luckyforbet.com/i/4646
302 Found 20 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /i/4646 HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 18:15:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; expires=Tue, 25-Oct-2022 18:15:45 GMT; Max-Age=86400; path=/
TRK_TRU7=eJxjYGBgEuEQZC5NNBVUsExJMzdLTjVMTbYwNDIyNLEwSk4zTUo0TzNMMTI3NDUQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcIhjAQJA1vxiihAvIgMkyQIEgd0pqWWZyanxJZUEqGyMAdS8lYg%3D%3D; expires=Tue, 25-Oct-2022 18:15:45 GMT; Max-Age=86400; path=/
trk_cpa_pixel=e0cc47d0-53c7-11ed-90ea-956d8085544b; expires=Fri, 23-Dec-2022 18:15:45 GMT; Max-Age=5184000; path=/
Location: http://luckyforbet.com/h/9w.i22EiUoHVqRRHffNozv7yMZY61xMQzMFOjJGdMa3TBqIQ78VdqvlfkDM16m2hLOcGYkCYXHdouJ67pk7lsatuXAz6ESnUTw6pMtBWbEYlw0qnnjuFmrGksgN4ETRHVyP.gNMMUp6eK7Jz088LsxS46ISLMzUczDoC5C7oIZEqq.qq
Content-Encoding: gzip
Vary: Accept-Encoding
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash cd8d0809aa5948f2a6ee41d2158861af
098cd24ac587cdc70137af412678526de4d43969
88e6741d6bf076bf7132c7cf98456702cc775476095aafd839888edff52fb03e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 24 Oct 2022 17:53:00 GMT
Expires: Mon, 24 Oct 2022 17:56:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: usrHx1KwHjanmTwN1or5-20EStNwYz5BrUtRtE1QA52-XnQvCqbghg==
Age: 1365
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73c4166ca864f777db2cc1cd8658a7c2
c56b66b0b7c8516d4d5bfafe0c166711c78f3d25
310c633350812c064e159275b6dbbdba6d6a5991a54ccfcc23459320c6513572
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "310C633350812C064E159275B6DBBDBA6D6A5991A54CCFCC23459320C6513572"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14797
Expires: Mon, 24 Oct 2022 22:22:22 GMT
Date: Mon, 24 Oct 2022 18:15:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11161
Expires: Mon, 24 Oct 2022 21:21:46 GMT
Date: Mon, 24 Oct 2022 18:15:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5bXzD8dbWWJQSTiK1JcyDXOyxiHawbjplCVmumSARcFkCn50H9RPmAYzptgQedPUcYaN9BSP4MM=
x-amz-request-id: R7GD4H4BET13H9N3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 17:38:28 GMT
age: 2237
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
luckyforbet.com/h/9w.i22EiUoHVqRRHffNozv7yMZY61xMQzMFOjJGdMa3TBqIQ78VdqvlfkDM16m2hLOcGYkCYXHdouJ67pk7lsatuXAz6ESnUTw6pMtBWbEYlw0qnnjuFmrGksgN4ETRHVyP.gNMMUp6eK7Jz088LsxS46ISLMzUczDoC5C7oIZEqq.qq
200 OK 310 B URL HTTP/1.1 luckyforbet.com/h/9w.i22EiUoHVqRRHffNozv7yMZY61xMQzMFOjJGdMa3TBqIQ78VdqvlfkDM16m2hLOcGYkCYXHdouJ67pk7lsatuXAz6ESnUTw6pMtBWbEYlw0qnnjuFmrGksgN4ETRHVyP.gNMMUp6eK7Jz088LsxS46ISLMzUczDoC5C7oIZEqq.qq
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ec4ffbd08f0ea7c9d947767378e0d0f5
d52a98d78dc0f5330a48363ebe89dcacdbe2595b
3fcca249517012ac4ea2a6a238a589efb20a32b131aeedbbc4abfbe9253ee424
GET /h/9w.i22EiUoHVqRRHffNozv7yMZY61xMQzMFOjJGdMa3TBqIQ78VdqvlfkDM16m2hLOcGYkCYXHdouJ67pk7lsatuXAz6ESnUTw6pMtBWbEYlw0qnnjuFmrGksgN4ETRHVyP.gNMMUp6eK7Jz088LsxS46ISLMzUczDoC5C7oIZEqq.qq HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; TRK_TRU7=eJxjYGBgEuEQZC5NNBVUsExJMzdLTjVMTbYwNDIyNLEwSk4zTUo0TzNMMTI3NDUQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcIhjAQJA1vxiihAvIgMkyQIEgd0pqWWZyanxJZUEqGyMAdS8lYg%3D%3D; trk_cpa_pixel=e0cc47d0-53c7-11ed-90ea-956d8085544b
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 18:15:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
Vary: Accept-Encoding
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a09be518d0fe8717d5e0d13bba7c59b
bc01160023a8715641fee1c135143657f9d4530b
e53eabe51281bd6815f82f1f3b641bec6fc7280f0983b1bc73c3fe717551c7cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E53EABE51281BD6815F82F1F3B641BEC6FC7280F0983B1BC73C3FE717551C7CD"
Last-Modified: Sun, 23 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3467
Expires: Mon, 24 Oct 2022 19:13:33 GMT
Date: Mon, 24 Oct 2022 18:15:46 GMT
Connection: keep-alive
z.cdn.xbeat.space/go?z=1866110363&subID1=&key=e0cc47d0-53c7-11ed-90ea-956d8085544b
302 Found 0 B URL HTTP/1.1 z.cdn.xbeat.space/go?z=1866110363&subID1=&key=e0cc47d0-53c7-11ed-90ea-956d8085544b
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?z=1866110363&subID1=&key=e0cc47d0-53c7-11ed-90ea-956d8085544b HTTP/1.1
Host: z.cdn.xbeat.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://luckyforbet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 18:15:46 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://refpaydc.top/L?tag=d_42282m_5437c_[]MS[]null[]brasileiro[]general[]_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346;e066c3585f1c5c1e;1791108564;1866110363;2108709304;1228721655&r=promotions/campeonato-brasileiro/
Set-Cookie: AU=e066c3585f1c5c1e; Expires=Mon, 23 Oct 2034 21:00:36 GMT; Path=/; HttpOnly; SameSite=None; Secure
luckyforbet.com/favicon.ico
404 Not Found 33 B URL HTTP/1.1 luckyforbet.com/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 8874bf02e5b576488740e35ffac374d4
34818fe2fbf54312142e04cef4efb38f86cb4fc6
474e80e45aef5f25213fdfe4b976ec514f4a834eea0abfb65dd5b86e4b51e4d3
GET /favicon.ico HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyforbet.com/h/9w.i22EiUoHVqRRHffNozv7yMZY61xMQzMFOjJGdMa3TBqIQ78VdqvlfkDM16m2hLOcGYkCYXHdouJ67pk7lsatuXAz6ESnUTw6pMtBWbEYlw0qnnjuFmrGksgN4ETRHVyP.gNMMUp6eK7Jz088LsxS46ISLMzUczDoC5C7oIZEqq.qq
Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; TRK_TRU7=eJxjYGBgEuEQZC5NNBVUsExJMzdLTjVMTbYwNDIyNLEwSk4zTUo0TzNMMTI3NDUQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcIhjAQJA1vxiihAvIgMkyQIEgd0pqWWZyanxJZUEqGyMAdS8lYg%3D%3D; trk_cpa_pixel=e0cc47d0-53c7-11ed-90ea-956d8085544b
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 24 Oct 2022 18:15:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
Vary: Accept-Encoding
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28a94f839f9707def23e4782cd62052c
2d51a3047745df3a128373445be9d4dc9e0a49dd
6fc97ad5266faf36c4bfaa492f2aacf7327ac5b45662dd17727a2581154219fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FC97AD5266FAF36C4BFAA492F2AACF7327AC5B45662DD17727A2581154219FB"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4392
Expires: Mon, 24 Oct 2022 19:28:58 GMT
Date: Mon, 24 Oct 2022 18:15:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 088afe60908893f8990f05e76655a094
ad89efd93ebfa97a883bb42174b138e690b8bcd9
0f1bcacb6eb60efecd1cf41cf4fd8d2f1dd4017f7ee1dd8c0093b19dd6ea3954
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0F1BCACB6EB60EFECD1CF41CF4FD8D2F1DD4017F7EE1DD8C0093B19DD6EA3954"
Last-Modified: Mon, 24 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17373
Expires: Mon, 24 Oct 2022 23:05:19 GMT
Date: Mon, 24 Oct 2022 18:15:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 24 Oct 2022 17:33:32 GMT
Expires: Mon, 24 Oct 2022 17:55:55 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Or5000_vbzpFzGAuunAjhjt-hOMVy_oYPIytTy--V_dxryrot9Rszg==
Age: 2534
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 02a39530b6de2638527eafd0db8f3f6c
1afd982961d7170e3beb714fdf18a01124a6d02a
6c828a986dbc5eb6769e659f20a39af433febba898213cd4e84f6fa4bd0d20b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C828A986DBC5EB6769E659F20A39AF433FEBBA898213CD4E84F6FA4BD0D20B1"
