3563e6e6c50f115a0216330
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-278.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 8939
last-modified: Mon, 04 Mar 2024 13:15:25 GMT
etag: "dad5853c1658406f332d5a716e9984e9"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:50:30.563Z
expires: Sun, 05 May 2024 13:44:00 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.048
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-35.png | 213.183.34.23 | | 14 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-35.png IP213.183.34.23:0
File typePNG image data, 100 x 104, 8-bit/color RGBA, non-interlaced Hash2b9258066e7b6d452a0a775b9d3e7d21 9e83d5c6cf50dd1847df1dde38fcb9ebc9bee1e3 795691304720bb6c51887a87ef23f3a929df5bc5023bf7888aa66f155856259a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-35.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 13631
last-modified: Mon, 04 Mar 2024 13:15:27 GMT
etag: "2b9258066e7b6d452a0a775b9d3e7d21"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.583Z
expires: Sun, 05 May 2024 13:31:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.096
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-109.png | 213.183.34.23 | | 3.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-109.png IP213.183.34.23:0
File typePNG image data, 100 x 53, 8-bit colormap, non-interlaced Hashd49c1f4d6065818bc6719d55ac30e560 37a29e79b9aa855d5f21369f9fd36f12ab35a705 664f8b62b2812fe7308e93bafb0e1c85a72e41c876078d023f0dfcddfb0d3d75
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-109.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 2952
last-modified: Mon, 04 Mar 2024 13:15:18 GMT
etag: "d49c1f4d6065818bc6719d55ac30e560"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:49:34.347Z
expires: Sun, 05 May 2024 13:31:15 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.064
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-205.png | 213.183.34.23 | | 11 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-205.png IP213.183.34.23:0
File typePNG image data, 100 x 50, 8-bit/color RGBA, non-interlaced Hash55c107f6f682957fdae9cd4ec38385d7 4ff38dd23c7c96592d6b9b88d826704dabe0a21f 7f63d7eb53b9ce56c52528f72a28894112e14b162296f13e24ae75699fd04899
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-205.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 11272
last-modified: Mon, 04 Mar 2024 13:15:22 GMT
etag: "55c107f6f682957fdae9cd4ec38385d7"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:47:02.435Z
expires: Sun, 05 May 2024 13:13:45 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.077
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-154.png | 213.183.34.23 | | 9.0 kB |
URL www.gamccdn.com/sfiles/games-images/game-previews/v2-icons/game-154.png IP213.183.34.23:0
File typePNG image data, 100 x 46, 8-bit/color RGBA, non-interlaced Hashd86716fb5b383d3e62d069665c46ce6e f967b487f21fb1c77c9b3f4a755fdb94426194e6 96ac6e12d1c7692ce4d375d492b4fbd11eb4f781d8761fc32f0df7c0f2a393ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfiles/games-images/game-previews/v2-icons/game-154.png HTTP/1.1
Host: www.gamccdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:48 GMT
content-type: image/png
content-length: 9013
last-modified: Mon, 04 Mar 2024 13:15:19 GMT
etag: "d86716fb5b383d3e62d069665c46ce6e"
x-amz-server-side-encryption: AES256
x-amz-meta-origin-date-iso8601: 2024-03-04T08:48:35.926Z
expires: Sun, 05 May 2024 13:13:46 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.075
x-swifty-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/bannerSliderMain.2cdbc5527ab866ac6283.bundle.js | 185.244.209.62 | | 405 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/bannerSliderMain.2cdbc5527ab866ac6283.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size405 kB (404848 bytes) Hashd865393a5537fd458ff1944962b492a1 84008159ab4f29b518da6ed87a001f13130b1fa0 74b95d4217edf1e92f06e978e5d841bba9e777efa9af3502a783d4378b5c8c4f
GET /bundle/app/Default/Desktop/bannerSliderMain.2cdbc5527ab866ac6283.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:32 GMT
etag: W/"6634da14-117530"
expires: Sun, 02 Jun 2024 12:50:06 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-d0e3163393636572fa9182e0bceba2d5-018d276293609e7f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:47:38+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/bundle/app/Default/Desktop/cdnChecker.6ec29d4e19133a38b616.bundle.js | 172.64.146.192 | | 6.8 kB |
URL 1xbet.com/bundle/app/Default/Desktop/cdnChecker.6ec29d4e19133a38b616.bundle.js IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJavaScript source, ASCII text, with very long lines (3271), with no line terminators Hash7c815466d4a5af7e30029ed2509bdfd5 43e418e75ba91b4f61959169248a6767e4a19fe6 a2964b0ef48b6f422b05409499e4691a0f1e7d60a5bbc25299db856ff24dc5e3
GET /bundle/app/Default/Desktop/cdnChecker.6ec29d4e19133a38b616.bundle.js HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:32 GMT
vary: Accept-Encoding
etag: W/"6634da14-cc7"
expires: Sun, 05 May 2024 09:48:51 GMT
cache-control: max-age=86400
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
age: 62028
server: cloudflare
cf-ray: 87ed8d019e497130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/bundle/app/Default/Desktop/pushfree_integrate.43bd0ba83190eff63972.bundle.js | 172.64.146.192 | | 152 kB |
URL 1xbet.com/bundle/app/Default/Desktop/pushfree_integrate.43bd0ba83190eff63972.bundle.js IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size152 kB (152003 bytes) Hashed0e317540cb1474f67535e9070348a3 d96f159bb9583fece8c4c962751ccecdb578f25e 76f435f56876089ee339e0e8a207cd5959a3e6bb6d647cfb451d5880e0af06fd
GET /bundle/app/Default/Desktop/pushfree_integrate.43bd0ba83190eff63972.bundle.js HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
vary: Accept-Encoding
etag: W/"6634da15-84ffa"
expires: Sun, 05 May 2024 12:46:29 GMT
cache-control: max-age=86400
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
age: 51843
server: cloudflare
cf-ray: 87ed8d019e4a7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/static/fontawesome-webfont.af7ae505a9eed503f8b8e6982036873e.woff2 | 185.244.209.62 | 200 OK | 77 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/static/fontawesome-webfont.af7ae505a9eed503f8b8e6982036873e.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /bundle/app/Default/Desktop/static/fontawesome-webfont.af7ae505a9eed503f8b8e6982036873e.woff2 HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: font/woff2
content-length: 77160
last-modified: Tue, 16 Apr 2024 06:31:09 GMT
etag: "661e1b2d-12d68"
expires: Thu, 16 May 2024 08:31:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.004
traceparent: 00-0d024d3c96e60dac91f52f94ab35144c-bf652501fba22977-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:29:46+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/img/new_main/reg_bg.png | 185.244.209.62 | | 17 kB |
URL v2l.traincdn.com/default/img/new_main/reg_bg.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 288 x 460, 8-bit colormap, non-interlaced Hash0756fc7fe5d8dcefe7863660b6404770 fb3516d5a624f0fdde79081e5bb7f14cee130fc2 e2aa06fbece507b498ed386f09c125c9bb098c7bd569a8f78332caacb5827243
GET /default/img/new_main/reg_bg.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/main-page/main.1cf6fcf00e9d41168b1f599acbaf0aed.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 17232
last-modified: Wed, 28 Feb 2024 06:18:30 GMT
etag: "65ded036-4350"
expires: Wed, 28 Feb 2024 08:18:28 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-adbb99fa87e3a62e1ff634c2ef4077c1-48279d1cd2c39371-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:31:49+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1/desktop/right-banners/br-banner-bg-decoration.png | 185.244.209.62 | | 16 kB |
URL v2l.traincdn.com/genfiles/cms/1/desktop/right-banners/br-banner-bg-decoration.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 502 x 242, 4-bit colormap, non-interlaced Hash81275d5c996e2296b55c9a94e2ced8e2 0bc74f5fe9c7408ff72a35139a55dbb104ea2d4e 041fd25b4c5b4bcbd77da18dd229be37197a5d59e012a82aea97294410ebd5e4
GET /genfiles/cms/1/desktop/right-banners/br-banner-bg-decoration.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/column-right/main.f547e417ef032a83f213a93abc19c716.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 16175
last-modified: Tue, 09 Apr 2024 12:39:53 GMT
etag: "81275d5c996e2296b55c9a94e2ced8e2"
cache-control: max-age=3600
expires: Wed, 17 Apr 2024 12:19:31 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-8c942721c9fc6e60f497270e0c7e7c8c-c65a319678368f21-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:15:14+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1/desktop/right-banners/bgvs.png | 185.244.209.62 | | 907 B |
URL v2l.traincdn.com/genfiles/cms/1/desktop/right-banners/bgvs.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 129 x 77, 4-bit colormap, non-interlaced Hash944d32bd50fed0bcf512a32cb1e1b3fb aaaeb6638a0b398a1f1327941bdd8d30581fa1d6 2e2885fe2233a11c8c507075423b9dbc770d6ac9b6c2983d93fb2e31c33cea71
GET /genfiles/cms/1/desktop/right-banners/bgvs.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/column-right/main.f547e417ef032a83f213a93abc19c716.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 907
last-modified: Tue, 09 Apr 2024 12:39:53 GMT
etag: "944d32bd50fed0bcf512a32cb1e1b3fb"
cache-control: max-age=3600
expires: Wed, 17 Apr 2024 12:19:31 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-6ba681fd21074dc71b2551f707ed46b6-77a89503b2de6c35-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:15:14+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1/desktop/ourpartners/logo-serie_new.png | 185.244.209.62 | | 19 kB |
URL v2l.traincdn.com/genfiles/cms/1/desktop/ourpartners/logo-serie_new.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 180 x 320, 8-bit/color RGBA, non-interlaced Hasheebc2093ed37610949fddb757fb411c2 f7964e29e324fe613114a2d8a574819735d4e8a4 2573852f7e996aaf5d4ae5280f600e384f8b5d75e8c4de9e06100af2d9f55e5c
GET /genfiles/cms/1/desktop/ourpartners/logo-serie_new.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/footer/main.7361d396d2ea9cb39d2114c5ae709005.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 18675
last-modified: Mon, 11 Sep 2023 16:13:30 GMT
etag: "eebc2093ed37610949fddb757fb411c2"
cache-control: max-age=3600
expires: Mon, 04 Mar 2024 21:36:27 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.009
traceparent: 00-244455df2b55f2b64b0a63a4f768b3a6-981fb6426f634728-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:38:33+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/logo-laliga.png | 185.244.209.62 | 200 OK | 4.6 kB |
URL GET HTTP/2v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/logo-laliga.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 130 x 180, 8-bit colormap, non-interlaced Hashdf5d4ac03e092e37de4c657686c24fa5 5aa56384577a25b32f4e35bf6e26f2d6f5aa94bb eb5f499953d8886c0769d5573b73fde6da203c480b48245ba535efc5ee995f78
GET /genfiles/cms/1-285/desktop/footer/logos/logo-laliga.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/footer/main.7361d396d2ea9cb39d2114c5ae709005.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 4622
last-modified: Tue, 11 Apr 2023 17:53:05 GMT
etag: "df5d4ac03e092e37de4c657686c24fa5"
cache-control: max-age=3600
expires: Mon, 04 Mar 2024 21:36:31 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.008
traceparent: 00-e5b3b98591cac9f5662caae4d6c97820-c5def274f8d81ba0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:38:33+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/psg-partner-without-xbet.png | 185.244.209.62 | | 461 kB |
URL v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/psg-partner-without-xbet.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 1520 x 1568, 8-bit/color RGBA, non-interlaced Size461 kB (461188 bytes) Hash0b0140e8bffdb56d839c12d3392e2fbd 517877ac88868bf0ba8bdf63b08425493af890cd 1e9712a9e5b8cf0eafa1af8e09fb997395f9051d349da6b49fced2235a5f570b
GET /genfiles/cms/1-285/desktop/footer/logos/psg-partner-without-xbet.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/footer/main.7361d396d2ea9cb39d2114c5ae709005.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 461188
last-modified: Tue, 11 Apr 2023 17:53:05 GMT
etag: "0b0140e8bffdb56d839c12d3392e2fbd"
cache-control: max-age=3600
expires: Mon, 18 Dec 2023 08:57:27 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.023
traceparent: 00-528bdbaf6f3b53dc1d0b72179bbb5538-c5a335bd0a114af0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:01:54+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png | 185.244.209.62 | | 7.4 kB |
URL v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 169 x 183, 8-bit colormap, non-interlaced Hash8ea23d2a7c2e152564a43453425b3301 f6e61dbb4b90ab17f23130d79af095a1267b01c3 e193b50c6e3a1657a7c7e1100b941a43c90eeda8f9d56763318ac624eeba2cbd
GET /genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/footer/main.7361d396d2ea9cb39d2114c5ae709005.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 7420
last-modified: Tue, 11 Apr 2023 17:53:05 GMT
etag: "8ea23d2a7c2e152564a43453425b3301"
cache-control: max-age=3600
expires: Mon, 18 Dec 2023 08:57:27 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-aa40049fbf03f7d9e421ffa63ac575ce-02a94479ab8ed051-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:20+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/caf.png | 185.244.209.62 | | 12 kB |
URL v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/caf.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash6b4528460a389321786f81d9a4b706f4 1ffe86f7a90347c3fda2d9613bee44130b432777 51e1c7ea0b889ab7067365b19476ace12a4ffa167ea52787db5ad6bb6827cb24
GET /genfiles/cms/1-285/desktop/footer/logos/caf.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/footer/main.7361d396d2ea9cb39d2114c5ae709005.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 11989
last-modified: Tue, 11 Apr 2023 17:53:05 GMT
etag: "6b4528460a389321786f81d9a4b706f4"
cache-control: max-age=3600
expires: Mon, 18 Dec 2023 08:57:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-286e7bc76fc0823b838c5ddaace12bdd-f7f41a08512039de-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:41:05+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/registration.8810cc13e3286b842f11.bundle.js | 185.244.209.62 | | 182 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/registration.8810cc13e3286b842f11.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size182 kB (182437 bytes) Hash364dd0e4c72a3c450ba4e52539ae2811 646e521188753a2e736fdfe9e3d682ec71a821c8 2f40fc89e0bd1040872ae1cd0cd18f52ad1e4dfbbb480faba8703e8999590c0a
GET /bundle/app/Default/Desktop/registration.8810cc13e3286b842f11.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-81118"
expires: Sun, 02 Jun 2024 12:50:07 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-91a21f89d235b0854d385bb1860dad1b-4ec341ba8fe7ad61-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:47:38+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/esl.png | 185.244.209.62 | | 33 kB |
URL v2l.traincdn.com/genfiles/cms/1-285/desktop/footer/logos/esl.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 1184 x 362, 8-bit/color RGBA, non-interlaced Hash802ac7a85f716d1a10ad5084ce6b2c14 4e3b9ea62cf588f4f8b5be3553aa53068fbe8fa6 3329ddcdb9bce051bb89a2ec7ea84fae914e31752e66656a2321642d8457f7cc
GET /genfiles/cms/1-285/desktop/footer/logos/esl.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/footer/main.7361d396d2ea9cb39d2114c5ae709005.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 33328
last-modified: Tue, 11 Apr 2023 17:53:05 GMT
etag: "802ac7a85f716d1a10ad5084ce6b2c14"
cache-control: max-age=3600
expires: Mon, 18 Dec 2023 08:57:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-3ba9b37db41f86369704d0889aaa78df-e32f883162581087-01
x-id: osix-hw-edge-gc4
cache: STALE
x-cached-since: 2024-05-05T02:10:44+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/tryItalianViewTooltip.d6fe79ca0812d145c6a4.bundle.js | 185.244.209.62 | | 195 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/tryItalianViewTooltip.d6fe79ca0812d145c6a4.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size195 kB (195437 bytes) Hashf1400ab8810f7a74cf9f40021488a475 2399d9459f353bebe22c83ee32cfcf9983f5480c 490c4839f5055796468bd2f991a8cbbeb8094a9cc783038c6a49a7d9f4fcdc52
GET /bundle/app/Default/Desktop/tryItalianViewTooltip.d6fe79ca0812d145c6a4.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-893ee"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-5071338d09b4c8b09322d2e5f8d5509c-bd28b5c0faf1e140-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:25+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/betting_class.25517f00558508b39cc0.bundle.js | 185.244.209.62 | 200 OK | 11 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/betting_class.25517f00558508b39cc0.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash93ea20ed58887d7223b37c286c31bb6f 6fa4c5668360cdd30a120b70e24caf03656f3703 1601dab192ec12507344e681bb72b3a7a0c221e70b58e4a9b53220e75575194c
GET /bundle/app/Default/Desktop/betting_class.25517f00558508b39cc0.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-668"
expires: Sun, 02 Jun 2024 09:51:27 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-4f5b2b1b0b3fdd6c44ed44dd5666f4e2-6b13088eef978830-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:48:59+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 63854
