1win-cdn.com/font/SFNSDisplay-latin.50a4eaff3.woff2
172.64.142.26200 OK 33 kB URL GET HTTP/2 1win-cdn.com/font/SFNSDisplay-latin.50a4eaff3.woff2
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 33064, version 1.0\012- data
Hash de175cbf569bb3ccf1f761c845cbd896
8d93663b858bae157ba5fc40e1400177104d71bd
df3772666587111462634070c47969ad9687bbf80d0694bb2e6c33be39434d68
GET /font/SFNSDisplay-latin.50a4eaff3.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wnxtz.xyz/
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/octet-stream
content-length: 33064
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-8128"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JBjWRVhAm0oHcTthqad%2Fo0sMOsjNWvrb%2FFZnxv%2B3dEMlpYNScgZiJwAc6b0xxJWE%2FtdqbgzGAFXK%2BtkSRp30mnPG%2BlJlybEMQBOQ9dkLr4TbjUE7Y5wtTrqjCWI9qOI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5aa403696-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/font/SFNSText-latin.f09aa5229.woff2
172.64.142.26200 OK 44 kB URL GET HTTP/2 1win-cdn.com/font/SFNSText-latin.f09aa5229.woff2
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 43512, version 1.0\012- data
Hash 426f20bb65ea80d35f3f2a999d5d7d1e
85f211a450f26d7f0822d718fc61085a506fa455
06e02d3d2d01bb2c88786b0a2dd2d692f6659c0159ec4754f7db49c12e03b0d6
GET /font/SFNSText-latin.f09aa5229.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wnxtz.xyz/
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/octet-stream
content-length: 43512
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-a9f8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ak5Dx35SzHtmUDBgXve91PElI6BOe6R2ET2jFvWiP25C5KVopNcQU28oDtlSFWoD0C%2BVgJNjk8AOaRGkMXPJGk%2Bj9fRg7%2Fg939KbPPcSnE3M0CEceIZKOWBYsU7x3kY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5aa443696-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1wnxtz.xyz/affiliate:link_visit?visit_domain=1wnxtz.xyz&sub_ids=undefined
190.115.24.78200 OK 15 B URL GET HTTP/2 1wnxtz.xyz/affiliate:link_visit?visit_domain=1wnxtz.xyz&sub_ids=undefined
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
GET /affiliate:link_visit?visit_domain=1wnxtz.xyz&sub_ids=undefined HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wnxtz.xyz/
DNT: 1
Connection: keep-alive
Cookie: visit_domain=1wnxtz.xyz
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: undefined
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg"
set-cookie: core-sticky=http://10.233.80.111:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: DENY
X-Firefox-Spdy: h2
1win-cdn.com/js/40271.5e952c63a.js
172.64.142.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/js/40271.5e952c63a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (52224)
Hash 766d899e8719d6629e5c4b5cdd217271
b2244d8b0b021d9483ce238f1300787ad598990b
b21e1eae58011ac7448e9acc6e7a98b87d7aaa2dc4902614f5fab503b432e250
GET /js/40271.5e952c63a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-cc2d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NMTPoczSoseecsU8UlmVs%2BxbmeFMC6UvV%2FAtLMeFrJmLYG2L8Gn1ll7QBXDSj0TrnXaqeL6auJP2zElsr%2FIGGJNRuVZrrPiDpFwiKRol8TBLkT8w%2FFQ%2FL0JyhO%2F0Stk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe91e0271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/desktop.a76f61815.css
172.64.142.26200 OK 15 kB URL GET HTTP/2 1win-cdn.com/css/desktop.a76f61815.css
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ed2305378d0162d18b73fc38c9acc963
5344851ccdd2dc86e33073548301b4e084500923
398a6ec204d2c7ac653b464e74a4c3bcebfc8ac2d499e375e29404a605ebcfa5
GET /css/desktop.a76f61815.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 09:32:35 GMT
etag: W/"6555e1b3-11bd2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 134171
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XjjYvxEIWuaSDMdDrJEE9LhazSK6OBuJCdDgkg5KZCWn3L7A%2FyWX63KFB2%2FNcmV66vZn8rFlMaBECUF0xd%2FvzvpjV%2Brw5vTevnu8kQ4mdjS1Y0beM2mQPWhnpm315I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5af34416b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1wnxtz.xyz/common/title?path=bets&lang=en
190.115.24.78200 OK 29 B URL GET HTTP/2 1wnxtz.xyz/common/title?path=bets&lang=en
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4267b7543fca3b994865ed0ad3bb3200
6c53f8744aae64519fdb6f9d6ba30bab73da6106
c07b2c0a515caf1306fb4d9366fab5758253eeadcf8c0414cb44ccd48f82e59a
GET /common/title?path=bets&lang=en HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Cookie: visit_domain=1wnxtz.xyz; core-sticky=http://10.233.80.111:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5M2RkMWI0Mi0yMDA3LTQ0ZWYtYTYwMC0yNjZhOWIwZjI2NDYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAwMjYxNzM3MjU5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlN0Q=; AMP_MKTG_494cccfe21=JTdCJTdE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/json; charset=utf-8
content-length: 29
access-control-allow-origin: *
cache-control: public, max-age=3600, stale-while-revalidate=300
etag: "25-bM/5z02X/xOkKbh8eZCiJpcKcd0"
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
142.250.74.168200 OK 90 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (49902)
Hash e8bffc99ff322251573f9250862ed369
3eaf60703943d297e79ffb8861d01b29acac2ab0
fdd3e63bd6fa7536fab11006efb547b87960ec0fa81d95d251a7426aa50a42a9
GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 17 Nov 2023 22:55:36 GMT
expires: Fri, 17 Nov 2023 22:55:36 GMT
cache-control: private, max-age=900
last-modified: Fri, 17 Nov 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89463
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1win.direct/v4/socket.io/?Language=en&xorigin=1wnxtz.xyz&EIO=4&transport=websocket
134.122.54.186 0 B URL 1win.direct/v4/socket.io/?Language=en&xorigin=1wnxtz.xyz&EIO=4&transport=websocket
IP 134.122.54.186:0
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v4/socket.io/?Language=en&xorigin=1wnxtz.xyz&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wnxtz.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fEhSDvgkw4rjkDHgIBcN2g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: xg8MOGP/8z+835qXpgcAtU838go=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=a3cef8f126618c38; Path=/; HttpOnly
Upgrade: websocket
1win-cdn.com/img/present-with-light.bd57fb068-151.png
172.64.142.26200 OK 6.7 kB URL GET HTTP/3 1win-cdn.com/img/present-with-light.bd57fb068-151.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 151 x 161, 8-bit colormap, non-interlaced\012- data
Hash 6e2f4fff39b3a495fecefe5fee863c51
d358f1c8d7fe7298feea325c7ea6d145a3634026
4800fa860802fd0e46629776201afccd5adc1bf6b8b5a45a5e7c46d8d3b2a690
GET /img/present-with-light.bd57fb068-151.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/png
content-length: 6732
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: "654cdf32-1a4c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 490703
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Djv92mwCeCV2ZjIRQ0SJNKirzKyHdDaiQFe86bVtkeQ2I%2F0nQjc2mfpzeqFVqoU4xM9aJgTFHuucyLnHacB0mYYLIeHgU2fZ4WMknwwwzsSFyLkuvz9EhIilbjMjv8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedabf71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/77184.9a6de51fe.css
172.64.142.26200 OK 197 kB URL GET HTTP/3 1win-cdn.com/css/77184.9a6de51fe.css
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (8287)
Size 197 kB (196831 bytes)
Hash 72d734acc0f1d1dd4eb4aa4f6ae0cb85
1d2cb08a722b21ad9f7dbb1e722b3c92b2026502
5d49264aae068d140fdbb3a30082505db09468b2ffdeed28ae85328a607be15f
GET /css/77184.9a6de51fe.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-208f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7fA5dXC4r4briQY0s01r0urtNhoXo%2BYAbuGdU%2F%2Bj7o8VljhY12gsH6KFXZaLTDfW8IHO8LN6pY%2B8llmnIiORtq0%2F%2FGxL4MvibaNpkBd3B6YIeOqPhr7zk%2BuZeCz1n%2Fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc92e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/23244.287706c9c.js
172.64.142.26200 OK 172 kB URL GET HTTP/3 1win-cdn.com/js/23244.287706c9c.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (892)
Size 172 kB (171846 bytes)
Hash 09288f36dd43851aac1903a69ffb0412
b8b891094085e9c39b8f038dc4ddfb7771ce3781
a784631d3667b0797879119514e7e5c6663b731d60089179488099b75b6aacac
GET /js/23244.287706c9c.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-3a9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129386
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GERGHYdXZ1pCRi0hGFXyVud%2Bst5J16rAeB%2BymVJFi8JvB9nOBibsKzbbI20rRzjCNvCTXjtI9EcOor2yj3Qt0fjeV0Ad6l9XtZrCz4G287g8YhTXbyD2ZGlUK%2F5VVu4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feeeae271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/46278.1381f0969.js
172.64.142.26200 OK 22 kB URL GET HTTP/3 1win-cdn.com/js/46278.1381f0969.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (620)
Hash eafba32b6fdd1f060e022f562a7b027f
85a3534a5c482d8631806f36d002885b601ebaa7
871655f2f7e6285d32e83c596081be6e9dad36d942bca64723cd4aa514914182
GET /js/46278.1381f0969.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-299"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HqGolx9Kmvni%2BlPeRFxofbnaXleJjlvMzAfJ4%2BPzmMmI61zGd0pMlJdTClKkhIENl7jTPSw4g2sdvN7EfsVBL1QCbNO6YVIU9NRcg8w3jT8nFWJ7oqzLNNj6eS6HR0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedac371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/62774.4eeb40b34.css
172.64.142.26200 OK 11 kB URL GET HTTP/3 1win-cdn.com/css/62774.4eeb40b34.css
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (19603)
Hash 481783b7b67d183a65dd3a8ee3908eb4
76a80a334e4eed035219a6e95c88b8baed982f10
35d307c121b06f3df636fd33cb1d30d260a5d3ec47a9db9c7d325929f3963bca
GET /css/62774.4eeb40b34.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-4cc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2FewQOvAdh86sLiDAdStF8xfB%2BECa6bd1UTLvP2P%2BJfHtuY5GvnpGCin3RITzZdAC9MqoS3F%2FsjRMX2Zg4ankhGjDUuvRg%2BDaGCSemKr2pFmv9EkV38XkQuPj01DvLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe92e0a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-social.e1e675273.js
172.64.142.26200 OK 24 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-social.e1e675273.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (19383)
Hash 9995cc9c1402e3914a1b3178df190c19
5931ceba96baff0c57cfe552edb3a79ca30db3f2
8abc4ad61f644d5fae66268319e21e38d3afead73bdfbe1e37b5f8b4a301b665
GET /js/icons-pack-social.e1e675273.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-4bf0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gyylG6d4DTcoKPoIXMdB2DxCH3wn5TlUusfUKHPsaq5ZGq4XM9K%2FPlckHX651ZewXZ53vRNNjyfN3o5ggwB7gOqhzi3qNM9TNzryLaVf%2FtKmn%2FbzDbDqFyW06MjgEM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff08c7a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-tvbet-frame@2.52cde99d0-256.png
172.64.142.26200 OK 4.5 kB URL GET HTTP/3 1win-cdn.com/img/sprite-tvbet-frame@2.52cde99d0-256.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 40212134fb58f842529fa66647f1b7d2
e6d355ea609129942cde7b9d47e587ae5cc8596c
c04666bc555dfa0fbd2b5da4984cb813b58eab772e1fa1efa2fd2e62c6d11f7b
GET /img/sprite-tvbet-frame@2.52cde99d0-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 4458
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: "65521992-116a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 320734
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NTVJtvwabI5SdJL%2BWjHFzWCLtopXjBAXNiAtQqu0p8BybFDZt36VSQoJDzm8nHDU9oCvXXwuyR5bQry4UhgVLTgDRKC3%2BKkFahm8xLQ2HHt4tJnbDuwkJMXHmSbZP4M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff18dba71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-tvbet@2.888adc8ee-256.webp
172.64.142.26200 OK 354 kB URL GET HTTP/3 1win-cdn.com/img/sprite-tvbet@2.888adc8ee-256.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 354 kB (353842 bytes)
Hash 8df817e5ef0af5dc8279d3f20cae9bc3
12c85bcc74a48053c92f3f75ce3c14e1a19e46d3
61a0f98511e6c60430ab044d1f80e1c9eff83f577064d465cc5f893ba3ce0fee
GET /img/sprite-tvbet@2.888adc8ee-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/webp
content-length: 353842
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-56632"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 5008
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O4Q3G1FRIzbZmqv%2BaAF6ZBgBObYWlGrNHujzYZqnl12rkifaMshJJvyFb1rI%2BNNfkvjX%2FCVqYTCsPLAwpRdJImo4RevkwexUHV5jm4TU3iWjGnrd1taUvWFO1T70o5o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff18dbc71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-roulette-frame@2.76ea5a241-256.png
172.64.142.26200 OK 30 kB URL GET HTTP/3 1win-cdn.com/img/sprite-roulette-frame@2.76ea5a241-256.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash fa83f73358ed73cbd8a0faf0d8e6c019
586b95f1e5e1945abd0248e995f79274463c1cd8
ede3848497b96e7defd4c5d53133cf2e374487411186a66a6146191ae5692f77
GET /img/sprite-roulette-frame@2.76ea5a241-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 29770
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: "654cdf32-744a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 671630
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yppf7Z53m%2FesicRCm2HPavySB9P%2Bkti8CiQvTnnNh3UsY0ixvreV9nmLTQ%2F5I13LP4QQPK8bIaP2VBwFYCKHQhGobng9F6KSP%2BUyQi2kwRkL%2BOEv4kpGP7Lk2lwxQqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff19dc371b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-roulette@2.255074856-256.webp
172.64.142.26200 OK 720 kB URL GET HTTP/3 1win-cdn.com/img/sprite-roulette@2.255074856-256.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 720 kB (719644 bytes)
Hash 344d71695bd0f387fedd84fba6ace2c1
1d37e2d66ab1098072febc0a0dc3769d44090048
7775854f4b641fa2c9f954c79de9d4bd51ffea8b9bc74d8e01768718cc438003
GET /img/sprite-roulette@2.255074856-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/webp
content-length: 719644
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-afb1c"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4533
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yppp%2B6VAizAVYufC4QKTZ%2Bhp8ddSeAbqtLxt2T54wb3Rri0fQuN7j9rZjtTMxlPwlF5ig4wG3V2Ij73RaWNUoxqBnLIrglVzsPSPozkHaSIdpmBsLX%2FtEbLh5Ayz%2Bms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff19dc771b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-dice-frame@2.8e0d70675-256.png
172.64.142.26200 OK 17 kB URL GET HTTP/3 1win-cdn.com/img/sprite-dice-frame@2.8e0d70675-256.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash b5469917695caf597285ce3e08c0e314
8d6b57a1590baf7531d688d5dde729ede7d02108
3353862bc343fe2f92faf7e59595d9aa80d2fbdc90c6677437daf3a9acd84b32
GET /img/sprite-dice-frame@2.8e0d70675-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 17269
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: "654cdf32-4375"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 668455
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Fax%2BICsmf84%2Fo9nGcBif3MnrfsRqoe5aPE8oWi%2FySu%2FmravlXVfx%2FZer5EG%2FVV6xSyUVv3wWFjuA4Pirya%2BkYJiADM5EAwSuaqJbM7fiSi1HefF3dqBa7HLSLJM2NY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff19dcc71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-dice@2.6e1ac0ed1-256.webp
172.64.142.26200 OK 430 kB URL GET HTTP/3 1win-cdn.com/img/sprite-dice@2.6e1ac0ed1-256.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 430 kB (429680 bytes)
Hash abaa6833958bdc5427e6fa573cbfa70a
d43989916cc382e4e3d983933d9cd52a7d1dbeb2
51ba8ea694483e38020360731af53be7cd411671786008119b70b2a320e3bd92
GET /img/sprite-dice@2.6e1ac0ed1-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/webp
content-length: 429680
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-68e70"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4533
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BW3GIdcOOL9hFHE7%2BXK%2Blj5fBbK%2FYc2KG6Rs8gZwF7OLjcqMnagLvfSdLu4%2B5Qt3LMke4SRn%2FkDLTkdAR8CQCGYQ9EhrVjgS%2Fe%2FhYhLqMhho70IOPMY9%2BPmZ41kFgrE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff1add771b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/20948.74d7d3ee6.css
172.64.142.26200 OK 17 kB URL GET HTTP/3 1win-cdn.com/css/20948.74d7d3ee6.css
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (21349)
Hash 6b07dec9722fe2cf7f5bddbf712d53d2
6e2a69b44e55604961b2637100c2c8358d6df68a
bdd898b21046ce3da2e521a89b0a010db3e409e47b15c7e789eae8dfbcfd142a
GET /css/20948.74d7d3ee6.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-5395"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WlOIniD1L7RTEpjj4pQNCVJsbtHvrfN3%2B9yYKVE8YjjKGVnutlckQn49WHW%2FufcOMF%2Btzt%2B%2BFRJ8tMuGE9ao%2Bsdw414nRjKfMPcS2vxYoDjI1jN08SY1kyVaoVh9OkA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fec68c371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/home-poker-banner-bg.87d818974-600.webp
172.64.142.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/home-poker-banner-bg.87d818974-600.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash d42d6b091c917baad89cc62f34b1ef8d
6915e60ae50f4b00af5083ce1217a7dab04df42d
9ac95cc43cf590f1f9a5dd85b5b0bf04d98e38d3005b6e4b436f8c04d09a66e9
GET /img/home-poker-banner-bg.87d818974-600.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/webp
content-length: 11812
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-2e24"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EWqXcj0%2FAk%2FWQXa9DxnUBccnKbV2L%2BYjJK%2BO7azvLpluPfz63YahKx4i3lsw4wwEmgwSb7kwqSqcDYQZleAZWTlSTGx0RSp1aG4K2ERt24dpsh3CpG0MGwfCA5DPRho%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff20e2471b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pwa_android_en.b229a444a-690.png
172.64.142.26200 OK 38 kB URL GET HTTP/3 1win-cdn.com/img/pwa_android_en.b229a444a-690.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 690 x 450, 8-bit colormap, non-interlaced\012- data
Hash 8b6daeaca5784288934eb5c3dbc3401d
2df52222cb03510733d5f5c616278143e7f93f2d
53ee238e1169d7940016da0159e72a214403576447cf1b8cb384942a6200d191
GET /img/pwa_android_en.b229a444a-690.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 37637
last-modified: Wed, 01 Nov 2023 12:57:52 GMT
etag: "65424b50-9305"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1362519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IWAsG1r3uhPY8W5JlyQShSdqDU4Ml4Uflrw6cb7%2FROCIHPt4UfrE4l6Y0drb3LHhN8mZVYCZM8jgX32spXYNmy%2FdsKsXc4yDMWA%2FzhucvPbRXmxxcdRohP6oEI4MEI4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff20e2871b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pwa_ios_en.f08ddb1e6-690.png
172.64.142.26200 OK 39 kB URL GET HTTP/3 1win-cdn.com/img/pwa_ios_en.f08ddb1e6-690.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 690 x 450, 8-bit colormap, non-interlaced\012- data
Hash 2b063a8e2fb87b84cbf377d7a7fd389e
5c12f02ca086902c7fd9a5bd5de9eabce82c22a1
aa8f787e4db589a38a5c5a56bdb03f69329bfedc64649454f9fd370b78820b49
GET /img/pwa_ios_en.f08ddb1e6-690.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 39066
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: "65521992-989a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 325582
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V2lDB8Wu%2FKCqcI4lV8qox3jckcyedLS0k88XyjJIdR1kkQdAVrnf5jCFi3EX38Q%2BMqNgZ8P1ngHf62MnSt09hn6MelEC2UuQzaQlOfg0MCeVsgn%2Frb1JZyTrfXPURWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff20e2c71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@avif
172.64.142.26200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash f86f39dc44e8f92cc5658a394e833352
54093f2e69f448e122e771ec7c63d3cce35ffbdf
3fded209043aa6ec28cdff6321cff18c41238215a062dc02fab1af3915c637fe
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/avif
content-length: 7940
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-cashback-casino.avif"
etag: "afr-jhlkuoDx_XrwjiuFbkzj6HdVsjvDmAeQvV8BbYs/RIjYxYTRlY2U4LTYzNWI4Ig"
expires: Sun, 19 Nov 2023 02:22:48 GMT
x-request-id: JzrcF0M8R-0G9H-cZ2HFU
x-cache-status: MISS
cf-cache-status: HIT
age: 505969
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cBhHs350McOvwzQb7SKxEIV6qsbDid2cfU8CnlpQdIFqqJmLMBPhntJGhI%2BG2epYx6uV6PRrAS0jvGNfRHasEk7FMQw%2FpiCyGS3m4raim6sWqkQMk6XDidnHuRt8JG15AJ0QyzkXJZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff27e7b71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@avif
172.64.142.26200 OK 4.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 22a160f55908549771f823852d5eaeea
267d86356fc72824681f08d9fd1207b77530c08d
bb19dc50ecc9dd60ce8760b73843ce465df86b78a76de6a924c813fc770a2f23
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/avif
content-length: 4323
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-deposit.avif"
etag: "afr-jhlkuoDx_XrwjiuFbkzj6HdVsjvDmAeQvV8BbYs/RIjYxYTRlY2UwLTU0YWIyIg"
expires: Thu, 23 Nov 2023 13:39:37 GMT
x-request-id: 5aycHgk4OlCGh3GChQooJ
x-cache-status: HIT
cf-cache-status: HIT
age: 118406
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Cf9Ap%2BwUxA0apXliUeaG7c1Iwfn6jeDDHC5pBK2lSn2SmvjlgJL897shi%2BiW%2Bwt5phWaGP8vimdihyY2%2FQNrEh5L4zwG%2BR0DzXmlICl2MwLquVqrW10P0QNfIbpyUZqeuL3rEflH40%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff27e7d71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/chunk-common.a943a509a.js
172.64.142.26200 OK 422 kB URL GET HTTP/2 1win-cdn.com/js/chunk-common.a943a509a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (49040)
Size 422 kB (422364 bytes)
Hash 33529964040b1f322a933c3016e892dc
0b795629eec62278efa7782aeff1c63ba7551f20
542930b48a94c0e68b9ee396e33404fe4768eccd65ca1eb48a48c893d2e01c83
GET /js/chunk-common.a943a509a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 17 Nov 2023 12:24:36 GMT
etag: W/"65575b84-21d06"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 37254
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ycBg%2BHYjzL7ugVRwOwkeLbPougEungeCeW5cUYpduJ0oM8pLU7bYxGg2E%2BnIzn%2B8DWuJrJCtSPIGWMV0rmIPsqQjJny6OG%2Be2etJPkQy1nXB%2BUwFxPL55RBVuPxAIQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5af30416b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 2 B URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-origin
Referer: https://1wnxtz.xyz/
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-type: text/plain; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
set-cookie: core-sticky=8dc2a9b990732965; Path=/; HttpOnly
x-powered-by: Express
content-length: 2
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 2 B URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-origin
Referer: https://1wnxtz.xyz/
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-type: text/plain; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
set-cookie: core-sticky=cf7349d66f356115; Path=/; HttpOnly
x-powered-by: Express
content-length: 2
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 2 B URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-origin
Referer: https://1wnxtz.xyz/
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-type: text/plain; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
set-cookie: core-sticky=685a295111370c2a; Path=/; HttpOnly
x-powered-by: Express
content-length: 2
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 2 B URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-origin
Referer: https://1wnxtz.xyz/
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-type: text/plain; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
set-cookie: core-sticky=6868ad8c588b5951; Path=/; HttpOnly
x-powered-by: Express
content-length: 2
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 2.9 kB URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (47970), with no line terminators
Hash 6d2f0013ec3ed02152662ce31ea4a01c
88ef8fe3b0105682790fa32fabaf5d9843a40353
35bb434d90cb22f9e07ea8cadd48f1e842e2258b546bb2e63e6bb27da13df14b
POST /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-Origin: 1wnxtz.xyz
Content-Length: 71
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"b83-T9cQs5cXqHBjd9sGt1UDJkNRUtM"
set-cookie: core-sticky=a7a23e4dc30bee91; Path=/; HttpOnly
x-powered-by: Express
content-length: 2947
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 19 kB URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65424), with no line terminators
Hash 7b943f7467aed5fb87ec90f4a5b6c926
ee3333778bc997a7e74ce37280069a909c141b4c
e2b534df0ed7159314848d0f73f250d3f6c2f2c29fcf193d00b43b6677ae0180
POST /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-Origin: 1wnxtz.xyz
Content-Length: 80
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"4b16-q2u1h6SHVEpgUeMxtPF10mBW4mo"
set-cookie: core-sticky=cf7349d66f356115; Path=/; HttpOnly
x-powered-by: Express
content-length: 19222
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 27 kB URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 17223df2dec6cef4aca2f6578f2a37ea
a58dba87be6849ac0e5a5ef507f63b2c5ff0fbc7
17564c530faef8b054c21147d4b474ba3b22335150b905edad94a3a830a8b727