Last-Modified: Mon, 24 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11897
Expires: Mon, 24 Oct 2022 21:34:03 GMT
Date: Mon, 24 Oct 2022 18:15:46 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7c6fdc8e76ef5875b5c965ade2df503e
45d548aa2a9d7ede163743274790700878eaea62
d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4465
Cache-Control: max-age=140724
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:46 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 09:21:10 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lrKu307zhLbHenzzqLSB8g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 153WKDlButSq/CAXEU7RfDwPDM0=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x768595.top/static-promotion/d6eee0a.modern.js
200 OK 3.8 kB URL HTTP/2 lite-1x768595.top/static-promotion/d6eee0a.modern.js
IP
File type ASCII text, with very long lines (7078), with no line terminators
Hash 7da11e1cbb81037b9939597a635ffa7e
d39aa1adbaf31880745093dace93dea746bac628
adb710c8469d5901471e96df38c5475cb365bede8a4c8e9c9d6f414254a3acab
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/d6eee0a.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 3784
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-ec8"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:47 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x768595.top/static-promotion/ca7e7f6.modern.js
200 OK 80 kB URL HTTP/2 lite-1x768595.top/static-promotion/ca7e7f6.modern.js
IP
File type ASCII text, with very long lines (65485)
Hash 5741647e44001bc00285f696acaf6dbd
defa06d518e1b378b8e6840c95c7ff49fd387a5d
92f8da444cb295b7f06c85ae557c1a22df37056d9c8c40a00a6516db34c4e14f
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/ca7e7f6.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 80426
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-13a2a"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:47 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/static-promotion/bfcc86f.modern.js
200 OK 126 kB URL HTTP/2 lite-1x768595.top/static-promotion/bfcc86f.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 126 kB (125809 bytes)
Hash 4bd7030c2e65554cb97224d76bd29c0d
8a7494692bd847d623428f2abc5021e21f09db68
c5b0d6be05ae1b0ad3b1c385bd7dbbf79e9ff288dc0a777dcf0e7630f71f194c
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/bfcc86f.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 125809
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-1eb71"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:47 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4b0bbfecfe5f0ef94bf901755b408fa1
fd6433ab71e827b9443552c62fd4f5fb9230645f
1e941ef28002cd3aad82909fdb1f2ede5fce9dcc88ca425bfcc8e293cbd44c47
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 18:15:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 02:31:57 GMT
Expires: Sat, 29 Oct 2022 02:31:56 GMT
Etag: "fd6433ab71e827b9443552c62fd4f5fb9230645f"
Cache-Control: max-age=374768,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f4b32afbfbb4f1-OSL
v3.cdnsfree.com/status.json
200 OK 21 B URL HTTP/2 v3.cdnsfree.com/status.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c4bb18933a5fd13d100077a00adf5161
957c1ddeabbf35fcdcaf731cf9611f4703864212
a7e828c3613677202207c42052a2135aefd9af7130f8ac20bb3307277a255db0
GET /status.json HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/json
content-length: 21
server: nginx
access-control-allow-origin: *
age: 5803175
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4b0bbfecfe5f0ef94bf901755b408fa1
fd6433ab71e827b9443552c62fd4f5fb9230645f
1e941ef28002cd3aad82909fdb1f2ede5fce9dcc88ca425bfcc8e293cbd44c47
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 18:15:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 02:31:57 GMT
Expires: Sat, 29 Oct 2022 02:31:56 GMT
Etag: "fd6433ab71e827b9443552c62fd4f5fb9230645f"
Cache-Control: max-age=374768,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f4b32afdd50b41-OSL
v3.cdnsfree.com/_nuxt/desktop/default/cd85e3d1.modern.js
200 OK 6.6 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/cd85e3d1.modern.js
IP
File type ASCII text, with very long lines (17121), with no line terminators
Hash b5104723f168a1085ae78430e589eab9
e2ca0730fd3d4f7a12394c2ea5bbc3a6e51dbdf9
c8bb7bb01f7c8fb5aa4478e2fc6eb91506a77b2b279e25918d104e8f4cd30559
GET /_nuxt/desktop/default/cd85e3d1.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 6609
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-19d1"
expires: Tue, 25 Oct 2022 15:18:22 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10647
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/css/6745247d.css
200 OK 238 B URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/css/6745247d.css
IP
File type ASCII text, with very long lines (473), with no line terminators
Hash ec7489a362f4672d1d0f671e3bf1491e
16c172efe6eae1b7b21110555c41dbccbba4e99f
3222dd1f8245dedd6c4ea3502c473a15b7e090fbcf66e61363d21cbe2709d96d
GET /_nuxt/desktop/default/css/6745247d.css HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: text/css
content-length: 238
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-ee"
expires: Tue, 25 Oct 2022 09:15:26 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 32585
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/f0021d4c.modern.js
200 OK 1.8 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/f0021d4c.modern.js
IP
File type ASCII text, with very long lines (4715), with no line terminators
Hash 7781d005c0497be02a72ca16980a5886
85f3a115b19758878057fe3b2e3b3ce862d49068
d4746fcf849fb04ae48ba9cfa9f29f7f4bef8ebd020150980cd6fb98baa4cb8f
GET /_nuxt/desktop/default/f0021d4c.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 1812
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-714"
expires: Tue, 25 Oct 2022 15:23:18 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10556
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/css/f7389643.css
200 OK 76 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/css/f7389643.css
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 71bc9439ada26f2fd02ec16de911990a
2e682880807c2597191f57782865e0ebc08203fc
16f382f56e1cad3d8e0425a1b08d415612170e84ca450eecbeed6492ab37cf1d
GET /_nuxt/desktop/default/css/f7389643.css HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: text/css
content-length: 76138
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-1296a"
expires: Tue, 25 Oct 2022 15:18:14 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10654
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f
302 Found 705 B URL HTTP/2 lite-1x768595.top/promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash bb246c88651f63256e658dccd79ba91f
560cf8f76dad56a5c10a0f66cc4a200df301265d
30e59f903e6fab358b7bfb110a8bf83aefaf5376f2c60293a20f58c9f9fc45e8
Analyzer Verdict Alert quad9 Sinkholed
GET /promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 24 Oct 2022 18:15:46 GMT
location: /us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
reason-v3: empty_lang
server-timing: total;dur=0;desc="Nuxt Server Time", dt_285;dur=1