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/main_top_games.f01aa7c0f8f413992ad8.bundle.js | 185.244.209.62 | | 468 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/main_top_games.f01aa7c0f8f413992ad8.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size468 kB (467779 bytes) Hash377d2b8e05d401749bb9c3f6fa47a9b5 85a8be4ceb9c65852d24a1201c81ad1f07985c90 4fa6fc15e4e347308084b63c489aaeed2efeb5a838128215357b665433b92235
GET /bundle/app/Default/Desktop/main_top_games.f01aa7c0f8f413992ad8.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-19d6e0"
expires: Sun, 02 Jun 2024 12:50:06 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-ce21d38f53ec795312c99c9da89e0cc8-fe7adaa483c332be-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:47:38+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/userTransfer.587c8b37a7c8fb6b1180.bundle.js | 185.244.209.62 | | 285 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/userTransfer.587c8b37a7c8fb6b1180.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size285 kB (285430 bytes) Hash86d0ec7c8b1400397ad9e67ca4007e86 a28c5b64e14340cf3485a50c1eb11dd5846f3311 900d3e4da1ad2b3682bf28399937c772311e3d749e4ca684b38ce4498a6c5cef
GET /bundle/app/Default/Desktop/userTransfer.587c8b37a7c8fb6b1180.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-c60ed"
expires: Sun, 02 Jun 2024 12:50:06 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-e574ce8c4cd0a504e826d3df118e4a73-c2d5964c1edb0d05-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:47:38+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/legacy_betting.66f8e626a5ed91f1f6bf.bundle.js | 185.244.209.62 | | 1.1 MB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/legacy_betting.66f8e626a5ed91f1f6bf.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size1.1 MB (1088290 bytes) Hashac7c568d79f4b172dbc8c23db923a825 eb08e17e66a53bd468ca9e39e07214ad8d01c7e3 4b719d39ab64beea5ffd2210a3a601426001978a3cc34483231259d2769e1d0f
GET /bundle/app/Default/Desktop/legacy_betting.66f8e626a5ed91f1f6bf.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-338835"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-b5a668bdde1e68d30cb96e199dc43602-9c7319864c21e4d0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:24+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/min_js/packages/jqueryCarouFredSel.41dba30554f682f3da5bea0a92ccbaa8.js | 185.244.209.62 | | 27 kB |
URL v2l.traincdn.com/default/min_js/packages/jqueryCarouFredSel.41dba30554f682f3da5bea0a92ccbaa8.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash6473bc3432e58823970510c57b59e423 2d2e43b14e0f3448fea290b0d70b520565cafbcb 3b1f28226e7d9ba801100028a7de9dfd8cf722f69f675bfcaa72f09a4f9be2f9
GET /default/min_js/packages/jqueryCarouFredSel.41dba30554f682f3da5bea0a92ccbaa8.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:49:13 GMT
etag: W/"65ded769-d753"
expires: Wed, 28 Feb 2024 07:20:54 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-3e58b27e48b4014ee729d3caa06fe7a9-634b53ef9748f91c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:21+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 | 216.58.207.227 | | 51 kB |
URL fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 51404, version 1.0 Hashb904fcdf1c4c6059fadd6893a7bc7619 f41d1674f02616f03ef77d4e84b3ad8ba28a36fc 517edd119c5b2719e6ac4b30bf1fd864a6395179a41d273c0afc0696e7495d8e
GET /s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:26:22 GMT
expires: Fri, 02 May 2025 02:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 18 Oct 2023 17:52:59 GMT
content-type: font/woff2
age: 261990
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:03:54 GMT
expires: Fri, 02 May 2025 02:03:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 263338
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 | 216.58.207.227 | | 51 kB |
URL fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 51404, version 1.0 Hashb904fcdf1c4c6059fadd6893a7bc7619 f41d1674f02616f03ef77d4e84b3ad8ba28a36fc 517edd119c5b2719e6ac4b30bf1fd864a6395179a41d273c0afc0696e7495d8e
GET /s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:26:22 GMT
expires: Fri, 02 May 2025 02:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 18 Oct 2023 17:52:59 GMT
content-type: font/woff2
age: 261990
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V | 142.250.74.168 | | 64 kB |
URL www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V IP142.250.74.168:0
File typeJavaScript source, ASCII text, with very long lines (1822) Hash11cfeea68609fcabfa9813f67ce28487 60a26d93ec55b8a33321047d056808e182fdd1a7 05cff8184ab2f5f9e5d525ddb27f2e419a9f06713b0de4febf0f50949e858062
GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 03:12:52 GMT
expires: Sun, 05 May 2024 03:12:52 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64457
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7V60YW2S5H | 142.250.74.168 | | 102 kB |
URL www.googletagmanager.com/gtag/js?id=G-7V60YW2S5H IP142.250.74.168:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5955) Size102 kB (101858 bytes) Hash2c7105d81561fab50f429c9a34669053 f0f301c62272a55160c13d7a756de952a596a61e 143387efd8eea9e4c62eab5e0740d38175014ae0c690e7978b843a4506a9416e
GET /gtag/js?id=G-7V60YW2S5H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 03:12:52 GMT
expires: Sun, 05 May 2024 03:12:52 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101858
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/1148.c8dd71173c84c988decf.chunk.js | 185.244.209.62 | | 103 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/1148.c8dd71173c84c988decf.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size103 kB (102712 bytes) Hash6fe1755f570301a56fcc4a6c86388167 f89c7b52d3daa21e7612aaa31b3c783e139d3bda 63e980644427b5ba3a69df3fb2e55e8b50868470eb1f78d41b426db0795ee29e
GET /bundle/app/Default/Desktop/1148.c8dd71173c84c988decf.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:52 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-688"
expires: Sun, 02 Jun 2024 09:51:28 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-f461809d45c5caeab73b012997619591-0eaf7a5dfd4973b4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:00+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/registration/icons.svg | 172.64.146.192 | | 37 kB |
URL 1xbet.com/genfiles/cms/1/desktop/registration/icons.svg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Hashead169bcaed82e927fc0e03d77fdce2b 32ef7b8a41d38b380e385beb828a1fe839b58b8f 90ee0abbf14557674cc77d2cbb8ad0a452696398086e4f48cf1a98e125480641
GET /genfiles/cms/1/desktop/registration/icons.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 18 Apr 2024 10:15:59 GMT
etag: W/"ead169bcaed82e927fc0e03d77fdce2b"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
server: cloudflare
cf-ray: 87ed8d223b967130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/34.41305b9bab04a947e0a2.chunk.js | 185.244.209.62 | | 9.0 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/34.41305b9bab04a947e0a2.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash6138249f704292ac12d6f02b73499404 ceb922f2a94cab578e11671d5cb6ad804433ee06 03a443823d242a749f5333def4797063eeb72be45acf16482bd171ac845079dc
GET /bundle/app/Default/Desktop/34.41305b9bab04a947e0a2.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:53 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-3fae"
expires: Sun, 02 Jun 2024 09:51:29 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-939243e9d21dcc632fa41d700691629f-fbb28aaa27c4e330-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:01+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/mobile.sports_slider.SportsSlider.dc5cd817e8aa6f66df3e.chunk.js | 185.244.209.62 | | 12 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/mobile.sports_slider.SportsSlider.dc5cd817e8aa6f66df3e.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash3f0feea43d23bca89971c13418737d31 05b2c9d778576e0ba471fa47af02d9f7e350b501 aa2426818629b6fc44e572c729bcd51513b87921e3e5471ab707b87dd724d342
GET /bundle/app/Default/Desktop/mobile.sports_slider.SportsSlider.dc5cd817e8aa6f66df3e.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:53 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-8e8a"
expires: Sun, 02 Jun 2024 09:51:29 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-34dd2c799ae881ce675bc1ad7323d11e-b06e64c4bc75276f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:01+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/LineFeed/BestGamesExtVZip?count=10&lng=en&mode=4&country=137&tf=2200000 | 172.64.146.192 | 200 OK | 4.6 kB |
URL GET HTTP/31xbet.com/LineFeed/BestGamesExtVZip?count=10&lng=en&mode=4&country=137&tf=2200000 IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash3a7479a9ce892b32daae88fc5b4e38e2 31e88d0ae5371fa93332991414e9da57b80a5735 e29d35d6c463d0d5c73e80e47874338006711fe43bed64792ebf762c16311e49
GET /LineFeed/BestGamesExtVZip?count=10&lng=en&mode=4&country=137&tf=2200000 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:53 GMT
content-type: application/json; charset=utf-8
content-length: 4648
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:12:53 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.034
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d2d5ff77130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/genfiles/cms/1/desktop/zone-icons/Icon_live.svg | 185.244.209.62 | 200 OK | 750 B |
URL GET HTTP/2v2l.traincdn.com/genfiles/cms/1/desktop/zone-icons/Icon_live.svg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash07a2e335661cb9e06a10cc7e5211bb24 eb539b798b8815ca634d5a055aacc04c6caa3ac8 5a541d7dd1614e97692fd1cb9ada7396dd842797bfb5aa9df8f331856a86f17d
GET /genfiles/cms/1/desktop/zone-icons/Icon_live.svg HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/new1x2/main.8cf685047cef5dfa866fcd09ce097ab0.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:53 GMT
content-type: image/svg+xml
content-length: 750
last-modified: Tue, 05 Mar 2024 11:20:36 GMT
etag: "07a2e335661cb9e06a10cc7e5211bb24"
cache-control: max-age=3600
expires: Tue, 26 Mar 2024 14:51:11 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-9cb294caff907666743839dcc6616e0d-253c3d28c6846ee9-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:15:16+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/default/img/new1x2/updated-icons.svg | 172.64.146.192 | | 10 kB |
URL 1xbet.com/default/img/new1x2/updated-icons.svg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Hash4d9892fc33f03d38cae0defcab25e147 fc5e9ab5b7a99a46495363760ed1d91bacc0ee07 e4f2e6fc91e15fde2563840338c4cf012051a24a1f26214f8ba8d72f2cbc965c
GET /default/img/new1x2/updated-icons.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:53 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Feb 2024 06:18:30 GMT
vary: Accept-Encoding
etag: W/"65ded036-5c17"
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
server: cloudflare
cf-ray: 87ed8d2ff9087130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/zone-icons/icon-top.svg | 172.64.146.192 | 200 OK | 3.0 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/zone-icons/icon-top.svg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Hash5764ace774d70d141e9f56e857ac823a 674bdb3a96dcc5da3eccbe3a6f22818cdbb97d14 a03bcf1ca0ad02c103ea01224f990b260d07c1564d37b3f12426cb25d67d6839
GET /genfiles/cms/1/desktop/zone-icons/icon-top.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 05 Mar 2024 11:20:36 GMT
etag: W/"5764ace774d70d141e9f56e857ac823a"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
server: cloudflare
cf-ray: 87ed8d223b957130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/default/img/sports-icon/favorites-icon.svg | 172.64.146.192 | | 2.1 kB |
URL 1xbet.com/default/img/sports-icon/favorites-icon.svg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Hash7280bedfbc587276397b85263d06f072 a232f2ec14723f874a6c684b3bb54a9716cbbfd0 cf174dfb63ef80c63fba374f24bf9466d21b67b0e56a018010c9631f3196ccbd
GET /default/img/sports-icon/favorites-icon.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:53 GMT
content-type: image/svg+xml
last-modified: Thu, 25 Apr 2024 07:39:13 GMT
vary: Accept-Encoding
etag: W/"662a08a1-f23"
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
age: 4168
server: cloudflare
cf-ray: 87ed8d2fe9067130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api.js?render=explicit&hl=en | 142.250.74.132 | 200 OK | 1.0 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js?render=explicit&hl=en IP142.250.74.132:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
Hash0a7c0482e440f967027c63feeddd5ea8 2ffe5e70381ddc7a370f85303e69777c9a5fdd99 8d66522d7222610a2d6b29aa8c0482f3a405c599310b28c9e32ca56c044a7ac6
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 05 May 2024 03:12:56 GMT
date: Sun, 05 May 2024 03:12:56 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/39.5b228371d91da5566301.chunk.js | 185.244.209.62 | | 16 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/39.5b228371d91da5566301.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashe05a82dde38207e0d3bdbd2fead06729 de1876be5802efce1b6b5c8b1cb8c5ac5a30f97c 7bce079931f526ed4683285ab2fa4439c19272f4df0f95091d312550580c0e92
GET /bundle/app/Default/Desktop/39.5b228371d91da5566301.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:53 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-6650"
expires: Sun, 02 Jun 2024 09:51:29 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-2c1f194836c415544a89f1cea854ce36-a6d2b23b25070368-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:01+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/external-api/v3/banners?project_id=70&country_code=&country_id=137&language=en&platform=1§ion=2&date=2024-05-05T03:12:54.947Z&is_auth=false&limit=100 | 172.64.146.192 | | 3.9 kB |
URL 1xbet.com/external-api/v3/banners?project_id=70&country_code=&country_id=137&language=en&platform=1§ion=2&date=2024-05-05T03:12:54.947Z&is_auth=false&limit=100 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash214356665c4207b2bed72e5434dd15d0 125797519308cb3f775d4f29dd8b18618148321e 6f237c1a14ec4e48feb4e4402d6e7b02d14e6d9aa505911729fd3920417540b2
GET /external-api/v3/banners?project_id=70&country_code=&country_id=137&language=en&platform=1§ion=2&date=2024-05-05T03:12:54.947Z&is_auth=false&limit=100 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:55 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=128, dt_total;dur=129.643, wf-uht;dur=0.139
traceparent: 00-24326267e1e12ba296f1f153fcbd3950-624a5c46a6845e9d-01
x-dt: 70
x-time-ng: 0.130
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d377d0a7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263590
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/coupon_v2.CouponFactory.d5f9adbad4d582d2dc47.chunk.js | 185.244.209.62 | | 592 B |
URL v2l.traincdn.com/bundle/app/Default/Desktop/coupon_v2.CouponFactory.d5f9adbad4d582d2dc47.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, ASCII text, with very long lines (592), with no line terminators Hash085aa2651a954e923fcfcd77e0ec5354 196896fe3559df2fdc5da85f9287fcbb248525dd 9f98abd94072e64a7d275d6b4e7a04c8ef066b6097d1fa9f031d895292f4bcaa
GET /bundle/app/Default/Desktop/coupon_v2.CouponFactory.d5f9adbad4d582d2dc47.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 592
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: "6634b144-250"
expires: Sun, 02 Jun 2024 09:51:30 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-ca09302c877fb670ad03e323ec268cd9-78499be078460329-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:02+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/qr_auth.f04a2c7779d1f1919c3e.bundle.js | 185.244.209.62 | 200 OK | 231 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/qr_auth.f04a2c7779d1f1919c3e.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size231 kB (230750 bytes) Hash8fb0f2de9a1045ece013dfbb82390a2b deb6b51c52769d12094685ac57a73df53150a660 d2d80fc3cbf3c608e9e95fbc3ca85a9146af0625f5318c7fdebfee3a77fa2b41
GET /bundle/app/Default/Desktop/qr_auth.f04a2c7779d1f1919c3e.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-a7d69"
expires: Sun, 02 Jun 2024 12:50:07 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-9f48150e41f4bf56cbd5cd7237472aac-3eef7ffb9f8f3aa5-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:47:38+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/favorites.Favorite.2aa0d38d0094af0f1375.chunk.js | 185.244.209.62 | | 30 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/favorites.Favorite.2aa0d38d0094af0f1375.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hasha49533919062892396fa7567ff6d5015 84bfa68e390507aee3339068086bbb6d1d0c732b c605edbe0cc49efe8b939b411138195aff6e2c740cab31f802a9d345a51eb6bd
GET /bundle/app/Default/Desktop/favorites.Favorite.2aa0d38d0094af0f1375.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:58 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-441c"
expires: Sun, 02 Jun 2024 09:51:30 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-a2ecd3431db2722bbe3d1ba12c71ef53-926bd7b8f100ea62-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:02+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/0.519fbee56bf4862bbcdd.chunk.js | 185.244.209.62 | | 260 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/0.519fbee56bf4862bbcdd.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size260 kB (260223 bytes) Hash8d837e6518892562f56a32df6f5bd970 4902ad90681bd9a9b59f3bc3fc0faaa04f16fcf3 c317e144ee63f332b3199a2f902bfcacdee1014f139827fb3f235a59f648601b
GET /bundle/app/Default/Desktop/0.519fbee56bf4862bbcdd.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:58 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-96ed2"