POST /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-Origin: 1wnxtz.xyz
Content-Length: 98
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"684d-6+IqPRMdPOY10SejqV006doybTg"
set-cookie: core-sticky=8dc2a9b990732965; Path=/; HttpOnly
x-powered-by: Express
content-length: 26701
X-Firefox-Spdy: h2
1win.direct/microservice/ask
134.122.54.186200 OK 3.9 kB URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type JSON data\012- , ASCII text, with very long lines (24977), with no line terminators
Hash c792fc52432df79f8fe3f902188a402b
23a3db0813c7197971a6d6c6c400dae0557d58e3
4a5b806bafdd3f93c56ef9b3283b352e184516e377755c679c9b61b611c196dd
POST /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-Origin: 1wnxtz.xyz
Content-Length: 101
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Fri, 17 Nov 2023 22:55:37 GMT
etag: W/"f3c-nlP1Bmryo8orJRcsKV06iFOf+/s"
set-cookie: core-sticky=124eea33378e87ee; Path=/; HttpOnly
x-powered-by: Express
content-length: 3900
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
142.250.74.168200 OK 82 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 1c45d9168ff844799fc1149cf6074da8
83c86072c1ff3f508cf14b0f90f0000410c72809
ef059ce8ce68bb6bf86be74261c4726bb2f0482f631cfb75ec98d35a629d23b1
GET /gtag/js?id=G-548949LWLW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 17 Nov 2023 22:55:38 GMT
expires: Fri, 17 Nov 2023 22:55:38 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82288
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1win-cdn.com/img/500_i18_bg.0e037ee17-1320.webp
172.64.142.26200 OK 40 kB URL GET HTTP/3 1win-cdn.com/img/500_i18_bg.0e037ee17-1320.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 14de8fd7c8de24bb9f6f89ddd3c2d480
9635193c712dafa2c58339dee09588880a96a980
633593c73a175eabb2a5716a04aa84b1b49fc8e4ac4687b07509db36350076b7
GET /img/500_i18_bg.0e037ee17-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/webp
content-length: 39614
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-9abe"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 1718
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g4MK%2Fi4gcvLaybfxHssZw6dM4jiVY%2FdXeoglK8J1NTbIVLQuip9sUiCcXI%2Bosua%2FTo%2FXd0qNcSb%2FHe0IhSIsGgN3FascAthQpzkbvZl4MSzaHzGOFl7OiYZzs8Q9%2FeY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff78b0d71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_img.cad2d5cb5-1320.webp
172.64.142.26200 OK 25 kB URL GET HTTP/3 1win-cdn.com/img/500_i18_img.cad2d5cb5-1320.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1312c2c31e69ae16717161d0b63e862e
1ea1ac50dccf074db7972fd01030d27764c647be
17e3ddf96f54278719c3951bdf7fd750f03eef6fa8f7e257b47bf04a7915fb81
GET /img/500_i18_img.cad2d5cb5-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/webp
content-length: 25094
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-6206"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 1717
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NNrUVVUPWSplY59VjjKvKWhp12ENFlNVUzy4GTfPBTvTgq2VKXNMkkWwImxDKWPIUmNoaqcJ%2FBPn%2Fchh6Nz%2BPHSv7JtaJeporiTxdXaokwySefT6BanAjcwt2iMnZ4M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff78b0e71b6-LHR
alt-svc: h3=":443"; ma=86400
ps250.1win-service.com/push-server-v2/?Language=en&snapshot_time=1700261737226&shouldCompress=true&EIO=4&transport=websocket
172.67.209.1 0 B URL ps250.1win-service.com/push-server-v2/?Language=en&snapshot_time=1700261737226&shouldCompress=true&EIO=4&transport=websocket
IP 172.67.209.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push-server-v2/?Language=en&snapshot_time=1700261737226&shouldCompress=true&EIO=4&transport=websocket HTTP/1.1
Host: ps250.1win-service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wnxtz.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JFLHoE5r9SJ78gWXipC71g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 17 Nov 2023 22:55:38 GMT
Connection: upgrade
Sec-Websocket-Accept: /y7q6HgnRn/qVnUh0bgCkam/V6Y=
Upgrade: websocket
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGeCmKA9QZ1En%2FRsKoPs4H5MAF%2FY7JronxxZQqV42i8aPSTK5p%2B31ndgnzVfYlMldQFmlJq9llCiMAlZDiJlmTsqLFDFH58y5Kzwb%2Bp%2FmdCBWJK0LcqDjx3xcfMj%2BIgvQmBuFOyua3zj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 827b8ff94a27712a-OSL
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif
172.64.142.26200 OK 5.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 76a502c1036d076e2317739f0cc878d8
480303b6e1e68b1d04e998d9bcd26224429db376
e377abb67003f9b87b6c67e87b9814b99bb3c1de68f286546d9af4e6d6377351
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/avif
content-length: 5302
cache-control: public, max-age=31536000
content-disposition: inline; filename="5b4ab347-f37c-44e4-93e6-2c1c0efa069e.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTc5LTJiMmQxIg"
expires: Tue, 21 Nov 2023 01:11:49 GMT
x-request-id: fVGxgA-ht1X2yB82PW_rg
x-cache-status: HIT
cf-cache-status: HIT
age: 321966
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=niK36q6yhAPumuBl151NAzrW6wiJ9iX2q5wC5wni1PjxOgW5N0fdj2oH4rV7iMyWRjml5Numn7udEcCR%2FGhtDSw1342P55d7oUf8gaqWHmg0eE67Rkgql1fMKDJyVeIj7hrM8VeoW%2BQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fff4a9c71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif
172.64.142.26200 OK 4.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash d5f05284c21b7798248cd9fa99bfd299
bf9b3b55c3aa5508d51c2935e6494a6f91fb21b9
85a15ca1b3ad7e7569214ac1e02596a70b806eccd8ebf2b9fb079ca53986a0d4
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/avif
content-length: 4304
cache-control: public, max-age=31536000
content-disposition: inline; filename="576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTZmLTIwOWY5Ig"
expires: Wed, 22 Nov 2023 00:02:21 GMT
x-request-id: 7NA6XsF_bfwy9vmcMbRb5
x-cache-status: HIT
cf-cache-status: HIT
age: 222278
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ICKYsrSe7ngjYh3JOP7GQyRarYDVUCjNBh8COmUfW48xNUOroekUaN0Nmt7DbkRapNDBkCKaZ3CDhlMBN3QfN2%2F%2F%2BIMPIRXh8Haq32EWME53Vr0olPVGTED6U539Lm1wNuIrCUhJ7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fff5aaa71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@avif
172.64.142.26200 OK 3.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash bbb2a9093140015e4ebcb4b1ade5b171
dc35c677bb7d9b9e222f93e844793afc4fc06b2a
769a8489bc32f748e268b35024e9726719ef2a65d32665b0a5a54ca6d28789d9
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/avif
content-length: 3255
cache-control: public, max-age=31536000
content-disposition: inline; filename="f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OThiLTFiYzYyIg"
expires: Sun, 19 Nov 2023 04:11:38 GMT
x-request-id: tzOA6pH6UMEoJbBuEf60Z
x-cache-status: HIT
cf-cache-status: HIT
age: 496539
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7MeecMgn%2B4g6U4xUlNYfKIRCKkE3C2eYB7nMgYC3nSqTlhkGciz9RbnSWfBNyQ3AWS0N%2FerNQaHMmI3KlIQ%2FnWWMbhcfcchi0c0uuLOngw1oOhlOQ9tteKWeEwBaMiUXbV2CwLoe2FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fff7ac271b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@avif
172.64.142.26200 OK 3.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 38274844df1004bd9a0e2ebaa78fc880
ef316b9b62257b1e930eb064f30c1baecd86f2b9
5d128fbc4ca805ffd77a5d0c93ed6c15e548157d1b6a68b16c2849a98799a6a6
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/avif
content-length: 3601
cache-control: public, max-age=31536000
content-disposition: inline; filename="81c5273a-ebb1-47f6-8535-6376c353ea74.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOTM2OTc1LTY1Njk0Ig"
expires: Tue, 21 Nov 2023 05:28:41 GMT
x-request-id: a5vJVeOpv_Zq4m5m-pFC1
x-cache-status: HIT
cf-cache-status: HIT
age: 310780
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UCCUu2urAYOvUVJFRfJzyGx1tcJvFaJyYzakIEbcIgtesv4PcjNB5dbk3ehZ0FvVmXgyhhg90dtkRz9J1%2F5WTwke9yxnuPJA6fP8LFIxlPLXHaP2zRjFYVTM3v1ypdZ%2FQ1M1B5nqxUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fff6aba71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/100hp/b26d2f77-09ae-46b9-94c8-5af36b6d1e06.png@avif
172.64.142.26200 OK 5.1 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/100hp/b26d2f77-09ae-46b9-94c8-5af36b6d1e06.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash a118214f9e184a293fc0f83c7e701e58
d20b27fda623e5e621f051f8e970be8429f473f0
b2006d1a7d37a873f9a929e15ece50752e747dc805bc494744ae9a861be36a8c
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/100hp/b26d2f77-09ae-46b9-94c8-5af36b6d1e06.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5060
cache-control: public, max-age=31536000
content-disposition: inline; filename="b26d2f77-09ae-46b9-94c8-5af36b6d1e06.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0ZmYwMzJkLTI1M2I0Ig"
expires: Thu, 23 Nov 2023 03:34:03 GMT
x-request-id: h5Fg2-IPly_2rdOOObMck
x-cache-status: HIT
cf-cache-status: HIT
age: 137556
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VTgqceIhl1UhXKRSRZnpl3RzOfSvNttp5534lUYcvNyiZ2ISz%2Bth7%2FyX3h7%2BYSiaidFDM%2B8RyiKZQzLEcOZgEipRUU7xJNNoT%2FHDY2juRx3BOMwlpYmeblO5jMnwevdZKk9Bcq2UF6g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9004f85e71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/42c67df7-4422-4643-a600-fc8c5548a366.png@avif
172.64.142.26200 OK 6.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/42c67df7-4422-4643-a600-fc8c5548a366.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash e3f361ee56ad654389a695dd7e409df5
7cdf214ec812c92fe461c4d201dedbf018bf79f5
1591d2946103703b4c8c56563476b375ddbcbe5d061799240cc9e57cb57be66f
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/42c67df7-4422-4643-a600-fc8c5548a366.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 6889
cache-control: public, max-age=31536000
content-disposition: inline; filename="42c67df7-4422-4643-a600-fc8c5548a366.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MWQyOGExLTYyM2U5Ig"
expires: Fri, 24 Nov 2023 05:46:49 GMT
x-request-id: NFPGrzRFlUVHKVe8zSAHC
x-cache-status: HIT
cf-cache-status: HIT
age: 48897
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vNd8xoG5jD3a45Be1XiPMvM8mGMbvCFCKKJ7w%2FigDzAUQFvDv5NRW0rwt7A7mc4S7r9ih535GwhOqgoyYNYa8jydYYZ2D6vnSS8wR4lO26myh9cyEY4RTF4NpxSIksEaAYNP%2B1pANcw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9005088471b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/endorphina/db99059a-ad6e-4868-8637-d8b84991a82f.png@avif
172.64.142.26200 OK 5.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/endorphina/db99059a-ad6e-4868-8637-d8b84991a82f.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 94b5bee5baa7c23c1ef13462213df4d7
49ac53835623dee2b25cbbdef2e870bc9d07246d
231373701fb00a490fc110068eda42648b37f4f71608287c17f6b509629a0de7
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/endorphina/db99059a-ad6e-4868-8637-d8b84991a82f.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5745
cache-control: public, max-age=31536000
content-disposition: inline; filename="db99059a-ad6e-4868-8637-d8b84991a82f.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0ZWRjZDNhLTYwNmEwIg"
expires: Tue, 21 Nov 2023 23:26:40 GMT
x-request-id: _i6961FqOBjIiRnSSb8aS
x-cache-status: HIT
cf-cache-status: HIT
age: 240810
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xy58hOqTBQ0BohW1KoJd5tDY25JUBP9Zz7v0W5GmNqg8baHZKzQFyQvtCXg8Qjw2cHp%2Bg4zLjcHmxJcOkAE396e7umf%2FiywYCvh9XCPK88wR1%2Bh%2Ftaeg7q0BUoINVLICu0yXgSGDPj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9005188d71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif
172.64.142.26200 OK 6.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 970eb30eb4b7dbfb4e6b8ffd28076b7d
6a0f8512e3df00e5a94559fb30c0a53c5ff2dfb3
f8cc82596f9e85c7926e3ed1823e8f9deda4f8ef6d2958cde527946e26910931
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/2fd6d9d1-bb10-49cc-902f-28ef851837dd.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 6673
cache-control: public, max-age=31536000
content-disposition: inline; filename="2fd6d9d1-bb10-49cc-902f-28ef851837dd.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzZWM4NWNlLTI4YTY3Ig"
expires: Tue, 21 Nov 2023 06:19:54 GMT
x-request-id: bDE2Hg0Sxp8QEMLqBbS75
x-cache-status: HIT
cf-cache-status: HIT
age: 318039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xzfWZ6aIvG9t%2BtAlZETm7O26%2BKh8ILFSoCJkuXJbe7gVTimLEcokRTJ3L542LDByPeYJhZ%2B0hWbAZVvS%2FcvRpDf%2BQ3maE87HQXBO56%2BqWrErtc1zQjBQSi5bKBQADk6NRcW%2BI9FDEvI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9005088971b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/casino-images/softswiss/e5e6ff35-98dc-4923-abf3-6f2fe59515fe.png
172.64.142.26200 OK 181 kB URL GET HTTP/3 1win-cdn.com/casino-images/softswiss/e5e6ff35-98dc-4923-abf3-6f2fe59515fe.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 300 x 225, 8-bit/color RGBA, non-interlaced\012- data
Size 181 kB (181202 bytes)
Hash 61e3a1693b24cc6c74a4effa8abc61f9
2d27dedf4df97421cf780239305782c05dfc4cd4
4f3eb1be2f00b800a70421b85cb18c485f6944633508f9583e4698059b080056
GET /casino-images/softswiss/e5e6ff35-98dc-4923-abf3-6f2fe59515fe.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/png
content-length: 181202
etag: "64e353d3-2c3d2"
last-modified: Mon, 21 Aug 2023 12:08:51 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
cf-cache-status: HIT
age: 500174
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=esU%2FDTFt0Dv65Wjy4ZtQx1NVrbOqtQNtg7Dje93m%2FX3iZrF1Ix54P5i0wBq7FlZjhnIFI9RGTKlF5KnmBwqg0FMsO1dSi1aEDLPSzaERGNdzFU41kwcnmykRYdBpTIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9005189371b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1x2gaming.9c41eb854.svg
172.64.142.26200 OK 23 kB URL GET HTTP/3 1win-cdn.com/img/1x2gaming.9c41eb854.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2625)
Hash 52cb500c7a456e2bd453bf77698286c0
1b7f1097a8885a858fd597cdafdea34e97d33a35
4713d4d2d84be7462199b6147bc611d000695a1f9840a74d5eddaef2e6a1fc49
GET /img/1x2gaming.9c41eb854.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-f4c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 412550
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nfWG9CAHiCjxmRbOS2t6J10jtdr5YLCs6pVE0YZPWusmiBU%2BvWIb49vTBOScvWlYWBo1fMjREqPIiVo%2BUPyhqzcTqLLKLI4Jn7l1JPcs8tQ29w6bqs18%2FM3Xtq7ORRQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90000b2871b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1win.e36308737.svg
172.64.142.26200 OK 20 kB URL GET HTTP/3 1win-cdn.com/img/1win.e36308737.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (710)
Hash 2410144be3117fb0f69663fd7ff6d55a
70ffa6dfdc3c9042b656eb5ec4859dabefd47afd
50ef8abc4e0c3e674632f4f71466951fdd061eccfce88fa2b249390a2ccbfd9e
GET /img/1win.e36308737.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-60f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1450718
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ofMDctUcWJ0bK60jyoDY4l1%2FVrwtwUDtP8iP6UyrVFJUc%2BeOaPYU5kw0yPFlCIA6dJstvk%2FQrs6JWXGgwMEg0U0SgPf1S75HprmXPKaXaUbsiBkotRdsd9yZ9eqgmm8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90000b2771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/e6ed2350-c4b2-4381-a2ac-4afd2f3ee629.png@avif
172.64.142.26200 OK 5.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/e6ed2350-c4b2-4381-a2ac-4afd2f3ee629.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash dc616ece844d1b14d858eb218612a5d7
9c654e2689ec494650b873d8d41a20695b7db162
72e6e13aa86752c8cbe78382c6f6a2872ed89e5970788df5abac8d9d25634a0f
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/e6ed2350-c4b2-4381-a2ac-4afd2f3ee629.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5408
cache-control: public, max-age=31536000
content-disposition: inline; filename="e6ed2350-c4b2-4381-a2ac-4afd2f3ee629.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NjVkMzBkLTczYjc0Ig"
expires: Tue, 21 Nov 2023 21:00:55 GMT
x-request-id: sUKs2r47sE3UPYi2j-Bma
x-cache-status: HIT
cf-cache-status: HIT
age: 226617
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QzQxRbYz0Q%2BF%2BTepyjwrle43JZqLwbqEf%2BwlyMIoSWyjm2vugzfZ%2FLg%2BKcs71aYTn2a5iP0SdArIfm2ERbjkJ8h8jZR6EFKeFkdtuMiaarY5jU%2FmQDKkIQ2wGMHOw0b%2FMXxgGmAFk8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b900518a471b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/d0df9750-ac0b-4004-bdee-d23cba0cba64.png@avif
172.64.142.26200 OK 4.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/d0df9750-ac0b-4004-bdee-d23cba0cba64.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 727f51ee2ad6cbc15360f094e76c155f
4f04bb26c85c2f340649319c765fcb4e0d171728
97a6d54a36a6f4ae806bed5527e6a5fd3edb0d92e55134b56e16de475d06cb4e
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/d0df9750-ac0b-4004-bdee-d23cba0cba64.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 4846
cache-control: public, max-age=31536000
content-disposition: inline; filename="d0df9750-ac0b-4004-bdee-d23cba0cba64.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MmQwNzM3LTQ0ZmU4Ig"
expires: Thu, 23 Nov 2023 00:48:17 GMT
x-request-id: Osf6a4B9-GwYnEaj0RzPF
x-cache-status: HIT
cf-cache-status: HIT
age: 157161
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5bEsfrIUQi0yikDkiewqXtFKSRYq9Ab7k6ePOpM1GPN%2FbV2fpX0MrH%2BfkdrYwyghkDNxbR7tn7nyKipUUQvhXjRBNb4GP3V%2FRaVgjwabR85PCB3i%2BoaSPQQ5V0GRq3HeHVZTv8keQ%2Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b900518a971b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinmatic/c_1bedc37a3ce0b642bfad6d292ca2034f.jpg@avif
172.64.142.26200 OK 16 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinmatic/c_1bedc37a3ce0b642bfad6d292ca2034f.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash fb3104e044cba1f07dbe4674693a12b3
009bf6058bba05af4da680938d981feb8ec6c589
a9ef3c2a638bf92982ee8d3ad89ab47692a43d6ffd5b9063db41da440482f3a7
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinmatic/c_1bedc37a3ce0b642bfad6d292ca2034f.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 15514
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_1bedc37a3ce0b642bfad6d292ca2034f.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYyMmIzYzg1LTE4M2I0Ig"
expires: Wed, 22 Nov 2023 00:15:18 GMT
x-request-id: OGkxGSZIsLL8IvTpKd834
x-cache-status: HIT
cf-cache-status: HIT
age: 240810
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MPk83XKOh%2B%2FxmhfWnsyyNQNmEnMv072z30uFQKHGsP7T4Yjpt5K0n2KPq7YbkatUB%2BVU2gF7qYhJ8LhXEAp3QLVyjWmzBPRP0VrHjmnGxvMu2IpYIz441zf36sYKOdQrwJCoLFvU0QE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b900528b071b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/364b9801-d9e9-4bdd-9f6e-92116e398547.jpg@avif
172.64.142.26200 OK 11 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/364b9801-d9e9-4bdd-9f6e-92116e398547.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash c926da607fa192358ab6a2801f02b00c
00705d06ee72d9ca87b69fb67276ef04ac8ef507
c5e834098bc6201146a3b76d41b64aae34105550b3f2ceb8947931ba7bbf0dae
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/364b9801-d9e9-4bdd-9f6e-92116e398547.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 10790
cache-control: public, max-age=31536000
content-disposition: inline; filename="364b9801-d9e9-4bdd-9f6e-92116e398547.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzOGUwZGI4LTI1NTNlIg"
expires: Wed, 22 Nov 2023 02:20:47 GMT
x-request-id: o6xJCA0dkbgL4A7pM4Cvx
x-cache-status: HIT
cf-cache-status: HIT
age: 213220
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0MCNqDlQ2IUXRoYCzWnoqPm07aaIbbpjooa1945t4yuvdBHqoiW6r9jjePzL%2FZQJ2wdv%2FS2Dze7A5aQ8l%2F%2BA0u2jwtOjJzRxwHR2WmgGWlN5TIE0CSRZjqLtp68989hdtKj%2BrJjuWB8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b900528b271b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/de194d72-103e-437d-9c96-4b45ce48e06b.png@avif
172.64.142.26200 OK 5.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/de194d72-103e-437d-9c96-4b45ce48e06b.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 89c285c626bf5c618359e03905e57c3b
cae3d872d502d2e492761589768f03265b6c2553
e1f28fdf9a7af9e9238200156c5b4d3b5e626482a084ceab521ca70803199704
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/de194d72-103e-437d-9c96-4b45ce48e06b.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5679
cache-control: public, max-age=31536000
content-disposition: inline; filename="de194d72-103e-437d-9c96-4b45ce48e06b.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1MGFiZDc2LTQ2NDQxIg"
expires: Fri, 24 Nov 2023 06:49:27 GMT
x-request-id: ShBxPx5O-jzryjvyKZaT7
x-cache-status: HIT
cf-cache-status: HIT
age: 48942
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WKUbKqY1EcLdkOlZjdBbEHQYL4cWN3w7eaL1CnOu0TErZLQjPlBz%2FFJLP4Gf8HKEUWt4MGQA3ZvdAoDvA3PYPSnif24X4aTWSYwkU4SxVUld5HRiiUIZqYEdXpf%2FwKW8O0H8CLKn48g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b900528b471b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/worldmatch.767ba51a2.svg
172.64.142.26200 OK 10 kB URL GET HTTP/3 1win-cdn.com/img/worldmatch.767ba51a2.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (318)
Hash cf8174654ae22a92e4af947b2218bdae
14f4e8daea9bab63b73beb27a8ea1b2c71d924d9
e462f9983252d460dd5321f1719ab726d7a3a2e1ffe637c50e617b8c7053d5c5
GET /img/worldmatch.767ba51a2.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1f6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 406591
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CTIzdVS9pNxvpaBV5EHySi38qB4p90QTr1A%2FZQh2RVZtCVdScUnoGkWzwdHdr5EU7vqDItTqjDjSTsNlVhgvJ8%2BLXFgO0Pr%2BgOWT%2FFxfFHOMuXZxtN2s3SVDCESYxsA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90049fe671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/yggdrasil.6666231ee.svg
172.64.142.26200 OK 7.4 kB URL GET HTTP/3 1win-cdn.com/img/yggdrasil.6666231ee.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3215)
Hash caa104cd6697526e4b082d9ad17576d7
9e329bf4cff59fb250bf301be7b2e455efd7b1ab
5e598f48c973303c313993b4679259f3bc5a88f9a9edc137859f7119fed23e6d
GET /img/yggdrasil.6666231ee.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-12ef"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 653043
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fKAX8FQFriNkexZMF%2B4pBI5gciPBHYdaQRv7mNaBSdoe0sjYHjxIsJ0SV%2Ffg1oSu8lISCMDQevXwWmI4rb2qF4MCkrQNJxPFV59GBFaBJlScPmD6r0xgLlO4iYVJgtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90049fef71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/zeus%20play.8ccc90024.svg
172.64.142.26200 OK 6.8 kB URL GET HTTP/3 1win-cdn.com/img/zeus%20play.8ccc90024.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (403)
Hash 2b7341ff873a104ab2a8edaec273c655
fd229055b0f30226d3d11a2ebebacc92bdb6cfa2
65d5ec970e8f64a86e653e83e4fba8cf36d15b75eedaa5f2015afd7257a3fdef
GET /img/zeus%20play.8ccc90024.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-3d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1445015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tZy22Zh6ukVES%2BnqXAFQ7JP%2FNcQgXltb7RVJaqI7ejXVYZGyXslptmqZyj5qSk3cXRVOi1PK6IzWy7WDUTH5MHFOEMQK4BHio1UO11QEiKhjLGNRTAZE0WqYsfUklek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9004a80071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.jpg@avif
172.64.142.26200 OK 7.6 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash aa31f1333230756a9e58c826b90db2a9
551b7e70b6100ede2424011a29be01e8893d1b7e
131229bea677a45742165f264fbd4c8b85ebbff796af25ad27e69bc48e199ffb
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 7561
cache-control: public, max-age=31536000
content-disposition: inline; filename="5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1M2EyOTRlLTFkNmJjIg"
expires: Wed, 22 Nov 2023 00:46:07 GMT
x-request-id: EstZ0p4d7z7o9w9Lu5aN1
x-cache-status: HIT
cf-cache-status: HIT
age: 222519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Vst8Ix6GT3AlOcy654TtgnWnV9FzmbgI%2F2ywtX8MzkaC3kPdH%2FjbfesX6o5n9CFjMQDk0GUUfcMarxSMHOMvfVuJVk1GnFvVwE5XGcCS5NbmloaXypDz9Y%2FYDMpPenb8mrmMPaFshM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006ea9f71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif
172.64.142.26200 OK 7.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 8d5d3c8e4c5ced87df63ebb3c1e9639f
5b4b41da7186518d4bd92fafa8083df5d947a9f2
a6765bfbb58120c85a6bb35e390fa22d5b56f747ada1731ea7c32d101473f8b9
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 7921
cache-control: public, max-age=31536000
content-disposition: inline; filename="3223fafb-6b1b-46ba-bb4e-d667854eb8e8.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NGIzZjM1LTMwNzIxIg"
expires: Wed, 22 Nov 2023 08:08:28 GMT
x-request-id: 6PhL9OsSoGgPNvIUq4JZg
x-cache-status: HIT
cf-cache-status: HIT
age: 223082
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nRU3Rdg2j4SQFSPhAKC5SnbK98sNENLCJgmzpDB28farAoxQFeGaMrZ39QD6fJcj8606HNF39763XLqBnaUFwEU9AeznWXfQ4iiA7JjUbuw%2BezggdBBFZV%2BYkYHhk8lXMBV66ZDLRLU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006eaa171b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@avif