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: platform_type=desktop; Path=/; Expires=Thu, 27 Oct 2022 18:15:46 GMT
auid=sv0OimNW1lIEAx7TBV7YAg==; expires=Tue, 24-Oct-23 18:15:46 GMT; path=/
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/9915f60a.modern.js
200 OK 489 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/9915f60a.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 489 kB (488640 bytes)
Hash a551d98c4f806a588b739be67fab5451
9ad606e79cb5d20dfba5e52214ed74547bf5691e
a28d7d9db918410eaefccf1f5040d097a6bd3c7e5c69da8e824aec0b901c60b3
GET /_nuxt/desktop/default/9915f60a.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 488640
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-774c0"
expires: Tue, 25 Oct 2022 15:18:20 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10647
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4b0bbfecfe5f0ef94bf901755b408fa1
fd6433ab71e827b9443552c62fd4f5fb9230645f
1e941ef28002cd3aad82909fdb1f2ede5fce9dcc88ca425bfcc8e293cbd44c47
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 18:15:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 02:31:57 GMT
Expires: Sat, 29 Oct 2022 02:31:56 GMT
Etag: "fd6433ab71e827b9443552c62fd4f5fb9230645f"
Cache-Control: max-age=374768,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f4b32af8b7b50b-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4b0bbfecfe5f0ef94bf901755b408fa1
fd6433ab71e827b9443552c62fd4f5fb9230645f
1e941ef28002cd3aad82909fdb1f2ede5fce9dcc88ca425bfcc8e293cbd44c47
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 18:15:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 02:31:57 GMT
Expires: Sat, 29 Oct 2022 02:31:56 GMT
Etag: "fd6433ab71e827b9443552c62fd4f5fb9230645f"
Cache-Control: max-age=374768,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f4b32afcc7fac4-OSL
v3.cdnsfree.com/_nuxt/desktop/default/bbbb1124.modern.js
200 OK 442 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/bbbb1124.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65399)
Size 442 kB (442365 bytes)
Hash 5bd27b82ec69cdc53db97bb4af04bb65
fadb06e2bcfc6851dc0aefe3211ab9af786b47e9
907c4588118fec352bd92cb03cbf7bc473f52e402020633323e5f824b8377edf
GET /_nuxt/desktop/default/bbbb1124.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 442365
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-6bffd"
expires: Tue, 25 Oct 2022 15:18:22 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10647
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/css/58679b44.css
200 OK 29 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/css/58679b44.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 69fb176dd517be46f7c8e919bfd641e5
389188402f19c603bd9495ea384443a0bcfaec42
8c982ad34f5558ea9a8d12d0d398583abedf5a2483b076f5718888a2e17f41a7
GET /_nuxt/desktop/default/css/58679b44.css HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: text/css
content-length: 28792
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-7078"
expires: Tue, 25 Oct 2022 15:18:15 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10652
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ffbfbd6d5d1e91af3c02313339eed0d0
df6457b655ac278fe32f3015bba4cff22dae5b2d
1991ca3e854e53f89b92ce93e01e6094f815b1d2c7c31e664481760211ac200a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
200 OK 2.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
Hash e01830be1e937ae7657792c8e2014155
d2d1342d234e6ff328b02e72ee3c2f964bb5df4f
27ce3a13055a8cccbffc1c29a2beb3ff57a174608a12d631254c4c2406896a72
GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Oct 2022 18:15:47 GMT
date: Mon, 24 Oct 2022 18:15:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:08 GMT
expires: Thu, 19 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 427300
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 14:07:32 GMT
expires: Thu, 19 Oct 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 446896
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
200 OK 2.3 kB URL HTTP/2 lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
IP
Hash 7e1c6ba8521696be6924397163edb2af
858cead4ff776ee74fe0070ac3f3c9e2b01f083a
86698c62c787f398af350c2c5eb8b66fd2ea8a65ad0c0f55d75d05153251ad40
Analyzer Verdict Alert quad9 Sinkholed
GET /promo-frame/us/promotion/campeonato-brasileiro HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
etag: "130d-awy/Wpp0sshYkLJ9XLS4PSzhJ0M"
server-timing: dt_285;dur=2
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11802
Expires: Mon, 24 Oct 2022 21:32:30 GMT
Date: Mon, 24 Oct 2022 18:15:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11802
Expires: Mon, 24 Oct 2022 21:32:30 GMT
Date: Mon, 24 Oct 2022 18:15:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11802
Expires: Mon, 24 Oct 2022 21:32:30 GMT
Date: Mon, 24 Oct 2022 18:15:48 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af3d4b4d16ad8b30805be96afa6472e3
bceb257123711c43994e5a03e9caf22eeee16423
30d7fea8d87522ce3ba2abf2c47e0025af1b7c05d6b4ea9f26aaa1f06aff4a67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10072
x-amzn-requestid: 2f26fcdb-0540-49ea-be46-83c00182fcc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0FKvoAMFVFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-1be524647e3db4a211e4c4ff;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 28s2Fwd7CYJpmy57dsIok6owygvyqng_WwlfbKApRjznSlULtnSJqw==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:56:12 GMT
age: 73176
etag: "bceb257123711c43994e5a03e9caf22eeee16423"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9983bdfe8dbe8386970aae586bb57575
4c5ff521fec700a1cda73325eebbeb88f97baa39
775d510a8d82ed993085e3d828c33b75eee99db2911b90d6151faf5c2e25b5d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9894
x-amzn-requestid: 8d639b03-49d2-411b-b0ca-39c5dafe21f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelOtF6YIAMF-4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b591-230070a06848d4d90ea4f6ef;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mYzFAcyUErnaOlGBX0ygFYZ4608EanLq5V4xzX7qCHQRGzkKwwWvHw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:14:18 GMT
age: 72090
etag: "4c5ff521fec700a1cda73325eebbeb88f97baa39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe87578f5-db38-4350-a6ac-22b0577d75a1.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe87578f5-db38-4350-a6ac-22b0577d75a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 548cc254725b085a0794f02585db37f6
69ebcb96188f5e3f6355aabecbe925e26ff00668
09906078ef781e283e939b86e3ee34665ed5df4524a9af4be26f7106a8cab836
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe87578f5-db38-4350-a6ac-22b0577d75a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7435
x-amzn-requestid: fd538694-534d-4938-bebc-1131c0bb7c62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB1HWdIAMFuSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-2f9210cb5a6a28a71b130497;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GFV2nCltq7Zg9MXGD96a5ajF-Kih-yNwv2rQC8Omlyla0UQ01TYkmw==
via: 1.1 58f9a50682bb94842197f3e957919c60.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:03:39 GMT
age: 72729