expires: Sun, 02 Jun 2024 09:51:31 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-4daef630d9bab5d988cf015d2ffcf3f7-5f271ce312ff300e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:02+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/Coupon.BetBuilder.5e05dbd24f58445c4848.chunk.js | 185.244.209.62 | | 247 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/Coupon.BetBuilder.5e05dbd24f58445c4848.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (35455) Size247 kB (247281 bytes) Hashed4ec064293fc05a2452ebbfd19d403b 1c9960ca3a5e49b8d00d42457b7bca53e1456abe 7179408dbc550ca327c27529f62f59dc2770d180941a7096f496b8ec8ff414ff
GET /bundle/app/Default/Desktop/Coupon.BetBuilder.5e05dbd24f58445c4848.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:58 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-45d7"
expires: Sun, 02 Jun 2024 09:51:30 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-4bfab6d6003cf9e8be34a1c5d2cdddea-6a362ca49945b6f2-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:02+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/bundle/app/Default/Desktop/pushfree_integrate.9a1f2b0e6801b7590698.css | 172.64.146.192 | | 208 kB |
URL 1xbet.com/bundle/app/Default/Desktop/pushfree_integrate.9a1f2b0e6801b7590698.css IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeASCII text, with very long lines (10406), with no line terminators Size208 kB (207965 bytes) Hash4a410db21b7c468f11afea8ec051af0e 5b8aeaffc349f8e4222b1139b664c90247658fc7 88971183592efb1d6cc059da99bdf474e7a29b2f92944ee21b576729a72bcc90
GET /bundle/app/Default/Desktop/pushfree_integrate.9a1f2b0e6801b7590698.css HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Fri, 03 May 2024 12:35:33 GMT
vary: Accept-Encoding
etag: W/"6634da15-28a6"
expires: Sun, 05 May 2024 11:17:40 GMT
cache-control: max-age=86400
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.002
cf-cache-status: HIT
age: 37643
server: cloudflare
cf-ray: 87ed8d017e3e7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/styles/css/slider-market/slider-market.d7a3f583ada47a6c77a7e41de3969998.css | 185.244.209.62 | | 2.0 kB |
URL v2l.traincdn.com/styles/css/slider-market/slider-market.d7a3f583ada47a6c77a7e41de3969998.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashd247e4db8a0d8ec32d6d3b5b6f07ab7a a9e2bcad4ed5d6aa8d6a64aa9b527c14f3170d27 18dd018fea6bf8232c6d0df7c188650d1c9dd021d1424c36406fe304ecb70f06
GET /styles/css/slider-market/slider-market.d7a3f583ada47a6c77a7e41de3969998.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:19:46 GMT
etag: W/"6617f182-1855"
expires: Thu, 16 May 2024 08:18:21 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.003
traceparent: 00-0c788760c2e618a6132ac1bdf38b798a-ecfd564e2cde3007-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:34+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=bottomright&cb=jrtvevzx5o5 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 124915
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/legacy_betting.438c5cc9b941dca13e88.css | 185.244.209.62 | | 16 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/legacy_betting.438c5cc9b941dca13e88.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashd6f289ef4917fbb9a2dd1ec0e6372cc2 1ddaf8018330f66b03496ed2c170558e54bb11e8 5cf634f4a99a3ff67c02b279d8c06705e4c828ae431e62515eb28f5e7459c37f
GET /bundle/app/Default/Desktop/legacy_betting.438c5cc9b941dca13e88.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 12:01:20 GMT
etag: W/"661e6890-c2c"
expires: Thu, 16 May 2024 12:13:33 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-8844fc22541ec9a343b915878c2614f7-02e73fb8a5443a56-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T12:11:45+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7V60YW2S5H&cid=1686860808.1714878779>m=45je4510v893859730za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=777394220 | 172.217.21.163 | | 42 B |
URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7V60YW2S5H&cid=1686860808.1714878779>m=45je4510v893859730za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=777394220 IP172.217.21.163:0
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7V60YW2S5H&cid=1686860808.1714878779>m=45je4510v893859730za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=777394220 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 May 2024 03:12:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/auth.67cc4d4b11845cd09be7.css | 185.244.209.62 | | 3.6 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/auth.67cc4d4b11845cd09be7.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hasha11c5bc8b0e7ba903f70bfb304f73e7d c40070ac486e4eaaa6a2d9367e2f85f523829f11 521738090e82acf59a3bf9a0d976bf46dd5eb9b3e071e77fea31e2d327ebb4da
GET /bundle/app/Default/Desktop/auth.67cc4d4b11845cd09be7.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 13:49:17 GMT
etag: W/"6613f5dd-125b"
expires: Wed, 08 May 2024 14:10:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.004
traceparent: 00-a1fe08a72d95c0b2b25c5a1ec8e528d8-a73491246d4ae8b3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-08T14:08:32+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/auth/main.7d4d7d1ccfe1a2cd258f5799f8b87da6.css | 185.244.209.62 | | 6.3 kB |
URL v2l.traincdn.com/styles/css/auth/main.7d4d7d1ccfe1a2cd258f5799f8b87da6.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash4c48c1badb1c3f6d7967247867136e6e dc270bb317e47259bdaf278722609fac5a87e04f cc16da24abd9d4d477e4eded7b1f712d4d04d791564cce0767417466c137f7fb
GET /styles/css/auth/main.7d4d7d1ccfe1a2cd258f5799f8b87da6.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 07 Mar 2024 09:07:29 GMT
etag: W/"65e983d1-57d8"
expires: Sat, 06 Apr 2024 09:14:54 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-7b36b83bd1b439336ffa344681a093cd-d69f19dd46615deb-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-06T09:46:10+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js | 142.250.74.132 | | 7.5 kB |
URL www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (17649) Hash85eff967b6703760e0e562179e7ef0ef a4567db32ae2ea7049209561d2edde3d26fbef88 6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68
GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncn0zvxyoqj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:44 GMT
expires: Fri, 02 May 2025 01:57:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263715
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7V60YW2S5H>m=45je4510v893859730za200&_p=1714878772844&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1686860808.1714878779&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714878779&sct=1&seg=0&dl=https%3A%2F%2F1xbet.com%2Fen%2F%3Ftag%3Dd_85563m_22269c_%255B%255DMS%255B%255Dnull%255B%255Dnull%255B%255Dgeneral%255B%255D%257Bsite_id%257D_d22490_l85317_clickunder&dt=1XBET%20%E2%80%93%20Betting%20company%20%E1%90%89%20Online%20sports%20betting%201xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=14664 | 216.239.32.36 | | 0 B |
URL region1.analytics.google.com/g/collect?v=2&tid=G-7V60YW2S5H>m=45je4510v893859730za200&_p=1714878772844&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1686860808.1714878779&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714878779&sct=1&seg=0&dl=https%3A%2F%2F1xbet.com%2Fen%2F%3Ftag%3Dd_85563m_22269c_%255B%255DMS%255B%255Dnull%255B%255Dnull%255B%255Dgeneral%255B%255D%257Bsite_id%257D_d22490_l85317_clickunder&dt=1XBET%20%E2%80%93%20Betting%20company%20%E1%90%89%20Online%20sports%20betting%201xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=14664 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7V60YW2S5H>m=45je4510v893859730za200&_p=1714878772844&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1686860808.1714878779&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714878779&sct=1&seg=0&dl=https%3A%2F%2F1xbet.com%2Fen%2F%3Ftag%3Dd_85563m_22269c_%255B%255DMS%255B%255Dnull%255B%255Dnull%255B%255Dgeneral%255B%255D%257Bsite_id%257D_d22490_l85317_clickunder&dt=1XBET%20%E2%80%93%20Betting%20company%20%E1%90%89%20Online%20sports%20betting%201xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=14664 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xbet.com
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xbet.com
date: Sun, 05 May 2024 03:13:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/main_top_games.c412edf5d5e61430e847.css | 185.244.209.62 | | 19 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/main_top_games.c412edf5d5e61430e847.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash738105102d76099e91219ee208775ca8 4789d5ec89e231ba87f946df48eb13ab53267851 b092b447916579f6d04e9bde9abc2612da0041844c14af2c75ab787cc643815f
GET /bundle/app/Default/Desktop/main_top_games.c412edf5d5e61430e847.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 06:31:10 GMT
etag: W/"661e1b2e-475c"
expires: Thu, 16 May 2024 08:18:21 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-9a105bcabfe0165346a3df02098c10d8-598d826c0aa70f2b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:34+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/css/modal-g.css | 185.244.209.62 | | 17 kB |
URL v2l.traincdn.com/default/css/modal-g.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashc984fcec3b85801dc088cb70c3d137d4 eb9c8fa4169cedbbe1662f4263e0f7750bc0e830 6265069433fdf07aee6477aef766b7b1ad5291fb47ba3acf5f3ed34c9bbab62c
GET /default/css/modal-g.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: text/css
last-modified: Wed, 28 Feb 2024 06:18:25 GMT
etag: W/"65ded031-141b"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-4b67ebd6a7afa02b75087610314004f4-04b1d1d89bfd04cf-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.132 | | 7.6 kB |
URL www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
Hash6a51161bdf46647485b9646587dd71f4 46e93e2d3bb977cabe2e3f3bc47b377f433b11ac 0cf1f181b724e8fb228ee924b40419c0605fe90b55be7b41865b46cce21ec097
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=bottomright&cb=jrtvevzx5o5
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 05 May 2024 03:13:00 GMT
date: Sun, 05 May 2024 03:13:00 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/registration_common.2384130a5a586b0f8b0b.bundle.js | 185.244.209.62 | | 394 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/registration_common.2384130a5a586b0f8b0b.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size394 kB (393758 bytes) Hash4552f8b305b793f969ca92165d1d415c ae352bf89e71c4278413a8a8ee74f0cdce0033b1 a1da4ae9bcd419676a9b3eaf3805f9fcdb928691a9643eeb60fc4d4f86776848
GET /bundle/app/Default/Desktop/registration_common.2384130a5a586b0f8b0b.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-86796"
expires: Sun, 02 Jun 2024 12:49:07 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-6fd4392a1ca4a09b35fbf134ad8fceab-0f03899a7cc46530-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:46:38+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/2026.png | 185.244.209.62 | | 10 kB |
URL v2l.traincdn.com/sfiles/logo_teams/2026.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash437f72787c6baa84af9f2ac1ad608d2f f19c013d296226ccd1b1ae95d65b7772464d700e 06f3cb5bc6d8ed9e4ce2a441fd36727828c168994903ad9f576a412281da6510
GET /sfiles/logo_teams/2026.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 10072
x-amz-id-2: pkAAiAN5q2FQ5+V1uJjmYOOWlBqmEHQbr6DoaQYJeGUIdf0lyd0QUUHU+jUYIF6cP669+QMjh3g=
x-amz-request-id: CXPD1RWKE84F9263
last-modified: Wed, 01 Feb 2023 07:40:32 GMT
etag: "437f72787c6baa84af9f2ac1ad608d2f"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: IwHoYlLrLkhN.PhQaSu.SA08UtDr.hLS
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.046
traceparent: 00-468a21ee9d4b3f0fb91586741b53f646-080ac6cea6ae2091-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T09:28:10+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/vendorF.f3e6fb7e38656d8267bd.bundle.js | 185.244.209.62 | | 181 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/vendorF.f3e6fb7e38656d8267bd.bundle.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size181 kB (181425 bytes) Hasha08f0c07d4579daa33f71be6f5c3b94d 21cbde27ce7c106540316eb3dd3fe52dcf6922a6 84d69906a5c18bdcbcd34a28083128e287f4577a897af9aa9db2b750fc95a834
GET /bundle/app/Default/Desktop/vendorF.f3e6fb7e38656d8267bd.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-7b353"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-66c97a8db9d8d40b6ac8bff878f601c3-528525e9fa2948a4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:24+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/7149c7e43a93c05bfa169e3737d7d5c7.PNG | 185.244.209.62 | | 19 kB |
URL v2l.traincdn.com/sfiles/logo_teams/7149c7e43a93c05bfa169e3737d7d5c7.PNG IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash7149c7e43a93c05bfa169e3737d7d5c7 4cba32160064b6251ff9e593b857d6ab6b6720e8 ad0d5e8259380f6076cbab4f72804b1d5367b5d2cce172e6164fea8a170e4e81
GET /sfiles/logo_teams/7149c7e43a93c05bfa169e3737d7d5c7.PNG HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 19388
x-amz-id-2: +aaoFzIMv/Y8KMxgmUlZV8lrZEgHFjRfRvZXA9H3YPiepq2rZh8qHOPyO80qzD6SCwIH0jLekWg=
x-amz-request-id: NSQFC42E42XDQ3YR
last-modified: Wed, 25 Jan 2023 09:13:04 GMT
etag: "7149c7e43a93c05bfa169e3737d7d5c7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: 4Pv_Zjk98B0otOmvFGlGu5l_UeJGLZXY
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.024
traceparent: 00-6d394655b26b72f2d4d1cb43b87ea551-cb007da3d98ef7d8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T14:54:34+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/1705962ffbc1e568500d02753d414082.png | 185.244.209.62 | | 19 kB |
URL v2l.traincdn.com/sfiles/logo_teams/1705962ffbc1e568500d02753d414082.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash8f7e84c6def18163ad04a9f6834a41d5 877baecf60e7d3f68d5d99bf51e1a3e653ff906d d561175817f78e6e8474aa2ad952524a0fc9f407dcad249dfeb7c0321fcab439
GET /sfiles/logo_teams/1705962ffbc1e568500d02753d414082.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 18677
x-amz-id-2: dmRgr47rivLrdT9RyQ11RhliAT9Nfd0erjuO8iMPKuLHOvzeemi/to26rycQsUF0CXrmskqpwTk=
x-amz-request-id: 7ERP3N06X1SK3603
last-modified: Tue, 31 Jan 2023 13:28:56 GMT
etag: "8f7e84c6def18163ad04a9f6834a41d5"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: crzLFPkuwnn2CGeUhTzf7SxYfZdn5d_q
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.048
traceparent: 00-587a0ddaef10290d7211a3625c8ea1d0-4fd687d8516e8334-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:00:40+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/3530.png | 185.244.209.62 | | 6.1 kB |
URL v2l.traincdn.com/sfiles/logo_teams/3530.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash3991b8833f484548c40665d9a1b27f6c c7d584c098e7e9ad267fb369cbfa3ed9af24227f 87a533b5694326ca9f0043304e39dbcd9ec595d6ae8233688c5dac26f5c97e30
GET /sfiles/logo_teams/3530.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 6149
x-amz-id-2: JFW3TOlAAkf3DF9S7ryU3qA4TjodyKovgHL99O/id+NUUaTbdM3PxOtbU8JrrxwEAjwuDiPrWqIsUYLhGqAg7Q==
x-amz-request-id: HJFB8PTSTR721KNK
last-modified: Wed, 01 Feb 2023 08:50:05 GMT
etag: "3991b8833f484548c40665d9a1b27f6c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: 2WMz4CsLv53D95REfvueGNN6Sy8ny0yp
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.024
traceparent: 00-293a46b54252b19279df22d8e7287b80-4782d56ab077f832-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T23:27:07+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/3558.png | 185.244.209.62 | | 2.1 kB |
URL v2l.traincdn.com/sfiles/logo_teams/3558.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash9794d8c3ba474f75efe97cda169f57cc 57f63af622f213483676acbd386e03a7b646c45c b4f90e7a44dcc6cb371788e3c481cc5016a23feb7f6c68089afd4856a554f0c1
GET /sfiles/logo_teams/3558.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 2139
x-amz-id-2: Ks8cAUh0GFiHa31UT82Oapf4F39mX536XLP2P4c0Yg2daUQiCYjW2ZMTWWLnU7EPvhlWrqSDGoMDr8Zwip5iaQ==
x-amz-request-id: MM3AV735P0Z251B5
last-modified: Wed, 01 Feb 2023 08:11:47 GMT
etag: "9794d8c3ba474f75efe97cda169f57cc"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: VJFZxG9URyHePW20rOitC3MghqLRPhSp
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.039
traceparent: 00-8eaa0b1c67e48e51bc1999f85e4d843e-45e75304bae85e3b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T14:50:35+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/4916.png | 185.244.209.62 | 200 OK | 8.9 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/4916.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash20446254d090833e0cde87089955109e bcb397ca8a7d0bfd625e159e62df57e5d3e9ba10 de446c7ef90fd1abe2606127df8eab204dd23a6b6a9b23d0537cb88a3b9965e5
GET /sfiles/logo_teams/4916.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 8906
x-amz-id-2: 3okEiZiOh0yJI3etc1T5Vs09owgmkc0PfRuwSHWfbtwP2sKfJZbwK6DnGPF6VSsTHjGxRa16HKk=
x-amz-request-id: 2QHD2ANNZ3196CEF
last-modified: Tue, 31 Jan 2023 13:33:14 GMT
etag: "20446254d090833e0cde87089955109e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: 8zhN1W4gSJcCnk.oGYkM_EZOCvF_g701
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.036
traceparent: 00-36992ea3b798909a0eca73721fb40c07-d068fba604fd39a8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:17:46+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/a7fe40e285984c12b676f62f014d50f6.png | 185.244.209.62 | | 9.8 kB |
URL v2l.traincdn.com/sfiles/logo_teams/a7fe40e285984c12b676f62f014d50f6.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashe43f81c0cdc24c06e698126462cebff5 7a9e08526c157ab075810b15803a461aaac546cf 2d8b20427398d401539088ef76893f8f21f194d3b7d7de0f0ab86840f28f9bcf