172.64.142.26200 OK 5.7 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash d43bad364c5a03c96a9609f5817e6150
15772d42d72303f27a057a208ffa73a5e2cd79c5
fc301e54c3cfd5b3a1ae24e06ce4df85391d488199b163e44fe653027fc014e4
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5690
cache-control: public, max-age=31536000
content-disposition: inline; filename="26b06924-2e59-423a-b6ef-9bd9c97f41ae.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzMDc2Zjg5LTEyZjkwIg"
expires: Tue, 21 Nov 2023 02:08:53 GMT
x-request-id: I1FkEZr2ifT1k_2pYYJ2a
x-cache-status: HIT
cf-cache-status: HIT
age: 311999
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fFC2AL%2F0Ak9eQ%2B4Xh%2F1%2BOfkd4b8EJHUOlSGHpcO%2B%2BCBvoYwHrp7PzZVgusGUtKOpOEvnVeNZvlmTDURflLNsdhSSjy0wDWWUFZBdNn1pziwJSrA8SHB51JyhWPq%2BXXM7uWDsXus4TEE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006eaa471b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@avif
172.64.142.26200 OK 5.5 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 3af37f2f8befa76a2a35cfa1c4d8d118
40f565327a7717b7f8cbe291eab372092322d651
2c27aeaee680e07dc60d322a8b6f7b07eaebc8a10e29011b6f960df47b849009
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5524
cache-control: public, max-age=31536000
content-disposition: inline; filename="c_d25464ae840baf966d3d1019c718c0fc.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYyOGUyMTVlLTRiYWM1Ig"
expires: Sat, 18 Nov 2023 23:29:22 GMT
x-request-id: uxRwLyfN3qREsdkuVUJuT
x-cache-status: HIT
cf-cache-status: HIT
age: 505439
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NmWTF1D%2FnrlBGjmLs%2B3ClnCXpVctI6mybE4TxiBYmCRcIlLMXKOjX%2F9bVwdr1afwF9YbzAIeN6slcwcxnfOOFlCm4FTOx6KObYdUTHs4j3s3tEluBAjcB305%2FIsSn5EfvW2TCyMDWPg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006eaa871b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@avif
172.64.142.26200 OK 5.4 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 6c2338a2860272eaa33dbc857a2fdc8a
99a694cf85046ac81a381a1a02850d0c30779f9d
48080cd30151b1193375419c1be2fbd884482606f19be9486f5c201b0bbecc55
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5443
cache-control: public, max-age=31536000
content-disposition: inline; filename="1693e57e-f215-46fa-bc7e-9c04aa41a5cb.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MmY0Yzc3LTQ5MDIwIg"
expires: Tue, 21 Nov 2023 23:08:11 GMT
x-request-id: _HYcWMr2LfNosgRXwXuoa
x-cache-status: HIT
cf-cache-status: HIT
age: 236099
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=njd%2B3kkYqlIM5X9o%2Bf2jMc61GchK1%2FQ9aBDVKuhcHb1mVKh2l1%2Fd5mQ0K%2BaWtQC8nvfMxBlxedOPWf%2BGd77ysfM4LsZcI%2FMF4XCNM7CPFUldHM9s6WtCssnBVFGjPQeSfjzxtr9HAO8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006eaad71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/84932daf-20a9-4284-808e-41cb266daa15.jpg@avif
172.64.142.26200 OK 8.0 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/84932daf-20a9-4284-808e-41cb266daa15.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 1723d0352e11bd2eb76905fab57c4aab
7a094bcfeb38d30174d16ec36fa92271fa0c4826
eec89e00832278535bbc839ac5e0cf943e1947ea24e236fd8a257bf1561363ee
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/84932daf-20a9-4284-808e-41cb266daa15.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 7963
cache-control: public, max-age=31536000
content-disposition: inline; filename="84932daf-20a9-4284-808e-41cb266daa15.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0ZGRlMzI2LTIzZWI1Ig"
expires: Mon, 20 Nov 2023 03:03:44 GMT
x-request-id: YUS-GF4Ji2Z2todb2wVpK
x-cache-status: HIT
cf-cache-status: HIT
age: 415783
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WIWMvUDPEGOuzqwI%2FYGgwCQSmVPua2YsVjazuWm1vB%2BMEAsHIBmvVS8uVWHnkzhjHFD25oNYuutVeKsYz78EmUmiu04z0xWutWrRiLa4UmObBv3K6PEA5mjrisqn7%2FttoDEmotjwWMo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006eaae71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_dice.jpg@avif
172.64.142.26200 OK 6.1 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_dice.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 7fca07d8bc788b5c8e8deeed904a70ee
fe4984ddc136e06c745c38b4c52eeab688b563ea
643de82b238824f7d005a604a97dd031a674993e121414c3ee58daac337abd08
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/lightning_dice.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 6102
cache-control: public, max-age=31536000
content-disposition: inline; filename="lightning_dice.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjVmODQ0ZWFlLTQ2NGUi"
expires: Wed, 22 Nov 2023 09:04:58 GMT
x-request-id: EgZheZbl7gsz0DRBcfVPm
x-cache-status: HIT
cf-cache-status: HIT
age: 222279
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aNWpheDRALG9ZGZS7JIHiysQggNDdMivkhmWLMdRqJ14dRA0SueEqPlW%2BSJXEfEQ%2Fya8buTbrZH5GFnV%2Bs9qv7%2BO8bqUuH%2Bm4PZ1Hf8dkrC%2B82kKaPOJKcZnQ%2B2CTiUeMaU1ThN8CSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006faaf71b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif
172.64.142.26200 OK 17 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 151bc0973a888c1c3abed902f5e7d9af
5e3e6c76c81b2891ce6d8001a6cd73b267e6bd66
e7ca152be70af106f7ab79894d653efb6cfe72050652b42883d3878f2783fccd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0e2d11b9-786d-4e45-8265-542c38fc3575.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 16569
cache-control: public, max-age=31536000
content-disposition: inline; filename="0e2d11b9-786d-4e45-8265-542c38fc3575.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjNiNTQ5LTE5MzM1Ig"
expires: Tue, 21 Nov 2023 04:29:17 GMT
x-request-id: nHmt3S3a-GpskZJSAwV7g
x-cache-status: HIT
cf-cache-status: HIT
age: 320658
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i2IcL1qGsR7auhBKxDyQG5TehqgQA0yjU2WFrZlt5kYjU1xdLpiufNHWuOMtuznebgZDB%2F5DWHo%2BlmW%2BtLZxxbtWs11Bh8ODsEH6%2F14o359vgAjYQ%2Fk9AxKE71cdlN7sb8tbqeEKRLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006fab371b6-LHR
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0454b4e5-60dc-489e-b56b-32a10b2c8515.jpg@avif
172.64.142.26200 OK 16 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0454b4e5-60dc-489e-b56b-32a10b2c8515.jpg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 8ec5cb671f5d77870c4aedcbdddf8fa1
076251b76aa32b66c0cec26a61c5a734055f1c8b
6b909f634726426df55659b111f2296bcfc59dd903b08e80c9b8cc3761d1b2b6
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/0454b4e5-60dc-489e-b56b-32a10b2c8515.jpg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 15723
cache-control: public, max-age=31536000
content-disposition: inline; filename="0454b4e5-60dc-489e-b56b-32a10b2c8515.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzNjNiNTZiLTE4NzgzIg"
expires: Tue, 21 Nov 2023 04:29:14 GMT
x-request-id: nDgL1NIhyzJtp3VSS6c3B
x-cache-status: HIT
cf-cache-status: HIT
age: 320658
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eg272D%2FrwRdG%2Baa%2Fub39jfumzAE9mLDJOTgKXnxqzJiz5QN%2B2J5GnID%2F5X04X85XiyjtI1b%2BKmfJk4LzV2xygf2ucqbCJKxwbnasqojMFv2lbvbZZf7KGg5aKeKJdR7ZbLd6hMpEJz4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006fab471b6-LHR
alt-svc: h3=":443"; ma=86400
1win.direct/microservice/ask
134.122.54.186200 OK 249 B URL POST HTTP/2 1win.direct/microservice/ask
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
File type JSON data\012- , ASCII text, with very long lines (366), with no line terminators
Hash ff86ce88b4179ffc487fd2cbd5a0c796
188f30288e3497ac5aa09ff38c25963f30f7132f
6b6e302259364440a0cfd32351fc003530ac7173f6309c164f61096b5400c4f3
POST /microservice/ask HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-Origin: 1wnxtz.xyz
Content-Length: 126
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wnxtz.xyz
access-control-expose-headers: Authorization
access-control-max-age: 7200
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Fri, 17 Nov 2023 22:55:42 GMT
etag: W/"f9-GIO7TnTXJTX//8vYrgko3kzW4t4"
set-cookie: core-sticky=685a295111370c2a; Path=/; HttpOnly
x-powered-by: Express
content-length: 249
X-Firefox-Spdy: h2
1win-cdn.com/img/bet2tech.bb2f3549b.svg
172.64.142.26200 OK 5.9 kB URL GET HTTP/3 1win-cdn.com/img/bet2tech.bb2f3549b.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (561)
Hash 9b4c0af6524dca140fc7342babeea59c
83a1940bd69f5be34cb299c7bc6acbbe9924e327
c18e2ca7698c1c5f12044d6f3a671b690e479cf3108e75667ca90554de2a49c8
GET /img/bet2tech.bb2f3549b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-5e6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 505970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OduZP4799otuRoYzgaI1Mr71VUJlhqGztHDy71e05wvmDKfSONYgGtUVO3jSUoRsnrPHO46LXb1FHj4NyVBU%2FHbyMAqY0IG21RzcrNgY8Ukv71XV4pzzEYT0cZt6Mdk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000abd171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 444 B URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP 35.244.181.201:0
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (332)
Hash 3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: 17856
rule-data-version: 3
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2023-12-29-19-51-25.chain; p384ecdsa=sKS-WVeh7RcD91yORbWLfG4_VuC9uZFAbCI9jSiNVTsXU9tiC7IjkRN19dLfBqsGBvLa-lC-Xgg6573IO5EBXQYDn68niYea9izo9Pg9sIOinL7fZVzHP8G5mGdxMXGX
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Fri, 17 Nov 2023 22:54:52 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 61
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
62.115.252.113 512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP 62.115.252.113:0
ASN #1299 Telia Company AB
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Length: 511815
Accept-Ranges: bytes
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx15b69f172b404fa58b2bb-006555fb11dfw1
Cache-Control: public, max-age=131066
Expires: Sun, 19 Nov 2023 11:20:19 GMT
Date: Fri, 17 Nov 2023 22:55:53 GMT
Connection: keep-alive
1win-cdn.com/img/bonus_hover_1.eb9b2d69a-1320.webp
172.64.142.26 48 kB URL 1win-cdn.com/img/bonus_hover_1.eb9b2d69a-1320.webp
IP 172.64.142.26:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5495ba7e07dc7a05a6008b8585bca92b
f8dadc060dcf17862805f72d7815c9b9b119375e
570d0b7b7b49c540125d6b4636dcd2284e0c18a2c015ea56035b21ae91e400c7
GET /img/bonus_hover_1.eb9b2d69a-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:56 GMT
content-type: image/webp
content-length: 47816
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-bac8"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4325
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kdpiZTiLqJnAjqEhz1xTsXYZ51peLNx9uZkqQGHPeByHgxmiQVsj52Dnm%2F0ENm37g3gZfEChSSb6Ll6KOySpBReO%2FR9VhkCymFdB%2BMtkEKEBHq1SWa1lvXVkXi0Xubc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b906b7bf071b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bonus.75b0226c8-1320.webp
172.64.142.26 48 kB URL 1win-cdn.com/img/bonus.75b0226c8-1320.webp
IP 172.64.142.26:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8c760c7064f0128ae142377fd17b2a06
edfcaffb6cd42075bfecedd2153fd44764d69df7
32161eece0cfdf13f56657eae013b7c465da15413d352eb0eca7ad536808750c
GET /img/bonus.75b0226c8-1320.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:56 GMT
content-type: image/webp
content-length: 47824
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-bad0"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4325
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q22gnH%2FeN0ll2obVyCWzTrOHZ9tVut5wcBQWTVixJ%2B68MZHWC%2Fn0dSpKIS9c%2B4zbrwGKf%2FA6Af1f2CqWnFMkhIW4u8S3lhEt0ksOgxuJmKYKjI3DwmOYbbOEqbz9LyA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b906b8bfd71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/virtual%20generation.765888305.svg
172.64.142.26200 OK 3.4 kB URL GET HTTP/3 1win-cdn.com/img/virtual%20generation.765888305.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a60a153a5d62650c63183339ead7896c
0f4097695a74ea258201371abad42b00642207a7
3d747b23f651bc75fea534d69aa08f6049d63f914e425676dd42f65200e8d28c
GET /img/virtual%20generation.765888305.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-2e89"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 501238
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vzr3miQmnfTXmmqt3I1ulbq7WeunU6NoQd0ocEK%2BPju8wEWoGh4caSPw8opUaZxgQ7%2B%2F%2BX84SLqSQ%2F40nKaGhxDiGp8UEspPoJJPjZFBmhBRTd2r8AessGQS9R8OF0w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90049fdf71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/atmosfera.2954041c6.svg
172.64.142.26200 OK 190 kB URL GET HTTP/3 1win-cdn.com/img/atmosfera.2954041c6.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1671)
Size 190 kB (190344 bytes)
Hash 074b97f827cadc542aa167cb05dfea22
e636c3697a021f150e3311041533b3ff9b4a996d
2dc7adac0f2aa70cb9f3fa7820ff15016b163911cc0b2538a5e4ceb7afcbcd3b
GET /img/atmosfera.2954041c6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-156d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1457583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KiWEYEmywbZVfen8q%2FJLkt5l8gPyGLCK6pn6J7bpGFf0j6LtSl%2BQbTzh8hJGhKJ%2BecYfhbHAT9Cf6jCsWrGcgzi82IYRLFmsjq41ea1E%2Fg26IDT4%2Br0ucmJx8J3VCwM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90009bb571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/1321.4172db297.js
172.64.142.26200 OK 35 kB URL GET HTTP/3 1win-cdn.com/js/1321.4172db297.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (1006)
Hash 1e00400880b3b61a2f53d9080e5736aa
64ffaf61e85ee07a2f2b5db95f7b5f3c3a10041b
91ef36710d3aa9a684367b97bd7dd462b357e592da7afa140335fbf0db9685f3
GET /js/1321.4172db297.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-41a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SDcVa1uxCuOzMrvaL2JzCMu3npSi%2Bw2Y3zbg8Eqs84qaxT4AA1OdtFJb7IWDdZv8YeEiU12PU%2BDKRoF5ArPSk5P1Ln8bdfZcFPGUMUPdfWoBNH5xl3z24t72hpSwBnE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffffb1e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
static-adm.1win-cdn.com/banner-files/46gFMSTQIPqJxLalK5SGf1Qu3vBY1sRPesH8oR3qqpg9WVTmHGsLr4EVG50m6vA-Yhk3QAH7z8q80aD30ApLYjvPhvJBl8FvX1ER.png
172.64.142.26 688 kB URL static-adm.1win-cdn.com/banner-files/46gFMSTQIPqJxLalK5SGf1Qu3vBY1sRPesH8oR3qqpg9WVTmHGsLr4EVG50m6vA-Yhk3QAH7z8q80aD30ApLYjvPhvJBl8FvX1ER.png
IP 172.64.142.26:0
File type PNG image data, 1508 x 484, 8-bit/color RGB, non-interlaced\012- data
Size 688 kB (687886 bytes)
Hash 77ba95ad8ddaa7f3daa66a219bb6cfa2
ec691214380c50d53169cf50a5df33224ddfea98
6ead41def293f3004e67e4101523c17c691a41b7b42fbdf58dfb1687101628bd
GET /banner-files/46gFMSTQIPqJxLalK5SGf1Qu3vBY1sRPesH8oR3qqpg9WVTmHGsLr4EVG50m6vA-Yhk3QAH7z8q80aD30ApLYjvPhvJBl8FvX1ER.png HTTP/1.1
Host: static-adm.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:56:05 GMT
content-type: image/png
content-length: 687886
last-modified: Tue, 11 Jan 2022 14:21:11 GMT
etag: "61dd9257-a7f0e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6330
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H4dQX7dSPyap1xWQuBMX1wpF1eR1v7YR1L8rfFzQUDKN9mcpSeKiCLXG37p4ZEDJYzeuwLtljXZzW2pB%2F7jgadQAggXc4NNQW1QqSMRX4HA3UMxz3%2FSGxkc9ouL0Vd8RmUTpbWzijJrMdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90a0e9fd71b6-LHR
alt-svc: h3=":443"; ma=86400
static-adm.1win-cdn.com/banner-files/rfxwTrFuErqIl7deps1GMl2_3P3hUMQ9ZQ6j0SjNGb4z3btiNIHOLzPcQ9VHcIZJAhrLgY5FBKI4NnumZAPbeN6GQ1YgUWEpkLM2.png
172.64.142.26 343 kB URL static-adm.1win-cdn.com/banner-files/rfxwTrFuErqIl7deps1GMl2_3P3hUMQ9ZQ6j0SjNGb4z3btiNIHOLzPcQ9VHcIZJAhrLgY5FBKI4NnumZAPbeN6GQ1YgUWEpkLM2.png
IP 172.64.142.26:0
File type PNG image data, 1508 x 484, 8-bit/color RGBA, non-interlaced\012- data
Size 343 kB (342614 bytes)
Hash 0fb32faf4a0bab08c2c43bc2b8fdc7d3
8d602f523f52894cb61ca15a6cee68a338c5b2df
27edfbfd0e130fbd615b00c70e3622a291ff52aa7cd208cd07b67890657023e5
GET /banner-files/rfxwTrFuErqIl7deps1GMl2_3P3hUMQ9ZQ6j0SjNGb4z3btiNIHOLzPcQ9VHcIZJAhrLgY5FBKI4NnumZAPbeN6GQ1YgUWEpkLM2.png HTTP/1.1
Host: static-adm.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:56:05 GMT
content-type: image/png
content-length: 342614
last-modified: Tue, 11 Jan 2022 14:21:11 GMT
etag: "61dd9257-53a56"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b1p%2Fq68AJh1UHUhltTPcMG0xHfETNSNjVrKyJBH7c2XwcJftOBTVwQe87x7DEJQWMuhW6R52BWu4uhfmxNWEVFdYmyl0eT8tPIVRBn9%2F09KlWfJkdDuyfu53Il%2FA66jUJc5eiA6AHW1KNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90a0e9ff71b6-LHR
alt-svc: h3=":443"; ma=86400
region1.google-analytics.com/g/collect?v=2&tid=G-548949LWLW>m=45je3b81v894728184z8894400803&_p=1700261737248&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1876610081.1700261740&ul=en-us&sr=1280x1024&_s=4&dp=%2Fbets%2Fhome&sid=1700261740&sct=1&seg=0&dl=https%3A%2F%2F1wnxtz.xyz%2Fbets%2Fhome&dt=1win&en=slider_banner_view&ep.page_url=https%3A%2F%2F1wnxtz.xyz%2Fbets%2Fhome&ep.device_type=desktop&ep.platform=web&ep.os=other&ep.domain=1wnxtz.xyz&tfd=32658
216.239.34.36 0 B URL region1.google-analytics.com/g/collect?v=2&tid=G-548949LWLW>m=45je3b81v894728184z8894400803&_p=1700261737248&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1876610081.1700261740&ul=en-us&sr=1280x1024&_s=4&dp=%2Fbets%2Fhome&sid=1700261740&sct=1&seg=0&dl=https%3A%2F%2F1wnxtz.xyz%2Fbets%2Fhome&dt=1win&en=slider_banner_view&ep.page_url=https%3A%2F%2F1wnxtz.xyz%2Fbets%2Fhome&ep.device_type=desktop&ep.platform=web&ep.os=other&ep.domain=1wnxtz.xyz&tfd=32658
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-548949LWLW>m=45je3b81v894728184z8894400803&_p=1700261737248&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1876610081.1700261740&ul=en-us&sr=1280x1024&_s=4&dp=%2Fbets%2Fhome&sid=1700261740&sct=1&seg=0&dl=https%3A%2F%2F1wnxtz.xyz%2Fbets%2Fhome&dt=1win&en=slider_banner_view&ep.page_url=https%3A%2F%2F1wnxtz.xyz%2Fbets%2Fhome&ep.device_type=desktop&ep.platform=web&ep.os=other&ep.domain=1wnxtz.xyz&tfd=32658 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1wnxtz.xyz
date: Fri, 17 Nov 2023 22:56:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1win-cdn.com/js/52046.308ca2a8a.js
172.64.142.26200 OK 1.2 kB URL GET HTTP/3 1win-cdn.com/js/52046.308ca2a8a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1221), with no line terminators
Hash 0267d48a8541a74893986dea989d9d31
07d3a13c1daa8849dc13aedc19f74a1c035e5d20
e4c6226dd1a65a9b024eabe129a6018c4b855087fa239e03bc9c7d491c31f57f
GET /js/52046.308ca2a8a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-4b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UiBCwhbwVqLhDlZ2HTmaZpcRwsD849IK%2BbyxQtIT6b%2FqLxR7u4jR2LdH1CyS49y%2BRXZRJxYwiScEQwJmZnoskX5jmZYkBdVE2pKVgSYBgGzNS3G63QibwQym%2FpO3fxo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedac671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/5b4ab347-f37c-44e4-93e6-2c1c0efa069e.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/high5.4aa8a605d.svg
172.64.142.26200 OK 4.9 kB URL GET HTTP/3 1win-cdn.com/img/high5.4aa8a605d.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5088), with no line terminators
Hash 0d78b33182d9f2f85f1b9396ccbdd993
a0dce567a28e6e4e7f47d3103280c1d50fe803b2
c739a2a8970d477e35576b172c4d9f7c55b1bc8e0ed14c3a60913fcce8ac2bc4
GET /img/high5.4aa8a605d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 20:56:17 GMT
etag: W/"654bf5f1-1314"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 764602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iWls6tDmxz7HLGM1IRpEAnaqhnxM0TFTAoNQuCk1qKJMm%2F7ZooiHD9D4mLwFGcucGG5ofnrFspa1nS336NtA93yi%2BKZ9h%2Fy0KkyNXBM1M%2FQuWLpRgp%2B6DmiClpfoSiA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/kalamba.f208b29d4.svg
172.64.142.26200 OK 21 kB URL GET HTTP/3 1win-cdn.com/img/kalamba.f208b29d4.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 94b906a3299d35ecc988e32ca631c030
e2684c48041d5de96ea52f82d2b4f3f88baf7963
48e6e9378744f44cb727b946ae563f0121f9969e8231b5761b2f33b329df2d2e
GET /img/kalamba.f208b29d4.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: W/"65521992-5343"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 326611
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NyP6fZJHiqEiACDDopDlaFQwzrFAs8vAQqrscgs2sL1Lmra40hoXMKpmZ2lcpgqNAvueoLccDeXyKZJ9bh9QTT0C3zW4K5JCKgPurioIIE79%2BZiCSGDa5PBXXcg4iT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/15404.88dac3986.js
172.64.142.26200 OK 558 B URL GET HTTP/3 1win-cdn.com/js/15404.88dac3986.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (574), with no line terminators
Hash 81890d8cd60ab35208fedaf305570281
fd198540446aaddaed65384f281fa9ec222b122c
316a28a85537edf07156a25869702759cc4234942e73e55d1110e3347614bcab
GET /js/15404.88dac3986.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-22e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=evgtjsmbdHbLRjmwIJDdoAgjmnRMOciZ%2FntGPbThqkpVxV42ITKg23wGtYjckl6to4we3mu%2FnMUOLX52hl8w4PZykNBZf39RYxSR6Hbomxuk4DmJiaqneozuv0qSoAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff01c1371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-poker@2.a38733e7a-256.webp
172.64.142.26200 OK 361 kB URL GET HTTP/3 1win-cdn.com/img/sprite-poker@2.a38733e7a-256.webp
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 361 kB (360930 bytes)
Hash 3da44652926631bc4fc847cfcbad6c71
a5f7955272162e543d5db897e200d00d3af22b22
354fe37cee669fe141e1e1dcb3b5a12df1ff2b9b34be38b4f2e20dd46fdb7d2a
GET /img/sprite-poker@2.a38733e7a-256.webp HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/webp
content-length: 360930
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-581e2"
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 4532
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zvmc7E%2FlHzTlz9kh815dNXzd%2FCWMpw9DYjLWSC4Ik6zdCZS9YfRgv9t94gifZ9b6HnHjKNUPjeHRrjpGwR2LJQDJFbfDVBjeoOvpPRCstCJ1OZtwZkwz6VXBAKliauM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff1adda71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/common/banners/all-v2?lang=en&type=desktop&bannersType=main&localeId=1
172.64.142.26200 OK 3.2 kB URL GET HTTP/3 1win-cdn.com/common/banners/all-v2?lang=en&type=desktop&bannersType=main&localeId=1
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (3430), with no line terminators
Hash 172b4b74ebdfad4b221c56fd7eed019d
3f8558bc32f18992ec37fda4852b54e382342f07
baf41f3888a5db7b5329af73a4c67872083d7554f84a6f825ef7ca5875a354c8
GET /common/banners/all-v2?lang=en&type=desktop&bannersType=main&localeId=1 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=3600, stale-while-revalidate=300
etag: W/"15e8-0G3PcYCXDbPbk63aerkieB66Tyg"
vary: Origin
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TCnMIrubmLD2nqDslqgjdaSTKf%2Fz4nuZF7kGV8YTUXwi9bam4cfZ%2Fe5k%2FaNF%2FCk1%2B%2BCnEdTW40uUYOaW825FSD0wJCTG99E9j6iVksszx%2FJOGj%2BaXtrwYqjkX2nsSnw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827b8ff22e4771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/94536.5a38b598a.js
172.64.142.26200 OK 604 B URL GET HTTP/3 1win-cdn.com/js/94536.5a38b598a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (620), with no line terminators
Hash d441eb1188d84fd314a0bf98f107abcf
94d4f0df3c287f83af3c4a883851d9624d1c66b1
f5b820ea73e150b180fc57c0a96f9262ebe9e7dcd283241f62aafb2380f123c9
GET /js/94536.5a38b598a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-25c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mm%2BBPxQR3EYDv%2FhPzIEmxutEbSGCOj%2BE8eUE%2BzocSX1Z7%2B7JvbP1hdnTDgpMZ8eQEAF9ZGqHe91dvjXmu7ElgKcH%2B%2FHF1LCxDi4vAAW6kSj9n6oA18T4FOi0Ca4s%2FrM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90000b2b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/netgaming.aac206c07.svg
172.64.142.26200 OK 76 kB URL GET HTTP/3 1win-cdn.com/img/netgaming.aac206c07.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6382fdd0a9d7d47da1d07110816bb009
1060fc08ba33751442db723ce7a3f728deca20ea
98c283154ecdd9f56d17c149619d64ac12b47efd0aaec50215301907e12d612f
GET /img/netgaming.aac206c07.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-127cf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1445014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PEfdcrAMtu7JPIaux4wdlrl59vS7a2lk8SdTfoM1O8yeytyqMrIB1LimucMyjJ%2FgUTXgroGUl3RQadpLrVqUGsrldxYx5ByY8WLw0ULncUwUhpl%2FYl%2F6bANnHEilNjU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90023d6971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/62774.aa8b03906.js
172.64.142.26200 OK 411 kB URL GET HTTP/3 1win-cdn.com/js/62774.aa8b03906.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Size 411 kB (410827 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/62774.aa8b03906.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 17 Nov 2023 12:24:36 GMT
etag: W/"65575b84-644cb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 37252
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zYo18mFf87xvbGVR8UBy5l8eQUPEv%2BHXTbMGWtKz0Gq%2B5n7k%2FGqEOiXHEQHYbZXSfesjPqkNr5uUtNDJizEuymGRpj6ebPqxKsvyLT693hNwrd1v0dF6a59BLodu0MU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe92e0e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/78668.eb714208e.js