etag: "69ebcb96188f5e3f6355aabecbe925e26ff00668"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lite-1x768595.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
200 OK 352 B URL HTTP/2 lite-1x768595.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dff72d4146e35a8262e6845d13a8df0
a291af970d3955b35c314e85712ceea3aca25d54
a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: image/png
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b24b0e9eeeecd44eafc5957dc5450db
e071eb9837a242f41035da077dc6c9b0178d8f9f
33e9c9c03180d2855606be0605c894180d81e151e2f4b4b2bacf5325c11152d4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9495
x-amzn-requestid: f9246128-d6a3-49e0-982d-9f75d110aa2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelztGlqoAMFs8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b67d-7f04a07955c3c9a8644475a0;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:47:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FDwmWmTCnCZt2aCUx9Tb3r4RJ4co-0A1dAbABurYrJNcyGa6ZMmONw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:56:13 GMT
age: 73175
etag: "e071eb9837a242f41035da077dc6c9b0178d8f9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F869ea046-6a24-4b66-a52f-bc9a678d7ebb.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F869ea046-6a24-4b66-a52f-bc9a678d7ebb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f174281da48e4a62aab93bcdc57d14a
8ee29d073b84530a30bb370838598115f1a65da8
0096edb7703f0bcea7e5c0d5b529482eceea9123f5f3b278f3f9012f87875f1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F869ea046-6a24-4b66-a52f-bc9a678d7ebb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8400
x-amzn-requestid: b1436934-5b97-4aa8-937a-78bce0b9181c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelN4GACoAMFYmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b58b-29da495d75578b3c20eb37ba;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:39 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: EmusO-_70hMOdHGlmVAeiZI8nFPDJuJEsxtzTB4-j_8NDsIqwPVk_Q==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:54:06 GMT
age: 73302
etag: "8ee29d073b84530a30bb370838598115f1a65da8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f12f21779aa94b557db8037ceefd15b2
1698d8d0ff47fc4e6dd20d99ceae84cfcdd69e86
0d33ee5a721c2f940ff1e7d5fae9abba3781f6d37e458a36285718466ecdcd10
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4434
x-amzn-requestid: 41e95a27-2955-4224-8d2c-f12d1254cda7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0EQboAMFmMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-5cb99b700c84c99c2d9e52d7;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OTe4NY6F7vvMR1vwdg53oUfynNgHOuyn9VPBf7ub1SqnXTgJRj8dXw==
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:05:54 GMT
age: 72594
etag: "1698d8d0ff47fc4e6dd20d99ceae84cfcdd69e86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/65f0253b.modern.js
200 OK 102 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/65f0253b.modern.js
IP
File type ASCII text, with very long lines (65479)
Size 102 kB (102229 bytes)
Hash 3c4529f038a1dbce013787281ccaeb2b
5f9a1a7adecaaf8b50dee04d215c20457db5132b
968ec557ee648fa212e413f5dc293687f9666400b7400ae1ef2680ed26846b6e
GET /_nuxt/desktop/default/65f0253b.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 102229
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-18f55"
expires: Tue, 25 Oct 2022 15:18:22 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10650
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/_nuxt/desktop/default/css/6745247d.css
200 OK 238 B URL HTTP/2 lite-1x768595.top/_nuxt/desktop/default/css/6745247d.css
IP
File type ASCII text, with very long lines (473), with no line terminators
Hash ec7489a362f4672d1d0f671e3bf1491e
16c172efe6eae1b7b21110555c41dbccbba4e99f
3222dd1f8245dedd6c4ea3502c473a15b7e090fbcf66e61363d21cbe2709d96d
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/css/6745247d.css HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: text/css
content-length: 238
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
vary: Accept-Encoding
etag: "63563bfa-ee"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:48 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/config/getLangs
200 OK 1.7 kB URL HTTP/2 lite-1x768595.top/web-api/external-api/config/getLangs
IP
Hash 0a7893d40944fe86d9a7dbf2bcb195ca
84e1f13464ebd8e476736b431a4720697aa2a483
8360b17f832dd1db99993c8818ea009331c752a299825414e366716d9b3e2366
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/config/getLangs HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=22, dt_285;dur=24
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/pwa
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4766fd1b2ba2e236fd9364587f99ab
eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b
Analyzer Verdict Alert quad9 Sinkholed
GET /pwa HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/translation-api/by-lang/us
200 OK 194 kB URL HTTP/2 lite-1x768595.top/translation-api/by-lang/us
IP
Size 194 kB (193847 bytes)
Hash cf1754e231f1e805404568497a71166d
14314ab34fcb8e8072ce5032573841be483901af
577bde0d988e4c8c2c4fb3f197ab16da9189e86b381f88985312ddacefea9bac
Analyzer Verdict Alert quad9 Sinkholed
GET /translation-api/by-lang/us HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/getColorTheme
200 OK 1.1 kB URL HTTP/2 lite-1x768595.top/web-api/external-api/getColorTheme
IP
File type JSON data\012- , ASCII text, with very long lines (2437), with no line terminators
Hash d81b86d7575d8653d202c2884d6d7d98
0ed1d226583e8cf7d04985671bd3bce25d54d00f
f0eb3315b7aaab7dfe95f18eabfd6e4e63e0056f14e7427bacba9d2e177d466a
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getColorTheme HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=43, dt_285;dur=44
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-178408567-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP
File type ASCII text, with very long lines (1588)
Hash 5f88c04689e0e72e493bdbd06098d19b
b7c08b0545425568c4ad96bb1abc519ce14a4f0e
da22cab603689493455253f9ce3ff2385f301576c7eff79fb1685e9cf374a0f7
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 18:15:49 GMT
expires: Mon, 24 Oct 2022 18:15:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44628
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x768595.top/genfiles/web-app-v2/dictionary2/v3_main/us/dictionary_3509704efdecb3a6f6fc570692d75030.json
200 OK 16 kB URL HTTP/2 lite-1x768595.top/genfiles/web-app-v2/dictionary2/v3_main/us/dictionary_3509704efdecb3a6f6fc570692d75030.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (50202), with no line terminators
Hash 9eeba138a29f78702759a7793b52d7ff
75f57ec6da5e30401298f951b6ebb677c4a813c8
325e7c5f58016df89e07bef43b2672a011995ea0f42813a9888dc82d79ea4bed
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_main/us/dictionary_3509704efdecb3a6f6fc570692d75030.json HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 17:44:34 GMT
x-rgw-object-type: Normal
etag: W/"a5aac5c566df49e9c186fdf9a4a5d67d"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
radar.cedexis.com/1593429750/radar.js
200 OK 19 kB URL HTTP/1.1 radar.cedexis.com/1593429750/radar.js
IP
ASN #63911 NetActuate, Inc