GET /sfiles/logo_teams/a7fe40e285984c12b676f62f014d50f6.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 9771
x-amz-id-2: uSg1hs8NPH9/2vhgr+W9je+hOUhvlRfB7yfQZItVRmH6uXRdlC2T+T+hhozKQUntuZUXfVucMfc=
x-amz-request-id: 2QH0YJS5FTDQ03WD
last-modified: Wed, 01 Feb 2023 08:08:42 GMT
etag: "e43f81c0cdc24c06e698126462cebff5"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: xNgAb7Bl2awxL5T9Kt_y_qRE1gAYRlRu
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.044
traceparent: 00-361dbdc234b7c082e8e7218e7b1087d6-f0ce487418dee0b0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:17:46+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/1a340530753de6f99e774a1c212fd513.png | 185.244.209.62 | | 14 kB |
URL v2l.traincdn.com/sfiles/logo_teams/1a340530753de6f99e774a1c212fd513.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash94d01789089fab64c843e9f0fc58c7c4 9ca9cd4f2411be7242ca6bc2ff557c4a0f843bf1 e9ba0a2e46ef6f98ba5ba2e2ba51ad8ecc49a8db1f1caae434cbc72091363171
GET /sfiles/logo_teams/1a340530753de6f99e774a1c212fd513.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 14099
x-amz-id-2: pGNocsMVvSxthqWRRnZNQMCGXvZN41cNwLMY+AV/HCQjKk+Atqj9/MBiLQrByrPYicQLDGoOVN0=
x-amz-request-id: CPH58KGVV5ARDS4C
last-modified: Tue, 31 Jan 2023 13:33:12 GMT
etag: "94d01789089fab64c843e9f0fc58c7c4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: eHywKT7epY6BnRQfuz.lS45C8MVmTTBx
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.039
traceparent: 00-82dd71d824589b076a3253706ddf0f57-ec751586734ebd52-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:18:40+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/4932.png | 185.244.209.62 | | 10 kB |
URL v2l.traincdn.com/sfiles/logo_teams/4932.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash40661242b6506e43d1352050a91954a8 b571fda44c38bd5c6890675f6906467e5c04165e 5c24c4342c1df652a146a411540df2cb1626264cf5175302e45b8ef58f7a980c
GET /sfiles/logo_teams/4932.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 10035
x-amz-id-2: Sa7F5QD3kPVFmdkyl1tnoKQybNnYEkqkgS/lOack+3QCB683euSqtYmsX3IXKH8VnW2c+kGqFb1wZuawj1IsJoN9w7PVyJTWCdh57/4oqHs=
x-amz-request-id: 2QH16MHGZTWEH8NG
last-modified: Tue, 31 Jan 2023 13:33:07 GMT
etag: "40661242b6506e43d1352050a91954a8"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: IIoWbzVWOlnoKEAdbDSX0IL9GU0ABH8P
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.048
traceparent: 00-6c0fc92e79a6c315e369d2b1ab818b14-b7ed1763f99d0b1d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:17:46+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/4920.png | 185.244.209.62 | | 18 kB |
URL v2l.traincdn.com/sfiles/logo_teams/4920.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash99d1467cd29278fead9a6c76b8a60423 aaa60b8603eec38c98a6c60411fa05abccafa2d1 f8396f5b4f014643083dd90432ddb50366986e7a0520fbdbdadc2e83b7ed77ab
GET /sfiles/logo_teams/4920.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 17511
x-amz-id-2: BlsHmg/MhLR8dSD5WTR8A9/AqlTDwf4lwICL6eusiMqwTxd3sMTF6rCl/Z0jH1Nc4tNkCHFLRnIxXqnBnZqsgY6yYalnFVTFY7WXirMq2TE=
x-amz-request-id: CPHEZJSW4HWF2YAR
last-modified: Tue, 31 Jan 2023 13:33:06 GMT
etag: "99d1467cd29278fead9a6c76b8a60423"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: HDwtWRuQs.rxnGD3itIv314qG6ntI82y
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.041
traceparent: 00-391dbda1c432f39235d9d1546eed9823-d5b585b8a0d17a33-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:18:40+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/3fbd4144dcace71d0894b8b0717c887e.png | 185.244.209.62 | 200 OK | 8.1 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/3fbd4144dcace71d0894b8b0717c887e.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash6d2a7c09bb1c0861efb18f54c4c432a3 e01a0d4de1adde595c963ab3e6e62ab1c3366191 f7febb9ee4421ebb49d2b3541b30195af9004efc58c7ee635a4befb85b60cbbe
GET /sfiles/logo_teams/3fbd4144dcace71d0894b8b0717c887e.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 8075
x-amz-id-2: r8x1aFIiaO/lsPApMCgRnbeZAsavRs2tp3/0OieD9oMVRMkj89ICOhixkld3oqSHJ9dPqupnCqw=
x-amz-request-id: 0E636M740X54QNCD
last-modified: Sat, 14 Jan 2023 14:10:32 GMT
etag: "6d2a7c09bb1c0861efb18f54c4c432a3"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: tuJ6mFc5QRtrkmlyrjvVZ6uSLbuP1Qmj
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.045
traceparent: 00-36bdd159d4006d061d3674d1e7f5bf31-f9c3c66e0bdfac4f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T21:14:18+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/2ee19f2cd6f5ec9757f892d49264c031.png | 185.244.209.62 | | 22 kB |
URL v2l.traincdn.com/sfiles/logo_teams/2ee19f2cd6f5ec9757f892d49264c031.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash9f94f6110b27aefa7f931677d7706188 08dd62c7b686f469a3e2ffaab59d008e8786e32c 246667004478f2c7e837e081f58215ea7e93831f7a47620565414037fc3440c4
GET /sfiles/logo_teams/2ee19f2cd6f5ec9757f892d49264c031.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 22328
x-amz-id-2: OhjFtuetNtw53hg1TkhE4zDL5hZRIIQDr01Tx1sC57gVfo5kdb8yfIg+XSUihCFroPJ4mLBwX/do7YuPIeVYSA==
x-amz-request-id: TR80FC1MBZGBP63B
last-modified: Sat, 14 Jan 2023 13:41:33 GMT
etag: "9f94f6110b27aefa7f931677d7706188"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: AbvgioeVq0Z6UynorrTIcJAb1846whDR
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.039
traceparent: 00-4e119c4b0b20a3edcd7653109fac50b2-d8ddc7ad86c3a2e8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:49:50+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/b6d77aa03a3c016bf7f83a4d8d23e387.png | 185.244.209.62 | | 9.3 kB |
URL v2l.traincdn.com/sfiles/logo_teams/b6d77aa03a3c016bf7f83a4d8d23e387.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashef3f09afd4fb9cd314ca5dc7d6419a83 6ec27112f0c9f0682e9a1bf17e7391787ab24e8c ecd75bdc1c088e455e6f55de7b6a43a3379b29592c9d3b1dded93ce03ea94ad6
GET /sfiles/logo_teams/b6d77aa03a3c016bf7f83a4d8d23e387.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 9275
x-amz-id-2: Uu4G5uItB4Y7UtCWHu5J0r7vHCpEXKARnqcGKf/5pFTvfN0ROe92vWbGmZnFXvxEN5RU9wmRtgQ=
x-amz-request-id: E85AV9CC1JHJKC76
last-modified: Wed, 01 Feb 2023 09:42:10 GMT
etag: "ef3f09afd4fb9cd314ca5dc7d6419a83"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: qeeCecJYiR7txyRF1zSPaRm8EH4hHL6e
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.044
traceparent: 00-7c04244c7ba2ce8ba9308a2ad8fae735-bd4cc82f0a0f4451-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T19:22:29+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/51435.png | 185.244.209.62 | | 12 kB |
URL v2l.traincdn.com/sfiles/logo_teams/51435.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash316135afd4a03709aff546d5245bb65a 8a736c1264595f383cefcf68764b193384cbb3d4 d1aa3daf390570b03b1a23e82f98d7a601ce0f036b74e6516005276e1b30e1b0
GET /sfiles/logo_teams/51435.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 11717
x-amz-id-2: vdZ5IVEOgGQB8lxhFEgxxYVQfv369WHR9fYwP2FLXaNRVKcc5+aV+sM1fJbxdJhgUfeL467es2trlO0W0dhAggAObXAF1KW1Q2A4hUsIcJk=
x-amz-request-id: 3BGQ13NY4EMY27ZP
last-modified: Wed, 01 Feb 2023 13:59:48 GMT
etag: "316135afd4a03709aff546d5245bb65a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: Y6MoUG6YGp9.16JV3Ab9R6aUqQ_h.yQm
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.041
traceparent: 00-151252d54829ce120cb611d86e705457-fd2211e4bb072a28-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T15:50:24+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/ad72308086b53e3bea0d59453f946a2a.png | 185.244.209.62 | | 7.6 kB |
URL v2l.traincdn.com/sfiles/logo_teams/ad72308086b53e3bea0d59453f946a2a.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashfb46e2399f1ce4ee2a39846674b51079 01a41b94c3d1fbd84bdfb46c6a8bf40a806843aa 4782ddc1ed3d3c76ead7e4d8225f3972f6f63c062ea34f59919a71a903134f1a
GET /sfiles/logo_teams/ad72308086b53e3bea0d59453f946a2a.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 7616
x-amz-id-2: A2D7X9n3O8UsNbk/d3xfJDCv15Z8E0tBydwXobBByMoFmc1EG5pdAo0kdVS+oxOwVIIHlBatJeA=
x-amz-request-id: DYN7KBK54G6RXFZW
last-modified: Sat, 21 Jan 2023 16:52:56 GMT
etag: "fb46e2399f1ce4ee2a39846674b51079"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: bYpw6nND1SzU2r1HRoMFrNURagjkOUdp
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.039
traceparent: 00-78f7ac300579a46718609d3c8b3c8928-ee2d3ce3b7719636-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T15:49:26+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash6c6296c9a78fed342995b38e7e078c57 cb1f02b8e4f672ddca62f40f5fd4594668953ae7 bb4a1ba4d52e8f7b0d889b7602f3a86ec6d66eac1b2360e9df589bff79439ccd
GET /LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: application/json; charset=utf-8
content-length: 15917
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.019
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d60bf0c7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/88c9160181daec0ff86017e32a7b730f.png | 172.64.146.192 | | 316 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/88c9160181daec0ff86017e32a7b730f.png IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typePNG image data, 925 x 460, 8-bit/color RGB, non-interlaced Size316 kB (316528 bytes) Hash588e279b08f9b0f77ae8cf6b88a828a1 a6c2cabc12e74bc2b6fc31430933810cb3d6296a ec2fd91270a072aa80c2a8b1a3786b9b719a86311998afcb2bf1682e45ade4a6
GET /genfiles/cms/1/desktop/banner/88c9160181daec0ff86017e32a7b730f.png HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 316528
last-modified: Fri, 05 May 2023 08:01:37 GMT
etag: "588e279b08f9b0f77ae8cf6b88a828a1"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d610f287130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/65fc8c7c390ad696a49fc3f11b27153d.jpg | 172.64.146.192 | | 42 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/65fc8c7c390ad696a49fc3f11b27153d.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 925x460, components 3 Hash10b2a379af7b5f42d6701ddbbd1a1250 a4d7e077e1375b5bde01590a5f982ef8ca3ad81a 7f8365c1e7930befa271a3242ea8a965bc30206ea335f34be175000d4811c5f7
GET /genfiles/cms/1/desktop/banner/65fc8c7c390ad696a49fc3f11b27153d.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 42237
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "10b2a379af7b5f42d6701ddbbd1a1250"
last-modified: Sat, 27 Apr 2024 04:33:50 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d612f397130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/a384fa05a049b4c45c9c0b702906ebd1.jpg | 172.64.146.192 | | 46 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/a384fa05a049b4c45c9c0b702906ebd1.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 925x460, components 3 Hash7b749efc8406ee310b58142c784cb020 414c00340a9c93a2dc9afe59845fe266c5b3b899 bfe9b70f563e876a4202b08949efdff71aabbb7a01d697f258546a87f0cf6333
GET /genfiles/cms/1/desktop/banner/a384fa05a049b4c45c9c0b702906ebd1.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 45657
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "7b749efc8406ee310b58142c784cb020"
last-modified: Thu, 02 May 2024 11:55:42 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d612f3d7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash5bda780286f05d046d01efd16daac4e8 4c6fea50d72f3528d3add3b19a7165aa31b45a66 c8c31a56c8961025d85ab6ac357f49995b98ce3577adfd8329964b5fd7c0619c
GET /LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: application/json; charset=utf-8
content-length: 16117
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.020
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d60cf127130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/default/js/core/cookie.js | 185.244.209.62 | | 232 kB |
URL v2l.traincdn.com/default/js/core/cookie.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size232 kB (231679 bytes) Hash259707add8a94dd7991450df7f6438d1 532bb491043bbcbbc06cd5b40365f9b00c3cfb44 592de470230b25ead57a8d9c433170fdd854f26ffb0a27a93dd796f4d86619a4
GET /default/js/core/cookie.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:18:31 GMT
etag: W/"65ded037-12a7"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-ae2f98c382e0f4457396d58291592f31-e91fe090e1717622-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/9ae39d71c1d827b4bb5d585171027775.jpg | 172.64.146.192 | | 55 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/9ae39d71c1d827b4bb5d585171027775.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 925x460, components 3 Hash0631c49fbba5e9ac2481e490e1b92cbd e8a32f45e6913b3c672dd2bd05e338a9c7529f04 6c9e507e1dc71c1f218e0e5aea4ab5aca54064b17bd5f3150b404535ed2d73b8
GET /genfiles/cms/1/desktop/banner/9ae39d71c1d827b4bb5d585171027775.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpg
content-length: 55057
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "0631c49fbba5e9ac2481e490e1b92cbd"
last-modified: Tue, 11 Apr 2023 18:14:59 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622faa7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/styles/css/favorite/main.7c6cd077036966bed28c60f7afd945f6.css | 185.244.209.62 | | 67 kB |
URL v2l.traincdn.com/styles/css/favorite/main.7c6cd077036966bed28c60f7afd945f6.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash58e9ec608e72632cf26675deb6a100c3 d293b6db25db16c3c517eb1026274f34f1534dcc 9ee81a59fee9d81c87db47389325bfcc3ab6ecdac3e8740d836b78c4a7fdf629
GET /styles/css/favorite/main.7c6cd077036966bed28c60f7afd945f6.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:18:47 GMT
etag: W/"6617f147-36d9"
expires: Thu, 16 May 2024 08:18:20 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-a632d596490be703c3df2d759d2c6222-656fad23270a996f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:32+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/db82499b85d2c4c54c32ece85961bf88.jpg | 172.64.146.192 | 200 OK | 117 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/db82499b85d2c4c54c32ece85961bf88.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size117 kB (117014 bytes) Hash507ba364c8b6dd4e4e7670b68b315a85 c600916c8b2b66759da1c8ebdde0e608bf08253f 8b563b94a305c3fe3c69563c584ac2f08e33a547ac1f4cca4ad34310504497fb
GET /genfiles/cms/1/desktop/banner/db82499b85d2c4c54c32ece85961bf88.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 117014
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "507ba364c8b6dd4e4e7670b68b315a85"
last-modified: Tue, 11 Apr 2023 18:15:31 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621f997130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/fc0e9f303c2ace9bd3c5510cedc96f6e.jpg | 172.64.146.192 | | 86 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/fc0e9f303c2ace9bd3c5510cedc96f6e.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, baseline, precision 8, 925x460, components 3 Hash441ba664ea674101de9ceb8f015cbebd 05b78d1fdb7068b64dc7aed1f374d239a6db0b90 1a229de7ea15b87d11eb265dfbefb0b5b67ddd254b680a74b234bd0f1dbac872
GET /genfiles/cms/1/desktop/banner/fc0e9f303c2ace9bd3c5510cedc96f6e.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 85495
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "441ba664ea674101de9ceb8f015cbebd"
last-modified: Wed, 31 Jan 2024 11:27:52 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621f9e7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/878b99fe66989cafa9bac5805912f921.jpg | 172.64.146.192 | | 29 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/878b99fe66989cafa9bac5805912f921.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 925x460, components 3 Hashb85353532f4581066961fc3c1adfa8b7 eeff33e3ba97d14b09d4c79dcbc3871efde7599a b747517f3ecc19b819f433a50796998bb4dba5bf040beecc06e7877e159e11a1
GET /genfiles/cms/1/desktop/banner/878b99fe66989cafa9bac5805912f921.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 28838
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "b85353532f4581066961fc3c1adfa8b7"
last-modified: Tue, 30 Apr 2024 09:03:22 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621f987130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/ae7d9fd9353fc5c1d635d4e44bb55062.jpg | 172.64.146.192 | 200 OK | 113 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/ae7d9fd9353fc5c1d635d4e44bb55062.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size113 kB (112684 bytes) Hash5f77d483cf57645f2b6b948b85e32ed1 4f2fdf7239990b8c699a832d3ba4a4239902c94c 1bc73b3ca5ba155f891a0dd41583370fb92183f80947bc1e54d3e6fa5d4d3ad1
GET /genfiles/cms/1/desktop/banner/ae7d9fd9353fc5c1d635d4e44bb55062.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 112684
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "5f77d483cf57645f2b6b948b85e32ed1"
last-modified: Thu, 05 Oct 2023 10:30:26 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621f9b7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/2dd51a5df192de626af47472e83c2fa7.jpg | 172.64.146.192 | | 57 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/2dd51a5df192de626af47472e83c2fa7.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 925x460, components 3 Hashe2271baa9d2ea9fbef6499a36e57d693 5edf52c790050a2f510b616d2afa9fd5719de15f bd79ff386dabcae37efa18dec5530fc97dd9e63ec2ef81d1aacafbc518327565
GET /genfiles/cms/1/desktop/banner/2dd51a5df192de626af47472e83c2fa7.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 56601
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "e2271baa9d2ea9fbef6499a36e57d693"
last-modified: Fri, 26 Apr 2024 05:30:02 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621f9d7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/f70320da261774098082b38025d52305.jpg | 172.64.146.192 | | 270 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/f70320da261774098082b38025d52305.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size270 kB (269681 bytes) Hashcb1eae22e8d376d00a8be78afcd75fea 6b05e57651883f6fb8cd85479b663bd9c8fb3529 d6e188aef0413bd8a5415118b4196fa9ea50273efd7e655ca2b3cf0ff72fe96c