172.64.142.26200 OK 668 B URL GET HTTP/3 1win-cdn.com/js/78668.eb714208e.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (684), with no line terminators
Hash 08a0ee6092e0de1404738992511b5353
b1893f92a3157ba524a7d1eb122e179e1fef4483
622ce19088cac1b14f1fac2c9c5d8ce41b2f3d8ded8e24a995fdb757a5052529
GET /js/78668.eb714208e.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-29c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4yJleOzr%2Bn%2BXQsh2gVWFpA7p0FfzBVYXA26sNf0UtkRr9RZf45Vk3%2BFQQ8j90dDgEky3I9zTPKygPnkHt%2BvnxQrJXSxLHoReaEIjhqRVRz2%2B3c%2FSwpU8xzSgRR8hsLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef8b6071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/24698.9effad947.js
172.64.142.26200 OK 109 kB URL GET HTTP/3 1win-cdn.com/js/24698.9effad947.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (36568)
Size 109 kB (108777 bytes)
Hash 5afcf33ae1bd4a7aa5d92a52207249fb
4207df697ad1b2e851fa502019b6f3d4a1cc7442
394007c0e24761233f1ca115c5d28476da61c0be3e05bd2af40243918b4cd073
GET /js/24698.9effad947.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-1a8e9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BDZX3OoWCh0qstWoYnjqSM3wxxfXd3RgHD7wKNJ9ciBMRVVG2i%2BoyK2mU8igarlauF2zI0MBm6iWGl1wtjGFk%2FObplltSvHWa7qx%2F%2BgabiP%2FbO9%2Bpqsr82z%2BE4kkaSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feca90f71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fire.47bc03371.svg
172.64.142.26200 OK 580 B URL GET HTTP/3 1win-cdn.com/img/fire.47bc03371.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (615), with no line terminators
Hash 67c09052562235d33e9d9b540b33ab46
989ad205b57be941f3a6b10394860ac4114c014b
2e58981092c8647107a783548c66c02e645e55eea02479fb789aa7eac73302f9
GET /img/fire.47bc03371.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-244"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 487394
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WhfBngHPT7lTpPbk5IhTV14RY9T4Ri8uT19lh%2FGialwxOycKabTmKUSiJv2k9NnkZZUCCcqnTCsGd3oKKX1FpBPL1U2NVZvmPDi77bdXx%2F9S%2FXhX1oCOhKfO53%2F6otM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff01c1d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/icons/f894b7e6687d32fe6453b73843097b729522073d.svg
172.64.142.26200 OK 2.1 kB URL GET HTTP/3 1win-cdn.com/icons/f894b7e6687d32fe6453b73843097b729522073d.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2103), with no line terminators
Hash 8859a46e9867a050968ddeaf5d96985e
c4716b818f19f46ba7ab1c2e164d9cd2e232f396
e800bb9543f18d3ed01ac086c491561632a0411c1d4e675382f505519a119c3d
GET /icons/f894b7e6687d32fe6453b73843097b729522073d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
access-control-allow-credentials: true
access-control-allow-origin: https://1win-cdn.com
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: W/"e186af6ddeb8ba68dad376be88ed5972"
last-modified: Thu, 23 Mar 2023 16:35:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
x-amz-request-id: 17959C7C2C386131
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fOShtFdgsTm98I1nmA8GOOQNNfUAYu1AkKl%2FstaV0CVxRnvXj%2FwG4jymHrBBdC5IgO3Z%2BtEUBEGVUTzMPRHTiv2CLzYMAVaU2Wkdt53QO9Ct8iIDSJIYdmxmRabzGyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827b8ffc1f7271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/vibragaming.4b28676d7.svg
172.64.142.26200 OK 8.9 kB URL GET HTTP/3 1win-cdn.com/img/vibragaming.4b28676d7.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9357), with no line terminators
Hash ece11518500cb3a782d5201693e5883a
c5afb5d37a80d5cff6e8e6dfe74b5d14c00d3aa7
c701a9c4024871e68f347851e246196e143e9555f37f0290d93df39834494100
GET /img/vibragaming.4b28676d7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 09:13:25 GMT
etag: W/"654b5135-22a4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 826713
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CivPUQOVZEp8lBT9Ng%2F%2Fw3PiZ55Y4irVq2RURVAWN0nMdb7RTmjG21pEJveexO%2FPn1sD%2BkBxxggBT6hXmI0wBFzLpzq25sR6CHBwbTEHqJJK7xi4hQQ0%2FmMM8O2Irlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90049fda71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/4theplayer.1c19371a0.svg
172.64.142.26200 OK 9.7 kB URL GET HTTP/3 1win-cdn.com/img/4theplayer.1c19371a0.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10327), with no line terminators
Hash 9ee0071762c39a9abdcfb5c5f2e9153a
7a8ca120e612a151967686810d14679e6a284654
906e2915f306851d5d8b70dcc90f43f9e56a5409281ba2683d1f75fc6e221e1c
GET /img/4theplayer.1c19371a0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-25e5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 487999
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IkC%2FdbdS%2BQT2yUg0H84tzfnfue2SD9QL4LihN23BR6HIyXtuSmzx%2FjFRN5nV1rc6M3e9SpmczOmA97LNrdgn%2FeHVeBgRfVQCkgbQJmwyTfb5ee81uRpTuojsxzTe8Aw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90002b3971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/belatra.259628ea2.svg
172.64.142.26200 OK 6.2 kB URL GET HTTP/3 1win-cdn.com/img/belatra.259628ea2.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (6229), with no line terminators
Hash 216c0ac1e32e7d12a845de2cdcabba21
5b38ec18ca881b7480da4dbceb57ff90fc1820d8
a73435383ae372f086dca5627db0b56e20a1575bcca7fb6d915a3cb67c78f468
GET /img/belatra.259628ea2.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 12:50:34 GMT
etag: W/"654cd59a-1818"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 723086
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JlPYrGdAoil%2Fzspmq14ccbdT%2FZhZyn3y0nOMJjaqtg%2BlJnRxMGexQ2Wjlt1piK9uu2rVwucGbFdQgmKek82ShHt%2FtlHfDpDjBOEbQ54gcVlUx63tBdjegMWzKSqWx6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000abc771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/boldplay.018c7f091.svg
172.64.142.26200 OK 5.6 kB URL GET HTTP/3 1win-cdn.com/img/boldplay.018c7f091.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5759), with no line terminators
Hash 96d6da5d402b4401b5476057a3e0d571
5e49e309eb6aaf0d658605f961f6dd45e9a99590
36488f2758408ae14300ea5a7ffbdafadf2ebf8cbf0d38a4f9dfba64e3f474e9
GET /img/boldplay.018c7f091.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-1603"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1450718
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=77Ng490btbMjz7z1fwMN7nwNpA66DCYQ2TbDRsbvxAjfASXXeRd9jAumCZwCrs1SzFgvTkowvMMgwFyQJ6k6axIvHnbAXnDlIFMUnJSB8McT1q58Qt%2FESSpLe0tY1GQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000dbf571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/onetouch.8550a163b.svg
172.64.142.26200 OK 15 kB URL GET HTTP/3 1win-cdn.com/img/onetouch.8550a163b.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e5beb3bad573cc2865c49fff45a212cc
f19627eacfe3eb927ae2d248ee97677b54d2bc45
f88567cd796f2bdaad9fce74c02b2c874acdde97c56f8112838c1d0064a6652f
GET /img/onetouch.8550a163b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-3ad4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1443445
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TKUq74scevvbS%2FVrnxVPq2fu4m9r1bjMfD89skQGTsquQ1gHub7SgYfQG39pRUJnXNSMMqyTVjNdBRm%2B1A5JpXc7prokmWbCHPa2HvM1tiymaduYkbCqo8D7yV%2B5mAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90025d8b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/chunk-vendors.334a2575b.js
172.64.142.26200 OK 379 kB URL GET HTTP/2 1win-cdn.com/js/chunk-vendors.334a2575b.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (49476)
Size 379 kB (379109 bytes)
Hash 348970e404c940551ea4c2bd77bbea6e
e1af0b37c726f2f7592d7534ce72657619c19161
f036c3a9900dc3266883b096c8c538f71a2675a2f5f2dc8b748c0ec54d9d4ca8
GET /js/chunk-vendors.334a2575b.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-5c8e5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129405
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2g%2BPcxv7iGGsdRn3L85z3JzEnmAg%2BTswNVquoTVHZeAtRXSiVUMnzMNtVg4fi1Lc76fB4ySkhNUFYnupf2ZjWl1MdfosFgr%2F%2FUmLIT93xueL%2FByljRiwoTm04SAXsiM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5bf44416b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/js/90206.6e15f284f.js
172.64.142.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/js/90206.6e15f284f.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (11495)
Hash f739e0a88ff70ceff24503fbef6015c5
3f4d1a1a0bc95ef031b6d60d8e1c6b7627bd5407
7b0b87f9fd808591666f5a8839cf808e9d603fe4f299246567fd41d81d6869d1
GET /js/90206.6e15f284f.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-2d14"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129405
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MySsb%2FCxfkkacs6sdZdrR4SVUMLnxhtL%2BIeg%2FHZqgglZg1zrIfqPhzgoPB3XifP93vj1XaASdAMTCQfx41Tw2cGrWeCufcz1e8RFwS71mmc%2FDjq7W2qDwNICCnenWfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc92171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/thunderkick.93d20b410.svg
172.64.142.26200 OK 498 B URL GET HTTP/3 1win-cdn.com/img/thunderkick.93d20b410.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (514), with no line terminators
Hash 0a06419dcbd3809cf1bf06daa23acb67
5f276c5cab0b44ecf2cdd9b901f0f579aab82a58
490e369dd110e6aa372e94a96d52f34a03cbe226a575d849a8f020e6bea6369e
GET /img/thunderkick.93d20b410.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1f2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 585381
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=szCRl9jhUe72dxLm%2B6IRax14tSONv7HnHSjxWeUg0BrDXoJc8vjbOttlivNQ60cccLiVgsUXprmFvaOujKEVFina3Nsz%2B8croblp%2FWRo6R2P5rt%2BMK2%2F%2FiXqTYWVtiw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90041f2f71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/wazdan.63223c78b.svg
172.64.142.26200 OK 3.2 kB URL GET HTTP/3 1win-cdn.com/img/wazdan.63223c78b.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3441), with no line terminators
Hash 0325fe0ee4494c053acd9f5c83071fff
e99b8482c18da84c2b7035594432f6a6b88f7f38
fda10ac1b2100a7a34c152d29b4db8b8d4a9f024dfb2c7950978d2220e9206c6
GET /img/wazdan.63223c78b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-cac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 668418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tC9%2BcxnVrIlXkT6td%2Bzl5NA2I%2B1sdjmfLb7TQY9EJDK90V3B%2FXJqNS7S%2FheLQAY%2BZk0X%2Bqm8lU2tkW2mwtJCl0L946NXhRqeUvTwS25IH6pmrher2%2BsKHX1K1dC%2BQHA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90049fe271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/boomerang.ce3752d97.svg
172.64.142.26200 OK 33 kB URL GET HTTP/3 1win-cdn.com/img/boomerang.ce3752d97.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5946)
Hash 48ee562e067aa1fbecbab25fca82ca26
ae492ecb00f67f4df13e2e204ff66ea58859acc3
2de6c74dbdcc525565a680ff30a12534f1202971463e5faddea006e18fbec9c6
GET /img/boomerang.ce3752d97.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-81cd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 591976
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pRNNLIAABWQtj7x%2BhzgEWqJQinLwD8CLfaV34L1HJt62JjqfHZwKXjy1QMiVBhXpNACZngIZ4Gg%2FAZ6lUnJnp7NPlqOGcSCYeB207Nw4YKkfnbpIxvkuFNTETWYOFrU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000dbf871b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cq9.bd2145b0c.svg
172.64.142.26200 OK 4.5 kB URL GET HTTP/3 1win-cdn.com/img/cq9.bd2145b0c.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4557), with no line terminators
Hash 4d0ffd3058de4fe685755eff7fc44ce4
de39560ba755e4b72555d4a85b7411bc46633308
a552b3f59af4e7e94f2d098e40db240f974941cd0a24b009d2ed86111c242386
GET /img/cq9.bd2145b0c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1169"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 586571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZaOO9oAZTceS8mU10c80Co9OlyCuij1dFbWcr0jbnJ6n0h74lnCvo5kyCGW0FOSu2JGT6ukIwuXkv1%2FnrXO1EI%2BgHBrmIM3nTOmVCBobIluDvV0S%2BbjIzQ2UIixX35c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90010c3471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/hollegames.04d23aa86.svg
172.64.142.26200 OK 8.5 kB URL GET HTTP/3 1win-cdn.com/img/hollegames.04d23aa86.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8508), with no line terminators
Hash 64e682c4a5723527c0b5c7900491c3cb
9ab90629f556a8e55935d11e509585714258f28a
20ca0fe0a9e5e2e5858b929585dba0aeb20766065a33380fbe6705127f888d09
GET /img/hollegames.04d23aa86.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: W/"65521992-2121"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 327241
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w8gSz9q0owZD1yXr5IS6nlqA4xcSD2%2BOx8OZws3bvC4eDd63rturEtd7Y2sFP8tP2k9XTonT5fHZtJJZjZLvsn8n%2BKnFmhdCESA0CEGzI82YlGNFb7yeDzfVWxmwD00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif
172.64.142.26200 OK 5.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 0205590f4a9509c158018e329db4420c
b826e726040a213a2b78d7537de0ae2f9b41e13d
1ff87a32167939f79b46677dd94e9bbc6d5d68a12eb24792dc23da24d3d9018d
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 5220
cache-control: public, max-age=31536000
content-disposition: inline; filename="1da897ef-8952-4c44-b4a8-8da8e13393d0.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY1NDM2M2M3LTYyM2ZiIg"
expires: Thu, 23 Nov 2023 08:57:13 GMT
x-request-id: D_Sy9A0dX07VhY4ZDfvkP
x-cache-status: HIT
cf-cache-status: HIT
age: 132649
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RcWuEaBOEYCDYlgkFEkZiu4YY8MbEgwLfs1MZPGjMTOjRrhOsMKsBAddFgDI4F67lC8ancm%2FR3zZzopjrIuiogvrMz2c9vQPUt%2FK%2FPanyO%2FNBWZLY7xjqBjQzHu0zc08Dt5Wmx%2FHdXA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006da9d71b6-LHR
alt-svc: h3=":443"; ma=86400
1wnxtz.xyz/firebase/8.1.1/firebase-messaging.js
190.115.24.78200 OK 41 kB URL GET HTTP/2 1wnxtz.xyz/firebase/8.1.1/firebase-messaging.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
File type ASCII text, with very long lines (40719)
Hash 450e8b32262706d42cfdd438c49208f5
31c7e4aac1d1303c1e83a0b591abc3501e278668
58a372bb9d424111a2e73c427edb10db91c0f05e8f323f046d20f5cf8fd6f30f
GET /firebase/8.1.1/firebase-messaging.js HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Cookie: visit_domain=1wnxtz.xyz; core-sticky=http://10.233.80.111:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5M2RkMWI0Mi0yMDA3LTQ0ZWYtYTYwMC0yNjZhOWIwZjI2NDYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAwMjYxNzM3MjU5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTcwMDI2MTczNzM4MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSU3RA==; AMP_MKTG_494cccfe21=JTdCJTdE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 12:24:36 GMT
etag: W/"65575b84-9f25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/img/icons_special.31565f03d.svg
172.64.142.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/icons_special.31565f03d.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1040), with no line terminators
Hash b81ee194863955c01e797b4535992c3c
9746497694b48da0b68bebd9a125e58bd58787ba
78c45a29b08ac2d3e2020abe77b99a9c3efdfba1ce0d95b9606c15643d31c00a
GET /img/icons_special.31565f03d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-3fb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 388350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ilc1qkgOu6YHMUc41Niu4%2FbO4EvwtDCYoBmnD68VsHgTz3HVqwxrcedUb2kv2%2BRNYGS7kvbQ7jD7hbXw9txoLroEKbdHMgHPr%2B6vAhsgtZoQKPupBurQ7THjn9b%2BFMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc3faa71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-casino.70e0edfa8.js
172.64.142.26200 OK 91 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-casino.70e0edfa8.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1d259ea4d3c3b90316e6b5c11f9d0a31
38ec3b366d8236edee2c83cfd6aff73179dbfc09
cfc840e835eae46c3a161df5cafac0dba62e86318763c46e393ac811d3a424f0
GET /js/icons-pack-casino.70e0edfa8.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-163b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H759vDoqJ2QBjVKtrrT%2BPfeI5cjr6ps9QG89Erzpv%2FUV9DWur9hU0VfQj83S7FUOpFzRl1dNRDFy9zYE2s3jgmyPjwzp%2B2rsIFwVrPzwTdlWF8YT%2B95Y5Ofjv0pCHGw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fff8ad671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/7mojos%20live.0bbc237ed.svg
172.64.142.26200 OK 5.2 kB URL GET HTTP/3 1win-cdn.com/img/7mojos%20live.0bbc237ed.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5401), with no line terminators
Hash b3054c629fcab3b09382cd8ae65c0c97
612711af474c6b47d17520fee68807ad4f26199d
32fcc3778e1c2e28725be6dd122a5e61335052784970106217172f2ad5fc6745
GET /img/7mojos%20live.0bbc237ed.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-144e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1447081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GOkZq1pLfoorFRH1e1UKRkUqLGXJdv0Grlr9OYp2C49h9PfOJilx0lHhcM%2B4N%2FhltgM%2FTpCBv69VSFAT2%2BftUnqbe7SxCsZogmq9pmXGsM3gInGdVVpse34WE6Wg9%2Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90002b3b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spinomenal.30d1dc2d9.svg
172.64.142.26200 OK 1.8 kB URL GET HTTP/3 1win-cdn.com/img/spinomenal.30d1dc2d9.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1823), with no line terminators
Hash 79bd7d9e65ac0553b067276eb8ee0178
0dca1715af635118a8509b22e66c5fd81f43d195
4e17cf8e7e244f1ac3f67630628c024e25b32049d51901884951464e821ff41b
GET /img/spinomenal.30d1dc2d9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-6e7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 502158
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JTqxWILctALp8a8T6sAQU7YE4gSBDR%2FRd7tnk%2Bp61WOCHgZozKkcWmAfwUkLBQo%2BK8m7CcnIk9H1roywG77m4yC5PMhj43BCfnuPKt5Vs0VW0RcXQaHK%2BuO9VF25AJQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9003dee571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/26b06924-2e59-423a-b6ef-9bd9c97f41ae.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/c_d25464ae840baf966d3d1019c718c0fc.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/css/73290.0dcc1eed1.css
172.64.142.26200 OK 63 kB URL GET HTTP/3 1win-cdn.com/css/73290.0dcc1eed1.css
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (63056)
Hash d397e0ea30bc32b09f13efb9e1a07ae0
2ae0576e5346332edf5e1989e088fb008252f20d
328a33ff77fe6e6e2b1297494ccad7e5c5e5dc0a920d03d499a813d5f1f2c87d
GET /css/73290.0dcc1eed1.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-f680"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MRQokCUgxwBS0GsDGYZI3Q5WNGEfzQOOQB5RsW7UlHflhatpSXQhBp8asoLj%2BaX404xueXdXAIPY1UQ9TGsTvLlpSKhvkvKtRho6UZMEtkal71eF%2FyfVhSIylLiI%2FUo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc92571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_voleball_pesok.c3ba8fc52.svg
172.64.142.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/img/icons_voleball_pesok.c3ba8fc52.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1652), with no line terminators
Hash f2126062f510a75ed19968e53602006c
0e5d3a84d62626edbe0bbfc486c18c077bfe59e1
af279ee18ef48da770e020cbaa06c7cad444f6b55486d5694355b6e39ba78ffe
GET /img/icons_voleball_pesok.c3ba8fc52.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 12:43:50 GMT
etag: W/"654b8286-664"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 807578
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=URvBdHi%2Fkf3XpK6aIrLfKLEMRpHrBcQMZdMjyt0gRBgCwIKynFbOP4AdDoUvbkj1CC9DAw9eVCZKvIHIS99F%2Fy7zP6Qtad0uFPEHUED3w9HKDCkv9E0Qm%2BxAkloZ1Bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc0f6471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/576a0d3a-0df0-4a5b-ac90-7e9f2ab73407.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/5%20men%20gaming.81b340c23.svg
172.64.142.26200 OK 6.9 kB URL GET HTTP/3 1win-cdn.com/img/5%20men%20gaming.81b340c23.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (6999), with no line terminators
Hash f93411732d9d1920dad4a6c4c2204818
0edead3677383ef97651c7bce0f2d83217200b1a
3ca82578b22858e01059d9d3a9fd54f0f5aefc3d6cbfeb2213e74427e515cf27
GET /img/5%20men%20gaming.81b340c23.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1ac8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 670435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F9Db%2BVM8DYNqDRzBNEu16jpTX5E6mNz%2Bmw%2Bbvg%2Bdjw4vGP%2B8098c6UbfFkFFyhVEAA6KXfvV%2BEGy8dDVA6PB2sASshHVPsU0%2F%2BD4AVBbqh%2B%2FIVFf6bpa4uDZR68PhfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90002b3a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/edict.209e128e8.svg
172.64.142.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/edict.209e128e8.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1910)
Hash b7583bcc6d7393969dde2c4ea617e48a
4b9fd8aed83fbf6c9682af40ccd0e44a1bef490e
f26ae2b55971f193f7e9270a9f80f4b6071bd775fb20a1437ca44f6a12a67026
GET /img/edict.209e128e8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-2f34"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1442617
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NRjNWyGHFwfLUU%2FOkIp2wr9%2B48ftWjssMOpUIsoFWAoBQuiN64T%2FN%2FUGTtjgJZG63%2F%2BQWOlVL8smu3boQwtJyzMP%2BOge3c515ujHSscrh%2F4R94p7a3uT53zpjvv86kE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90010c3a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gameart.bec40c087.svg
172.64.142.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/gameart.bec40c087.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2672), with no line terminators
Hash 348c2c35f33845f56b884dcb19465d1b
e06783e6916140ec1fba1028c004d32cbeaefba8
88e01890afb4ebfb18a4911abeec63bddee2a1653f9f104f345b9a2a20cb2f49
GET /img/gameart.bec40c087.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-a20"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 589628
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mWhwdNfctqFFuhnS9Nrg7baEczmBCn%2F5WFmhktC192mGA6ktjuuys1XWtv2i2kHK5ZkJEEBNFzMGJhebS9e0lPMjc%2FxVSMINw1rDFAmvi7Ju6xG8MWM78x4QQp72w2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001bcda71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/36373.9cab2a693.js
172.64.142.26200 OK 30 kB URL GET HTTP/3 1win-cdn.com/js/36373.9cab2a693.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (29655)
Hash 556117127dcdaf4926bcfc49f2fb0306
686e05aa60d1d9159818b3d71db4bbcbd3a21bd7
2a3ec039163fd10a3417cae0d1d781d3bd6cb71d53d6e88765151b3c4a3c45fd
GET /js/36373.9cab2a693.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-7404"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fIjXNp%2F90WAnXexiZJQoFMjuIAkI5tmm%2BzOOD85PY9fxQXod18vWXQ9KWJLnftTSaAbUvtGPhqUFUQBUCsHtPMcoWfrAT%2BQbwVNRSeF%2FrC2Zd0h7LoDPocl%2Fu8bYlS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe91dfb71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/netent.30a798ca9.svg
172.64.142.26200 OK 945 B URL GET HTTP/3 1win-cdn.com/img/netent.30a798ca9.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Hash 9882ceb9fd0c82fb952fff926ba49c2b
89e196877d692bab9166fb14b13d09700bd04cd1
98aee6bd8ebcc017b5d7fa115dd1ed4ec7b2d1164ed62772f3a560ab4ae85114
GET /img/netent.30a798ca9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: W/"65521992-3b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 332905
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ygce0nHfKmgJ5CoAL1VpAZfA88Sk8sWgfVW40zABHHGo1jbsLl%2BfCs9pW2D0Y2Wd8ziog%2FDpiEpDZGjqg4OgGXPD7eza7akIhU9yGU4z9GknxYu8uGkg%2FrSSHXvFzco%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90023d6371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/73518.de0004c68.js
172.64.142.26200 OK 671 B URL GET HTTP/3 1win-cdn.com/js/73518.de0004c68.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (691), with no line terminators
Hash 7b3cb91ec58a6c6553b4f0ef74eb7039
e4bbb029da9faa5a315d5fa9d1a515263b76d4c6
f428c9720b437b60a18c0d2c1f7179a24a1637470dff71d0056d8f96c78e0d28
GET /js/73518.de0004c68.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-29f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129377
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rZ1VRYVFD8SSmz%2Fgm7yTcUf8G7y%2BvZV3E5LjL7Rnw%2BN451Ou1LzNuorgc8CG1WKlIE7jC6zeJ4xeS0JlzR%2F49t9Txq0xjXdbrp%2BSgvdBVF1MXMrJj%2FNQkWubi3kMqZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffcc82371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/vivogaming.41d892b87.svg
172.64.142.26200 OK 62 kB URL GET HTTP/3 1win-cdn.com/img/vivogaming.41d892b87.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (61884)
Hash f01a9348f1b76a7433941c1690d90740
53716ce368851b400418261bc32fdbd17784a6a2
35b73ce9589a23f92fdb641b4570b2ecb80b145cdfdfea603a0915b135eae359
GET /img/vivogaming.41d892b87.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 20:56:17 GMT
etag: W/"654bf5f1-f228"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 753613