File type ASCII text, with very long lines (1782)
Hash 2acb3c3179b2646943d1a8f5166743cc
56aa31a4027fec3dd8cc78114c6b0f3604716c14
0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 18:15:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:35 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0db-af5c"
Expires: Mon, 07 Nov 2022 18:15:49 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
v3.cdnsfree.com/_nuxt/desktop/default/img/common.698f8a6f.svg
200 OK 44 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/img/common.698f8a6f.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f9ad0f0d55e494c307fc868f2ecd8c4a
55dbe89ffecca33168d368e3f811abfcbf4c71c3
30cd8582e08e758a78ea08d6bf92d41206a2971a021c0cd56528aad610a5b108
GET /_nuxt/desktop/default/img/common.698f8a6f.svg HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: image/svg+xml
content-length: 43843
cache-control: max-age=86400
content-encoding: gzip
etag: W/"63563bf9-196ca"
expires: Tue, 25 Oct 2022 11:20:42 GMT
last-modified: Mon, 24 Oct 2022 07:17:13 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24910
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/api/converslon/load
200 OK 2.2 kB URL HTTP/2 lite-1x768595.top/web-api/api/converslon/load
IP
File type JSON data\012- , ASCII text, with very long lines (6289), with no line terminators
Hash f06c9ecc93c54e07fbbe222cff15875d
da4f3ce64054996a19a32a2ab85a1d1bfbc31cfc
5ea63083b5ba453e1bb616d45c3972824cbe74499b8f8efb1d524271a3aedbe6
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/converslon/load HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1920; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=39, dt_285;dur=40
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:08 GMT
expires: Thu, 19 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 427301
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 06:19:49 GMT
expires: Fri, 20 Oct 2023 06:19:49 GMT
cache-control: public, max-age=31536000
age: 388560
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/144cfa67.modern.js
200 OK 1.1 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/144cfa67.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (2450), with no line terminators
Hash 26dad42e5d46a57597edf185ee9fa679
171371e87f92f5fcf2579c80fb32a933d4eacfca
1938b875e06d8b346a788857a5c3a5136b23fa215c73180fcddddec2f0ffb57f
GET /_nuxt/desktop/default/144cfa67.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 1061
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bf9-425"
expires: Tue, 25 Oct 2022 15:18:59 GMT
last-modified: Mon, 24 Oct 2022 07:17:13 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10611
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/domain-api/api/v1/domains/lite-1x768595.top
200 OK 84 B URL HTTP/2 lite-1x768595.top/domain-api/api/v1/domains/lite-1x768595.top
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9f7ce1856bb45ee9898aebdab9863fc1
6169715dfbfe5a98165ab596ee7a2e066505c598
a1e85717a80f7d928aa7da17ebc13cffdba8a67eecb9a63cb4038fcb581282e7
Analyzer Verdict Alert quad9 Sinkholed
GET /domain-api/api/v1/domains/lite-1x768595.top HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/vnd.api+json
content-length: 84
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/d686db80.modern.js
200 OK 5.4 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/d686db80.modern.js
IP
File type ASCII text, with very long lines (13517), with no line terminators
Hash 431f07fa3843dc908b8ce1148b91e6d3
7d3ce74e6c30c0ef5f80ea6e249888b9f9f83916
4cac24ea4bf0b337ee974df9eb1ff83d1ec8a003c6a210f5a51e1310ca46c880
GET /_nuxt/desktop/default/d686db80.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 5373
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bf9-14fd"
expires: Tue, 25 Oct 2022 15:18:46 GMT
last-modified: Mon, 24 Oct 2022 07:17:13 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10646
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/_nuxt/desktop/default/cfed6ee8.modern.js
200 OK 26 kB URL HTTP/2 v3.cdnsfree.com/_nuxt/desktop/default/cfed6ee8.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 32e7419c0c4f6a8906dc8d6041bcc2e0
406cd12b0b047deb418d98a0a5ec076ff19a8c02
ceb66d50c1099c00ae4377c42c32fb2b602c321e0abe23b100ab3a595d5aba23
GET /_nuxt/desktop/default/cfed6ee8.modern.js HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 26111
cache-control: max-age=86400
content-encoding: gzip
etag: "63563bfa-65ff"
expires: Tue, 25 Oct 2022 15:18:28 GMT
last-modified: Mon, 24 Oct 2022 07:17:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10646
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/checker/redirect/stat/run/
200 OK 49 B URL HTTP/2 lite-1x768595.top/checker/redirect/stat/run/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b7a9075de81cdb1a9fa74fa71b5126dd
9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20
Analyzer Verdict Alert quad9 Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/json; charset=utf-8
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/mibr_white-logo.png
200 OK 9.9 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/mibr_white-logo.png
IP
File type PNG image data, 834 x 434, 8-bit/color RGBA, non-interlaced\012- data
Hash c14d0b72d2885c8ae4975e64ddb29a6f
3c31e0bb67f15daada51baf892c89ef0cd061146
657992cd544e48630d90afc0b957014f0ac4fad15789c7c18a937d5b71231967
GET /genfiles/cms/1-285/desktop/footer/logos/mibr_white-logo.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: image/png
content-length: 9904
cache-control: public, max-age=120, s-maxage=600
etag: "c14d0b72d2885c8ae4975e64ddb29a6f"
expires: Mon, 24 Oct 2022 18:13:23 GMT
last-modified: Thu, 04 Aug 2022 17:36:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 359
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/caf-confederation-en.png
200 OK 15 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/caf-confederation-en.png
IP
File type PNG image data, 387 x 230, 8-bit colormap, non-interlaced\012- data
Hash 70e5105d03a74cc00cd9a0386fde303e
ffcd4fbcd486825d0d31e41cada108335b012d81
baabca03d9695b9475d7d0b4d736fbb093d21f2c03228a7704097e2bfb8e583a
GET /genfiles/cms/1-285/desktop/footer/logos/caf-confederation-en.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 14740
cache-control: public, max-age=120, s-maxage=600
etag: "70e5105d03a74cc00cd9a0386fde303e"
expires: Mon, 24 Oct 2022 18:13:23 GMT
last-modified: Fri, 07 May 2021 11:29:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 272
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/K23_2020_lightmode.png
200 OK 168 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/K23_2020_lightmode.png
IP
File type PNG image data, 4455 x 2151, 8-bit/color RGBA, non-interlaced\012- data
Size 168 kB (168437 bytes)
Hash 514efcaa096bc870bbb55a0910327b9c
05f80f59b5eeb2e4cf409fc4b9d96ddec64b3e6f
a541dec3a5acfa154ce5716014bb463c6be72db6bf5ffb88dde95929e9670942
GET /genfiles/cms/1-285/desktop/footer/logos/K23_2020_lightmode.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 168437
cache-control: public, max-age=120, s-maxage=600
etag: "514efcaa096bc870bbb55a0910327b9c"
expires: Mon, 24 Oct 2022 18:17:49 GMT