GET /genfiles/cms/1/desktop/banner/f70320da261774098082b38025d52305.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 269681
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "cb1eae22e8d376d00a8be78afcd75fea"
last-modified: Fri, 26 Apr 2024 03:31:08 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621fa17130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/sfiles/logo_teams/65e3e972954419765c3ce21698edf6cb.png | 185.244.209.62 | | 10 kB |
URL v2l.traincdn.com/sfiles/logo_teams/65e3e972954419765c3ce21698edf6cb.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashf7a469da8a047ad39b9f047d096663b2 d03070229851e59eba6ec4f21dbc77f64ccbe21c f5d985cf840546bbd65ebed255606e52b1f8cfce48fc1bc61cee5a705b3fb43e
GET /sfiles/logo_teams/65e3e972954419765c3ce21698edf6cb.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 10284
x-amz-id-2: zcoNw0X+LohOHahQRk5JTfCC0cXapJ6aG/KK1Af0cYyBcGe8uaO1kUMVj1epoiLTOiOn+XxJVR4=
x-amz-request-id: EGMBXH81W8BCY7MH
last-modified: Tue, 31 Jan 2023 13:33:34 GMT
etag: "f7a469da8a047ad39b9f047d096663b2"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: I6Hql_BO5Ufn.roel0vAyEEbOVvsb6Pl
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.048
traceparent: 00-9f658080743671683f732f96beb55e88-fec9c20d34ac002a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T15:06:27+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/css/keyboard.css | 185.244.209.62 | 200 OK | 153 kB |
URL GET HTTP/2v2l.traincdn.com/default/css/keyboard.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size153 kB (152588 bytes) Hash97243cd01a2edc8c70200e3026829314 d05e9e53031fd380ebb844507b9ff795afcabe4f 9b780e7d470a9927718ad48dafe139732d2ffb81fc80e4a3f928b9254b6fd358
GET /default/css/keyboard.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: text/css
last-modified: Wed, 28 Feb 2024 06:18:25 GMT
etag: W/"65ded031-200b"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-a6ee4fd4a716e04e02d65a13a6ae9a1b-04aa0fefe36102bd-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/f5db46d24aea0f9d3d07d0be290981ee.png | 185.244.209.62 | 200 OK | 6.6 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/f5db46d24aea0f9d3d07d0be290981ee.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashf7de1322f1bf14d144ccff1621616e48 5f2313d13085ac71d9f0e7bf31d2ff620c17d256 0690c75893673eef666a89feeead373f4472dd43e0e0423973b5addf6debc543
GET /sfiles/logo_teams/f5db46d24aea0f9d3d07d0be290981ee.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 6639
x-amz-id-2: vN2wtBknD9l/3V7BnSgkJgHG3tyJ5kIRJpVGZgpaynDdbWBqjoUDLqaBtgdCe4DcaZIiEDnAcHc=
x-amz-request-id: RRDT0BQAQYTJ9PX7
last-modified: Thu, 12 Oct 2023 08:25:24 GMT
etag: "f7de1322f1bf14d144ccff1621616e48"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: GngX5IbBF3NOPlAxV7T5Y5oizA16.4T_
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.021
traceparent: 00-bd3a338433331ffc5fa3ef1c039043de-e98f2c2862033ff5-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T05:31:08+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/js/popup.js?v=05052024 | 185.244.209.62 | | 336 kB |
URL v2l.traincdn.com/default/js/popup.js?v=05052024 IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size336 kB (336435 bytes) Hashccb87a7c12ab05c25bc783aa65449c90 41f9acf665ec7aeac1abc2d01888c5f44d732e43 f3bf2fae09b488b8b548df107179d559c5660a5e8cfaf3f3346feb097c6092db
GET /default/js/popup.js?v=05052024 HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:47 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:18:31 GMT
etag: W/"65ded037-6029"
expires: Sat, 04 May 2024 21:12:34 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-bc82abc48525314b32cf1131d0c41609-395e8e29593fc420-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/coupon_v2.App.Default.563592e24a897eb09839.chunk.js | 185.244.209.62 | | 36 kB |
URL v2l.traincdn.com/bundle/app/Default/Desktop/coupon_v2.App.Default.563592e24a897eb09839.chunk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashbd222f629c9dbdfb56c4259610b7fad7 8a9752874aa0e40ee0e012ddbe428b3dd864e941 66008116af08e37883ab0ebf3c847b53af5b404939f0228c51f5f0008323f4af
GET /bundle/app/Default/Desktop/coupon_v2.App.Default.563592e24a897eb09839.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:52 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-135d6"
expires: Sun, 02 Jun 2024 09:51:29 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-407a29aed18cc4d3a80e78df01e33471-d281ce68d4972e80-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:01+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/1247027.png | 185.244.209.62 | | 11 kB |
URL v2l.traincdn.com/sfiles/logo_teams/1247027.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash87f0a3825b060be3c325edb3d768af44 c8129ac5f58665d97b58c1950f02dec0e41f3cda b160e60d939c7742ec6cedd40977eb52f55cbd083a0ac7ac465f609855ec4d2c
GET /sfiles/logo_teams/1247027.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:02 GMT
content-type: image/png
content-length: 10856
x-amz-id-2: uALtTaR7soGV37pUmFm2FJbmkwdfK0zwvYKeOiBfMbZo5lv7gOqkfHFQbUHJuJBwYZSabL9MUXlt89blixLK+w7nY0+8Hm4kKnrHCmHSZQU=
x-amz-request-id: W4EZ6FA1TT1PZNQR
last-modified: Tue, 24 Jan 2023 15:24:08 GMT
etag: "87f0a3825b060be3c325edb3d768af44"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: lYShEKowxN46C771phqCZA4keddkBWKa
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.049
traceparent: 00-e06c5f3bb13c968be34afaaf0ed85df6-216aa1523b903f04-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T17:19:06+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/js/core/crypt.js | 185.244.209.62 | | 138 kB |
URL v2l.traincdn.com/default/js/core/crypt.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size138 kB (138037 bytes) Hashc5de99b7c078ff658594d1e15272824a 0c125ccb9adf00fbbc1d7ccc0791b06d736b0642 6473cc159cf9be471e4ade6dc4e35b02831701d2fa0cdf25fd6259eddc269bb6
GET /default/js/core/crypt.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:18:31 GMT
etag: W/"65ded037-143d"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-d5f3f003063925449c1b89c836b956a8-fb66c3d7cacf1125-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/203c6c6d707d66dec078822fa51a51fa.jpg | 172.64.146.192 | 200 OK | 83 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/203c6c6d707d66dec078822fa51a51fa.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2023:12:15 18:39:41], baseline, precision 8, 925x460, components 3 Hash7aaa269fac906490bc67eb06bf1f5789 e62e94af7e947a3642a0f0d32b6c88604c461fbf 6b464aec88471bcdbb14303a50fb32ebb9fc97b8080b8d8172c4aaea6b28eb4a
GET /genfiles/cms/1/desktop/banner/203c6c6d707d66dec078822fa51a51fa.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 82932
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "7aaa269fac906490bc67eb06bf1f5789"
last-modified: Tue, 23 Jan 2024 10:47:34 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fac7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/23a8dbd9eef58356fad253ead01f013a.jpg | 172.64.146.192 | | 230 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/23a8dbd9eef58356fad253ead01f013a.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size230 kB (229464 bytes) Hash2b6851fbf6fcf4c15d374a0acb71f08e ae02e031647aeac136053cd031d2b2cb391622b0 ca9e069ed1e5091513464184197ab33e1957b654671d583f4687c8136314e3cd
GET /genfiles/cms/1/desktop/banner/23a8dbd9eef58356fad253ead01f013a.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 229464
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "2b6851fbf6fcf4c15d374a0acb71f08e"
last-modified: Sat, 27 Apr 2024 06:32:35 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fab7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/styles/css/registration/main.616b4fdf850ba31844e18dcc657805fc.css | 185.244.209.62 | | 66 kB |
URL v2l.traincdn.com/styles/css/registration/main.616b4fdf850ba31844e18dcc657805fc.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashc85cf9c546fe59e8aca8ad30ed7c17d0 a38708f0f0ced85dd5fd3d1592760c6b17127afd c1e0c8c13e993791fc5888fb433eb75ba8d8c781aeb7829ef508fc73eb60d941
GET /styles/css/registration/main.616b4fdf850ba31844e18dcc657805fc.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 08:05:27 GMT
etag: W/"662225c7-14148"
expires: Sun, 19 May 2024 08:10:18 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.002
traceparent: 00-e9e9b4009e38cd5cf9ae0d2caaf02a1a-ac87dbe64d4b2a68-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-19T08:08:23+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/result/main.a767c3011e2bc3920f2311d14352e66e.css | 185.244.209.62 | | 373 kB |
URL v2l.traincdn.com/styles/css/result/main.a767c3011e2bc3920f2311d14352e66e.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size373 kB (373007 bytes) Hashec61c33676bf9266f114c542f4961896 0107efe02e60defd23a713bd17fc0c05adf87b73 a166513a55d89858b42651e46259629144a122a4b0d523c9dd68fb87d5dc9a6c
GET /styles/css/result/main.a767c3011e2bc3920f2311d14352e66e.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 30 Apr 2024 07:23:32 GMT
etag: W/"66309c74-379cd"
expires: Thu, 30 May 2024 07:28:49 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-05cf1445bc8d3a97415f9f6bd44dfd5c-06561ef2bb9dd6ed-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-30T07:26:28+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/js/core/util.js | 185.244.209.62 | | 176 kB |
URL v2l.traincdn.com/default/js/core/util.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size176 kB (176013 bytes) Hash206d0084153a1d4734b070b304f67fc9 4a5810e98ffa78e0def33f0f95b809056527514e fc161d078bb637c0f33c99779aef4e544ee20905796a04a94cf6bdaee6b42f06
GET /default/js/core/util.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:18:31 GMT
etag: W/"65ded037-10bb"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-2966ea43c02baca904b72263e698cdc7-d84f4dbebd7cf969-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/c-bottom-msg/main.16c30533f2f068afba2a1c10e00dead2.css | 185.244.209.62 | | 305 kB |
URL v2l.traincdn.com/styles/css/c-bottom-msg/main.16c30533f2f068afba2a1c10e00dead2.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size305 kB (305285 bytes) Hashc98e19420562132d9f2720f77c853b20 cbee9187e771766e425b55205b0bf59d8b789d76 6482efb41346356b71616b66d14fdc702292f9aeb5bfb707c5f9ced82c4b5f8b
GET /styles/css/c-bottom-msg/main.16c30533f2f068afba2a1c10e00dead2.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 12:01:35 GMT
etag: W/"661e689f-731"
expires: Thu, 16 May 2024 12:13:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-1a73d6ee06863bf5c73d20971aeb650b-9c7d4a98230f579a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T12:11:14+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/91e79d3c5c016e03d21cb0ed34f8e6c0.jpg | 172.64.146.192 | 200 OK | 81 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/91e79d3c5c016e03d21cb0ed34f8e6c0.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 925x460, components 3 Hash0097772da7ea76447c899c5a81b7eb6a 93a6dbe38ee00a21764e55ddf548b6d86e6427e8 ef69b14fa79929af285b78785f81e8a63b8040694bd44e088632c33b70766c42
GET /genfiles/cms/1/desktop/banner/91e79d3c5c016e03d21cb0ed34f8e6c0.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 81056
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "0097772da7ea76447c899c5a81b7eb6a"
last-modified: Thu, 02 May 2024 09:01:07 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb37130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/styles/css/arctic-modal/main.747cc92e3567513c30802f59030d68b2.css | 185.244.209.62 | | 89 kB |
URL v2l.traincdn.com/styles/css/arctic-modal/main.747cc92e3567513c30802f59030d68b2.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash0fe10be5b24d0ef88ac95d5fd3188e31 56491245ea4eb0fd1b1931d3f6f52d662e7269cc a6d2dc53cdaf2531485f5a1486d996b018a1730316fc4919fcbf678615471024
GET /styles/css/arctic-modal/main.747cc92e3567513c30802f59030d68b2.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 12:01:29 GMT
etag: W/"661e6899-1579"
expires: Thu, 16 May 2024 12:13:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-14d75a533c4f3b77c02f3843928b837a-650dd814c23b1b73-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T12:11:14+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/4cc241b36c2b1559e295bb0106eb9c5e.png | 172.64.146.192 | | 305 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/4cc241b36c2b1559e295bb0106eb9c5e.png IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typePNG image data, 925 x 460, 8-bit/color RGB, non-interlaced Size305 kB (305287 bytes) Hashac4c4957903ce60dbe0000bfe39c8d88 c6fb0619bdb439d5f9a28117f1af918b03f8a739 4566ddcdeda50b1ea8c487f77a2313a4a17b3d5c8e07fb27687f4dd4125222a4
GET /genfiles/cms/1/desktop/banner/4cc241b36c2b1559e295bb0106eb9c5e.png HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/png
content-length: 305287
last-modified: Fri, 19 Apr 2024 10:43:01 GMT
etag: "ac4c4957903ce60dbe0000bfe39c8d88"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.005
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb47130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.99 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:24:54 GMT
expires: Fri, 02 May 2025 23:24:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 186488
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/77bcb2f342523f503335bfb6bc52b64c.jpg | 172.64.146.192 | | 343 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/77bcb2f342523f503335bfb6bc52b64c.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size343 kB (343395 bytes) Hash4b601764297512d703a8f25350ddbd59 85e14a9dd9d37a980cf2987133746c160341016f acaf0d24b96546103d089b590e3e81d494d6d9749ebf8e574986296b4a307ca6
GET /genfiles/cms/1/desktop/banner/77bcb2f342523f503335bfb6bc52b64c.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 343395
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "4b601764297512d703a8f25350ddbd59"
last-modified: Fri, 08 Sep 2023 10:45:51 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb57130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/3ea9b14dc305828ee751719ce01bf3be.jpg | 172.64.146.192 | | 261 kB |
URL 1xbet.com/genfiles/cms/1/desktop/banner/3ea9b14dc305828ee751719ce01bf3be.jpg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 925x460, components 3 Size261 kB (261300 bytes) Hash09a8806f6cf64db4baffa154c52f1aa7 fef0e1e11f00c18a3cb3f2ca982af7f14396266c c32dd67220f4065fb5e0cf0009958e5aac5fa774a1abb61ae532513c041ed3ff
GET /genfiles/cms/1/desktop/banner/3ea9b14dc305828ee751719ce01bf3be.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 261300
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "09a8806f6cf64db4baffa154c52f1aa7"
last-modified: Thu, 01 Feb 2024 15:47:26 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb67130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263594
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/6f0f536d14799f77277263e5217c9168.jpg | 172.64.146.192 | 200 OK | 258 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/6f0f536d14799f77277263e5217c9168.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 925x460, components 3 Size258 kB (257966 bytes) Hash1ea8864a6bf87e6a87aa3b8d595a2459 88f0d1fccbfd59972bee295965ab6a12f0841ec0 50e53a9da81bca75150ed53f0e8dc177ed36d6294ebc5d741c87cc7d4817fe35
GET /genfiles/cms/1/desktop/banner/6f0f536d14799f77277263e5217c9168.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 257966
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "1ea8864a6bf87e6a87aa3b8d595a2459"
last-modified: Thu, 07 Mar 2024 08:46:59 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb87130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/api/internal/eventlogo | 172.64.146.192 | | 85 kB |
URL 1xbet.com/api/internal/eventlogo IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash0b59ca21d2090b3cc5beb251304d0a25 cf79084191a2c354ac0501e364c46e0d33efc74f adbca411000271cf782af917241a7f0287026663554481255df7c353efb71fed
GET /api/internal/eventlogo HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:57 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=59, dt_total;dur=60.648, wf-uht;dur=0.072
traceparent: 00-a68e9ca28027a741a6082378599a5a98-2ae5604a6ac5e416-01
x-dt: 70
x-time-ng: 0.060
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d46db117130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LineFeed/GetGameZip?id=527157568&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 23 B |
URL 1xbet.com/LineFeed/GetGameZip?id=527157568&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hashb5bd5632d7c6eef6a68b971391c1e6cb c6674eaad9d480152367b91cb2eee1946acf90d8 07f098657510305c734ef8a9db49fe3645ca6b65081e5488cdd5426ffaa30fac
GET /LineFeed/GetGameZip?id=527157568&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: application/json; charset=utf-8
content-length: 15667
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.020
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d60cf0f7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.99 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:24:54 GMT
expires: Fri, 02 May 2025 23:24:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 186488
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263594
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/reload?k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh | 142.250.74.132 | | 31 kB |
URL www.google.com/recaptcha/api2/reload?k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