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xQjGT%2F0%2F%2FaYPVf%2BNnnJpEJT4mvlGqSND7krU8jWJhAhZsYU4StLXWYxL5GztozQh9fZ45P6GaUytiEreDlhzjJzkfnwWE7kS5qpKau1LE7s8DE6N4eCr4DcZHxlvuKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90049fe171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/js/21473.3e16849ec.js
172.64.142.26200 OK 560 B URL GET HTTP/3 1win-cdn.com/js/21473.3e16849ec.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (576), with no line terminators
Hash 5dbb591d66f606562363935965925156
e85b846ee6d6f52e1deabb349025466c42151c23
0279ec01c9e4cc26db58cf8170d7eb249382527e3476014af4af0280de31eb1f
GET /js/21473.3e16849ec.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-230"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mfeoAwUJis7HI7Jst6uFpSvqm6v7cjwzcvkpfOXaEbYGerEow1VEHJH9m4oeOCGPmEes0YCbhlPSM8mNc%2BpawubQ0RbU1YUnUkxh%2BfS%2BDV6ddjeJQmnnWxoeS%2BOQAK4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff01c1971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/89897.dd9cca45c.js
172.64.142.26200 OK 944 B URL GET HTTP/3 1win-cdn.com/js/89897.dd9cca45c.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (960), with no line terminators
Hash f513520cd3735eae1726bf293f369138
e8fa32fdd3e16ff9adf3c49b55c298a066ac2ddf
4c398f4524e77b7b05d42901a408ffd6e1c7e4ec7f54bdaf3092eeee985fb925
GET /js/89897.dd9cca45c.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-3b0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129377
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nn6ioIcfdDrdMUupxatHk1KFmKm264Ie%2BPuk9YQsBIri0eUcKAjCnpDGA93tWSKQNNe3iccHkVNXYMXw93Ez6TIGm4rVAuPNKkTU4%2BODvwuPZhQIX3wRUEHSd5ENdls%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff10ceb71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betsoft.c6b04922a.svg
172.64.142.26200 OK 5.3 kB URL GET HTTP/3 1win-cdn.com/img/betsoft.c6b04922a.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5376), with no line terminators
Hash 64d5e6073753259fa02da1514d8b5b81
4e389fb498895857b5f69f2b8ff761138a63357e
6671e84eb5f587a789e43a2324d93185c350459543012c7ab5f4572b5d4edcba
GET /img/betsoft.c6b04922a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-14a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 653043
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eOepXB463%2Fj%2B%2B9Szgvae9nsSNNPKSLWnECSpQw%2FZLwoJcKIjycoOftJ8Up6Ss%2FFbH9%2Bh9s7gzFOaLsX8W0C1bTR29zVNWIFFKS1%2F6bBfhs1g1UGmgng%2B0TswDOR9LVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000bbd671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_darts.143c6b32a.svg
172.64.142.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/icons_darts.143c6b32a.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1272), with no line terminators
Hash e60144d490dbfda3cfaa32a7b6aba0f3
36d32f21cb19c6bea0188b9b64a286522aee4069
1382aaa368ba37de9e1fa30c784c9d3b1fb925e3948791a1f3bfb4707acf764f
GET /img/icons_darts.143c6b32a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 12:43:50 GMT
etag: W/"654b8286-4f0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 809037
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Xct9JHU4O%2B%2Bt4Wq%2B%2BdBJhOyTR37J8fOXP7OKD0fPn2OZLMoeKsz1%2B7jEogrlSGW7scYSRnXTIb98VWhT9IkxIdukAWSOuY%2Fovxk%2BnucGfSUc7%2FUsF6QSDRDkJCZFrg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc2f9271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/amatic.01d534302.svg
172.64.142.26200 OK 621 B URL GET HTTP/3 1win-cdn.com/img/amatic.01d534302.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (637), with no line terminators
Hash f5d97d1b7aa3cac6c6a65a9a088fecff
36626b1fbf8312bcce0e8bdce748ca74e55cf086
ea63f413adb9b10112261df34d862ed76da85adf7662dbfe6150906423b07a04
GET /img/amatic.01d534302.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-26d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1450718
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cb33UQBrOrSUjWWzmCM63Ukef7Si3QF6SrmLh4YCIrap7JR69ilb%2FUXXh%2FlfzS65vokE5MHkBU3DMKc8fblE%2FGDKnxO5Ey6yQkeP63Y4Pyer3xJgU4TFiVWBTPN5eKE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90005b7b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/smartsoft.55c81c763.svg
172.64.142.26200 OK 5.3 kB URL GET HTTP/3 1win-cdn.com/img/smartsoft.55c81c763.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5435), with no line terminators
Hash eb6c5c860de816f1f04f6f40a1a24f64
944d532847d557845dcb0c09a6331186d41c35f3
43fc87444253a7a02d74ab47df63c0712d139eab53c2a418c890192ac69fdb0a
GET /img/smartsoft.55c81c763.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-149b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 679175
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ofv7R52Q3ja6AAFWKF6n2LH7ZE%2BfF0NWsEFbHz28vdTEDscXOwPhYFxCtpN7X5zYpyd6hFZ7InkPqPMyu%2FWPEAMIpX6zL40Kavi409MiDFmsMrWPGsz3LQqgQMVejp0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9003aebe71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/1win-normal.34748aac6.svg
172.64.142.26200 OK 4.6 kB URL GET HTTP/3 1win-cdn.com/img/1win-normal.34748aac6.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4865), with no line terminators
Hash 6a657a7851fa92f791304f1cdb123e9a
ae2def67a366ffe67578bf82e3c47b4f1966e784
8443e4838f78a5ad2efa628846e3337e1cec32b94cfce323eb25f2e97989a02f
GET /img/1win-normal.34748aac6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1221"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 654419
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F037X7HTrHo857i2%2FfzjMFDteAnUSowvYRUyY9fFrXkRcfyOTwM50wmrAwqtii3BuUaOnsP9%2B%2FFr8gS6i%2BN%2FfU4%2F%2Fkam8QaqFXKIX8rIBo9FiPWZk9BJf3wBTDMnXgI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef6b2e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/8631.c87b2e9c8.js
172.64.142.26200 OK 2.7 kB URL GET HTTP/3 1win-cdn.com/js/8631.c87b2e9c8.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2750), with no line terminators
Hash 04a2b550407d205346eb1c33081e95f9
4996607031e44230bd2a6f27a4b58d43c01cf12f
42ff69b2d43012a00d9e257057898ef960842d48c92faa895ad1624f8f034d32
GET /js/8631.c87b2e9c8.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-aa8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VrM1%2B6RwTWZidcR3GzSUrQRblXf9hgmKGlNopN697b%2BstWg9k0Tdi7N5hqF51cWHVcfcgn30Dslmszq9GcUAnmjvabhUzkkVfLhTlHR8dETMq8ZTp4CbXVVR6CvqAK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff07c6071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/index.8a2096818.js
172.64.142.26200 OK 189 kB URL GET HTTP/2 1win-cdn.com/js/index.8a2096818.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (19946)
Size 189 kB (189258 bytes)
Hash f5725ef6d8dce529e2f61b34bd65530b
f088fa34b64bf7fc7e2f302d6d814b672e07b3e2
c1b2108724c349ecc28ec6be3ac3fae46a29ed75362548ef4233691e5b522fbe
GET /js/index.8a2096818.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: W/"65575b83-2e34a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 37254
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RBQNaPkrPyTtjC2VRaQ2%2FqjGMGUN1x0iEeBf1aFrw30chZrUD2S2%2FfQ7QM132Fk%2FEtjSCUQ%2Bu7zlJGCcaVbO9lCqG5gp9d6VPlgLzHxn7tsxl5QxtHQo6YTPxu1tSVQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5af38416b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/northernlights.efa65c9fa.svg
172.64.142.26200 OK 9.9 kB URL GET HTTP/3 1win-cdn.com/img/northernlights.efa65c9fa.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10066), with no line terminators
Hash db67b7b13e3824b24fc8334efcc28f22
bc66f2ba133d092342f77c073c119a1f1369116d
8b007866ab50be829c5f25f5caf67b65649b8f8d9f1a6aef3033a6ccdb9700a9
GET /img/northernlights.efa65c9fa.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-2699"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 414339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tNLiL3xtRyudwiDqWxt5RvpRfLwrd4MPd39LqJn%2BQ8BvnwXEw%2B9a64IyuQkgbq%2BP9PvWqvALuvT%2FrLBIAe2s%2BjcsBuyerRj%2BpqW9tr%2BgxjuTfc7q6VzJ0cHzVZoBo1U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90024d7d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sprite-poker-frame@2.50a0c1527-256.png
172.64.142.26200 OK 10 kB URL GET HTTP/3 1win-cdn.com/img/sprite-poker-frame@2.50a0c1527-256.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 02e1b80a02b656f3e40626b0441a8675
5fb12e431267a2d3f32372241648fc47ef123d7a
11a1d726e2d552c57e65db362098d91cdb4617789cd1cb4846e17aab0fe4ee11
GET /img/sprite-poker-frame@2.50a0c1527-256.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 10453
last-modified: Wed, 08 Nov 2023 20:56:17 GMT
etag: "654bf5f1-28d5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 746644
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iNYz55LmjE543G11mUNquIQIPFv%2Fr1%2F46%2BpoTrVrwzrYuODDiTfEe1uiflfGky0gSgtjcY5IsPJhfPfSstWg0az%2F9TOBGK4kSTB6P0TwOJ11Kf9zbjmvU8Wwd%2B%2FNGKo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff1add871b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fantasma.7a456c940.svg
172.64.142.26200 OK 9.1 kB URL GET HTTP/3 1win-cdn.com/img/fantasma.7a456c940.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- exported SGML document, ASCII text, with very long lines (9403), with no line terminators
Hash d9833728b31568b475d542d5815ca6b6
ff5d633514525cc9e5badee4f22490b59ac2a054
534e612a9a99f1b8e9624e2199a63e0629408fc9a1f652236547158f0f7e3633
GET /img/fantasma.7a456c940.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-2397"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1357569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3oj%2BQWyPglrNBkUF2N2fEoeCF%2Fq5qsAy5AoYk7Cny4mR4rdkS3Va1h5ByPjO3aRAz4j4QLWVQYMX3PtG14QH6hSKFkQ%2F1uc8%2FpyCnVJJsCF3EsEPR3qyOJIaZme%2Fjt0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90019cbe71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fugaso.a193ab537.svg
172.64.142.26200 OK 20 kB URL GET HTTP/3 1win-cdn.com/img/fugaso.a193ab537.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6262)
Hash df5e32b9f3f576612350c5ef12278bd5
8f49bdd790d2e3af5b96ce00cc30a4b1227d52ea
b2ecc05e29a9bff74c45d348b17c873bd7aac903f7603d54f43053d258fdcacf
GET /img/fugaso.a193ab537.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-4c1e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 594161
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VvhnyzwPj9F5SwkjkRxN3sfEc%2BpzgVNCTJNxFPUiF8qDC08tUzTXcZaDwTnGFT8ZdhenvRkO2ESXjedI5C2Sj42Bo6Y3hgL26jgLps7uhbIdz8A%2FfjyOfxWF%2BYt%2Fnx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001acd971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_bg.d251a9b83-1508.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/500_i18_bg.d251a9b83-1508.png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/500_i18_bg.d251a9b83-1508.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/reelplay.7c34e6a55.svg
172.64.142.26200 OK 25 kB URL GET HTTP/3 1win-cdn.com/img/reelplay.7c34e6a55.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d6ce57a76accbe2d444678374c91e128
9b6a8281d72af79d4a9327e27351a64d1e0f992f
aae37ec659b4d2b608846952786df4d5850911a8a4000a6b840562cbfe29460a
GET /img/reelplay.7c34e6a55.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-6070"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1349204
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CuL0MCHYEv1RjfWukhllsKiM%2BhRV6UT2tg5U%2FP9ZVZGEQ8UxoWBWKoMKG9aVdlpCl6lHdOnm8WRUorNiPTNjpgnWYIA5Lbq4VGwUMnNozDhfaOdTs3duz42MHTchJgs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90030e2671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/1693e57e-f215-46fa-bc7e-9c04aa41a5cb.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/playbro.29e123eaa.svg
172.64.142.26200 OK 7.0 kB URL GET HTTP/3 1win-cdn.com/img/playbro.29e123eaa.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7259), with no line terminators
Hash ec6826108c1f503f8530ce646545c4ab
11dc879af2d2c389e2d7a2faab3200bc438c2bb7
14b3e6d8b1c7a97086f4d69508841b4b943af8a48cd653eb1db7a3e18e56c527
GET /img/playbro.29e123eaa.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1b2f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 671631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7BeAa2FweeEYhq2XyElQddRnvIwRjFNJeBviRBOwOCXad2IJxj26nozELMhmLLQLz%2Fj%2BYcL70UE9BJP4GsK%2Btv36WXfbG0o%2FC6QeUlT8fyRliT8JeXbIGDRswiKTNqQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90029dda71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/retrogames.513aab74c.svg
172.64.142.26200 OK 2.1 kB URL GET HTTP/3 1win-cdn.com/img/retrogames.513aab74c.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document, ASCII text, with very long lines (2134), with no line terminators
Hash 7e159a728307d603e92b26a22981b90b
45a9618e0e576f21c24e31448b825a416bc56236
62386d01207c124936f3edac56ba7c16633460dc895853a14ba1d1ced6ee16f7
GET /img/retrogames.513aab74c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-815"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1357568
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yay6oBKMu8yzi8oeAjB6ouPixLthjJ9OM1RDDazs8rzTacIdlk33XeIPBWV8xI%2Fbf7WqisOLUO8r1Zu8Do6O%2F%2Fd4KlWj8ynmTaNi2e3%2BZn8PVK6BbQVk14ObczC6DyE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90030e3471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/revolver.1a5adf315.svg
172.64.142.26200 OK 3.7 kB URL GET HTTP/3 1win-cdn.com/img/revolver.1a5adf315.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3907), with no line terminators
Hash 7548b88219a7b9938b61d1268d3dd41c
0cad16f1dd0dc83802049a4322a326810b9732e6
03e61d13e88704c3f20fd3f60a881a48e714543625b2d21c353182a74e843f5c
GET /img/revolver.1a5adf315.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-e61"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1357568
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=etSKhrZQgVc%2BNCcXrOW7icmgStsmNMVg4HKY7EAOr%2FqJJpAe%2BhjeSpGoynSb2fK1WneEMPGIXs3l%2BVa5JNqQ8%2BjHFSbrj%2BbCOpSv3P1UygJr%2B6zPnIi5z7ir9xhKvlY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90031e4771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
172.64.142.26200 OK 194 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 362 x 429, 8-bit/color RGBA, non-interlaced\012- data
Size 194 kB (194363 bytes)
Hash 3fa3eee2dc5421a36ff30dd2007d72ea
05a782d268b545b6556a2305a240922c94822326
00167ec87e61893b4c74daec9f3851ba9a7439cff029bf56a440cef7df9d1ebf
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/png
content-length: 194363
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-cashback-casino.png"
etag: "bYO6A3TkrGzIprX68BfyOBGJEQnSmCYqqMK6NzP2zdM/RIjYxYTRlY2U4LTYzNWI4Ig"
expires: Thu, 23 Nov 2023 08:38:15 GMT
x-request-id: q_aODGIcgqq8OstCJuR60
x-cache-status: HIT
cf-cache-status: HIT
age: 136528
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aV8pGjWYwJMHfh%2FIfMoSyOr8Nz21k6BzYmD4dF068jAHU7WJLCK3W%2B2jEjv%2F1fvoABBQf8c6iNFe6tiGt4%2BJH9Ln6035KCrask6bPlrHq38EhVywUC%2FDbT4Z1m6zp9%2BeiM8G%2FuG8AkY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fefab8a71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/sagaming.4e1b794fc.svg
172.64.142.26200 OK 4.2 kB URL GET HTTP/3 1win-cdn.com/img/sagaming.4e1b794fc.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4306), with no line terminators
Hash f0bc4165c6c6f773741177920fccb49a
b65da42faee81624278a117563dbe73debb2c831
181af9936c7b8109a614241c5432bf4098789e980e44291f2fbc5143f7ff8de3
GET /img/sagaming.4e1b794fc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1060"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 670288
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZKiT6grF0hTQXqL1RbrDPUeoHYVFFf%2FXCwqVyZ3bs%2FF9cv9pV0mF7ayb7JPAqBbnRkjCNWUpraswzooRxSL8ksZ9qV2sAH%2Fg2B2DGJVJLJAB7K5cOWtvLEKS1sJO4Vc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90036e7c71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/superlotto.164bda58a.svg
172.64.142.26200 OK 6.8 kB URL GET HTTP/3 1win-cdn.com/img/superlotto.164bda58a.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6850), with no line terminators
Hash f4ac4dca97b360d836f1fa28c4beba2b
126118f8798a8e37553b03dfb451b22fd1a11a4a
866837546b272fc46a96bd0ac5d86c0fccbf1ecbc52d3182a75356a083a7c215
GET /img/superlotto.164bda58a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-1a77"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1362612
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ozF50tN8oCzpE6Y5mL1NLZhQ86M%2FBvo8ZNXPdUd3RupOb0DkRdqYq3PN5RGs%2BZ%2BUUVhgPHLFSetnKfri65rznvFm8VjQLFGpRCL%2BRqGXmB5ydFnlDyz%2FQc3Al8kBxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90041f2d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/pgsoft.5ab7874fa.svg
172.64.142.26200 OK 3.4 kB URL GET HTTP/3 1win-cdn.com/img/pgsoft.5ab7874fa.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3560), with no line terminators
Hash 2592cde655523ed81ca6b4677d2a384b
5a8763fd46f7c620676bdb8d2b1871185da5762e
de1fb1f82210ecd6faaceefeb103fd25f75361015a4604eae9e27536119023bd
GET /img/pgsoft.5ab7874fa.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-d6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 505970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c968YpRjbz9%2Fehn3sc7CjW%2BX9LFrKSZfAYKpGWgACY1l72zlcBK2t6D3PQ7Sh%2Ftaok9VxbGpkhIi0T6UmmJx98B8VRPUOf3HaU6%2Fe57colmRovBL8ge3rHvSQkq2Bns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90026da271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/skywind.61796511a.svg
172.64.142.26200 OK 5.6 kB URL GET HTTP/3 1win-cdn.com/img/skywind.61796511a.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5812), with no line terminators
Hash f9c87ed6e5c88bd311ccb751a897cbdc
31b104503df2bfaf485469cdfe43571726bc8399
4436e9d1e7d914ecfa0bde4affeab6e69dafac7c608cbefb590aa489ec5ed184
GET /img/skywind.61796511a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-15e3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 461765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vWO0hHbUFulWHAN3A2%2BglaRyG6ShW7VO0VV1kjHn23cG6zCIQMlY3GN1qvngiBPMQvRkR0N6rzRos5sfcX19isiF%2F%2FVNTmBAU8TMB9WqcO8iQdLEIbHK71aP%2FwKrT%2FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90038e9f71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/93492.4b708ca3b.js
172.64.142.26200 OK 878 B URL GET HTTP/3 1win-cdn.com/js/93492.4b708ca3b.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (910), with no line terminators
Hash d2e3371ca34c68cfc97a3884c7dabd61
20ba8a782b789a0b2e1ab4f0caec6991c9acba29
57ab69a7ca2eda85f85758c8ebae282b8f55d4992af7f6abf907308a4fc74404
GET /js/93492.4b708ca3b.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-36e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gOY82AVB6ObDeoz4vqXOFQuZ73UOYMxMunGNVJFx4%2BH3BD2CBMIH%2F2I0c6nmVA8vUtxT%2BnNfmJKyLGGDC17MCt2X%2FSXKyC5MkmXwLZwrIjT9Zs0JfpaL%2Fku4Vr3ohWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedab871b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/f736e1ff-fdf7-40e5-93b5-2daa1b472e4d.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/igrosoft.81ca5abce.svg
172.64.142.26200 OK 8.8 kB URL GET HTTP/3 1win-cdn.com/img/igrosoft.81ca5abce.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8820), with no line terminators
Hash 658a72da30c1137eb1000653f28f66d6
2c9cbf13de14b81f516e96d793cbb059b586df75
c10a55bb7adc047c87a6df72be8d5f5cce37871de04d6491a7e24af3a64dd33e
GET /img/igrosoft.81ca5abce.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-2243"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1447382
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DA4R85PnLLkltUgeUA9%2BAIG%2FFWegRIAHh1W2lb9O5IC5kaRIt7AT0ck5nJdVB9tx0KZMfXzj6Qcz624lGxdfEtKImgIWoxBYSS8hKO9EAXIP6O7UStNL%2BtCZsJtTjMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/free-money-link-image.4433e4971-120.png
172.64.142.26200 OK 6.3 kB URL GET HTTP/3 1win-cdn.com/img/free-money-link-image.4433e4971-120.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 120 x 97, 8-bit colormap, non-interlaced\012- data
Hash 8c77c77c33189721a876fefeadf5ca83
0b197aa9e55fe824b28e55b9e0591f8631b6c3c8
b2a4295182c1f7c9619a4d2f842be12f4cbc6c4bb8d2ea607f06ff3bc4099486
GET /img/free-money-link-image.4433e4971-120.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: image/png
content-length: 6292
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: "654cdf32-1894"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 580432
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lafIKThSb4gmu1kP6aCKLxQYTsoJvzeFhT326yIAcxoXjrbgTCXc7Pg%2Bs1QLCurwvgNoX2KMfJl%2FOzDpwRL2a%2BGb5ZboJXrxNRzJwI0dxagHvM%2BzLsJ6IHS5N6AZ%2FEw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff12d1671b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/genii.5614cd786.svg
172.64.142.26200 OK 3.7 kB URL GET HTTP/3 1win-cdn.com/img/genii.5614cd786.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3755), with no line terminators
Hash 8a183b18615a295ba3baa7f4f83a6a49
6b3c4a9bcd38c5c94708ff2a61743f7bb8187464
74281be2d4243adf0c51dbf978647d21017282e86d2bec14383656ac065e4bab
GET /img/genii.5614cd786.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-e7f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1446069
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jDxAtaZyvArDN4ftWf%2F0zG0dHOli5jk%2BPLl2i%2FKE6r%2BVeU%2Fu%2FpFpkCHAotVk6zBlGz3l4XZuNenZ%2BEgLE81p82hTLTMTeSZ8e%2Bd6c2%2FIWkUf7WxyLT6njcXxpJApGNk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001ed1571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/rubyplay.ba93a714b.svg
172.64.142.26200 OK 9.3 kB URL GET HTTP/3 1win-cdn.com/img/rubyplay.ba93a714b.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10042), with no line terminators
Hash cc1fb16fcbf7acde677ae795b3d62559
d8b995cffe92fff1f1176131ef200c56e91ef664
70a68d2e561c8be4751b83db4a4304a18e452989a21e6d28e572e6999958ced7
GET /img/rubyplay.ba93a714b.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 06:45:03 GMT
etag: W/"654b2e6f-245b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 827182
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vPGvMLe3tNrL9SZ1E4omL2TZneLBU1dKHjoafnWTEYmqGW64oWFEBnMAncf9xx8Wxyg6Oe1ABOPksLl7b270WeJkVYDG%2F6u%2F56dCnZ0aBM%2Bh7TzZZO4X0nOpoxMUWgk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90036e7a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/58183.5aae8d05b.js
172.64.142.26200 OK 159 kB URL GET HTTP/3 1win-cdn.com/js/58183.5aae8d05b.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 159 kB (158802 bytes)
Hash 216594511c0355fad37e778a1b8f47f3
ad2595235cf4c8a2551a5cf2c7d82ca8310930e2
100c2a7642cd8c947bb7970456c54db79d032742d864a498cf79b08d7184c11e
GET /js/58183.5aae8d05b.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-26c52"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 593622
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nbjr%2FOK9GriOBTmnDnXa%2F%2FQEKkzHHh7qXPxRy1tFCsB5sw%2F38vBfBaoaOUe1MX1cMUiI8v0LP%2BG9aTQDcGrrC5OXLHPbxUEQWywkkGNZwSpGvWYW6vZ1besO4XRZwtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fec98f671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/12109.cc406392a.js
172.64.142.26200 OK 726 B URL GET HTTP/3 1win-cdn.com/js/12109.cc406392a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (742), with no line terminators
Hash e2d3580c86d2e43df7926db94678a6b8
0e5baf29e207819093aad2de1e1b674026b99516
b97a0d71b63aa436c5d595118980afb3e93ea4a2eeef54f3a659fddaad5776c0
GET /js/12109.cc406392a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/icons/9fe18e0b2b94caee8ab435f4b33ad49adb1ba380.svg
172.64.142.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/icons/9fe18e0b2b94caee8ab435f4b33ad49adb1ba380.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1320), with no line terminators
Hash 752f7df1a8779551e4d25920b87808a9
15dbad4922e6d40359a0fa39c8bd5422c6841ab8
06f1a151594255d5a6a13f043e556e25b4223bd63258bc4bb940c53b2d37dc73
GET /icons/9fe18e0b2b94caee8ab435f4b33ad49adb1ba380.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
access-control-allow-credentials: true
access-control-allow-origin: https://1win-cdn.com
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: W/"04522f4bf8f5ff4a6ce3c02af87c2f8e"
last-modified: Thu, 25 May 2023 08:51:27 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
x-amz-request-id: 1796EDE3511CDC73
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mtojb5gT02VDnGyI%2FB0ZPag7yTIru%2BPJqti6p4yTOzjAKh%2FlNPE3RDL71u%2BxxlV%2FC4RaZu5NvLeSXN19ajEOHc5aZOzDWlxMjfDwZez0VB%2FyQpAu9MjR4XENQXC3soc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827b8ffc3fab71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/betsolutions.9f618e220.svg
172.64.142.26200 OK 2.3 kB URL GET HTTP/3 1win-cdn.com/img/betsolutions.9f618e220.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2359), with no line terminators
Hash feff17055d5b9c1f8636eb3984192f49
6a4b6e1408e4e588ac7798a99762036a7d8bf00d
957a2da699b3dc8ea45d9da3db6c6577ae7c70dae0e053eb60aff98ebf855cc1