last-modified: Wed, 01 Jun 2022 12:17:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 8
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/logo-serie-new.png
200 OK 19 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/logo-serie-new.png
IP
File type PNG image data, 180 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash eebc2093ed37610949fddb757fb411c2
f7964e29e324fe613114a2d8a574819735d4e8a4
2573852f7e996aaf5d4ae5280f600e384f8b5d75e8c4de9e06100af2d9f55e5c
GET /genfiles/cms/1-285/desktop/footer/logos/logo-serie-new.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 18675
cache-control: public, max-age=120, s-maxage=600
etag: "eebc2093ed37610949fddb757fb411c2"
expires: Mon, 24 Oct 2022 18:13:23 GMT
last-modified: Fri, 06 Nov 2020 12:55:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 363
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/team_spirit_black.png
200 OK 169 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/team_spirit_black.png
IP
File type PNG image data, 4000 x 4000, 8-bit/color RGBA, non-interlaced\012- data
Size 169 kB (169025 bytes)
Hash ba6cf2e79cb532a105c8f34b1efbcb26
f05ff0a3895400ac928ac1cce6153f657e6f6d8f
8e3e826321588ba9cca7ed55a8c23ee2e64e007775a40f9f8878340b2788864e
GET /genfiles/cms/1-285/desktop/footer/logos/team_spirit_black.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 169025
cache-control: public, max-age=120, s-maxage=600
etag: "ba6cf2e79cb532a105c8f34b1efbcb26"
expires: Mon, 24 Oct 2022 18:15:16 GMT
last-modified: Wed, 01 Jun 2022 12:16:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 235
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/can-2019-en.png
200 OK 8.1 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/can-2019-en.png
IP
File type PNG image data, 243 x 144, 8-bit colormap, non-interlaced\012- data
Hash d2998762f0b00c9d1bcd90c28f0a5731
95553e4eff474b6a05ad4a6e00826ba4ab9b2c4e
09050bbfb49f160886714942b619eb95dbd92f2f6862f38aa685538f420591b8
GET /genfiles/cms/1-285/desktop/footer/logos/can-2019-en.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 8120
cache-control: public, max-age=120, s-maxage=600
etag: "d2998762f0b00c9d1bcd90c28f0a5731"
expires: Mon, 24 Oct 2022 18:17:50 GMT
last-modified: Fri, 06 Nov 2020 12:55:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 11
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/esl.png
200 OK 33 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/esl.png
IP
File type PNG image data, 1184 x 362, 8-bit/color RGBA, non-interlaced\012- data
Hash 802ac7a85f716d1a10ad5084ce6b2c14
4e3b9ea62cf588f4f8b5be3553aa53068fbe8fa6
3329ddcdb9bce051bb89a2ec7ea84fae914e31752e66656a2321642d8457f7cc
GET /genfiles/cms/1-285/desktop/footer/logos/esl.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 33328
cache-control: public, max-age=3, s-maxage=600
etag: "802ac7a85f716d1a10ad5084ce6b2c14"
expires: Mon, 24 Oct 2022 18:17:50 GMT
last-modified: Fri, 07 May 2021 11:29:08 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 10
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/og_red_bull.png
200 OK 149 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/og_red_bull.png
IP
File type PNG image data, 2187 x 3222, 8-bit/color RGBA, non-interlaced\012- data
Size 149 kB (149244 bytes)
Hash ab837a9cb89291146ad8b371c052fe8d
bf89d8ec4fa8ac43004ceb74bd49199aa3436ca2
14a017c6bf332ef819755c66546f9847b291c056239bc0289d92063fcd17648b
GET /genfiles/cms/1-285/desktop/footer/logos/og_red_bull.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 149244
cache-control: public, max-age=120, s-maxage=600
etag: "ab837a9cb89291146ad8b371c052fe8d"
expires: Mon, 24 Oct 2022 18:17:50 GMT
last-modified: Wed, 25 May 2022 11:38:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 11
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/logo-losc.png
200 OK 119 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/logo-losc.png
IP
File type PNG image data, 2052 x 1962, 8-bit/color RGBA, non-interlaced\012- data
Size 119 kB (119254 bytes)
Hash 0b72a6591ead9e9b95a118b411b9556a
6d43538a7c2167e9046d418e0707dba8f361fd1c
012b4965e861f6073a0496f55677715279f5799468c9aa4c3d92bdbbc5e0b67b
GET /genfiles/cms/1-285/desktop/footer/logos/logo-losc.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 119254
cache-control: public, max-age=120, s-maxage=600
etag: "0b72a6591ead9e9b95a118b411b9556a"
expires: Mon, 24 Oct 2022 18:16:03 GMT
last-modified: Fri, 09 Sep 2022 14:12:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 154
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 24 Oct 2022 16:41:09 GMT
expires: Mon, 24 Oct 2022 18:41:09 GMT
cache-control: public, max-age=7200
age: 5681
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png
200 OK 7.4 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png
IP
File type PNG image data, 169 x 183, 8-bit colormap, non-interlaced\012- data
Hash 8ea23d2a7c2e152564a43453425b3301
f6e61dbb4b90ab17f23130d79af095a1267b01c3
e193b50c6e3a1657a7c7e1100b941a43c90eeda8f9d56763318ac624eeba2cbd
GET /genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 7420
cache-control: public, max-age=120, s-maxage=600
etag: "8ea23d2a7c2e152564a43453425b3301"
expires: Mon, 24 Oct 2022 18:08:13 GMT
last-modified: Fri, 06 Nov 2020 12:55:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 578
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1666635349195
200 OK 145 B URL HTTP/2 lite-1x768595.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1666635349195
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 81d90db48c09d6f764c4929c90eadfc1
6fe1a593e77cca8d9adff9fe5b5f40e19ccf7bd8
fa0a9c9d33937e1539ce6b9e44abf7ecd69f5032c6ba8b85308c6a388f8dc28c
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1666635349195 HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.1.1518924812.1666635349
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 21 Apr 2022 06:40:33 GMT
x-rgw-object-type: Normal
etag: "81d90db48c09d6f764c4929c90eadfc1"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/api/internal/v1/proof_of_age
204 No Content 0 B URL HTTP/2 lite-1x768595.top/web-api/api/internal/v1/proof_of_age
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/proof_of_age HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.1.1518924812.1666635349
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 24 Oct 2022 18:15:50 GMT
cache-control: no-cache, private
server-timing: p;dur=25, dt_285;dur=28
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/caf-champions-en.png
200 OK 15 kB URL HTTP/2 v3.cdnsfree.com/genfiles/cms/1-285/desktop/footer/logos/caf-champions-en.png
IP
File type PNG image data, 387 x 230, 8-bit colormap, non-interlaced\012- data
Hash 805de1a5bec7c7e47c459ed79e5a7778
409804a9ad7ebd262a6125eb04cbd678ac7a9824
3dd56bfcb4bd898db532541ee1bbbcbaffc8276b155f518b5d10be553296633d
GET /genfiles/cms/1-285/desktop/footer/logos/caf-champions-en.png HTTP/1.1
Host: v3.cdnsfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: image/png
content-length: 15100
cache-control: public, max-age=120, s-maxage=600
etag: "805de1a5bec7c7e47c459ed79e5a7778"
expires: Mon, 24 Oct 2022 18:13:23 GMT