Hash90d9fcb83b9b3561cabb383c667e11ed 103f5e1f9e2bd41a91b094e7f9d8b03207606669 af65b2adb43e3f88027c8c6506418d2cfbc68ee167f81eb5053bdebb07fed3b8
POST /recaptcha/api2/reload?k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 5940
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Sun, 05 May 2024 03:13:02 GMT
expires: Sun, 05 May 2024 03:13:02 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AIgNtRW6yeVWZ2PivHcbasakWxiYkOR2uxnm1kfQVsxrhs8Zumqa_DXuLNqNt0uZ0NXIDNo8XXtdBs2hh9vd3JI;Path=/recaptcha;Expires=Fri, 01-Nov-2024 03:13:02 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 | 216.58.207.227 | | 15 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15340, version 1.0 Hash19b7a0adfdd4f808b53af7e2ce2ad4e5 81d5d4c7b5035ad10cce63cf7100295e0c51fdda c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:48:27 GMT
expires: Fri, 02 May 2025 01:48:27 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
age: 264276
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncn0zvxyoqj CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 264131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/refresh_2x.png | 142.250.74.99 | | 600 B |
URL www.gstatic.com/recaptcha/api2/refresh_2x.png IP142.250.74.99:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced Hash0f2a4639b8a4cb30c76e8333c00d30a6 57e273a270bb864970d747c74b3f0a7c8e515b13 44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 12:37:20 GMT
expires: Thu, 09 May 2024 12:37:20 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 225343
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/audio_2x.png | 142.250.74.99 | | 530 B |
URL www.gstatic.com/recaptcha/api2/audio_2x.png IP142.250.74.99:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced Hash88e0f42c9fa4f94aa8bcd54d1685c180 5ad9d47a49b82718baa3be88550a0b3350270c42 89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:45:28 GMT
expires: Thu, 09 May 2024 23:45:28 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 185255
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/payload?p=06AFcWeA7ow5q_EENiFgyJQoTcsqMIS_MqvLPbvF-A8ByqXly_AqIfjtbuA1omzrrM6G62pKrWZZZG_5VP8kFREL6go2aZwI6jjT54hotixbGisGZvp_rr78eXV6dBfPvda6c9mZ4aznnoxuCxPQGJRq7bBojtip461wOewifj2VEirxFEP9o_d6fdmdny6vyBdZ3_G-KsRUj5&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh | 142.250.74.132 | | 29 kB |
URL www.google.com/recaptcha/api2/payload?p=06AFcWeA7ow5q_EENiFgyJQoTcsqMIS_MqvLPbvF-A8ByqXly_AqIfjtbuA1omzrrM6G62pKrWZZZG_5VP8kFREL6go2aZwI6jjT54hotixbGisGZvp_rr78eXV6dBfPvda6c9mZ4aznnoxuCxPQGJRq7bBojtip461wOewifj2VEirxFEP9o_d6fdmdny6vyBdZ3_G-KsRUj5&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3 Hash32eccc8f34d131909238f19825e8497a ddecf1a6d3d0ed96fc1b38becba15ee5b1384aa9 88c62d9aab653c6ffb71cdca87fa559974a399a094cb8e1986656c3d12065f9f
GET /recaptcha/api2/payload?p=06AFcWeA7ow5q_EENiFgyJQoTcsqMIS_MqvLPbvF-A8ByqXly_AqIfjtbuA1omzrrM6G62pKrWZZZG_5VP8kFREL6go2aZwI6jjT54hotixbGisGZvp_rr78eXV6dBfPvda6c9mZ4aznnoxuCxPQGJRq7bBojtip461wOewifj2VEirxFEP9o_d6fdmdny6vyBdZ3_G-KsRUj5&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh
Cookie: _GRECAPTCHA=09AIgNtRW6yeVWZ2PivHcbasakWxiYkOR2uxnm1kfQVsxrhs8Zumqa_DXuLNqNt0uZ0NXIDNo8XXtdBs2hh9vd3JI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
expires: Sun, 05 May 2024 03:13:03 GMT
date: Sun, 05 May 2024 03:13:03 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js | 142.250.74.132 | | 7.5 kB |
URL www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (17649) Hash85eff967b6703760e0e562179e7ef0ef a4567db32ae2ea7049209561d2edde3d26fbef88 6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68
GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:44 GMT
expires: Fri, 02 May 2025 01:57:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263719
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&badge=bottomright&cb=jrtvevzx5o5 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 124919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| v2l.traincdn.com/styles/css/popup-doublewin/main.98d621083a81e6d4aec4cd0bbee60371.css | 185.244.209.62 | | 18 kB |
URL v2l.traincdn.com/styles/css/popup-doublewin/main.98d621083a81e6d4aec4cd0bbee60371.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashdf8c88f0d702785b543815a1ad89ddaa 61d5e969e0c6a5339db1979a13ea3126aaee39fe 93285d06ea93fd800149745153f839faa722a8ee48eea477767dbce50c86e62b
GET /styles/css/popup-doublewin/main.98d621083a81e6d4aec4cd0bbee60371.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 10:55:24 GMT
etag: W/"66151e9c-27d7"
expires: Thu, 09 May 2024 11:07:36 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-11678e9e9d4945a0a8b17f63520e9f60-2f355a4c9fd922b7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-09T11:06:05+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncn0zvxyoqj CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 264131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/canonical_car.png | 142.250.74.99 | | 11 kB |
URL www.gstatic.com/recaptcha/api2/canonical_car.png IP142.250.74.99:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 98 x 90, 8-bit/color RGB, non-interlaced Hasha4741c6089e163f0e5c0cdb2c698a03e 03b190c8d9350802cbabbccd2757cff1fb7115f0 c9685b413894b0647b42edf9cac1fc0b2ed044c1fe238d843b9ca3d29db1b805
GET /recaptcha/api2/canonical_car.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 11174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 07:44:46 GMT
expires: Fri, 10 May 2024 07:44:46 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 156497
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/refresh_2x.png | 142.250.74.99 | | 600 B |
URL www.gstatic.com/recaptcha/api2/refresh_2x.png IP142.250.74.99:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced Hash0f2a4639b8a4cb30c76e8333c00d30a6 57e273a270bb864970d747c74b3f0a7c8e515b13 44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 12:37:20 GMT
expires: Thu, 09 May 2024 12:37:20 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 225343
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/audio_2x.png | 142.250.74.99 | | 530 B |
URL www.gstatic.com/recaptcha/api2/audio_2x.png IP142.250.74.99:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced Hash88e0f42c9fa4f94aa8bcd54d1685c180 5ad9d47a49b82718baa3be88550a0b3350270c42 89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:45:28 GMT
expires: Thu, 09 May 2024 23:45:28 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 185255
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/payload?p=06AFcWeA46S8kfQMaWnAytzZOfOyve5YsXf8PqB3bpo3u3ZHAXGZdpYKSrepFc_I00PL6PAumo1OK4zoQrm99VOFiAuOec4yLQJPExKUmI4CSu8T4LxTEYOnr9yPhk2kI5lqxJMUjv1jrjbHzO-7D4OrEXztM8lyCIV-gOPMxPvd_6MWY-GdxPeavgS2eHETHZygkLGu25G5di&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh | 142.250.74.132 | | 45 kB |
URL www.google.com/recaptcha/api2/payload?p=06AFcWeA46S8kfQMaWnAytzZOfOyve5YsXf8PqB3bpo3u3ZHAXGZdpYKSrepFc_I00PL6PAumo1OK4zoQrm99VOFiAuOec4yLQJPExKUmI4CSu8T4LxTEYOnr9yPhk2kI5lqxJMUjv1jrjbHzO-7D4OrEXztM8lyCIV-gOPMxPvd_6MWY-GdxPeavgS2eHETHZygkLGu25G5di&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3 Hashb8d2571d8841b47976e52b4578f42e36 f20127f5c7f6ac77b8373cda38fe64b76e431e81 4730639f7055151bf85adbfb2b1a112223d8e60334978278fa3f31eed2dee226
GET /recaptcha/api2/payload?p=06AFcWeA46S8kfQMaWnAytzZOfOyve5YsXf8PqB3bpo3u3ZHAXGZdpYKSrepFc_I00PL6PAumo1OK4zoQrm99VOFiAuOec4yLQJPExKUmI4CSu8T4LxTEYOnr9yPhk2kI5lqxJMUjv1jrjbHzO-7D4OrEXztM8lyCIV-gOPMxPvd_6MWY-GdxPeavgS2eHETHZygkLGu25G5di&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh
Cookie: _GRECAPTCHA=09AIgNtRUxcqoEPaO9PGC5UXNIxtMa6vkFkRu23hcQPypEiwFjsgk37CyTL5gkEiYvnEZL9TlAz2drgZKgZpj5TFw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
expires: Sun, 05 May 2024 03:13:03 GMT
date: Sun, 05 May 2024 03:13:03 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js | 142.250.74.132 | | 7.5 kB |
URL www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (17649) Hash85eff967b6703760e0e562179e7ef0ef a4567db32ae2ea7049209561d2edde3d26fbef88 6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68
GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:44 GMT
expires: Fri, 02 May 2025 01:57:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 263719
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| widget.suphelper.top/injector.js |  104.18.39.72 | | 74 kB |
URL widget.suphelper.top/injector.js IP104.18.39.72:0
File typegzip compressed data, from Unix Hash849d64028b54789a983728a2cb1dfb01 b0aa73d89f2ee32db433e7b36b1ee74a01f5d70e 5c32e3d186e26fbfc805cf2494dd3ba6989d8061a0233677f82a9b91b267e763
GET /injector.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=14400
last-modified: Thu, 02 May 2024 07:01:48 GMT
etag: W/"32e7a-18f381bf77a"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
expires: Sun, 05 May 2024 07:13:04 GMT
server: cloudflare
cf-ray: 87ed8d718eaf56a4-OSL
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/81.9c6562bba5669b47.js | 104.18.39.72 | 200 OK | 40 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/81.9c6562bba5669b47.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint41:D3:A3:3C:61:71:CC:56:60:F0:BE:CD:81:3B:5D:26:23:49:8D:36 ValidityTue, 26 Mar 2024 09:53:55 GMT - Mon, 24 Jun 2024 09:53:54 GMT
File typegzip compressed data, from Unix Hash81a90af6783cd4469f28544147bb818f 7a8913836534ef7ecb3603d914f37549d83e5a09 38e353bc8523950b447835839a8652778651bbed2dab0ab768dd6e8b157d1bf1
GET /_next/static/chunks/81.9c6562bba5669b47.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:05 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Mon, 22 Jan 2024 07:49:06 GMT
etag: W/"8f42-18d3024f9c4"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 384773
expires: Mon, 05 May 2025 03:13:05 GMT
server: cloudflare
cf-ray: 87ed8d77e8ed56a4-OSL
X-Firefox-Spdy: h2
|
|
| 1xbet.com/LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash4d2683aaebfe10e7846f9f8bc668cd3e 1a4365d62ed8d8258250966763c566303ec0523d 4fd0f1b684f00b3377a2e0fd2ac92fed515a394c30c4f468740bb40d76968f62
GET /LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:10 GMT
content-type: application/json; charset=utf-8
content-length: 15917
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:09 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.019
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d951b1c7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| widget.suphelper.top/_next/static/chunks/webpack-fb94d2f19425a3e3.js | 104.18.39.72 | | 18 kB |
URL widget.suphelper.top/_next/static/chunks/webpack-fb94d2f19425a3e3.js IP104.18.39.72:0
File typegzip compressed data, from Unix Hash9651b78497d358eb67dfe822981b987a afb43f09abf88118bceea4a70148ea5d337f1416 723177c5689e165279a9780cc83e2cf0b808651ea20c297e84007b06ec997652
GET /_next/static/chunks/webpack-fb94d2f19425a3e3.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"ed0-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 376429
expires: Mon, 05 May 2025 03:13:04 GMT
server: cloudflare
cf-ray: 87ed8d740f9056a4-OSL
X-Firefox-Spdy: h2
|
|
| 1xbet.com/LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash27c0bd98416da0357d9943b8bb210fd1 bc45bfcbede1b2c7ff64119f39c7140f326fba6a 6fa99f4dfb1d75752e2521395031143cdb5c9f589429ffedb8bc9476326417b9
GET /LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:10 GMT
content-type: application/json; charset=utf-8
content-length: 16119
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:10 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.020
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8d95fb887130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh | 142.250.74.132 | | 1.8 kB |
URL www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh IP142.250.74.132:0
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
Hashab4d20a6e3c20e611f82dd7eb00b4d64 819ab98917c9dae86d57a9533ac39693cf171dcf 874725b59bb52001156cab832f6344afb52185fdbc33e36fdc0e26e2e72a4642
GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 May 2024 03:13:02 GMT
content-security-policy: script-src 'nonce-Fa8wDL0RwCdo6KbySyZPXQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| classify-client.services.mozilla.com/api/v1/classify_client/ | 34.98.75.36 | | 64 B |
URL classify-client.services.mozilla.com/api/v1/classify_client/ IP34.98.75.36:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hashe1a05c4c96c57b65bceeeffd9bc71527 9bc63bb6562f97b9510d42b9c62983dd7ecbc09b db3f01aef135498287b3bb912672198c7d43da2a9c3dff8530c4d9aad090acad
GET /api/v1/classify_client/ HTTP/1.1
Host: classify-client.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:13 GMT
content-type: application/json
content-length: 64
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| 1xbet.com/LiveFeed/GetTopGamesStatZip?lng=en&cyberFlag=2&country=137 | 172.64.146.192 | | 2.3 kB |
URL 1xbet.com/LiveFeed/GetTopGamesStatZip?lng=en&cyberFlag=2&country=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash90ab090dddcee0c196766642df88af15 407a86a32955758e0559d6af037f718e9265a50f c313f2f4cdf754eec4ad73e48d96e20aff0c7543a0c1f29367ba518cca1f62a6
GET /LiveFeed/GetTopGamesStatZip?lng=en&cyberFlag=2&country=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:14 GMT
content-type: application/json; charset=utf-8
content-length: 2298
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:14 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.005
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8db0cfef7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash65afd18444671f108ab92a9fa68b31d9 5fc9451bab8790784bea6915d5220438f23aabd5 d27afe4b465ad7b98fc660b1d1805ccfd894442e2eec0d9cb945dfeaaceb57fd
GET /LineFeed/GetGameZip?id=528450883&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:18 GMT
content-type: application/json; charset=utf-8
content-length: 15920
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:17 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.019
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8dc709797130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash9f973d27fb1cb42f179120328c9ab506 1f4827b1abc796806c1539e539eaddd24c4c57a7 2a3aa6ab80411fa31728c11373645e2da95dd3a8317e1cc13d93b33d9987b0bf
GET /LineFeed/GetGameZip?id=527124779&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:18 GMT
content-type: application/json; charset=utf-8
content-length: 16119
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:18 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.019
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8dc7f9f87130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LineFeed/GetGameZip?id=527157568&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 | 172.64.146.192 | | 16 kB |
URL 1xbet.com/LineFeed/GetGameZip?id=527157568&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hash9298cce76d44d4cfcb92ddb814cbac21 0284e740bcc6fe29ccc555fa2a801015c1d4622c b5f78ca2c134e48513ea3941ef7340036d3904331ffe228bd52ebcc2850eb1bb
GET /LineFeed/GetGameZip?id=527157568&cfview=0&lng=en&GroupEvents=true&isSubGames=false&allEventsGroupSubGames=false&partner=1&country=137&fcountry=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:18 GMT
content-type: application/json; charset=utf-8
content-length: 15666
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:18 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.036
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8dc7f9f37130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/desktop/all-types-images/flags-sprite.svg | 172.64.146.192 | | 92 kB |
URL 1xbet.com/genfiles/cms/desktop/all-types-images/flags-sprite.svg IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Hash9f11c894474cd3f70fadbfe9d920c008 e34ed8df77576026f003de7329dad71e5ad0fa90 1008efe78d9614a4f3747c1743599c6bf8430b6cbc3daa779333a6a6198d7aa6
GET /genfiles/cms/desktop/all-types-images/flags-sprite.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 02 Apr 2024 07:33:56 GMT
etag: W/"9f11c894474cd3f70fadbfe9d920c008"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
cf-cache-status: HIT
age: 328
server: cloudflare
cf-ray: 87ed8d220b867130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LiveFeed/BestGamesExtVZip?count=10&lng=en&mode=4&country=137 | 172.64.146.192 | | 6.5 kB |
URL 1xbet.com/LiveFeed/BestGamesExtVZip?count=10&lng=en&mode=4&country=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hashf64fd6b497e726206aba5563a2832c01 fc874463978e63a6d53e808208f591bb48b96fbe 1b376f89c5bad1d697b38f04c9d30f77bf4183420c81915132fb2dd35dd82c5b
GET /LiveFeed/BestGamesExtVZip?count=10&lng=en&mode=4&country=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:23 GMT
content-type: application/json; charset=utf-8
content-length: 6495
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:23 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8de8dee17130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/LiveFeed/GetTopGamesStatZip?lng=en&cyberFlag=2&country=137 | 172.64.146.192 | | 2.3 kB |
URL 1xbet.com/LiveFeed/GetTopGamesStatZip?lng=en&cyberFlag=2&country=137 IP172.64.146.192:0
CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
Hashe9d0fd9aa555d8a76908357088adc5c2 9da3888f8156cb4efb1fde8472a7f9eb12f1520f 90d642bc88cc64b149706b96e4b6c078008d0567a9e5890454bbd4a99e11872c
GET /LiveFeed/GetTopGamesStatZip?lng=en&cyberFlag=2&country=137 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779; hdt=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiWEhDc2lDZGpxNWtYL0I4V3MrUGJpejlxZUxqcFc0SDEwQXBRbUkxTkJHYUMzL1Q1S1VaRUJoSmJWNnpaTFNKOE1IWmtMdGhrZW5tVkkyNUk1TitRTFJjQXVkd1p2OHh5Qy9jemNRM3dvdE41WG56dmpzV1JQdnRyZU45U1JWNEt4TUQ5eWx4VUluRnM1eFVNNDA0K3VYaDk4TEZFWVBwc0lteFg1MlRIOXdUWkNNemp3eXJtekZqNmF6ZEZMSGpMY1hVeDZkRnNBc2VPa0k3eC9Ea0pQRTFrVXJydWdIR0M3Uks0a0pnOWtBVmxCUUowWlFXQWNBUGlHa3p4RlcybWhNWHBGWUlUUlRHRVJvOHJoYUJkdjFxMGVEY3pSTm8xNWpEckU0bkd6NndWIiwiZXhwIjoxNzE0ODkzMTg0LCJpYXQiOjE3MTQ4Nzg3ODR9.tl_5wAdvekfXc9Hfo9dFfp4RXIog7-ngyAP-pzadqE2FVD1CNpSppzIV8JyJkNfyhyLnQN8h36iVPOOJTeVfJA; sh.session.id=0ddac8da-5a8c-4e62-99dd-3590fed40d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:24 GMT
content-type: application/json; charset=utf-8
content-length: 2301
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 05 May 2024 03:13:24 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.005
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ed8df0096a7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/1.fda99f430737988ea222.chunk.js | 185.244.209.62 | 200 OK | 88 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/1.fda99f430737988ea222.chunk.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf223f9cbf76369c00622225b026bcb66 a57cfc0aa4b2c43e79be30cf4065d57c5c4aebd5 3dde52fbf36531e5c2adb8335a2f5cb92ce579279120eb7305d83d806327a84a
GET /bundle/app/Default/Desktop/1.fda99f430737988ea222.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:56 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-15801"
expires: Sun, 02 Jun 2024 09:51:31 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-7065c3d7ae29d78cf07875e9c6182a5a-24271bf4b4e37f7f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:02+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/header/main.d1a6b518599db1ddf992892e696f3884.css | 185.244.209.62 | 200 OK | 116 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/header/main.d1a6b518599db1ddf992892e696f3884.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size116 kB (115480 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /styles/css/header/main.d1a6b518599db1ddf992892e696f3884.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Fri, 26 Apr 2024 11:12:03 GMT
etag: W/"662b8c03-1c318"
expires: Sun, 26 May 2024 11:18:37 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-c02f54e52a4eed29b5aceb657da43921-70c436f8928fcdac-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-26T11:16:26+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/coefs-dashboard/main.cc61b13e120b8a838bc8015073ea52f5.css | 185.244.209.62 | 200 OK | 21 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/coefs-dashboard/main.cc61b13e120b8a838bc8015073ea52f5.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (20610) Hashcc61b13e120b8a838bc8015073ea52f5 cb8699f960e41e087b67bfa4a16f797e335bba03 605d2d05c81a9ae950dea340abdfe77b976f5d29c40ff8b7023d53352ab55f33
GET /styles/css/coefs-dashboard/main.cc61b13e120b8a838bc8015073ea52f5.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:18:36 GMT
etag: W/"6617f13c-5083"
expires: Thu, 16 May 2024 08:18:20 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-d89ff3bd1ae9ca1aee946156efd11561-d44486e6a8e825b3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:33+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/scoreboard/main.d819171d45a247cbd29dfbe5cc9f8a52.css | 185.244.209.62 | 200 OK | 894 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/scoreboard/main.d819171d45a247cbd29dfbe5cc9f8a52.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size894 kB (893566 bytes) Hashd819171d45a247cbd29dfbe5cc9f8a52 c017eccd1bd2b7ba0d8248e4ea1dbca5896eb286 1b22f6a8b88ad42e8e67e01298276ef0ff0f6066a26dae6866b06c9737caa643
GET /styles/css/scoreboard/main.d819171d45a247cbd29dfbe5cc9f8a52.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 08:42:47 GMT
etag: W/"66277487-da27e"
expires: Thu, 23 May 2024 08:56:51 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-15d99b65abfc516c08e3ca1cf413b8c2-f181c296ca9e39a6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-23T08:54:47+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncn0zvxyoqj | 142.250.74.132 | 200 OK | 47 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncn0zvxyoqj IP142.250.74.132:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (38457) Hash5896945caca4629067a1b5ad21a5d316 c45a9a4c3d8b4580bd60cee9738547a3d028f5b4 23a31a3a0f62c07a12c0f85c487ad15a82c741a4f2a83c416fc4103d164e5f0f
GET /recaptcha/api2/anchor?ar=1&k=6LcNBXgpAAAAAABPc9IqtedASd5Fl5BlTyer8EVh&co=aHR0cHM6Ly8xeGJldC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncn0zvxyoqj HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 May 2024 03:12:59 GMT
content-security-policy: script-src 'nonce-z_KrBcmVkjpFeY3RKdhcXg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/d4f8e39ff6b8077f3676e3d2f02acf94.jpg | 172.64.146.192 | 200 OK | 85 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/d4f8e39ff6b8077f3676e3d2f02acf94.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.4 (Windows), datetime=2023:05:31 15:22:40], baseline, precision 8, 925x460, components 3 Hash0c456709772948ac30ab2e6743af4b13 ddd114f50f6285bd2e348f0281d774afb2638690 13aac62946a5c5c303a083a7872f37b2e89bd66371c46f67379258b3e2f164a9
GET /genfiles/cms/1/desktop/banner/d4f8e39ff6b8077f3676e3d2f02acf94.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 84694
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "0c456709772948ac30ab2e6743af4b13"
last-modified: Wed, 21 Jun 2023 09:27:48 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb97130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/74.6cb0ef3d61cd4ef174df.chunk.js | 185.244.209.62 | 200 OK | 18 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/74.6cb0ef3d61cd4ef174df.chunk.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18021), with no line terminators Hash1d6546ffa3ed3c9d2776d66db9288901 ece299ba0020dbb6053fd2dec0e256ef181c2d01 9968c343790c6263992cb7eed14bd1a1b37d615f330cf2ff896ae0e619d006bf
GET /bundle/app/Default/Desktop/74.6cb0ef3d61cd4ef174df.chunk.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:52 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-4665"
expires: Sun, 02 Jun 2024 09:51:29 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-bc77bed5012ae1c3001af26dc14ab17b-e263f2366898fa73-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:49:01+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/default/img/icons/pixels2.svg?v=1714878778 | 172.64.146.192 | 200 OK | 90 B |
URL GET HTTP/31xbet.com/default/img/icons/pixels2.svg?v=1714878778 IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typePNG image data, 1 x 1, 8-bit/color RGB, non-interlaced Hashe45f90dcbe718dea3476c4b69b501a4e e9af26a93c467a77e4733ec537f4f5ce7a4ba089 a439dd8761d9fd4ff88e82e83200877703594491065880dbd4e59ddf4ce1b204
GET /default/img/icons/pixels2.svg?v=1714878778 HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:58 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=14, dt_total;dur=15.669, wf-uht;dur=0.022
traceparent: 00-63f8ae3e612f5d70877c7f15cad99855-5d9724d8e0828e15-01
x-dt: 70
x-time-ng: 0.015
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Sun, 05 May 2024 03:12:58 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d4ecefb7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| widget.suphelper.top/_next/static/chunks/framework-49f1e091cbf6b261.js | 104.18.39.72 | 200 OK | 141 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/framework-49f1e091cbf6b261.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint41:D3:A3:3C:61:71:CC:56:60:F0:BE:CD:81:3B:5D:26:23:49:8D:36 ValidityTue, 26 Mar 2024 09:53:55 GMT - Mon, 24 Jun 2024 09:53:54 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size141 kB (140949 bytes) Hash896d1930437c1ab92b8a359c1d6fdaae 71e0e23d1af9722f356eb5d1c497d100ec8b0f7a 8c508636d885890bfb5c56bcd6dad1b8b64c498781d351b588a8de7f686774d4
GET /_next/static/chunks/framework-49f1e091cbf6b261.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 06:37:37 GMT
etag: W/"22695-18e2c3b24d9"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 376429
expires: Mon, 05 May 2025 03:13:04 GMT
server: cloudflare
cf-ray: 87ed8d740f9156a4-OSL
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/0c294a17-329dda05de2a378d.js | 104.18.39.72 | 200 OK | 10 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/0c294a17-329dda05de2a378d.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint41:D3:A3:3C:61:71:CC:56:60:F0:BE:CD:81:3B:5D:26:23:49:8D:36 ValidityTue, 26 Mar 2024 09:53:55 GMT - Mon, 24 Jun 2024 09:53:54 GMT
File typeJavaScript source, ASCII text, with very long lines (10533), with no line terminators Hash54b2d4e92e16d2ea51898124107af46a ab4225b696e63c9040de1511fa229cf65b4d3750 e17ccea95df87c35add9994b01ef7bb6e8b5c2ebea282c461199a140a5675662
GET /_next/static/chunks/0c294a17-329dda05de2a378d.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 06:19:55 GMT
etag: W/"2925-18d161388b8"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 380710
expires: Mon, 05 May 2025 03:13:04 GMT
server: cloudflare
cf-ray: 87ed8d743fb156a4-OSL
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/coupon/main.e0006488b0e8b3c18cdbe0297094b64c.css | 185.244.209.62 | 200 OK | 153 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/coupon/main.e0006488b0e8b3c18cdbe0297094b64c.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size153 kB (152624 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /styles/css/coupon/main.e0006488b0e8b3c18cdbe0297094b64c.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 12:01:39 GMT
etag: W/"661e68a3-25430"
expires: Thu, 16 May 2024 12:13:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-b289b3b68c8068fe76b424cfc4a65de1-7b29fdcca6a6af23-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T12:11:14+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/desktop/all-types-images/cdn_checker.png | 185.244.209.62 | 200 OK | 95 B |
URL GET HTTP/2v2l.traincdn.com/genfiles/cms/desktop/all-types-images/cdn_checker.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 1 x 1, 1-bit colormap, non-interlaced Hash9591c410148e6883727c5339fd1c02cd 3442a95fe890ce4769b36b2ecc611b801a54cfb5 cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /genfiles/cms/desktop/all-types-images/cdn_checker.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/png
content-length: 95
last-modified: Sat, 30 Mar 2024 08:39:04 GMT
etag: "9591c410148e6883727c5339fd1c02cd"
cache-control: max-age=3600
expires: Tue, 16 Apr 2024 13:12:29 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-8ded66db5778b2d27f3c576469a49426-8014847d4196bb60-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:51:30+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/legacy/min_css/jquery_pack.css | 185.244.209.62 | 200 OK | 56 kB |
URL GET HTTP/2v2l.traincdn.com/default/legacy/min_css/jquery_pack.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (56524), with no line terminators Hashcd611018749368d3a30ed3ffd766be14 27117caaae952a3c2c16a840c55bc1a0ff8fe443 b8de7d1bdb59362aae318425e36a6fe11185f32679c09a1232826a54efed9c93
GET /default/legacy/min_css/jquery_pack.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 12 Mar 2024 08:45:38 GMT
etag: W/"65f01632-dccc"
expires: Tue, 12 Mar 2024 10:12:23 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-18ce7d091508fdcac4ec510319e531f5-e643ec8c94703dbd-01
x-id: osix-hw-edge-gc4
cache: STALE
x-cached-since: 2024-05-05T02:43:33+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/ee5646b5844741ce74c49d629b43ce48.jpg | 172.64.146.192 | 200 OK | 174 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/ee5646b5844741ce74c49d629b43ce48.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size174 kB (174278 bytes) Hashe8c8f3807a9ec9f40dd4b18dd4c2f497 b02403bb38ef86fdf410644278f45e7b3a956a81 a653dd99cc42d04c13da835e9c3adf0451c4ccd541ef1d2b468f360730c116f0
GET /genfiles/cms/1/desktop/banner/ee5646b5844741ce74c49d629b43ce48.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 174278
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "e8c8f3807a9ec9f40dd4b18dd4c2f497"
last-modified: Tue, 11 Apr 2023 18:15:39 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622faf7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/default/min_js/polyfill.7687c517a241de6e490bd1dc769a038c.js | 185.244.209.62 | 200 OK | 2.6 kB |
URL GET HTTP/2v2l.traincdn.com/default/min_js/polyfill.7687c517a241de6e490bd1dc769a038c.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2591), with no line terminators Hash3dcdddf04b41bda2a38ce2dd3739d5d9 a877ec0e150011653a550dd9ea42d21c39034a6a fb6c34c1593ec43519ee0e1b6b24edd37fa1c80049ad6a1d517c89b473c6f118
GET /default/min_js/polyfill.7687c517a241de6e490bd1dc769a038c.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:49:11 GMT
etag: W/"65ded767-9fd"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-d1f8bbe0c951676c70adc87cb1568b2d-ab01e39b42e84872-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/663-81a4add2f1c95639.js | 104.18.39.72 | 200 OK | 373 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/663-81a4add2f1c95639.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint41:D3:A3:3C:61:71:CC:56:60:F0:BE:CD:81:3B:5D:26:23:49:8D:36 ValidityTue, 26 Mar 2024 09:53:55 GMT - Mon, 24 Jun 2024 09:53:54 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size373 kB (372954 bytes) Hash36e4e2c2a2498b008514f1f0250c8018 cfa53d1c8533fb5941d9ff4f1e45e8c831658693 42cd70d177e33b23f4982b671f4bb7f03a966053874a320af3f3ea7b7b7ca1f0
GET /_next/static/chunks/663-81a4add2f1c95639.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 28 Mar 2024 06:56:31 GMT
etag: W/"5b0da-18e83d890e3"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 380710
expires: Mon, 05 May 2025 03:13:04 GMT
server: cloudflare
cf-ray: 87ed8d743fb256a4-OSL
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/layout/main.85a95379b25f6775e7572403890872f4.css | 185.244.209.62 | 200 OK | 4.3 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/layout/main.85a95379b25f6775e7572403890872f4.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4311), with no line terminators Hash12bfb85768619c2be2e14b49e233a9b2 4b05ffb6283101265b659e64f94251696b9277e4 2080c6a17e82612025e7553bba86c63f97c5a52ddb3a287bd64b15a7f199c9c2
GET /styles/css/layout/main.85a95379b25f6775e7572403890872f4.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 07:40:24 GMT
etag: W/"6620ce68-10d6"
expires: Sat, 18 May 2024 07:49:46 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-7dbfa8ac904eff52d736bb738bdb1387-059d02650e28b745-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-18T07:47:54+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/qr-code/main.b9ca0216f3a6b6828ffc54f3df79e58a.css | 185.244.209.62 | 200 OK | 4.3 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/qr-code/main.b9ca0216f3a6b6828ffc54f3df79e58a.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4308), with no line terminators Hashd60e15718f14f08ea4e98adffd448ff1 a80d21dc167bc853f424f5770a40f5d12168e8fe d10a5eecff950eaf07e7e213113eff134d10f17cadad77736bf6513558cf605f
GET /styles/css/qr-code/main.b9ca0216f3a6b6828ffc54f3df79e58a.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Fri, 12 Apr 2024 12:26:03 GMT
etag: W/"6619285b-10d1"
expires: Sun, 12 May 2024 12:34:07 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-e855e08f8fca878aeb3dcd5d3a249382-2d04f5c5a48dd89a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-12T12:32:29+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/f385e6db/_ssgManifest.js | 104.18.39.72 | 200 OK | 77 B |
URL GET HTTP/2widget.suphelper.top/_next/static/f385e6db/_ssgManifest.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint41:D3:A3:3C:61:71:CC:56:60:F0:BE:CD:81:3B:5D:26:23:49:8D:36 ValidityTue, 26 Mar 2024 09:53:55 GMT - Mon, 24 Jun 2024 09:53:54 GMT
File typeASCII text, with no line terminators Hashb6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
GET /_next/static/f385e6db/_ssgManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:13:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 02 May 2024 07:01:48 GMT
etag: W/"4d-18f381bf92a"
vary: Accept-Encoding
cf-cache-status: HIT
age: 245134
expires: Mon, 05 May 2025 03:13:04 GMT
server: cloudflare
cf-ray: 87ed8d745fc456a4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/genfiles/cms/desktop/all-types-images/icon-warning.svg | 185.244.209.62 | 200 OK | 544 B |
URL GET HTTP/2v2l.traincdn.com/genfiles/cms/desktop/all-types-images/icon-warning.svg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash3f18b9d33dcd4989c7c63fab80c5b1f6 a9ec7ca6c22f6648b7678be97784a55179630359 915bb6fc280943a93aadd27df9a371526d2d53da621024b1207820920ca957c4
GET /genfiles/cms/desktop/all-types-images/icon-warning.svg HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v2l.traincdn.com/styles/css/c-bottom-msg/main.16c30533f2f068afba2a1c10e00dead2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:58 GMT
content-type: image/svg+xml
content-length: 544
last-modified: Sat, 30 Mar 2024 13:15:56 GMT
etag: "1d37f1f690d51539770e5d4ace91ab93"
cache-control: max-age=3600
expires: Tue, 16 Apr 2024 13:13:05 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-132d95b8a217374cc202391d43589cf6-23ccc0e3e3c0d92a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T02:14:25+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/8a9e08603bb5ccb531f71d9ad007f3df.jpg | 172.64.146.192 | 200 OK | 305 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/8a9e08603bb5ccb531f71d9ad007f3df.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 925x460, components 3 Size305 kB (304585 bytes) Hash1df56697e63892cec665dbdb225eb4ad ab2bfa138678891341a246dbfa4d104ab2de2bf1 f28b9f848dd87ecb99942ef3f7d62f5aa57ccc4f429bd6d14b84d113269ef501
GET /genfiles/cms/1/desktop/banner/8a9e08603bb5ccb531f71d9ad007f3df.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 304585
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "1df56697e63892cec665dbdb225eb4ad"
last-modified: Tue, 25 Jul 2023 14:27:33 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fb07130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/styles/css/scoreboard-loto/main.1523ea62833c106830770ad16bfe4317.css | 185.244.209.62 | 200 OK | 33 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/scoreboard-loto/main.1523ea62833c106830770ad16bfe4317.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (32761) Hash1523ea62833c106830770ad16bfe4317 4f2f9e1732854587e102667239ad4a34e04077df 1f139eb3b1339e9f6f521889ee92d995048550314528ad354dbd809d8e362f3a
GET /styles/css/scoreboard-loto/main.1523ea62833c106830770ad16bfe4317.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:19:37 GMT
etag: W/"6617f179-7ffa"
expires: Thu, 16 May 2024 08:18:20 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.003
traceparent: 00-fc616c713ab8bde4779d9918d40dd5fd-76b6bd59a76d73f0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:33+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/webpack_vue.bed954b48ca745036ebf.bundle.js | 185.244.209.62 | 200 OK | 990 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/webpack_vue.bed954b48ca745036ebf.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size990 kB (990174 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bundle/app/Default/Desktop/webpack_vue.bed954b48ca745036ebf.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:33 GMT
etag: W/"6634da15-f1bde"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-5045f5ef2b3803fc8d3a29c0c3507124-1cc99ae3b0bd6f0a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:24+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/video_token.43dbde4a112f9e0e6718.bundle.js | 185.244.209.62 | 200 OK | 1.8 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/video_token.43dbde4a112f9e0e6718.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1863), with no line terminators Hashbaa644097feb8b2c263fbbc2ca6b1aff c6fd8128c4520197e96879cc837da357ee4f9851 70bb9ebb82dbc312f031a1c677465e7e589648ad6aca4c5eb747409d62d590ac
GET /bundle/app/Default/Desktop/video_token.43dbde4a112f9e0e6718.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 09:41:24 GMT
etag: W/"6634b144-725"
expires: Sun, 02 Jun 2024 09:51:27 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-842af67c77118412ed70203a285d5269-4cef27ef563acc62-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T09:48:59+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/phone-input/main.e785e02965a2eed51c7de3991f82853e.css | 185.244.209.62 | 200 OK | 9.4 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/phone-input/main.e785e02965a2eed51c7de3991f82853e.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (9368), with no line terminators Hashb1daf62e3406df4c421c5c99628f9cf8 5ddc5733e899db7ad67f8d731e263227a541e07d 045a271c0ccd03d03361b594f419d4db01c2c89c310459c1bd7aaafcc7b105f1
GET /styles/css/phone-input/main.e785e02965a2eed51c7de3991f82853e.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 07:41:06 GMT
etag: W/"6620ce92-2493"
expires: Sat, 18 May 2024 07:46:58 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-ff6358f6b11fb2b5ac1eea70cd0f5596-036ff29acff7f872-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-18T07:45:05+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/bundle/app/Default/Desktop/connection_alert.1c64dd175f236f3deb03.bundle.js | 185.244.209.62 | 200 OK | 508 kB |
URL GET HTTP/2v2l.traincdn.com/bundle/app/Default/Desktop/connection_alert.1c64dd175f236f3deb03.bundle.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size508 kB (507786 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bundle/app/Default/Desktop/connection_alert.1c64dd175f236f3deb03.bundle.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 03 May 2024 12:35:32 GMT
etag: W/"6634da14-7bf8a"
expires: Sun, 02 Jun 2024 12:47:53 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-cdece0f656b3e49cbb382ce60e7df930-86333f34fb5b0fc8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-03T12:45:24+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/sfiles/logo_teams/5288.png | 185.244.209.62 | 200 OK | 11 kB |
URL GET HTTP/2v2l.traincdn.com/sfiles/logo_teams/5288.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash58f53c6250ec347d3bce9b36e0aa4e66 4d1776e8346e4c4d726382a7fc804f1738576992 ced8d821d6b3a1267987da0bebf59ac15eab8244c9010568993cadad600a8dcf
GET /sfiles/logo_teams/5288.png HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:13:02 GMT
content-type: image/png
content-length: 10641
x-amz-id-2: sMdKWaPvkhi/SbLF0TJp4vtd0KZ2lZXW4PixIh7wT+v+MdpNiH3t/XYYQWCzdx8Yb0A0bxmIfR5zHC7zzTZ24Q==
x-amz-request-id: ZYKA8J8YH43GM5XM
last-modified: Wed, 01 Feb 2023 08:03:27 GMT
etag: "58f53c6250ec347d3bce9b36e0aa4e66"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
x-amz-version-id: vgnr0Sl7S9MLIrvGpnJw.orK5mINXo9b
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.026
traceparent: 00-0e951711b1aa1c3d244f67c13de5c7e0-c9f6fc700f15e656-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-04T12:40:33+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/main-preloader/main.7bce0452135f60c9c583ee7eb561a15a.css | 185.244.209.62 | 200 OK | 4.2 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/main-preloader/main.7bce0452135f60c9c583ee7eb561a15a.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4155), with no line terminators Hasha29a86f27d04843e81184bf7d6dfffb5 743ed10ac86033e75f3287ec6513cdecbe68d19b a6f14f05b6ff5286366fa73f4eb2b3a0f41f0c90deeb22773d16d256ac4bb807
GET /styles/css/main-preloader/main.7bce0452135f60c9c583ee7eb561a15a.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:19:04 GMT
etag: W/"6617f158-103a"
expires: Thu, 16 May 2024 08:18:21 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.004
traceparent: 00-6d743de23940e93e71a65697b89eedbb-f15f9fe830c29773-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:33+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/css/rollbar_custom.css | 185.244.209.62 | 200 OK | 1.0 kB |
URL GET HTTP/2v2l.traincdn.com/default/css/rollbar_custom.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (1032), with no line terminators Hasha50755d4e6034964b6c5673dd7cdf40d daed13972f65ad0caa9082ccc71e9b14dfc954e3 322fc28b020f0d3f1e36b066cc47f91aa54ddd9d831cc314d62b1891df09ad0c
GET /default/css/rollbar_custom.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Wed, 28 Feb 2024 06:18:25 GMT
etag: W/"65ded031-408"
expires: Wed, 28 Feb 2024 07:09:24 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-3be7bda0f2378c5446d871fd5b28cb80-c2449437671c55b4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:20+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/calculator/main.79586a7d63d53f806a8e620f4b975b52.css | 185.244.209.62 | 200 OK | 13 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/calculator/main.79586a7d63d53f806a8e620f4b975b52.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (13219) Hash79586a7d63d53f806a8e620f4b975b52 63e939687901e2eb8eba9c314e393903f669a120 5773cb3b200a226f08aac0c599de5e36ac2bce89437368b54af8331accb03f21
GET /styles/css/calculator/main.79586a7d63d53f806a8e620f4b975b52.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:18:33 GMT
etag: W/"6617f139-33a4"
expires: Thu, 16 May 2024 08:18:21 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-df83457a79e8c25e9ab98d1231185805-2009b75fc225e9ca-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:34+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/sprites/css/sports-icons-fea2001a59.min.css | 185.244.209.62 | 200 OK | 90 kB |
URL GET HTTP/2v2l.traincdn.com/styles/sprites/css/sports-icons-fea2001a59.min.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashfea2001a59cdf95a41dec93ea5f736d3 7ea40e45e0c588707c6e350662efe6ff2b37c915 5b026c1fbf74237576835f35d8bfbda3e350cb86877ebe1d851bc77466d0a736
GET /styles/sprites/css/sports-icons-fea2001a59.min.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Sat, 27 Apr 2024 10:16:40 GMT
etag: W/"662cd088-16114"
expires: Sat, 27 Apr 2024 11:23:43 GMT
cache-control: max-age=3600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-baf08ffed724ff65d815ad1b275f72bf-70a32668ab23f554-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:20+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/column-right/main.f547e417ef032a83f213a93abc19c716.css | 185.244.209.62 | 200 OK | 20 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/column-right/main.f547e417ef032a83f213a93abc19c716.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (20445) Hashf547e417ef032a83f213a93abc19c716 3fb2f409901440ea6db55c6bfa31d2f092e63879 f3a5a6c893c3b1f5238c4993d02741daf20d6a8d2d65b09cecd86ac7f12cf8a8
GET /styles/css/column-right/main.f547e417ef032a83f213a93abc19c716.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Mon, 22 Apr 2024 08:24:43 GMT
etag: W/"66261ecb-4fde"
expires: Wed, 22 May 2024 08:32:30 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-033be27c4ab312fdf64e181b5f839494-c79c58c107a8585b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-22T08:30:29+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/js/core/popup.js | 185.244.209.62 | 200 OK | 755 B |
URL GET HTTP/2v2l.traincdn.com/default/js/core/popup.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (752), with no line terminators Hashf6f0916a408dd327f8f926e382d108c5 a9e85175ae1bca24d7777354d7649355d8621089 468d0d8f7b8bafb5a294318512864a1affc1089444e4cbf96e5c592208f0677d
GET /default/js/core/popup.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 755
last-modified: Wed, 28 Feb 2024 06:18:31 GMT
etag: "65ded037-2f3"
expires: Wed, 28 Feb 2024 07:20:54 GMT
cache-control: max-age=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.008
traceparent: 00-7cae259f8730d0e6b91899158232bbe7-e39ed3eb9323b028-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:03:19+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/default/legacy/min_js/jquery_pack.js | 185.244.209.62 | 200 OK | 606 kB |
URL GET HTTP/2v2l.traincdn.com/default/legacy/min_js/jquery_pack.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size606 kB (605837 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /default/legacy/min_js/jquery_pack.js HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Feb 2024 06:18:33 GMT
etag: W/"65ded039-93e8d"
expires: Wed, 28 Feb 2024 07:08:45 GMT
cache-control: max-age=600
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-d20b2bf67dd6319fd502cc396328e725-8552a3309aeb130f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-05-05T03:12:31+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/w-express/main.433cc968a3cf5c0f7fd7be63ef668319.css | 185.244.209.62 | 200 OK | 12 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/w-express/main.433cc968a3cf5c0f7fd7be63ef668319.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (11614) Hash433cc968a3cf5c0f7fd7be63ef668319 d6e2bf13ae6102c6b33478a52f8e8feed681eb35 71f6cc4a6f2bfadc7d3dace2a9e0000741ab8977ba0adca648c69b4080288592
GET /styles/css/w-express/main.433cc968a3cf5c0f7fd7be63ef668319.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:19:52 GMT
etag: W/"6617f188-2d5f"
expires: Thu, 16 May 2024 08:18:20 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.001
traceparent: 00-6b431bdfe3a7c5e9d0215a1fa4f53c0e-fc77d63915da170d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:33+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| v2l.traincdn.com/styles/css/coupon-modal/main.f821604fbe4b21e9ea3f390fdc64f173.css | 185.244.209.62 | 200 OK | 23 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/coupon-modal/main.f821604fbe4b21e9ea3f390fdc64f173.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (23357) Hashf821604fbe4b21e9ea3f390fdc64f173 437c09d2392b3a7e3ff310763a9724d79040c8d3 adeb77a83c20d424f89718f9060c5f9aef4957d44b4de9be89fab11353d4d0bb
GET /styles/css/coupon-modal/main.f821604fbe4b21e9ea3f390fdc64f173.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Thu, 11 Apr 2024 14:18:37 GMT
etag: W/"6617f13d-5b3e"
expires: Thu, 16 May 2024 08:18:21 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=0.002
traceparent: 00-8cf72461b4c0bcace9ac196f0a19049a-ef74cf3403a8d43e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T08:16:34+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/default/img/sports-icon/icons.svg | 172.64.146.192 | 200 OK | 451 kB |
URL GET HTTP/31xbet.com/default/img/sports-icon/icons.svg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Size451 kB (451059 bytes) Hash835de4af5ddcce65f93eab3985e803ce 15a90c0ff8780463c5d635cf60be1d85ecec22ff f025a51d1f2f472ef49b94d665d38fc914b40bb0385c95ed005e1ac5150132d2
GET /default/img/sports-icon/icons.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:51 GMT
content-type: image/svg+xml
last-modified: Fri, 12 Apr 2024 07:57:05 GMT
vary: Accept-Encoding
etag: W/"6618e951-6e1f3"
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.017
cf-cache-status: HIT
age: 4166
server: cloudflare
cf-ray: 87ed8d222b8f7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| v2l.traincdn.com/styles/css/filters/main.955755f3fb0ca846fd3e55237d4c4cab.css | 185.244.209.62 | 200 OK | 41 kB |
URL GET HTTP/2v2l.traincdn.com/styles/css/filters/main.955755f3fb0ca846fd3e55237d4c4cab.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /styles/css/filters/main.955755f3fb0ca846fd3e55237d4c4cab.css HTTP/1.1
Host: v2l.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:12:46 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 12:01:44 GMT
etag: W/"661e68a8-a03a"
expires: Thu, 16 May 2024 12:13:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
server-timing: wf-uht;dur=
traceparent: 00-6aa1b35fa51bfcfe141331e496308950-19346962f76c14cb-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-04-16T12:11:14+00:00
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/fd8980b49952e0fbe29a63b4174c6bfc.jpg | 172.64.146.192 | 200 OK | 150 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/fd8980b49952e0fbe29a63b4174c6bfc.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, baseline, precision 8, 925x460, components 3 Size150 kB (150522 bytes) Hash94e5cedadb92be7da2dc778ac1084f67 dd1b39ea8ae8e91f3e3706db4f326103e6c15ea7 48ed6027599672dd9f30c6c159786b5561fc27138b14ea0276a09b7200eb023b
GET /genfiles/cms/1/desktop/banner/fd8980b49952e0fbe29a63b4174c6bfc.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 150522
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "94e5cedadb92be7da2dc778ac1084f67"
last-modified: Tue, 11 Apr 2023 18:15:46 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d621fa07130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/banner/c0b75af93d063aee23b24d90e5157998.jpg | 172.64.146.192 | 200 OK | 324 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/banner/c0b75af93d063aee23b24d90e5157998.jpg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeJPEG image data, progressive, precision 8, 925x460, components 3 Size324 kB (323488 bytes) Hash07902bf3a231e61471eb2681ffcc44a5 3d0d01c4e1422a54f512f39bf03c0ec9bbdcaa20 d5a8648838778387b9231a284c303de681cb1ce9ebe26ded3eeb7e4bc0f4eb12
GET /genfiles/cms/1/desktop/banner/c0b75af93d063aee23b24d90e5157998.jpg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0; ggru=160; completed_user_settings=true; right_side=right; _ga_7V60YW2S5H=GS1.1.1714878779.1.0.1714878779.60.0.0; _ga=GA1.1.1686860808.1714878779
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:13:01 GMT
content-type: image/jpeg
content-length: 323488
cache-control: public,max-age=120,s-maxage=600
cf-bgj: h2pri
access-control-allow-origin: *
etag: "07902bf3a231e61471eb2681ffcc44a5"
last-modified: Thu, 25 Apr 2024 18:31:54 GMT
server-timing: wf-uht;dur=
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed8d622fad7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1xbet.com/genfiles/cms/1/desktop/qr_codes/icons.svg | 172.64.146.192 | 200 OK | 1.3 kB |
URL GET HTTP/31xbet.com/genfiles/cms/1/desktop/qr_codes/icons.svg IP172.64.146.192:443
Requested byhttps://1xbet.com/en?tag=d_85563m_22269c_[]MS[]null[]null[]general[]{site_id}_d22490_l85317_clickunder CertificateIssuerGoogle Trust Services LLC Subject1xbet.com FingerprintA0:4A:36:06:EE:9B:04:BA:25:2E:97:EA:45:A0:70:63:51:97:25:CD ValiditySat, 16 Mar 2024 20:46:45 GMT - Fri, 14 Jun 2024 20:46:44 GMT
File typeSVG Scalable Vector Graphics image Hashb70b3f5f1441a023083d78aa6fe9324e bb528962c536a4bd89cf97c047968a4050fb2002 38e240b95edde3060f22e12b066127636d3f19c5734a5e8118ce299e26482d6f
GET /genfiles/cms/1/desktop/qr_codes/icons.svg HTTP/1.1
Host: 1xbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xbet.com/en/?tag=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder
Cookie: SESSION=2b221270c4242bf124d43450bd390e0c; _glhf=1714896540; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%2C%22ref_partner_id%22%3Anull%2C%22bw_%22%3Anull%7D%7D; is_rtl=1; visit=1-a074cdc546b39a9b8507afb0a4675a4d; reflinkid=d_85563m_22269c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l85317_clickunder; fast_coupon=true; platform_type=desktop; v3fr=1; lng=en; flaglng=en; typeBetNames=full; coefview=0; auid=mjmZBWY2+S0mL2/qBXWfAg==; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 03:12:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Wed, 03 Apr 2024 08:14:19 GMT
etag: W/"3f78fed0639b0021dbf5ce098cabe22d"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.003
cf-cache-status: HIT
age: 572
server: cloudflare
cf-ray: 87ed8d3a5e1f7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0