GET /img/betsolutions.9f618e220.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 20:56:17 GMT
etag: W/"654bf5f1-911"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 743730
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dbn7uzZyd6QDWGVL%2BlYG0H3mzFtZwiaEiMSwf7zdcvOdfd7HJzuZ2VAwg9LC052pdbDz9ad5juY9YyK3srymu%2BfUrC89Qw3%2B2I%2FvBOwnmkGO%2Fb5KVFImin7zBLmAu2E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000bbd971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/aviator-game-logo.2fb50dc03.svg
172.64.142.26200 OK 3.1 kB URL GET HTTP/3 1win-cdn.com/img/aviator-game-logo.2fb50dc03.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3077), with no line terminators
Hash ced188fd368f5c8439ebd4398c9c9315
3b04cd5dfecda2e4b27b203dba4a6cef1b7890ea
82811dea95287317cc83610df97a7bc61db4783bd43ef75c8131c497f7868ef6
GET /img/aviator-game-logo.2fb50dc03.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-bfa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1520894
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LOmXWuwtdY5UgYkp%2BQXSvgrW%2FWi1N93zvamoLyEjU%2BigBz9%2FopqlqfdNBacSOTDbhkEXgAjz8eKsPhY16xCZBqxqPZhIY112f1N6gvddAN2WFfQ4NGqKU%2B1rzQUsNo0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef7b4771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/67310.52a69202a.js
172.64.142.26200 OK 989 B URL GET HTTP/3 1win-cdn.com/js/67310.52a69202a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1015), with no line terminators
Hash 815f9f02c55a367b0539e1847c9fc98b
a3a52cc6a2fbbf0ba30779a27efb529b3bb4be64
03b2072102852a1abf28842979522026c45d17222d265c6f69fd8e56a4502eda
GET /js/67310.52a69202a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129403
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wuktMA2%2Fu9LCEBDFx9%2FYa16fqPhmxZNEEkieSI0k2sKwcB%2BOezMlO4r%2B4IKv2lk4XbwjXZM2ZfAReKi5FX%2FNYzuZQj1zL%2Bj7zDDE8aPHR0o1plRGT61oV8bHwv5W6d8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff06c5b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/27546.96d2b1a65.js
172.64.142.26200 OK 985 B URL GET HTTP/3 1win-cdn.com/js/27546.96d2b1a65.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1025), with no line terminators
Hash 252e8aa856a3924d909ee6d1b5ad60a7
988d421804f97bd8f06b1fc8b0dd6bf5efeaa4bf
afa42a38d1fd49e42ea8d60d766bcec2b4b1a4343931e1e6312c171af9d34491
GET /js/27546.96d2b1a65.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-3d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129377
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xu%2FnEBJYmwGgMt3J5GW%2B%2BTBf7Zqbjw2ZSBJYPatTwPzYSiGXBbQdCWw4KYQANQtkkkWMBcOZZ97DEfY5cz5KB2M9WEcOr%2F3CyAoRZx5KGFzOCNOF1LiZfmvbfQBXV4A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff07c7071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/booming.a167e59f1.svg
172.64.142.26200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/booming.a167e59f1.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2243), with no line terminators
Hash 20d6b800baf9e97b6205a4feba5b818e
a2158f52c5252f2383c15f8214970d1e59583d69
822b15544281e31081f56d590d9541db3eb333fd66ab81ec7b6f2193c372e826
GET /img/booming.a167e59f1.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-8b3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 390422
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lBz4pOSVBFddqc5ahyLONplyTlibUo2XWnkd4YEf4hqY2X5TCL5QKEUUDffR96CzxIqAVN7d4go9F1UgDOJ3qzb1l9o7K4RvLYaHXhOqUgVUJW0CY8HxmtuZ5isNNXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000dc0171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/electric%20elephant%20.0f5be6efb.svg
172.64.142.26200 OK 7.4 kB URL GET HTTP/3 1win-cdn.com/img/electric%20elephant%20.0f5be6efb.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8034), with no line terminators
Hash 33090b1a379e18fed064b0f84957c92e
efa1296ec37d81b9ff848fe109fb821c3836194d
f10bd2884a9501c0b364222b10dfbc99d828ef07a66295e6ba8e8c9b87e38bc8
GET /img/electric%20elephant%20.0f5be6efb.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-1cdd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1446069
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=brlKntN00phaL1o7ukq1cWeh%2FYI11iwgC5JEOxPEHXv1EXiKzFKHCN7RqEdN%2BWsdkGBWkypu0duj7YgwRMb9QRol4fPyM3yoKU4FZ5zeinBbFAYdrncgxffsTxPWy%2Fk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90013c6371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/turbo%20games.bfc7405e7.svg
172.64.142.26200 OK 6.3 kB URL GET HTTP/3 1win-cdn.com/img/turbo%20games.bfc7405e7.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6409), with no line terminators
Hash 0d988d2747db6679060f52528c1364c7
86ac3c8d68ba01fa839f9b1b2974ea6f995da12b
23d31484ca0466a64438148a13e97407006600ddc457637695e3750223e64f38
GET /img/turbo%20games.bfc7405e7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 06:45:03 GMT
etag: W/"654b2e6f-18b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 827182
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p4t9hMRs3FocRtrGSBkbKDLVRY4FfLVlKqB7W8idwmJZxNdxfjaID0lYGnqRF%2FDNP0HrYhqhLB9sid2cAySVOpyt3Rfsht2vVtQAud5kIBvh4BjJWMrR3EZhaNqGYgw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90041f3271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wnxtz.xyz/img/icons/favicon-16x16-darkmode.png
190.115.24.78200 OK 344 B URL GET HTTP/2 1wnxtz.xyz/img/icons/favicon-16x16-darkmode.png
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 55101f46ace081073c98f0d75229ae94
384e813b0f35437de99eb269c7d5c76479e20886
e380e9db272a2b59fabadab58a1d0a0ba51fbba121eec2920d4ab7b239b85a5f
GET /img/icons/favicon-16x16-darkmode.png HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Cookie: visit_domain=1wnxtz.xyz; core-sticky=http://10.233.80.111:80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/png
content-length: 344
last-modified: Fri, 17 Nov 2023 12:24:36 GMT
etag: "65575b84-158"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY
accept-ranges: bytes
X-Firefox-Spdy: h2
1win-cdn.com/js/76125.bd49bddbf.js
172.64.142.26200 OK 859 B URL GET HTTP/3 1win-cdn.com/js/76125.bd49bddbf.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (875), with no line terminators
Hash 6bbd6bb1dc1ac51aa07aa972de23c474
f74cb5d4ce491df3a4b9d9e1a5bec3d813379d29
ae94024cff5ca7b39393807250f560b4d64574ba7fee525266a902ddaa83fb01
GET /js/76125.bd49bddbf.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-35b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nkqiMLJ3Hsi3A3MS22IVV8zMPoUYtB62fdyUPdG4cLk%2BfoYTBno7ZwWqeieXA%2FeCEqTCQb%2B%2BldWRjdOSBe7vGYBMtjijh004982y3FRt414Hg7%2F6Fv04fTbW71ZxcOw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedab771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/speed-and-cash.dffacd6c5.svg
172.64.142.26200 OK 24 kB URL GET HTTP/3 1win-cdn.com/img/speed-and-cash.dffacd6c5.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11315)
Hash 3c62bcde419e822cfa55d45a05fa112d
77631a7cbc25e1d4567b72cc5b8c4acb43c7eb38
feb59050cb394075bb3efee348121151a8a214d673e69b1a3b8021e85a46c5f0
GET /img/speed-and-cash.dffacd6c5.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-5bb7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 420354
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YjAd7JSMbVquGA0Rw1XNx5650ZbjVQs6rZNIUZzarHGp3pg18e%2BQW1J%2FD1l6KtLAVdeXhD2xyPhNlQY9xpc1tgHWnEE%2FNZt7Teg7pHFXyTDuNdoZtX%2BY05ewC6BoRy8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef7b4571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/icons-pack-payment-full.c1f3d6f2c.js
172.64.142.26200 OK 121 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-payment-full.c1f3d6f2c.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 121 kB (120826 bytes)
Hash e3f73b5318093f998e04eea8dac00e00
b3c3552c3bc4587e25c50a001769b66f736973ea
99e9bc486073bfbafc52dab881710522ad0ffffa7d8e524eed5084646f9dc45c
GET /js/icons-pack-payment-full.c1f3d6f2c.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-1d7fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3rMZt4b1DF6o45HYuMZpCwcDcpYhD2Gax1h1NvasLyMjd%2BBGVKFjcgsnXwLr4MXgvshELY7Bfxphf2k6nPKQZ7gsTXduFK0hovuauks7NjUFDlEVLa10mZgAGvhhFuc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff0fcd771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_tennis.4b25aa6e8.svg
172.64.142.26200 OK 1.7 kB URL GET HTTP/3 1win-cdn.com/img/icons_tennis.4b25aa6e8.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1731), with no line terminators
Hash 8f96ce3c9f41d12cd6b7d5e7565125ae
237c35d59f1badd2b0314a821e49f8bad1872ddc
4c7376dcb69936dfbfd43ec748ab32340c5a223bc2f0768bd19564f61e0e582d
GET /img/icons_tennis.4b25aa6e8.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-6b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 386645
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IJRoO%2Bs7IixkyEhWRnVGpx1vk3VnzL0dghS2gqxnL6hRO5NbeRobVf00DRiFwIuZQ5XLXUt%2BrIGg2V5MwC4hkEZyGtby5tPXhNFVWf5TXfT3ycQgD8QZWx%2Bniv4FbJA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc0f6071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_hockey.0d49138de.svg
172.64.142.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/img/icons_hockey.0d49138de.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1025), with no line terminators
Hash 19e4889c84bbbfbd89080de78c3490f5
11b9ec16c9e746b8f76b7797ddca5d715f0e110d
25cc886bef29375df82b66309f3134e8b25205d27db2f0a39368c354deec255d
GET /img/icons_hockey.0d49138de.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: W/"65521992-3fd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 327748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XF%2F%2FIorRJsc%2FN%2FGNr2l93tekTpOurUErLSj5%2FdCfIWLxBaxl%2BOdcscJ1Kg4SfQ1hHumzYO1adGDcVwign4RJNrr0XNyclIu5qrGcb90zsmrG7vu12%2Bu6PrBoY8tIch4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffbff4871b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/agt.a6dc1f1b0.svg
172.64.142.26200 OK 5.1 kB URL GET HTTP/3 1win-cdn.com/img/agt.a6dc1f1b0.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5344), with no line terminators
Hash 1a8de75120778bfa5b3f7e8e7ab38e6c
a50a5b57228cb1d0b09afe336ecf32c8d5d3a693
a1065364b2191b6f1fa470ccd43934acb41adcecf56af3659a7639dab94c2589
GET /img/agt.a6dc1f1b0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-13fc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 671631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZHWSZOccARCuqxH0NPc11c8fWg9hAhHkXrDJUpF3Z%2BufdZLChyl52cgUoT%2FIcwGxkqlXVLis%2F0hXl8DAjeGQx4FCFmURDw6eEBuSOk2bHbUrY1a7ApRdNF9kJlGdqVY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90002b4171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/92159.afce9aa73.js
172.64.142.26200 OK 10 kB URL GET HTTP/3 1win-cdn.com/js/92159.afce9aa73.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (10354)
Hash 93f9a55bf566b9545cce04c29b005c64
9e7fe90fe588a65fb743dcabaca231798990238d
597bb74db1a083c55e6a360fcdb109d9a0375ce5b8eed836418a500f8e325dd7
GET /js/92159.afce9aa73.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-289f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6nTOn5c28wv3psIH6DD3xTLsPwfbqhK7p4FGDhgNhEY1Jyoszsq7jp1REB98SkZUh02qBpRACgDz0U5baRZtmjcvOi5V%2Bv0bGAK4b6tMbizmvIH9ZKLOMRe9BWNVlMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fec68c571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_basketball.aaa47453e.svg
172.64.142.26200 OK 963 B URL GET HTTP/3 1win-cdn.com/img/icons_basketball.aaa47453e.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (979), with no line terminators
Hash dde5aa34128813e03e423c1c61196594
c22b8d8d6edb76d7190d29592a5eaf775792ae41
519379adb8e4f54b9016a8ec7460744a36e993aa074c88d63855a8a78501448d
GET /img/icons_basketball.aaa47453e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-3c3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 414396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qsc8UxtR6h4gW7qIiTAFeedguRqij1b5nHxPLefcS7A%2BXytMjEJl5%2FNwhXMSL9ssAmBD9w7izABsH4YCVIOl8TvGrN3k0y%2FXLfemjr91y20oEf77BUgWZXWM2mCfhj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffbff4171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/big%20time%20gaming.848cd0840.svg
172.64.142.26200 OK 8.3 kB URL GET HTTP/3 1win-cdn.com/img/big%20time%20gaming.848cd0840.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8466), with no line terminators
Hash 3dbd2da0e12462ec913f476db3c279de
dd3bc8c0ea0a53d02fcbb77d0652c00027e00c47
059241fcb083c2ec83f925ce7987f61f16b5bb2cd85befa5d01d59abeec2d1f0
GET /img/big%20time%20gaming.848cd0840.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: W/"65521992-209a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 327241
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxKOL7DT76JIwWiOBiwaSVJAHuLdSRKWQqMWiKxYQCp%2BbHO%2BaNG8ls7PR%2BeT%2FqHbEdQjDLOC0y0jOKD3eokH1kksjHTfr1KDfkDbFqpRB8TquXAK5FhPTr0vF3TbJww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000bbdd71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/caleta.4b134d785.svg
172.64.142.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/caleta.4b134d785.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1303), with no line terminators
Hash e7fb51f70d5d5cc66a6bc73ec7f9baef
451e18ba57b9ee6da5a19b69b28c98a21f333255
2344711e299fb0d88b59c8848cf2249e2c9ef5ff433029d0061d5793e79670ec
GET /img/caleta.4b134d785.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-502"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 679174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5kfPKrEWXsVF%2FGDU5S9f4qp%2FcKR1lzF7VrK3xXKtdzr5YCzRznPLfH5P5TCcjwaHrcvm3X1Q3jJq2VYl1Iu3QUOdL6wB9ncfzDMDcW9mZ6ag0wt81BFbtzkTT4aHDAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000dc0271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/hacksaw.ba9f22a5f.svg
172.64.142.26200 OK 4.4 kB URL GET HTTP/3 1win-cdn.com/img/hacksaw.ba9f22a5f.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4610), with no line terminators
Hash f7f69837f54862ed401890eb0ef724a9
2cccf18f559c9b917cfeebfcd9a1fcc4f41ab032
c1074a46056c1d6c798ed9948f9e6e7d8444ca7da62489533b31c8b6de92dae2
GET /img/hacksaw.ba9f22a5f.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-110b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1531760
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u6VGz9%2F8E3GSfQvmEvesbjpc%2B4Fb2%2BrJFZbv%2FN10v1l0qK2xnplvKJp7Qp5Vd4lp57cQwmJNrorIBzXEnS2vbkxqPmBbHvfqDdoq6feJs%2FTqAx0hl1S5yri5ogUJiRo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/onlyplay.820ab1cc5.svg
172.64.142.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/img/onlyplay.820ab1cc5.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1686), with no line terminators
Hash 224097ccaa7950f8e11400227f96d975
3a25709af60b65a3d742ec48c77543264b51d8b3
02d7c808c7bce012a90ffabb92104481e34735e9e392f36324d6964cfefc6b17
GET /img/onlyplay.820ab1cc5.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 07 Nov 2023 17:21:12 GMT
etag: W/"654a7208-648"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 851548
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dNxhHCY02HCSMkfnH9%2FxSBwbWAWVE9trwWeFlZ3UkK7ul2xJ%2BrEH4ypgIkA7bV2CoWv8CPHlaCzHf%2BNiq8%2BpKEGdkwA%2BpYNoX4fBvp44fIgeOvXxCyGMPoBlXNmiAu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90026d9d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/86279.7c92bd299.js
172.64.142.26200 OK 469 B URL GET HTTP/3 1win-cdn.com/js/86279.7c92bd299.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (489), with no line terminators
Hash 339aa06485024b7b0325ae5257bb12e8
de415d2f8c2a976d47f2c7654713807e35f96fcf
b1e592b90bccb5ace31c5f50a5998263ca53b23a28abdfd47f8ccd21191ef2b9
GET /js/86279.7c92bd299.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-1d5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JxD9p2alBA4JLWKhrhpfDK7cd2krLJkAjX8zCmD%2FJURt47cb%2BDOtyWmZ1RDFcf4mHfo%2BmqQMo9fXPMtj2oXPYk9wdkwSX%2BF5K6tZ9VbJ93jdD1W2GUjfGef7kq%2Fxpl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90006b8271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif
172.64.142.26200 OK 6.3 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 1135961e3dd1057fc744a3de2d76c131
fcf9be70400cf7727cc841967609bfab980309f3
92315a4efaf32b20e2b64752e618aa317e3b97ab26b3bec9d171fe260ee15fdd
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 6283
cache-control: public, max-age=31536000
content-disposition: inline; filename="728d6758-6f50-4b1b-8132-2430ff7e0aa6.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0NzQ2ZGJmLWRhZDki"
expires: Thu, 23 Nov 2023 03:52:58 GMT
x-request-id: cPRrglRgoPKnyoiqYSFJ4
x-cache-status: HIT
cf-cache-status: HIT
age: 134283
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dv%2BZVydgxBrQ3t5p6d3DquvLsMMyeg7Da1BH4gHjvdhTLgpuL6GZ2%2FQM6bCeruA2BJuknfHHlXxJkKt57dZKOoauYoI3oDg4ayxkzp%2FmrVDa7sNi1fsJvcmVN6JreU20Go7e2gqGc7Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006ea9e71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/flags/en.svg
172.64.142.26200 OK 2.2 kB URL GET HTTP/3 1win-cdn.com/img/flags/en.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2329), with no line terminators
Hash 79e4258317717cae7d54221d403e28d4
85a14a9c6aa03cf4c9ec9e942a06e5987cb61d0a
0b0d98ecb898886bc24f0a6859a7a76034f960374c9914370e69d3ac7467a697
GET /img/flags/en.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-8ae"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 679455
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ASN%2B7HdnWqz0LjiW3hgrjmI%2BJ3tAtHWKIcQoyDUaZuVa09P1SgVfb4FIBlPlMMAY5aTK%2F5dvaCj5yje2%2F%2BmwZhYoxQ01I5T037pvBUnkjGJDl6xx3BrB%2BFDijtZOefA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef1b0371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/css/index.5a1ee2434.css
172.64.142.26200 OK 116 B URL GET HTTP/2 1win-cdn.com/css/index.5a1ee2434.css
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with no line terminators
Hash 0c96fcac44e4fcec42b2a3c71571d058
7027542c938e6fd38c046aee12054f9c054cd906
2aab2cf8bb36995cc7cfc8698fbebb6b7a0fc8c59daca494a2b18897a4479df6
GET /css/index.5a1ee2434.css HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 11:05:19 GMT
etag: W/"654b6b6f-74"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 819507
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gLeXQs2WWLt5D8taWHpxT0J%2FKyQmrGxsj%2FwAnTfCJpFmTPyXAUcljC44MF0dNg36ifo3QXvAGPNU4e0QY1qUwMdgwbhqq%2FG8ZcHDXAmFZ9ICIosG6ee6CMsrn61T1F4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5af36416b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/1play/81c5273a-ebb1-47f6-8535-6376c353ea74.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/quickspin.9b693b274.svg
172.64.142.26200 OK 5.8 kB URL GET HTTP/3 1win-cdn.com/img/quickspin.9b693b274.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5870), with no line terminators
Hash ba9fadabac032bd4b40ea5f55f58ab91
10cd58774cd21f4077bb64ad113f9c9eaba850db
bd91f1275d9e61b9d2b400252846d20488f5e13dac9a8f65607d1ddea995b11d
GET /img/quickspin.9b693b274.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-16a6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 671787
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=doeUSMnGEfxIU2WEJ4eLpdun%2BH8NU1LjMQwvDJaLW%2BgwIHGp2Tmz0Nkh4NxVOwngKsSlwfh59Bi6%2FoIASngH5nRGu4ffzhgjmqOJn6ZIwPYjiD2UIz0pHywWRIr6ttY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9002ee1471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/simpleplay.21ac090fd.svg
172.64.142.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/simpleplay.21ac090fd.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2664), with no line terminators
Hash 4142569bc2f932ea5e9eeb17316818c8
3cf64d5cb6b54b66d4046e8fc750890cc99db9db
4e7336a2a9e433aab3996f50f01420d18151671f6724405126692d99a818991b
GET /img/simpleplay.21ac090fd.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-a01"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1371944
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GCghIgYzLn3QUnmFFQKcdfxE5eXnZqg9SPi6DHpjp3VWkUFjZ4HqCMXzIA0zUl8r28G6SzB6FCQ2vda3aXwTYm86LTXJfwSEYfzg1txse2zzzz%2FnCYxFboUQSWZAxu4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90038e9d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/8f42eed8-7759-4107-bc42-6f6e8aaf620f.png@avif
172.64.142.26200 OK 8.2 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/8f42eed8-7759-4107-bc42-6f6e8aaf620f.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash 487d5becd4435c79d482ef7b862f73da
3a874cbf13d3901d87d25fb4f0ede72961ac832d
ac9b329768284f0d3d9d514d69210a465539da0f257e33e0fdcadbbc30574012
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/softswiss/8f42eed8-7759-4107-bc42-6f6e8aaf620f.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 8169
cache-control: public, max-age=31536000
content-disposition: inline; filename="8f42eed8-7759-4107-bc42-6f6e8aaf620f.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjYzZjM1MTMwLTRkY2U0Ig"
expires: Thu, 23 Nov 2023 01:18:16 GMT
x-request-id: 5CGonghToUv8w6L1OHsys
x-cache-status: HIT
cf-cache-status: HIT
age: 139634
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ycPE8CZMLOTP7F4A4p0dcmnlERLPRejTr9YsJKmjpWZGFRrQzvu62T2zb2Qd6ksLk9OliTNZAsHZSkMlQf3L6ha%2B1ouOvzziuWSyVdFRx6lmc8BDr9XBJfgaN2WdEzC9j77080EUiiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b900518a071b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/73290.a7d601e8a.js
172.64.142.26200 OK 106 kB URL GET HTTP/3 1win-cdn.com/js/73290.a7d601e8a.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (57212)
Size 106 kB (105681 bytes)
Hash 1c8af7055fdea3430c4aecf41b1deb7d
54643125cc13d5d3f099ba3b9880d051d584fe3e
045f7409e0f3cec21069eed3323d2c2d254a5f9eac21746bf4586d38d7de010b
GET /js/73290.a7d601e8a.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-19cd1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=24%2BzfUjua6JjRaWRNoUY4WXYLx%2FY%2FTILM1xD6uY3HuVIOsMzdaSWZgFMbVheJIQ%2FV2WzqoLUWrsrwK31RSMJtEh8U2rdpSHlSAp6hyjOCn5bJgKFXsFBCQRbt3Dy0Xk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc92871b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/70797.827d29607.js
172.64.142.26200 OK 559 B URL GET HTTP/3 1win-cdn.com/js/70797.827d29607.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (575), with no line terminators
Hash 1431288e5ff444a83ba03695804ce402
e49f0e4922ef56a4606bbc6d1994e4cf2440864e
9363f3d54af5ead5e9987c6be535647e55e1d7cd249c96fb1ea60013f831bb98
GET /js/70797.827d29607.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-22f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vLKr0k96N5eC2jc3OF%2FjTWljSih6NiZQ16GYyYx7%2BmKAUdPFvUiwtO94toUtnVJzwwOSgX%2Bm4x%2FqP8xYftdOfnKExat3TQgl3ng92Ijq5jlbeOaKEFv3Wixd7omNd2o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef0af771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/lucky-jet.f927485da.svg
172.64.142.26200 OK 4.0 kB URL GET HTTP/3 1win-cdn.com/img/lucky-jet.f927485da.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4016), with no line terminators
Hash 46387a9ff4a17ec246107df243120bfb
f662dcb3e5629d8b9dcd169f73e31f95309bda40
b3cffaeaa51fa3689ab70d930776d565a90ab7caaaace2f1cac5f67cfc13205f
GET /img/lucky-jet.f927485da.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-f8d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 581145
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7zP9L8aVu9AoLGBYQWlHEfZlRSC1HSsfUT56JOWTCzIdUxdraLG46Ho6lO%2BLJqSbiNZpqF281Dj8PBolHanaq7TYkV5F4GZH%2Fw3H3vYXgZhRpEMdZBkvX7fAZm1y0F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef7b3d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/80366.11ccd24bb.js
172.64.142.26200 OK 817 B URL GET HTTP/3 1win-cdn.com/js/80366.11ccd24bb.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (833), with no line terminators
Hash 785c97fd03f9e2148c03cab1c5a45f6d
bd6e52c5d46a28ff7c37be95edc549bc8eaac7cd
6f3636154c162e2aaeb6d52645efa651aeb93ac781dc37a4663607032567a072
GET /js/80366.11ccd24bb.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-331"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QUSGGalPH0ZwcJ80eFObnmV1yH8ISo7tgRQox%2FsJ9e4aafGYdN6sCXe5xIQJYXUcsKIaIIiy91sCAp0tp7CcyCV5Kv7MB0uAWcSg3%2FKw6x4bsl1ygiO3t2r%2BZ0MXpAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fffeb1b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/89049.a0eacf3da.js
172.64.142.26200 OK 1.0 kB URL GET HTTP/3 1win-cdn.com/js/89049.a0eacf3da.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1039), with no line terminators
Hash 1cb4491d8591690e986eee0ed937c40c
a5edbc860b16588136bc53c0f59f5ec8f1bf49e3
1a0132406e9068dfab31f6e25de93f2c0a3b751c81dd7fc254a761c10ff66d1e
GET /js/89049.a0eacf3da.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-3ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O4SZEMlx0m%2BOcT8PU4CmBZLq4B0mLlRmDramZEp08wOwhIyQreSuPzZWlYThhQwkUIt24ToCEw1fuaZ%2BwZE2yofD2lqmoD0XqMAuS7tkj7Map9O8CrFsFO3MKZBi9KQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef0af271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_criket.e18d0c2a2.svg