last-modified: Fri, 07 May 2021 11:29:04 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 394
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03d42e3245268a9d8f602cacf5a4404e
59b42c91ab2ec67086f549de3d47d45560b91fc7
6e88b2d135f33b12b5c8e244ea0ba75dc6acef16aeb0069a87141e49dd4b7ec9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=1518924812.1666635349&jid=1326613242&gjid=1802445736&_gid=1814087331.1666635349&_u=aCDAAUACQAAAACAAI~&z=504295230
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=1518924812.1666635349&jid=1326613242&gjid=1802445736&_gid=1814087331.1666635349&_u=aCDAAUACQAAAACAAI~&z=504295230
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=1518924812.1666635349&jid=1326613242&gjid=1802445736&_gid=1814087331.1666635349&_u=aCDAAUACQAAAACAAI~&z=504295230 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://lite-1x768595.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://lite-1x768595.top
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 24 Oct 2022 18:15:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03d42e3245268a9d8f602cacf5a4404e
59b42c91ab2ec67086f549de3d47d45560b91fc7
6e88b2d135f33b12b5c8e244ea0ba75dc6acef16aeb0069a87141e49dd4b7ec9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 18:15:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x768595.top/web-api/external-api/config/all
200 OK 14 kB URL HTTP/2 lite-1x768595.top/web-api/external-api/config/all
IP
File type Unicode text, UTF-8 text, with very long lines (56152), with no line terminators
Hash b8ca0b9181686390825be32b209a960a
0fa38ac8dec61436055b439441d7c0b858c41381
0868e2ef41c79a26d6fbc6e5d49909aaa2689eabcae0d9b956c3809574ab6c77
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/external-api/config/all HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.1.1518924812.1666635349
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=159, dt_285;dur=161
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/static-promotion/af815fd.modern.js
200 OK 7.4 kB URL HTTP/2 lite-1x768595.top/static-promotion/af815fd.modern.js
IP
File type ASCII text, with very long lines (45732), with no line terminators
Hash 8408ab86d0ec83a5fee4d6decebc0443
b7b019cd56358f5e4913c02101657db18b2645c4
4b287ed4bb9703810079db2202ce68ce7f205385ad814f2fde01625789cc2819
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/af815fd.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 7389
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-1cdd"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:51 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/getColorTheme
200 OK 3.4 kB URL HTTP/2 lite-1x768595.top/web-api/external-api/getColorTheme
IP
File type JSON data\012- , ASCII text, with very long lines (18529), with no line terminators
Hash 6fd85c1334131cd33b4c07c30ff82d3c
0ced05942bfaca09ea1e7fd38356dae516bd9f5f
6515a061dcd000594413faf9e79a1aedc10aa026413e96fbcdc8dd2eb4fcbd6f
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getColorTheme HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=32, dt_285;dur=34
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/static-promotion/ecaed10.modern.js
200 OK 35 kB URL HTTP/2 lite-1x768595.top/static-promotion/ecaed10.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 084f4ce2ebe8f11d2a21659a9d524424
f7c69c041f7bd0b9e3056d0376fd1240df81c1ed
2c42365d0057d770e1ef4b6256c1993302fca39f626c3064fbc3bed743b02845
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/ecaed10.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 35366
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-8a26"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:51 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/static-promotion/a90aec2.modern.js
200 OK 27 kB URL HTTP/2 lite-1x768595.top/static-promotion/a90aec2.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9d23e4d6548a1ecb8c4f769ef0e71729
4d72eb884157cdef8af2ac1259b50bdf28d37281
348ec274a23c73dd652bf1e89e414fd59699750f6ea6f5d5e82cc81647b559b5
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/a90aec2.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 27413
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-6b15"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:51 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/static-promotion/03e5638.modern.js
200 OK 3.3 kB URL HTTP/2 lite-1x768595.top/static-promotion/03e5638.modern.js
IP
File type ASCII text, with very long lines (15532), with no line terminators
Hash c03bca946e6fdf9f6182c6151f0598f2
59afa390e3ebe43a0a6c157e470c61ce0561ec1c
ed1d65806792457af1bc1849426e0861ec514fecbaa9ac1ae15f3c81bb7db904
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/03e5638.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 3306
last-modified: Mon, 24 Oct 2022 10:20:25 GMT
vary: Accept-Encoding
etag: "635666e9-cea"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:51 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/genfiles/cms/1/desktop/promotions/campeonatoBrasileiro/modal/bg-login.jpg
200 OK 87 kB URL HTTP/2 lite-1x768595.top/genfiles/cms/1/desktop/promotions/campeonatoBrasileiro/modal/bg-login.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 910x363, components 3\012- data
Hash 0b344e47efa2c298abdd576a5a00049d
f0e8a105d4319b8d1bdb170ef867f44c38e5d33b
2af3045eceec899deb34728153788c5aee7320031192a482d4797360a59b3f7b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1/desktop/promotions/campeonatoBrasileiro/modal/bg-login.jpg HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: image/jpg
content-length: 86804
last-modified: Tue, 31 May 2022 12:14:30 GMT
x-rgw-object-type: Normal
etag: "0b344e47efa2c298abdd576a5a00049d"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/genfiles/cms/1-285/desktop/errorsPage/ball.webp
200 OK 2.0 kB URL HTTP/2 lite-1x768595.top/genfiles/cms/1-285/desktop/errorsPage/ball.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b2e135d916673e6f1be84800198490d4
60db6095350e4b9e618aab6666650eb13a941745
3b2e95cba675bc9bdeae9308d00f629d586a6ae7e55aa60a971027cbf9ed7682
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/errorsPage/ball.webp HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/403
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/octet-stream
content-length: 2010
last-modified: Tue, 26 Jan 2021 08:32:04 GMT
x-rgw-object-type: Normal
etag: "b2e135d916673e6f1be84800198490d4"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/promotions/campeonato-brasileiro
403 Forbidden 79 kB URL HTTP/2 lite-1x768595.top/web-api/external-api/promotions/campeonato-brasileiro
IP
Hash 9ba7ee0b7faf403a106e71036a6310d4
220f2f7fefcb9c2c230adf18341ba0a429484ba5
3213ef0a529233ceba187a4d9f3bcf6f898272648bb9fd0cf1bb3408df80ecf8
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/promotions/campeonato-brasileiro HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=38, dt_285;dur=41
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/genfiles/cms/1-285/desktop/errorsPage/sprite-football-men.png
200 OK 212 kB URL HTTP/2 lite-1x768595.top/genfiles/cms/1-285/desktop/errorsPage/sprite-football-men.png
IP
File type PNG image data, 7336 x 587, 8-bit colormap, non-interlaced\012- data
Size 212 kB (212062 bytes)
Hash 8270a8ed37510c1d081ca47895bed81f
a88857250443b9b93e41a1fbdc46017737db5a72
70d2d3a884d1588eb40e4066fa2c4362194b48c4b805ec75fb963bcdeabf24da
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/errorsPage/sprite-football-men.png HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/403
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: image/png
content-length: 212062
last-modified: Thu, 18 Mar 2021 14:54:24 GMT
x-rgw-object-type: Normal
etag: "8270a8ed37510c1d081ca47895bed81f"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
refpaydc.top/L?tag=d_42282m_5437c_[]MS[]null[]brasileiro[]general[]_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346;e066c3585f1c5c1e;1791108564;1866110363;2108709304;1228721655&r=promotions/campeonato-brasileiro/
303 See Other 0 B URL HTTP/2 refpaydc.top/L?tag=d_42282m_5437c_[]MS[]null[]brasileiro[]general[]_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346;e066c3585f1c5c1e;1791108564;1866110363;2108709304;1228721655&r=promotions/campeonato-brasileiro/
IP
GET /L?tag=d_42282m_5437c_[]MS[]null[]brasileiro[]general[]_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346;e066c3585f1c5c1e;1791108564;1866110363;2108709304;1228721655&r=promotions/campeonato-brasileiro/ HTTP/1.1
Host: refpaydc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
server: nginx
date: Mon, 24 Oct 2022 18:15:46 GMT
cache-control: private
location: https://1x-xredbet478860.top:443/promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f
x-aspnetmvc-version: 5.0
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/getFirstDepositBonus
200 OK 0 B URL HTTP/2 lite-1x768595.top/web-api/external-api/getFirstDepositBonus
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=38, dt_285;dur=39
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/getFirstDepositBonus
200 OK 0 B URL HTTP/2 lite-1x768595.top/web-api/external-api/getFirstDepositBonus
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=32, dt_285;dur=33
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/g/8d70f0c7532d45776d79db228d6b204c703fa94f
200 OK 0 B URL HTTP/2 lite-1x768595.top/web-api/g/8d70f0c7532d45776d79db228d6b204c703fa94f
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/g/8d70f0c7532d45776d79db228d6b204c703fa94f HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Origin: https://lite-1x768595.top
Content-Length: 31240
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:51 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=40, dt_285;dur=42
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/translation-api/by-lang/us
200 OK 0 B URL HTTP/2 lite-1x768595.top/translation-api/by-lang/us
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /translation-api/by-lang/us HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1920; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D; che_g=bce7ed4e-1f6e-f367-ca7e-ff6a732d17d2; _ga_7JGWL9SV66=GS1.1.1666635349.1.0.1666635349.0.0.0; _ga=GA1.2.1518924812.1666635349; _gid=GA1.2.1814087331.1666635349; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:50 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1x-xredbet478860.top/promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f
307 Temporary Redirect 0 B URL HTTP/2 1x-xredbet478860.top/promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f HTTP/1.1
Host: 1x-xredbet478860.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
server: nginx
date: Mon, 24 Oct 2022 18:15:46 GMT
content-type: text/html; charset=utf-8
location: https://lite-1x768595.top/promotions/campeonato-brasileiro/?tag=d_42282m_5437c_%5b%5dMS%5b%5dnull%5b%5dbrasileiro%5b%5dgeneral%5b%5d_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3be066c3585f1c5c1e%3b1791108564%3b1866110363%3b2108709304%3b1228721655&r=promotions%2fcampeonato-brasileiro%2f
x-frame-options: SAMEORIGIN
set-cookie: SESSION=dcfb4b96e5243d6e2f82e71c9d0fa4a9; path=/; secure; HttpOnly; SameSite=Lax
ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
auid=sv0vF2NW1lJIdFuVBX2/Ag==; expires=Tue, 24-Oct-23 18:15:46 GMT; path=/
x-reason: 1080,1078,1074,1015,1021
cache-control: no-cache, private
server-timing: p;dur=77
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/external-api/config/all
200 OK 0 B URL HTTP/2 lite-1x768595.top/web-api/external-api/config/all
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/external-api/config/all HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://lite-1x768595.top
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:48 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=127, dt_285;dur=129
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
200 OK 0 B URL HTTP/2 lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: text/html; charset=utf-8
accept-ranges: none
content-encoding: gzip
server-timing: total;dur=678;desc="Nuxt Server Time", dt_285;dur=687
set-cookie: SESSION=dfbbe44899a54e65e95787d72bd0bfb0; Path=/; HttpOnly; Secure; SameSite=Lax
lng=us; Path=/
vary: User-Agent, Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/web-api/api/internal/v1/sessions/user
200 OK 0 B URL HTTP/2 lite-1x768595.top/web-api/api/internal/v1/sessions/user
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/sessions/user HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x768595.top/us/promotions/campeonato-brasileiro?tag=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder&pb=3072f9d3f90f4b37a2d50ea05f9df086&click_id=1666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655&r=promotions%2Fcampeonato-brasileiro%2F
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us; tzo=0; window_width=1280; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder; postback_watcher=%7B%22tag%22%3A%22d_42282m_5437c_%5B%5DMS%5B%5Dnull%5B%5Dbrasileiro%5B%5Dgeneral%5B%5D_d27775_l75546_clickunder%22%2C%22pb%22%3A%223072f9d3f90f4b37a2d50ea05f9df086%22%2C%22click_id%22%3A%221666635346%3Be066c3585f1c5c1e%3B1791108564%3B1866110363%3B2108709304%3B1228721655%22%2C%22r%22%3A%22promotions%2Fcampeonato-brasileiro%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:49 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=37, dt_285;dur=41
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x768595.top/static-promotion/b023a4b.modern.js
200 OK 0 B URL HTTP/2 lite-1x768595.top/static-promotion/b023a4b.modern.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static-promotion/b023a4b.modern.js HTTP/1.1
Host: lite-1x768595.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x768595.top/promo-frame/us/promotion/campeonato-brasileiro
Cookie: platform_type=desktop; auid=sv0OimNW1lIEAx7TBV7YAg==; SESSION=dfbbe44899a54e65e95787d72bd0bfb0; lng=us
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 18:15:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 99096
last-modified: Mon, 24 Oct 2022 10:20:24 GMT
vary: Accept-Encoding
etag: "635666e8-18318"
content-encoding: gzip
expires: Mon, 24 Oct 2022 19:15:47 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
95.211.26.202
178.253.14.138
216.58.207.195
23.36.76.226
104.18.32.68
93.184.220.29