172.64.142.26200 OK 1.1 kB URL GET HTTP/3 1win-cdn.com/img/icons_criket.e18d0c2a2.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1125), with no line terminators
Hash 33195efd06ea8c5b81b9dd5431248156
29f607c0657f377e1bcd5550a57f71298e4eb1b5
27ea72a3e9b1b4897bf644ff509e4beb2f6ea17d4ab862d9194ec896d2e84f91
GET /img/icons_criket.e18d0c2a2.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-44d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 471584
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J8IgFq8jnwtOuk2PSHtjDylMZpc8PwYfXZAvi6PmhSuxYUF0rM8TY4CN9FpDIVb0xgc4RZ5lSBhUB7RkcnYLV1BUyPuDP78dLuJ60iXX6nu0h840ReAemQys7UZLbl8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc2f9171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/desktop.fd909b055.js
172.64.142.26200 OK 123 kB URL GET HTTP/3 1win-cdn.com/js/desktop.fd909b055.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 123 kB (123437 bytes)
Hash ba031d1dc75b67049c39469cceaa6b99
68a2df670bdcf3fd7d67e6cfb98bbb95ee56dc70
d9d7554d6bce0467574bfa3e3e869e2f601b5fc2bad3f7f97ab3619df54d64fc
GET /js/desktop.fd909b055.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 13:29:50 GMT
etag: W/"6556194e-1e22d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 119805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vYOsAuWA%2Bs4UyRoHo8ab9uLTUMOyplTXM40kQFRlkMUv6FoySvclU7pmzDqV5kfPx3nq0SPOqxKt%2BWq08YnWvnwxhds647QYAUsEhf3fePIDYlHCl9oS2SRWHILVpX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe92e0f71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win.direct/v4/socket.io/?Language=en&xorigin=1wnxtz.xyz&EIO=4&transport=websocket
134.122.54.186101 Switching Protocols 0 B URL GET HTTP/1.1 1win.direct/v4/socket.io/?Language=en&xorigin=1wnxtz.xyz&EIO=4&transport=websocket
IP 134.122.54.186:443
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint09:1D:17:0D:A7:3C:AA:27:3D:C0:53:C4:15:60:06:59:6F:69:6B:AE
ValidityThu, 19 Oct 2023 02:05:05 GMT - Wed, 17 Jan 2024 02:05:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v4/socket.io/?Language=en&xorigin=1wnxtz.xyz&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wnxtz.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fEhSDvgkw4rjkDHgIBcN2g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: xg8MOGP/8z+835qXpgcAtU838go=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=a3cef8f126618c38; Path=/; HttpOnly
Upgrade: websocket
1win-cdn.com/js/icons-pack-home.9d2f3f402.js
172.64.142.26200 OK 19 kB URL GET HTTP/3 1win-cdn.com/js/icons-pack-home.9d2f3f402.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (18852)
Hash 704b2edb5f6412b1ec03747ef98b8e67
54b602206f84fd9063862699592dbd7cd0ba5e2c
1e821de1b543b9f8ded3c98dd81260e8457ea3ed1e3662bc42a123e9c6b09d10
GET /js/icons-pack-home.9d2f3f402.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-49db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129385
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0NV%2FmUfU8Aav3WSS2oYVqMK82JuPuL%2BWlPBRapUTPAKhHURpMc815v%2BREXmTyL4wwNp3YNqw%2Buv4e%2BOj%2BFe57v%2F7iJ4eHoodXjE89PnxlOu6TdgwXDCch50SpyOJAog%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fefdbe271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/tvbet.c92ea7dc9.svg
172.64.142.26200 OK 16 kB URL GET HTTP/3 1win-cdn.com/img/tvbet.c92ea7dc9.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2202)
Hash 45f63096a21e070e99f66e6827b96bc3
a0e39aeb6137eca34e8321cf7cb1a1497b50ffe1
6c84c1af3364bca896fe033b00754edd7980fcb0d2da81cbbf80793b1a2544bd
GET /img/tvbet.c92ea7dc9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Nov 2023 11:02:39 GMT
etag: W/"654381cf-3edf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1337049
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=StlFHR7PQ7EgMqQkMUzlXeCLalKvSDltBWUgj0qLiWs64YGYEkipU5G%2Fr3mE7EdPngbwWz%2BioQ5gi%2FaMMNzd2Oa2fbjYp87Ldo930bSGywtFgY2qbZPN1X6XHMyUXcw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90041f3371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/goldenrace.423ead5c9.svg
172.64.142.26200 OK 29 kB URL GET HTTP/3 1win-cdn.com/img/goldenrace.423ead5c9.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (28699)
Hash dcdf59bac55af5a4cecfb4013372a7e5
5c21a5e28e7556a2bb54061add5ef3188b1281c9
96b7fb4761c8d23981d923266df64d8a6fc5081b5572eb4207b5ee44a9270316
GET /img/goldenrace.423ead5c9.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 09:59:22 GMT
etag: W/"654cad7a-7198"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 732560
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cFQjUusFkb8qqv5JLTVcG6gw5ZVzBGKtXRzms%2BQOGk5O1EsjzYfwXArpO76K48NRC%2FWMYFPp4z2wwRh1w7%2BigGtsSrpnUGDelRdnudJV4C0pzoUl6x3jjxy9cXY%2B0mg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001ed1971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wnxtz.xyz/img/logo/main/1win-normal.svg
190.115.24.78200 OK 4.6 kB URL GET HTTP/2 1wnxtz.xyz/img/logo/main/1win-normal.svg
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4865), with no line terminators
Hash 6a657a7851fa92f791304f1cdb123e9a
ae2def67a366ffe67578bf82e3c47b4f1966e784
8443e4838f78a5ad2efa628846e3337e1cec32b94cfce323eb25f2e97989a02f
GET /img/logo/main/1win-normal.svg HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: image/svg+xml
last-modified: Fri, 17 Nov 2023 12:24:36 GMT
etag: W/"65575b84-1221"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/js/16776.d18fdd004.js
172.64.142.26200 OK 24 kB URL GET HTTP/3 1win-cdn.com/js/16776.d18fdd004.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (23990)
Hash b2c218d917f6a244c54fc95a7e7407ef
0a5409d0383e26f9f74fcf4806f8a2a655b69df4
7b6303ead737cb6675fc4a71fde0aec50067a3ef4da86205d46ae2e82d2830c1
GET /js/16776.d18fdd004.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-5de3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bE%2B7Vonqur8I5%2Bq468yD8EmSCqjQsOge0UdE68rhM8baMK0bGWADOA%2FdCb6RwyHNRf%2B5O5sDFqLCs2rmQcGztpNA0rnXJ5iHWEnp1MzxfPTzCdru9gY6vvz4NtG0dJQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc92c71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/92291.cb59407aa.js
172.64.142.26200 OK 1.6 kB URL GET HTTP/3 1win-cdn.com/js/92291.cb59407aa.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1678), with no line terminators
Hash ac0e85b2d32f45fe43cf93f6711253da
46b6c082fa8470624da2912234271f1742075a74
954a4b2cf4e83f4031fc1448ca27fecfa7302d72f50e2caa6bf05c56991b0002
GET /js/92291.cb59407aa.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-664"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129386
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NzD67%2BAqYriIXIjKFuUB%2FaeyVUBm9oqHbQJdmvK7uZ7NjHm1uxp5PGVkn0MN93XlSLikQIzNSm7LQEnx6fpqV5iqvRRxJ4sCUndBjwNW66y5z2wWJ4wtLwg7Zm5BWO8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedabb71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/fazi.0731b5cf1.svg
172.64.142.26200 OK 635 B URL GET HTTP/3 1win-cdn.com/img/fazi.0731b5cf1.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (685), with no line terminators
Hash 886c48f0d22109bf7ecc93c320783143
9462f8707e02240e878582e05ebb8d56dd1bcafc
2e02e4f2bea55e010a4d4a935de86fec2a6694085e3e18f8f8ce9ca2a0f00d6e
GET /img/fazi.0731b5cf1.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 07 Nov 2023 17:21:12 GMT
etag: W/"654a7208-27b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 839023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jKFePqz5oUYXW25za6NQcJensCRzp5Mn3RblM4nhsnJoTFVyfs%2B2N8l%2B1tx2TfPX9WPVj%2B76Q8NmFFn2e0yywV8VJ7Q9f3Es6TD39n%2BjPV2IFnU2Au54c2a2I%2FQYFEA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001acd571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/500_i18_img.22f56ee2b-1508.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/500_i18_img.22f56ee2b-1508.png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/500_i18_img.22f56ee2b-1508.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
ps250.1win-service.com/push-server-v2/?Language=en&snapshot_time=1700261737226&shouldCompress=true&EIO=4&transport=websocket
172.67.209.1101 Switching Protocols 0 B URL GET HTTP/1.1 ps250.1win-service.com/push-server-v2/?Language=en&snapshot_time=1700261737226&shouldCompress=true&EIO=4&transport=websocket
IP 172.67.209.1:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-service.com
Fingerprint48:CB:9F:DA:B3:47:8C:98:1D:D8:ED:B8:6E:3D:02:D1:D7:5A:2F:85
ValidityTue, 31 Oct 2023 17:15:03 GMT - Mon, 29 Jan 2024 17:15:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push-server-v2/?Language=en&snapshot_time=1700261737226&shouldCompress=true&EIO=4&transport=websocket HTTP/1.1
Host: ps250.1win-service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wnxtz.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JFLHoE5r9SJ78gWXipC71g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 17 Nov 2023 22:55:38 GMT
Connection: upgrade
Sec-Websocket-Accept: /y7q6HgnRn/qVnUh0bgCkam/V6Y=
Upgrade: websocket
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGeCmKA9QZ1En%2FRsKoPs4H5MAF%2FY7JronxxZQqV42i8aPSTK5p%2B31ndgnzVfYlMldQFmlJq9llCiMAlZDiJlmTsqLFDFH58y5Kzwb%2Bp%2FmdCBWJK0LcqDjx3xcfMj%2BIgvQmBuFOyua3zj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 827b8ff94a27712a-OSL
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/icons_gandball.a82d6ed8c.svg
172.64.142.26200 OK 881 B URL GET HTTP/3 1win-cdn.com/img/icons_gandball.a82d6ed8c.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (889), with no line terminators
Hash bffe942f6d5162bf3932884606237e5f
cb59ff2a6d308efdcb61ab0da0bd636e049e14a5
1cf5a8cb70e2ad07b8668840e7e91c402bf0902623b0c7da6c7efe98caa288e6
GET /img/icons_gandball.a82d6ed8c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 12:43:50 GMT
etag: W/"654b8286-371"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 807578
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CJHNdenwvvvtY6eguwGZGS2Hz5W5u6F%2B9gCBlXOrK3gnFR0gnhXQVyM7vBpMRusyjuOhPdpcthwFa9u28%2FXrKuNgeRCPpTMxQcahdEP%2B3hHWaehEnedC61TAipAYrZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc2f8e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/salsa.aa6535b1a.svg
172.64.142.26200 OK 9.3 kB URL GET HTTP/3 1win-cdn.com/img/salsa.aa6535b1a.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9690), with no line terminators
Hash 4489107967430bcb7f13f1e35b68130e
35c1cecd2dfbb72e0429b8524f058a5b74f1a7ff
af92134c64e2679619c828d642a5f84a767817240d331a2d6c30b292cdec9191
GET /img/salsa.aa6535b1a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-246f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1523623
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7aWVDhN3JshJi1oAFVVao11ys3lt78rWevqFLx30OHml5KK%2F9oA0idQDEa0TWsdMzWSzfImcmo%2BHXPkPykJGG2E45mCbbv5frO%2BPhUYW4wKOIQ8YzVfNOHUdn6bq1eM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90036e7e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/b766d86a-eade-487b-98e3-7c58464e62de.png@avif
172.64.142.26200 OK 8.8 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/b766d86a-eade-487b-98e3-7c58464e62de.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash d065f4df1e5468326fdf699352e94876
b3c054de9deb2099cd89460e81db6449f75a65db
5acf53885761081080901f4ae3c97dc9dc33bc8d260f8cee963cdf4a9e42f26e
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/spinomenal/b766d86a-eade-487b-98e3-7c58464e62de.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 8843
cache-control: public, max-age=31536000
content-disposition: inline; filename="b766d86a-eade-487b-98e3-7c58464e62de.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MTJlYmFlLTMwYjZmIg"
expires: Wed, 22 Nov 2023 01:37:32 GMT
x-request-id: pIgQGC5CJr6n__LcFMcyx
x-cache-status: HIT
cf-cache-status: HIT
age: 228182
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hBTXxZ8gAj1tbbqfQvGU5aPTBrvINOFrZ4qZQL8RRB0ffRg3k%2BwCMvIgHdoP3QGzizdffyzP0kwK6P9dG4ZRichD7SclfY%2FRREZEWsxsUBAWmbD1pD6bifR99yteoDyQpHN0ii4Q9TQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9005189971b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/47408.a16bd0faa.js
172.64.142.26200 OK 8.0 kB URL GET HTTP/3 1win-cdn.com/js/47408.a16bd0faa.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (8298), with no line terminators
Hash 73d093186aa0c504a291019d31785f2e
62d188325e7a81b4e32acb8b2764e1769550ac77
77fea0c359e0407fab730e71220b86262d2c225db568c8992786a1854afbc572
GET /js/47408.a16bd0faa.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-1f69"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aVf0D59nNHN2vppSCSM1g5MA3nl8DykVDGmisJZIy2eg62Dg%2B3T2%2FXlInzolZe%2FDS%2BnNtND122YiXRmDwAiwhMnjRFxs7BKgESgro9dSup363CoQtoJDtRd86ej7xS0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc91f71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/playtech.f068e8aba.svg
172.64.142.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/playtech.f068e8aba.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1310), with no line terminators
Hash 5fc00a3432cc7548f4634d6bc5a2b72a
967f8f4a71ee3ea13c3e9931f74c5da0002f7096
eb252c9589a36341311248c8bf53f949cd67f40132c303a460a56afc295c9afd
GET /img/playtech.f068e8aba.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-50e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1371943
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cJX7Uv8gItN05Jm%2BpZUzwb229D%2FhzVrCeBjTaKNjNO0HHMw1Q7qUZdQbZhXpILu26dHl366xKhC08OhEA5LB2defEFzYOKR5WdV7HgL1b7Fp705cphni%2FH9UZvnXEYw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9002ade171b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spribe.e535371ce.svg
172.64.142.26200 OK 2.1 kB URL GET HTTP/3 1win-cdn.com/img/spribe.e535371ce.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2136), with no line terminators
Hash 2e9702ed4ae4359d061ee32370370edf
5d6306858d7e5c4ab1edc7c5c99006fcb9c868f2
8c1b353c07ddd1711449f9f32b7f463b4ba302c63ca794c67200366959bcdf24
GET /img/spribe.e535371ce.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-843"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1532463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U03JdL9I%2F38vzhVBobYN9J5ooO3YuVjCaza6HLckUCj%2B%2BpyUTAglx74%2FjNnSVts905GBW2LbRkV7mQEOh3yd5fWhkBY5AeYzZnN7HYAqJBTNsgqbvZgWhwZsmgSL7pQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90040f1971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
190.115.24.78200 OK 349 kB URL User Request GET HTTP/2 IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
Size 349 kB (348648 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:34 GMT
content-type: text/html; charset=utf-8
x-request-id: YWBGj3VTYjOivSdQ
vary: Origin
access-control-allow-origin: *
x-match-domain: 1wnxtz.xyz
x-frame-options: DENY
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/img/icons_footzal.52da96641.svg
172.64.142.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/icons_footzal.52da96641.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1355), with no line terminators
Hash 3b1cc76ba0e73bc410ada1a8dadfcb7a
29dd1e9f801fd272584e19c803b1561a1f5db41c
3ec59a9652b64637679e399ad5e5edb345672e2f4402095f69f41f59630740fd
GET /img/icons_footzal.52da96641.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-53f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 479799
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M7mHHAStDce9dIrRtdzZNGGuxliAcfbwcVo0fubQQL7Hx190j%2Fs4wB8tIhNVtd%2F5oxCVs%2Fcwrhsmq1UhGt3ta7OlZSl6Ck6me5FIPry%2Fs5iMjUDJk5KT4sYINUSDnbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffc2f9371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamomat.d6a0fff86.svg
172.64.142.26200 OK 1.4 kB URL GET HTTP/3 1win-cdn.com/img/gamomat.d6a0fff86.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1550), with no line terminators
Hash 6bc71869311cfa358a16f8cb63602c1c
dadae6d50ec25bd7629a824ba0588cb00305dc85
2f0ba81a3fa40d3a09fab768591274a357d08a9dc565e43020f87d38048feb28
GET /img/gamomat.d6a0fff86.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-577"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1368124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZEZVHmR3zonT4VpLQM7FEARTQzeNcjw%2FQ8PRySeRWkCfy6k6kgdt0MRKQu2xQhH3XxHKXwK8JYJ7FAIzSQASQ15wykPRMN2RjeIdY5ZgvB99ADxfsvI8muQ8nzcROyQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001dd0971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif
172.64.142.26200 OK 9.9 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ISO Media, AVIF Image\012- data
Hash b969533d76140b5d61ba0b598faf9d92
0f1c02c6990f7be7bc314d7e1ebc72e1029904be
e094ef696c10eceaab121d964d2ace3e8893cc72c3f17d13a455905d4b38a633
GET /unsafe/casino_list_big_1x/plain/https://1win-cdn.com/casino-images/fundist/aaf2d443-c77f-48d2-b319-c986f21359b9.png@avif HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/avif
content-length: 9876
cache-control: public, max-age=31536000
content-disposition: inline; filename="aaf2d443-c77f-48d2-b319-c986f21359b9.avif"
etag: "qZN6EBzPegPBpsimkrNBhehT4d3pwCv1LGwwuLjYmzM/RIjY0MDljNTQ5LTRmZWNiIg"
expires: Thu, 23 Nov 2023 02:59:51 GMT
x-request-id: 535BjYgpaOs5DVdE8d8vJ
x-cache-status: HIT
cf-cache-status: HIT
age: 146923
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yYFymR0J5rlqz%2BoayDZkQ2JtpM%2BXcLDhXoCwVwSSnL1EaGZZlYSBiy5QHEAE4Fpk1baYuA%2FiCoTJh16AzbC72kh2nEsZk6%2FJ9l2%2FVxfAQN%2BV5e8F%2F87480ifDOIKpObx2cJYP4joP6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9006da9b71b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/elbet.90c78268c.svg
172.64.142.26200 OK 29 kB URL GET HTTP/3 1win-cdn.com/img/elbet.90c78268c.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (843)
Hash ca800914f6222be011497452e4df6c9c
b3a469820d49cc3ef2debf8a971ae6b4ff4dc763
a36b2dd5c35f5e9f21782e5c877a95ce81c19bd3e783eba30d753c625f1dea2c
GET /img/elbet.90c78268c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-70f7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1454892
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uSQtbpsxATAfmDO5QU5SeN3kwGl9MyQKYq%2BjVgJ7J4sLO3KRylISje5zFbW7geVt6NWIdKEvEGJY5kpdO%2FMOF2KE9PHAetcjjPsgajolFgFq78pWqN2utk0APWJselw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90013c5471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/endorphina.bf6a0cf26.svg
172.64.142.26200 OK 240 kB URL GET HTTP/3 1win-cdn.com/img/endorphina.bf6a0cf26.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65440)
Size 240 kB (239473 bytes)
Hash 6a1d1a95b93e025081ee9f7f30f4e26a
b04f7881acbc58374e9d12227dbbb05896b98f3a
b11d31f77bdc81b9734c28d645498930dc1018dad0e91c5d27588feca9b15662
GET /img/endorphina.bf6a0cf26.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-3a771"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 582005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HqgsCjUVyXacSFcFa0gtKTlrLGWQHiaIWAMA7clT65lCOTb4ZNNaEKcWbMPZTrsjQnwEpFu%2F1hV73tvASyaHAK7E7o2fPkmYySU1EwUnlyACZHecSKiHYyTejNDt3qE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90015c8e71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/gamzix.f72706463.svg
172.64.142.26200 OK 62 kB URL GET HTTP/3 1win-cdn.com/img/gamzix.f72706463.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/gamzix.f72706463.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-f15b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1436670
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWGCLrpnPi8llydpdVhcSksK2kridC9M7h%2FvXeWvxuXY7uqCcb6w2GBoFJ%2Fp66MAzDPKA2O57fYPI5tzy%2BvbFUcf90CCAhIipCld%2BI8gsiFZgky7vCeOfszFmdz5LdQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9001ed1371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/liw.06ac3b16e.svg
172.64.142.26200 OK 7.7 kB URL GET HTTP/3 1win-cdn.com/img/liw.06ac3b16e.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (7764), with no line terminators
Hash 66bbc4d059ca3a230e8a62fa127b9b7a
818e9584970e2c0429b8e6749bdee78366125204
e1c717e66b7844ed8814f4fe4e341b95cf3595418d6b7694acfdda7a99ad43a9
GET /img/liw.06ac3b16e.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 20:56:17 GMT
etag: W/"654bf5f1-1df5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 737828
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uWxf%2BM15Kt3vD0FuLXFexuNzVBZnNqWeSSm%2B6O6z2Z9bahZG8dyTDPgfhlhpV3Z7w0cVGkg4OSjTMedGg0%2FIWSNG8KIckp00WeV4Wx4lPHcD%2Flw3nVEDjDM%2FZPu07XM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90022d5471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/mancala%20gaming.792c2e8b4.svg
172.64.142.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/mancala%20gaming.792c2e8b4.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/mancala%20gaming.792c2e8b4.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 20:56:17 GMT
etag: W/"654bf5f1-305d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 753428
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=La%2BIFbiHcZor3BgcNkiPXUmkacEMBF50PVtO3R7r79yx0mgyVjqfUVQB5HtAdjj%2BQPZB%2BYh%2FUxxqoK%2FhyY0Qs%2BKGI0Y9wt7Y4vEQMo2wX2kltX1PbqaVFjWqd0FhMPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90022d5671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/jetx.64787fc5c.svg
172.64.142.26200 OK 13 kB URL GET HTTP/3 1win-cdn.com/img/jetx.64787fc5c.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8774)
Hash 0046061bb77d38094cc0f71b7371d406
1fd7894d0117251f1eeec1a343b85532d7864a05
bac9b1ac206602f5369235b21d6373b9b6f7980ff55c4e851d8a40f00db4d0fa
GET /img/jetx.64787fc5c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-33f5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 502137
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5mDxo7gqeDN5lNehkt5MYLiGXHXSXjt7jrj239hNF0VyhpzXmHJCAMZhMUhZo5NLjRUE6%2BL3n3F%2FSG8n4HUGcXhteNs4xisPW7Zj6Vzt%2BBbQSnh1WBpm%2Bl%2BwcHdf8Xw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef7b4971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/cool%20games.5793050c6.svg
172.64.142.26200 OK 3.4 kB URL GET HTTP/3 1win-cdn.com/img/cool%20games.5793050c6.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3489), with no line terminators
Hash 936b827f7376c0e4ae730a2ee81e9027
5b360976e5b7eec401e9739ac1e58985d9b4d1fa
517d3a374b18d024d366a9f4059269d1921984070d125317de2523b3ac8d7e6d
GET /img/cool%20games.5793050c6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-d49"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 501246
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tt2JnCY9jLKqoAgOTODgr4kTGW4H1gyQcASvFETYb2o3dKE9egjiONwf1EP4KSjAU3KE8TOQ9mbuK1H6DAs%2B6SXPhTf61gUYVC9OI1w6cKbyXq0IIyHFqQwR%2BGVZfvs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000fc2371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evoplay.f05734bba.svg
172.64.142.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/evoplay.f05734bba.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2590), with no line terminators
Hash 177b7db483de89a00b15b1caa745d1ba
629d39fdf879bcd5f11ab11ebff46524179a995e
0bfdbfd5f00c0f1da31c1e4b667e5edf3c02646c6c98749f82435a63ebd24877
GET /img/evoplay.f05734bba.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Nov 2023 12:41:54 GMT
etag: W/"65521992-a08"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 327241
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UKlWYCnRhli3MD5HiVaZ6rUSRYLar40uxXxJWoCywnhhsUbF9GCrIK52BNQt51RUnC%2BI3Cn5%2FuC7%2BTVRY%2B8oqZ%2BE1RZVTMfUbubITmvHfDSUUo2fYpFQ%2B%2BC%2FDTA2cjo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90017ca671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/79125.129aaaf7f.js
172.64.142.26200 OK 7.9 kB URL GET HTTP/3 1win-cdn.com/js/79125.129aaaf7f.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (8136), with no line terminators
Hash 23ef43b61d73257d36e25b00da297a69
723a695416468dbf4c8af5abd8bff56f1a4eb97b
c56bf4bc5ac7cd79dc3100d8ab30e04a569ad43e1a83917cc7ff872b380a550d
GET /js/79125.129aaaf7f.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-1eee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=njUdr2KnQy%2FOiDHzfkLftFZxyMrj3KvP96jOh5FYneecNzdH0hw7EJG3vQph9%2Fh9M79hUBbT%2B%2B88by5uUezuIfsC40esdv2nnKH26jEi9iC8HSFrstCXsuqniB4X8Ao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fecc92b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/12876.edc1627eb.js
172.64.142.26200 OK 779 B URL GET HTTP/3 1win-cdn.com/js/12876.edc1627eb.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (795), with no line terminators
Hash e7ae74cdb2db46530cca21a7b0e95f66
31d0518f441b3014fede691f27ae91e8c701284b
b9f120056792fd75f43b16d96f426b13d8a2d91d77405adf81b3e45c585f58aa
GET /js/12876.edc1627eb.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-30b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lRFVzZubdykLhgaEEeMenV2BbrT%2FKWEvliWJf%2BBvPg%2BPs7fMo3DN9oYrSrslGPknY4XNo1voiSleOyWbWU9t%2BPf6qIOgDYIP4aXXLsDMjLQOd%2FxknKZ6BcwLY91nLLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8feedaba71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/3223fafb-6b1b-46ba-bb4e-d667854eb8e8.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/bonus_hover_1.a84694805-1979.png
0.0.0.0 0 B URL GET 1win-cdn.com/img/bonus_hover_1.a84694805-1979.png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/bonus_hover_1.a84694805-1979.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/js/59963.0369306b7.js
172.64.142.26200 OK 767 B URL GET HTTP/3 1win-cdn.com/js/59963.0369306b7.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (797), with no line terminators
Hash ab56f9c602ea10f81a94e9a8794d1cfd
4119b61ae94b3728686fe4a30865b9e392d1e6b3
5d114707c03abd925588968942230092112fd14592bc04f45fa28bb4a07f7361
GET /js/59963.0369306b7.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-2ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M2L%2FZH74XsZGaVCiYCuuSB3fzqToyD26htvjDLbuy0lLNM3LoDEznQGWCK2t6Y0%2BeBffr3lSWWTRpgqTBEJeYY%2FUqsbxchH3tvU7JshNA5HFTsaewVX7MIGNIbs7KgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff0dcac71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/max%20win%20gaming.d504cecb6.svg
172.64.142.26200 OK 2.6 kB URL GET HTTP/3 1win-cdn.com/img/max%20win%20gaming.d504cecb6.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- exported SGML document, ASCII text, with very long lines (2678), with no line terminators
Hash 2630d9cc4380ac56c2fc0856c1dabbb2
0717faf01c46d909f9f836e80b46476b3978d750
5ddcd79b98ba973519ed11a272e63c6e8be1d2ae526fbdf563becd5afe905d4f
GET /img/max%20win%20gaming.d504cecb6.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-a04"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1457583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aNUqRsMMBXuWffPFmRSjzwK%2BkhEJORPTha20e%2Bwr1jLptGfLvfDvkRF%2Bd3Y7YzfHjItabEOuP6oLJYRNxjIGtlpMpQZqjp%2B3VtjQzXlmLqrVODv8reG1225%2BP7YyA98%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90023d6071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/home-poker-banner-bg.486a9e6a3-600.png
172.64.142.26200 OK 21 kB URL GET HTTP/3 1win-cdn.com/img/home-poker-banner-bg.486a9e6a3-600.png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 600 x 295, 8-bit colormap, non-interlaced\012- data
Hash b7c053087a575f09f60b2bdb1fa8bd46
12062e57c0509fa77d34405134d1ade0044fcbce
f504b2bfd476b2986860328e018348eecfe83de4fd6757071b28b1cd646cc584
GET /img/home-poker-banner-bg.486a9e6a3-600.png HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/png
content-length: 21066
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: "654cdf32-524a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 577440
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eo5GqB8e%2B%2BPG70HqL61Yv%2BdEC54%2B7kHlRhGpLIyJER4IrVwTbAyehf7XRSwnJasV3m94uBiE4kL4THqO028jI%2Ff7RWfpy2h4wNboUhSx9UoWQeMovxEeqxj332cwUPs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fefdbe471b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/icons/45ee3a8c099d64d07437f1c0dc6d31ea94db58c7.svg
172.64.142.26200 OK 3.6 kB URL GET HTTP/3 1win-cdn.com/icons/45ee3a8c099d64d07437f1c0dc6d31ea94db58c7.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3658), with no line terminators
Hash ccb3676ee74b099f07965fbf3c36e98e
88f6313bc8a7cafada2dbe19ba48b0c15a465520
38e7fbd4e9c452ad7e218a58873222334af18844ec3082c582e4a1b4f4bf3121
GET /icons/45ee3a8c099d64d07437f1c0dc6d31ea94db58c7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
access-control-allow-credentials: true
access-control-allow-origin: https://1win-cdn.com
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: W/"b6b9b65b6a648eb5ea498a3d29ce302e"
last-modified: Fri, 12 May 2023 08:47:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
x-amz-request-id: 17973B2BB777FD4B
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: HIT
age: 1063
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UNyAxOyGJxgkpqpC38ZKY%2BOfnRAIRCHrP0omOLJpiszvv1ca4EtnPwmD4EacjkDsmSzw5On549NbeiV8smrqPkZrZv1JqfG02apQcaAAAsQfC%2Bk32jFhmrXeWHiVcKE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827b8ffc2f9571b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/oryx.ef29a7afc.svg
172.64.142.26200 OK 1.3 kB URL GET HTTP/3 1win-cdn.com/img/oryx.ef29a7afc.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1325), with no line terminators
Hash 0a0f09fb159e7377ccf1a651a391b996
bb64d7fc0cff70194c6a6ff756ce649837699a95
a1a1b777478db2c9319f928448a3ab9231a2f9dd4b8102ad43fe77e84603bb20
GET /img/oryx.ef29a7afc.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-507"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 592398
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=88WRVOf9dFQ4L%2FhtB5M8vD5Md6bmTbW6sEt3yuZ%2Bla5oGfzDMXtqF%2BOV2jw05WM4IXLPi3Ieke8rfbleKm1aL4u0DTwh5iDIqhuxz1PucPD07sH0GxdZ47u4OdaPJEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90026da071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/relax.c4362d19d.svg
172.64.142.26200 OK 6.5 kB URL GET HTTP/3 1win-cdn.com/img/relax.c4362d19d.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6712), with no line terminators
Hash 00c52ae466efa59936bbb1381a0e7e14
0cc5891b670da9d2424f1bb981e19fb27f4be206
55cb31c0c8f9f12b859a31a71ffd9f08d460ac0b1cf92d0115246ef475079a58
GET /img/relax.c4362d19d.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-1994"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1523623
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=shDAZENo0ArxPMF%2FCkvFCnQIYp73UvdlU71ztqsiioVnallVxH5gycnc6iFU0ngyg%2BEGl%2Bdplis0PLIuer5Xuxovit9XtAvZfPQxPQO6KA59BAtDqkSpTYAGMX%2FyJT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90030e2a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spinmatic.6decf00d0.svg
172.64.142.26200 OK 9.4 kB URL GET HTTP/3 1win-cdn.com/img/spinmatic.6decf00d0.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9860), with no line terminators
Hash 84a136f0200c1adfbf1d3412370099b4
ce307961d5a3bfca5a964c647252c9181d740213
b368ea18c99dd8a652fd6aa9948d9b6b1e17fe567595b00377d99d39832a3869
GET /img/spinmatic.6decf00d0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-24b3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 417069
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l3aOe4Ge7Mt313WyudJ0FgAXxehZrbsnwgFC%2FVUQPbycpJ5tKnLbOOsQ%2FENI6Co7LeP6L2L8oTM5opWKCRf0x3avpRuCrwwP%2F9DsZCqQbKHMczPT8OCokOMPtKAAZ4w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9003cedb71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/51798.566cd0171.js
172.64.142.26200 OK 678 B URL GET HTTP/3 1win-cdn.com/js/51798.566cd0171.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (696), with no line terminators
Hash 8cf1301c49c3953a2416fe19c331b327
3ba5c2243b013c61f8b3e38fd4c63cd82b4cd948
1b110c2f5214c661b78b80799c2ae50aad9798dccbadba3a71f2393c6df2c96a
GET /js/51798.566cd0171.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-2a6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WRrnuDG9ttpymYSheOuYCM5aoG%2FSEyLALCyp6m40e%2BNg6fKel4CwTTTTuW057%2FrSW4Ip4OPiWrpvYRGMaXEowstGLz0NSwbG0x2z8YkFqIAGxrJuBp3jej9amchDGhc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fef8b5d71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/icons/998335e8f7dbc80e13099ab24624d3ea34f672e0.svg
172.64.142.26200 OK 7.1 kB URL GET HTTP/3 1win-cdn.com/icons/998335e8f7dbc80e13099ab24624d3ea34f672e0.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7119), with no line terminators
Hash d3609c8ef296c4949fbeeba3ef7593cb
bcb80ee5f3e486b7818fdaf21c1099566670ae2b
1d2f02e465a98106e81f177d806735edf60b54af439f52e96b02f9b6a4025ec2
GET /icons/998335e8f7dbc80e13099ab24624d3ea34f672e0.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
access-control-allow-credentials: true
access-control-allow-origin: https://1win-cdn.com
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: W/"c3b2816ad8e2e562bbe69e47be1f5927"
last-modified: Fri, 17 Feb 2023 10:22:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
x-amz-request-id: 17968EEEEB50AD9C
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jz4VSljeLl%2FfWlOL5c6GuV%2B83fSO5Wc8LygJAof5i%2FCtpDAwDbVzXPEi%2Fx4rZbeAiWWquxu5CY8KbrMn7Z36zUNt5nBR751pDI147QNks4%2FNLXh%2FkkVmTsN5l%2FLCdJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827b8ffc1f8071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/icons/04bc3e1fe360fd2371cfc3d84b97e1cf5d83e4ca.svg
172.64.142.26200 OK 1.8 kB URL GET HTTP/3 1win-cdn.com/icons/04bc3e1fe360fd2371cfc3d84b97e1cf5d83e4ca.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1780), with no line terminators
Hash 912fbb48cf99ab1902427bfe5948a2a6
0bf869755a3950f8ec8115c8c0d982f1fd3eef2d
2afbe6ba45666f10ed650ee7ca2a39384fe7d063a1c50350c2f0deb3c5618fdf
GET /icons/04bc3e1fe360fd2371cfc3d84b97e1cf5d83e4ca.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
access-control-allow-credentials: true
access-control-allow-origin: https://1win-cdn.com
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: W/"8038879829770ab0f9bd81e0758cfdab"
last-modified: Fri, 17 Feb 2023 10:22:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
x-amz-request-id: 1796292A0B7A14AC
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l95d6gRB5LUyot0jmFiYUOo1FkRE34ja0kO1L89uVoHx2eFnOgKUjShlagNUy6Hj8YzaP4IVRbI1zWS3Oc%2Fre4PeEKbIEathoGU%2F2IwidC0E7WHOtkxdwlDrfmcgymU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827b8ffc2f8c71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/truelab.c04968755.svg
172.64.142.26200 OK 4.2 kB URL GET HTTP/3 1win-cdn.com/img/truelab.c04968755.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4193), with no line terminators
Hash fdf26008050065171e0c00158907f317
57155d391830d2169fa408ac86504e03e5646c37
464eb3d015be9817c04a95ac0425be76fa41fe7b87b6822f71f8db2592ce3140
GET /img/truelab.c04968755.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1043"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 488390
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tcArzczch2xC%2FgWmbcv8OIXmhDh35Jv48sDA4LTcyDZUdegt2yG5sut0wi%2FCAgQondYtm6UcHZCDaRQu3REwUw98jCp7kXgqYDXSfemQTqy4YzLLnxXVl6lX%2Flx4jOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90041f3071b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1wnxtz.xyz/firebase/8.1.1/firebase-app.js
190.115.24.78200 OK 20 kB URL GET HTTP/2 1wnxtz.xyz/firebase/8.1.1/firebase-app.js
IP 190.115.24.78:443
ASN #262254 DDOS-GUARD CORP.
Certificate IssuerLet's Encrypt
Subject1wnxtz.xyz
FingerprintBE:C6:3A:6D:9E:B4:2A:F6:91:C0:82:AA:5A:7B:56:2B:AC:8C:3E:8B
ValiditySat, 14 Oct 2023 11:00:46 GMT - Fri, 12 Jan 2024 11:00:45 GMT
File type ASCII text, with very long lines (19927)
Hash 5b9dcee25dd464bbf914b48e05e770c7
3f4e99ad6ce1fb6eb6be51dbd50ffab375eb0533
01a87f9f8138f66274cfedb855c0bfbe1529600a65ed26b0c863533e1e94abce
GET /firebase/8.1.1/firebase-app.js HTTP/1.1
Host: 1wnxtz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Cookie: visit_domain=1wnxtz.xyz; core-sticky=http://10.233.80.111:80; 1w_lang=en; 1w_locale=1; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5M2RkMWI0Mi0yMDA3LTQ0ZWYtYTYwMC0yNjZhOWIwZjI2NDYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzAwMjYxNzM3MjU5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlN0Q=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.19.9.1
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 12:24:36 GMT
etag: W/"65575b84-4ded"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: DENY
content-encoding: gzip
X-Firefox-Spdy: h2
1win-cdn.com/img/icons_football.2e8099396.svg
172.64.142.26200 OK 815 B URL GET HTTP/3 1win-cdn.com/img/icons_football.2e8099396.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (819), with no line terminators
Hash 68bba4102bd648f75b14696824444423
8f1db7abc650c087e0f1d52bb1a0f6ca1fe1734d
2a8cb5f8e5e3a3fedc6a2727a7ec08e1220530f61609206f0e4b2540ef00d133
GET /img/icons_football.2e8099396.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1win-cdn.com
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/css/20948.74d7d3ee6.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:38 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-32f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 478489
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eS1%2F34ZdP8XVHzBwse9XGT858QlizLtYVkVQqKZdOjmH0URRF9CvLqsU0BeEf%2Fim3Vax9iMiUsnafnVatTitZRB0YFbCRnEKQnBLTE85fQS2dz5GfqZpxaem5bX9LNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ffbef2471b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/platipus.62dd70adf.svg
172.64.142.26200 OK 5.0 kB URL GET HTTP/3 1win-cdn.com/img/platipus.62dd70adf.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5004), with no line terminators
Hash 6824471b5ff200e03f24e9a87ff50474
b70803914625cb475fbf9a7b62d1f5fc40a711ac
8112fa3f931387be0f9b1a6fb9e85728eb8aed75d6c1dd85dcccacfd641a971c
GET /img/platipus.62dd70adf.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 14:05:00 GMT
etag: W/"653fb80c-1368"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1530573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=09KgqAgIt%2FizNxQ8a%2BxI5wxFAlxiunLThdFLCF6K2dO83CRScgVur8BHJIIV0PGahgneDjp439S7f7o9q9q0XXqRYAPqcMfIi2qy10erH4l%2BDNzZuTCd49d915KVuvw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90026da971b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/desktop.fd909b055.js
172.64.142.26200 OK 123 kB URL GET HTTP/2 1win-cdn.com/js/desktop.fd909b055.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 123 kB (123437 bytes)
Hash ba031d1dc75b67049c39469cceaa6b99
68a2df670bdcf3fd7d67e6cfb98bbb95ee56dc70
d9d7554d6bce0467574bfa3e3e869e2f601b5fc2bad3f7f97ab3619df54d64fc
GET /js/desktop.fd909b055.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 22:55:35 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 13:29:50 GMT
etag: W/"6556194e-1e22d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 119805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IDSbgdhUTKyGBCWmOh1bK3d%2FUdfRVy7GWf%2BzvtFNrU5Wxhh2%2F4B1Gxb79relqtvqzWNRKZFF8VarUk45GcoW60qbUifSjeswiCQ0CxFyCcQXpCgLxrKOpZq%2BDAKo8Oc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fe5af32416b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1win-cdn.com/font/SFNSDisplay-cyrillic.e423f3776.woff2
172.64.142.26200 OK 17 kB URL GET HTTP/3 1win-cdn.com/font/SFNSDisplay-cyrillic.e423f3776.woff2
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 16852, version 1.0\012- data
Hash c4f31a30bdf4dbced79fb75fc03111cf
14765799051deb933539e19f1ffa26198cabd4c1
cded98e2b95ccbf34690d20e4d466e2457d754f960b819d052d188dae2c9e9fc
GET /font/SFNSDisplay-cyrillic.e423f3776.woff2 HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1wnxtz.xyz
DNT: 1
Connection: keep-alive
Referer: https://1win-cdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/octet-stream
content-length: 16852
last-modified: Fri, 17 Nov 2023 12:24:35 GMT
etag: "65575b83-41d4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iWRp2PgvdGBLRXgkfJaal69sU5FWkBYHeqM9Frm3dOuVN9G%2F8H6GWnbKJfcUVmJpIXXdKWatWt9UH55SBccN4AmpPNI3TB4g1Eby6UkjdsGmNdLjnDBCUWNRCnY%2FLqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff15d8071b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/apparat.982be0d4c.svg
172.64.142.26200 OK 375 B URL GET HTTP/3 1win-cdn.com/img/apparat.982be0d4c.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (409), with no line terminators
Hash 9f54a52ee1df7b47cffd3ee4f261b4a7
b1b11af17c3676b9e41369afffb5da885492a3ad
4e51a0ba79953fffbcd59272a688749fa876bb34df4710e98e7db2e47b7b8c92
GET /img/apparat.982be0d4c.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-177"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 507236
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tcutz9C7dKLz8sh9ID9IdOL2F1dp75gXoZk9zcjygUiYAhKDHdUd%2FWfli0ipNz3233keQpfUSYdHDV8YObU%2BJY3%2F8ivH3DAdGgiAMyk6RMSSebMuL7BO5oYLSPCxMII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90009bb371b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/728d6758-6f50-4b1b-8132-2430ff7e0aa6.jpeg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
172.64.142.26200 OK 170 kB URL GET HTTP/3 imgproxy.1win-cdn.com/unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type PNG image data, 362 x 429, 8-bit/color RGBA, non-interlaced\012- data
Size 170 kB (169712 bytes)
Hash e1b176b9789ec5c9cabae3ed071a0e07
e123c7a520fad8e5c57b4e9f3692711a27e3dea8
4296afa9913dbe8551dee74e410071d2e5b04be41a744898410525c45d19b230
GET /unsafe/banner_desktop_main_1x/plain/https://1win-cdn.com/banner-files/bonus-banner-deposit.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:36 GMT
content-type: image/png
content-length: 169712
cache-control: public, max-age=31536000
content-disposition: inline; filename="bonus-banner-deposit.png"
etag: "bYO6A3TkrGzIprX68BfyOBGJEQnSmCYqqMK6NzP2zdM/RIjYxYTRlY2UwLTU0YWIyIg"
expires: Sat, 18 Nov 2023 12:03:56 GMT
x-request-id: y5On7_rhly4GGmrhd87l3
x-cache-status: MISS
cf-cache-status: HIT
age: 557500
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xmDdXrcPVP4IZ5ZmAQzyzZdhBUqTum5kS1huGe0USCi0RSl7SFftTcyLkN%2FLgz1LgSnjVvTmBueuGB2vzN8WnVpmiCGlcrzPL9XeKaR11c84oT9hQfAaFlSF0f8EB79kb9wZUjvDSNg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8fefcbc271b6-LHR
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/evolution.3f9fe5db2.svg
172.64.142.26200 OK 4.4 kB URL GET HTTP/3 1win-cdn.com/img/evolution.3f9fe5db2.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4476), with no line terminators
Hash 6bcadd7f19c336303893ceb2ce72bce7
649c81b8a6d91c3970cc501a348e838d260d21ff
9fc048d7295ba884c91e7381d6e09c018d174cebd5cd1b774bf6bb661de088fe
GET /img/evolution.3f9fe5db2.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-110d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 406590
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oe14WW8MS9uO97BKBaH12hsrW9SeYkxfzbViEl2pQDhuO1HEkdi9RtISupnp9szzjTwf8AkT724BKJA9zr9AbJk39hdOu8Grh8tI3ueYxSHZMaqPZjnR6p9yOkgPIzs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90015c9271b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/silverback.e3f805e25.svg
172.64.142.26200 OK 115 kB URL GET HTTP/3 1win-cdn.com/img/silverback.e3f805e25.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 115 kB (115077 bytes)
Hash 8a51a5006673c9a5d856cbd42bb060a7
6bcc503d592734cb8e6d12ae8634cc77e3bf7086
a2c870c044af6b30a7edc350dc034f18270fd518eb247e50de22a18ee2229ea5
GET /img/silverback.e3f805e25.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-1c185"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 671632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZlnhXrcbpS%2Br9vkOZJe99LfVMM3aH1Uh2zPxvLqhscT1fNDdIliPInK3ZRmmBJGlyx1L7j%2Bo93xGJbqfUckcIdMqjrDwHndLGk8l7cZqDOQCbTw0Ffy%2FXamFHoMwJGw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90037e8b71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/bf%20games.a530d1479.svg
172.64.142.26200 OK 5.0 kB URL GET HTTP/3 1win-cdn.com/img/bf%20games.a530d1479.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5153), with no line terminators
Hash 4cc6ae536d10cfc9f3c7862a84b8e36f
56fbae6209271c8f0e513d6157b0ccd7a7dfef93
b96f807d37388519910f5ee1f3e4f7786f0413b7f697d22a47ea0fd33277be50
GET /img/bf%20games.a530d1479.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Nov 2023 12:57:53 GMT
etag: W/"65424b51-1374"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1365359
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NfYUAXDK5e6F59cRNflA3Ve6ndKg74q4OUrm7E2McIP8Pu5y19MQY0qskxWEDIXUZ3Wb3lgH%2BqaA33%2FHj%2Fx4x%2BvxK62wEpnLgV1bLV4E3wp7%2BiCXDpu%2BMKjerPpZ6yU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9000bbdc71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/habanero.5aca5f398.svg
172.64.142.26200 OK 4.2 kB URL GET HTTP/3 1win-cdn.com/img/habanero.5aca5f398.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4364), with no line terminators
Hash db1b8fe2ca1cebd273a59f9d952b6c95
a3d33f0f97e09d977c7a5e4bf4647af2db5d2405
5b30e9a62fe42e5cb0d740fa03a716d42392fc2dc9c740901ab8b68b4192bf7a
GET /img/habanero.5aca5f398.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-1077"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1450780
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qDIw6YFXqwu34Xz7Q2o%2BR%2FI1LvkoWg0SdrX4jBG5Ddo%2FUV%2Fzn4cJHuUq3GcjoLf19SKQ0vlTq3rCyaxCuG1vjHCkwQFf3xSZqUoCs1XTsxruZ%2Br5JinlFtyHb%2B6qQI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3671b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/spadegaming.eebb41d8a.svg
172.64.142.26200 OK 12 kB URL GET HTTP/3 1win-cdn.com/img/spadegaming.eebb41d8a.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 67c6ce538ab55b34dc12503ec0a3b693
89e7ba20db579fd5e827fde9728420c6bae941f8
5c57343408255a19f1f4862b5f37403397cea3b547ea5c9c90b1ad5f6681a510
GET /img/spadegaming.eebb41d8a.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:40 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-2d62"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 505971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2F2N5BCA9gxh9RzdtgEyuFRJEkFPD4%2FG8fB1WcTzjJjfIxO%2FWzhcK9o5sdlI2oY54OEKqwB7w8qqNHCjzJCsQusa7l3k3wD2mPleuP4t5aJgHAm3UQbdVSZv9cqclo8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b9003bec771b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/js/74384.181a33e10.js
172.64.142.26200 OK 697 B URL GET HTTP/3 1win-cdn.com/js/74384.181a33e10.js
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (713), with no line terminators
Hash 39f2032e70e589a12c82f6e1270680c1
34d230daf3f69b72c644acb87d4878ee10228b90
62b7d6c6d41e5f538e7a9242077e2589c772fc27111067bc312cc275d83b35fa
GET /js/74384.181a33e10.js HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 Nov 2023 10:50:52 GMT
etag: W/"6555f40c-2b9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 129377
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UJDbCMA9x0ZrI8gbS3kf7jXvGofSlruIWqdo%2FYPzTKXpQ3pjTXW63wUiqksg0nOU%2BSO1HRjFOxbdw6famxI36ZHmqL0DZsvaAbfE0Q8SvIuxa%2Fi4EiAG90%2FKxO%2BAOWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b8ff06c5a71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
1win-cdn.com/img/iron%20dog%20studios.8a9aca7b1.svg
172.64.142.26200 OK 9.2 kB URL GET HTTP/3 1win-cdn.com/img/iron%20dog%20studios.8a9aca7b1.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (9419), with no line terminators
Hash 507bbc46ea3b8b2359378f204d477d2b
77ba979bd8b197795429d3d79551afc9df15a4b7
ddeb87aaf388f3f519a136e68c19b3ea79a05929256409659084afd1c9cbca2d
GET /img/iron%20dog%20studios.8a9aca7b1.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Tue, 31 Oct 2023 13:42:35 GMT
etag: W/"6541044b-23e8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1457583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ucrq9mF4fdkDD%2FT6s4V14T8IB0PfusEW1gD%2BhQ%2FKn3tmXwALRrlmsPicwoSActb5AP3EnKBMPwPgI35WPHN1lP6DiCC20FZf%2BwkZilKEvPWwWObCBP%2FnaU54HtXpZsU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90020d3c71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.jpg@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.jpg@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/fundist/5e42fdd9-ce1e-4ca1-9392-3e2ecf620daf.jpg@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/dummy/plain/https://1win-cdn.com/banner-files/bonus-banner-cashback-casino.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
1win-cdn.com/img/7mojos%20slots.d3a1137d7.svg
172.64.142.26200 OK 8.9 kB URL GET HTTP/3 1win-cdn.com/img/7mojos%20slots.d3a1137d7.svg
IP 172.64.142.26:443
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8982), with no line terminators
Hash a387c663da2c7d76013f03f49c26f9b9
82552f4c54b6c46e7f5ee96eace0f2e453bc0d40
f29f7270ad8e3f421fd08bef4f8eae7749d5d490deab04c86e8c938160aecdef
GET /img/7mojos%20slots.d3a1137d7.svg HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 22:55:39 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 13:31:30 GMT
etag: W/"654cdf32-22be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 508189
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KGObNHKh4%2B9mg4tbXh%2B7teCOlGc5pcW%2FAGv1nWUKU3yftfCTCIVv4iZEZHiXQvD7VkhpYeWjBQSx8%2F%2B01mhxDuVvTa1gzUXbUcUlPt119C51id9tkblqyVOua5LhHWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827b90002b3c71b6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@png
0.0.0.0 0 B URL GET imgproxy.1win-cdn.com/unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@png
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint85:F7:E6:74:1F:25:C8:36:BE:43:85:CE:F2:90:BE:F6:86:8E:C8:0B
ValidityWed, 04 Oct 2023 16:53:48 GMT - Tue, 02 Jan 2024 16:53:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unsafe/casino_list_big_2x/plain/https://1win-cdn.com/casino-images/pragmatic/1da897ef-8952-4c44-b4a8-8da8e13393d0.png@png HTTP/1.1
Host: imgproxy.1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wnxtz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache