1x-xredbet708793.top/
178.253.47.25301 Moved Permanently 162 B IP 178.253.47.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: 1x-xredbet708793.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 Feb 2023 00:56:27 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://1x-xredbet708793.top/
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13926
Expires: Tue, 07 Feb 2023 04:48:33 GMT
Date: Tue, 07 Feb 2023 00:56:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5544
Expires: Tue, 07 Feb 2023 02:28:51 GMT
Date: Tue, 07 Feb 2023 00:56:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 00:34:06 GMT
content-type: application/json
age: 1341
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2176
Expires: Tue, 07 Feb 2023 01:32:43 GMT
Date: Tue, 07 Feb 2023 00:56:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: C/uqD0/EEe6N+Vq/kwpc06hg2kVhv043kqu7GJu68fA5b//L/iM2vkYwb4DBjG/RNYILirwb2zw=
x-amz-request-id: PBXJ2KPJMEKPF5E6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 00:45:22 GMT
age: 666
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ef83fc808952b7bfd4cce820de6137b6
1b93df964126454f77214efdc7ca6d48f677a4a6
5f6da12b83231e6eb18b31abcb3401a84798a9d7fdcf9790ae375d63055395b6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F6DA12B83231E6EB18B31ABCB3401A84798A9D7FDCF9790AE375D63055395B6"
Last-Modified: Sun, 05 Feb 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2120
Expires: Tue, 07 Feb 2023 01:31:48 GMT
Date: Tue, 07 Feb 2023 00:56:28 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash b7e9a6d162e9a97e2e8af342a495a3ab
7782ce7c5f5d219c963d8f58e0806ec785f99d0d
123a1568fec3dc276d7d1e09ce42da8ea1e61cb1f0580b63bb1f07c8e1d9606a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "123A1568FEC3DC276D7D1E09CE42DA8EA1E61CB1F0580B63BB1F07C8E1D9606A"
Last-Modified: Sun, 05 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6683
Expires: Tue, 07 Feb 2023 02:47:51 GMT
Date: Tue, 07 Feb 2023 00:56:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 00:07:20 GMT
age: 2948
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4683
Expires: Tue, 07 Feb 2023 02:14:31 GMT
Date: Tue, 07 Feb 2023 00:56:28 GMT
Connection: keep-alive
push.services.mozilla.com/
54.186.209.73101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.186.209.73:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +ogfVek2iVtqW/4G4NCHiw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JgdcWpfSnui6P0j/bmbBAd3TcPg=
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.74.74200 OK 1.9 kB URL HTTP/2 fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap
IP 142.250.74.74:0
Hash 5d29867dd77ef1db31b5ec1d9ea6f7ff
296ce28d2fd06493f4f4a1b98224907a7f77371e
1224dd6f39a781eaadfc59a9f23484abc289f9e231294ee8f64825824693b3d7
GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Feb 2023 00:56:29 GMT
date: Tue, 07 Feb 2023 00:56:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 7290f62ad7f3e07848afa1ba29a63504
888ba12edfd1ead7896199690da661f769a0a377
60f73749aa25f96aa63c267d20028450cd86d70ec6e8bd4a413e22981c458134
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 00:56:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 15:03:03 GMT
Expires: Sun, 12 Feb 2023 15:03:02 GMT
Etag: "888ba12edfd1ead7896199690da661f769a0a377"
Cache-Control: max-age=482192,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79582a831bfd1bfa-OSL
1xlite-277345.top/genfiles/cms/pg/285/css/value/42ba9774b8aea778d6717e7c99850e83.css
178.253.15.12200 OK 6.9 kB URL HTTP/2 1xlite-277345.top/genfiles/cms/pg/285/css/value/42ba9774b8aea778d6717e7c99850e83.css
IP 178.253.15.12:0
File type ASCII text, with very long lines (36504), with no line terminators
Hash 66b255ee214e790978adf59cf927369a
466d54bc6cee399ae59fdd2dafcdb1a9b7532053
7b0191fb2ab679481b080d8698610580aa8aaa592bc1271f4f11bc3af39ad0fe
GET /genfiles/cms/pg/285/css/value/42ba9774b8aea778d6717e7c99850e83.css HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 03 Feb 2023 11:44:04 GMT
x-rgw-object-type: Normal
etag: W/"d932a4ba154cc5607da3166fdb676f78"
content-encoding: br
expires: Tue, 07 Feb 2023 01:56:29 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/app-9a3fc913.modern.js
8.254.252.216200 OK 86 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/app-9a3fc913.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (65476)
Hash c290898569357af9f18833ab57cf7b68
fca8801b14f3943b8917555946e096633eced15d
b4781a3e1ea974324860261d3977ae149747115fcc053c7dde75b0fb617a9473
GET /_nuxt/desktop/default/commons/app-9a3fc913.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 86118
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-15066"
expires: Tue, 07 Feb 2023 07:48:17 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61692
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/a1399e76.css
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/a1399e76.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5277ed52198aad35fb4ceb4df4404c33
c9352525a7ec8dcc9c03ca51e84be37493b69d3a
20ab4393e2b8801e02b2adc6f3c1c1621a566583a06554863a79325076256942
GET /_nuxt/desktop/default/css/a1399e76.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: text/css
content-length: 10964
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-2ad4"
expires: Tue, 07 Feb 2023 12:28:24 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44890
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/version.json
8.254.252.216200 OK 44 B URL HTTP/2 v3.traincdn.com/version.json
IP 8.254.252.216:0
Hash 2ff0903e2cf1934343d552ae57e72026
4ba867a032cfd0e85d695429de231d14c4c4dd56
ffa5642106dbd12dea7a3bd3a05ec8c1a34a9ce87385221b32f65da552cd631d
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "63dd300c-2c"
expires: Tue, 07 Feb 2023 00:56:35 GMT
last-modified: Fri, 03 Feb 2023 16:02:20 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 55
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/328d4387.css
8.254.252.216200 OK 2.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/328d4387.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (18385), with no line terminators
Hash 929aca40e43201b0f3257a0ced9e8813
fd964d7adfac6b709cad92fdddb7d207fd57ec05
429c3d3ba9a039180694733cda6d2e09c5b6dc5b088c3acb252b46ca9f9c2baf
GET /_nuxt/desktop/default/css/328d4387.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: text/css
content-length: 2197
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-895"
expires: Tue, 07 Feb 2023 12:28:20 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44892
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/f2c03efd-e79f5416.modern.js
8.254.252.216200 OK 7.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/f2c03efd-e79f5416.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (27736), with no line terminators
Hash 85f1ac0f3222f7d168751928aae86e87
e8dcd0189e3c61f0d451ba23829bdf34c75876b1
11264af04447d2c1a0202168ee9278d09031c8764205b3f5938a78c84024d148
GET /_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/f2c03efd-e79f5416.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 7133
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-1bdd"
expires: Tue, 07 Feb 2023 07:48:21 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61692
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-4fec5956.modern.js
8.254.252.216200 OK 6.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-4fec5956.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (26865), with no line terminators
Hash 35b0aee828126b394b8d37f8b98aa633
233af0831c6c9fd6a47a1477ac4ab70892162e57
a697ed6e79a1559d106be80c80163856c3834e861b956dcda8f1876182ebd385
GET /_nuxt/desktop/default/vendors/Page.Betting.Main-4fec5956.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 6592
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-19c0"
expires: Tue, 07 Feb 2023 07:48:18 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61692
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/9d6d1f35.css
8.254.252.216200 OK 2.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/9d6d1f35.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (11724), with no line terminators
Hash ccb90ebd451b962282357528d3d337c5
b9cbffdd5689522a2e34505dff3563cde46373c8
a60ae5d37149d5d644bfabcee1da360ee61efe46dc1dcadabb44ed7ed77e238b
GET /_nuxt/desktop/default/css/9d6d1f35.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: text/css
content-length: 2126
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-84e"
expires: Tue, 07 Feb 2023 12:28:29 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44892
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-a303baa2.modern.js
8.254.252.216200 OK 76 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-a303baa2.modern.js
IP 8.254.252.216:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (65402), with no line terminators
Hash 5a15f0585bf978b75c64e098bc0b1399
b55a6287fd5cb8c16b9e43905073edcacb3d5ede
cf231b53016ad44dc9a461c5448a2050a83ffd08e89d86eef4a69fb1f5e56d8d
GET /_nuxt/desktop/default/Page.Betting.Main-a303baa2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 75663
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-1278f"
expires: Tue, 07 Feb 2023 07:48:18 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61693
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Game.Proje/1ffcb409-912f77b9.modern.js
8.254.252.216200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Game.Proje/1ffcb409-912f77b9.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (8713), with no line terminators
Hash 8f17e5337b0f196e380b7c440da630f9
b5acc24b3eef7cbd560b814941aee6ef9ad45e8d
65968e0a70f0ecba8b9c42ebc5cd8dabbb6577b399b9a556ebda86bbbd244cfc
GET /_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Game.Proje/1ffcb409-912f77b9.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 2528
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-9e0"
expires: Tue, 07 Feb 2023 07:48:18 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61691
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay/Layout.Office/Page.Betting.Main/Page.BlockAppeal.BetsHistory/Page.Office.B/8e0d2974-8745cc79.modern.js
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay/Layout.Office/Page.Betting.Main/Page.BlockAppeal.BetsHistory/Page.Office.B/8e0d2974-8745cc79.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (41227), with no line terminators
Hash d252f3b3be2a439b8af3f595ec8e0987
428580641ca0cf2e9023046911eb2a2eec69bdb9
9a34d124b6c5101faf10a508541af3982619c78d140065829c6fa9bdf06b7791
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay/Layout.Office/Page.Betting.Main/Page.BlockAppeal.BetsHistory/Page.Office.B/8e0d2974-8745cc79.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 11513
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-2cf9"
expires: Tue, 07 Feb 2023 07:48:18 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61692
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
8.254.252.216200 OK 698 B URL HTTP/2 v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
IP 8.254.252.216:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash baf96800254904a05eee2ff49c94a801
847efb3449a8d7857f004192310aa2164a71d530
0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Tue, 07 Feb 2023 03:10:08 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 78401
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/d1370efa.css
8.254.252.216200 OK 42 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/d1370efa.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a879f84cec3460f101ef164f914a9c6f
f9c1cd31b3f1bb847245c18e7209811719160ad3
7bc187d468cfe2a86bce9d834d0e952076e2ed028e7dd748fdabd2665de0718d
GET /_nuxt/desktop/default/css/d1370efa.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: text/css
content-length: 41552
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-a250"
expires: Tue, 07 Feb 2023 07:48:19 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61690
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/app-a1c33ba1.modern.js
8.254.252.216200 OK 216 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/app-a1c33ba1.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (65396)
Size 216 kB (215714 bytes)
Hash 0e97c99f75258fc41467962d8c2855f5
c2d00bee098c824612fd032c0b723e03f8bb63a8
f8f0e24867d731be762057259277c46d1ecf0d568b3a0dac959866d9e0b0e9c1
GET /_nuxt/desktop/default/vendors/app-a1c33ba1.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 215714
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-34aa2"
expires: Tue, 07 Feb 2023 07:48:19 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61691
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 7290f62ad7f3e07848afa1ba29a63504
888ba12edfd1ead7896199690da661f769a0a377
60f73749aa25f96aa63c267d20028450cd86d70ec6e8bd4a413e22981c458134
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 00:56:30 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 15:03:03 GMT
Expires: Sun, 12 Feb 2023 15:03:02 GMT
Etag: "888ba12edfd1ead7896199690da661f769a0a377"
Cache-Control: max-age=482191,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79582a8318130b41-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 7290f62ad7f3e07848afa1ba29a63504
888ba12edfd1ead7896199690da661f769a0a377
60f73749aa25f96aa63c267d20028450cd86d70ec6e8bd4a413e22981c458134
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 00:56:30 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 15:03:03 GMT
Expires: Sun, 12 Feb 2023 15:03:02 GMT
Etag: "888ba12edfd1ead7896199690da661f769a0a377"
Cache-Control: max-age=482191,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79582a831d55b4f7-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 7290f62ad7f3e07848afa1ba29a63504
888ba12edfd1ead7896199690da661f769a0a377
60f73749aa25f96aa63c267d20028450cd86d70ec6e8bd4a413e22981c458134
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 00:56:30 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 15:03:03 GMT
Expires: Sun, 12 Feb 2023 15:03:02 GMT
Etag: "888ba12edfd1ead7896199690da661f769a0a377"
Cache-Control: max-age=482191,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79582a831bbab515-OSL
v3.traincdn.com/_nuxt/desktop/default/runtime-74f9911d.modern.js
8.254.252.216200 OK 13 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/runtime-74f9911d.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (39801), with no line terminators
Hash d273b47723ce561b91af027e29cbfdbf
550c74205ef72b7b22fca464adf38742c473597c
e0b5db6ac487049158c077bc93cad89e515b379556c6b23fc5e97f4b4efeefbd
GET /_nuxt/desktop/default/runtime-74f9911d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 12699
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-319b"
expires: Tue, 07 Feb 2023 13:04:06 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 42745
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/5f146d7c.css
8.254.252.216200 OK 13 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/5f146d7c.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash e639fe968ccd7c0c724bb3e017f6a1b0
ba2ad1f65f65cb90ee56a5e9440250addeb0222a
0cfa37dbc1cfd74f9a7b6b3c6fd54ddb921dbdd0c6f857775b2b3bd381a6fa7a
GET /_nuxt/desktop/default/css/5f146d7c.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: text/css
content-length: 12852
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-3234"
expires: Tue, 07 Feb 2023 12:28:18 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44892
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/app-5cd67df7.modern.js
8.254.252.216200 OK 186 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/app-5cd67df7.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 186 kB (186313 bytes)
Hash 5bd230fc73ec491eddb26dddf8f1261e
8d3b2f0b6dc630bc00d1cf1244377a6ab2685cb9
971d44a1e14b0d1e9ccdb70ba7298cee3e45c59eb32500372db7a8c8027532fd
GET /_nuxt/desktop/default/app-5cd67df7.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 186313
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-2d7c9"
expires: Tue, 07 Feb 2023 07:48:19 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61691
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5601
Expires: Tue, 07 Feb 2023 02:29:51 GMT
Date: Tue, 07 Feb 2023 00:56:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5601
Expires: Tue, 07 Feb 2023 02:29:51 GMT
Date: Tue, 07 Feb 2023 00:56:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5601
Expires: Tue, 07 Feb 2023 02:29:51 GMT
Date: Tue, 07 Feb 2023 00:56:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ovhdLaEGaDSC8X0F9VamLw0KyBPWkxfYg5pssOT8NOZP4IBtNk6Gfw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
age: 10871
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbda930-ccb5-4a8a-b679-2389a710fc6f.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbda930-ccb5-4a8a-b679-2389a710fc6f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d057038cd3164c40413a88f9b5c2af92
afbcb6617c7277ea42068c2aa1c8dcba02549873
ae03b42f1a5c3774e3ea569a886707a8a31da05a45bd971b829cf579be0ea6c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbda930-ccb5-4a8a-b679-2389a710fc6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6787
x-amzn-requestid: 15924d6a-68a3-414b-9e23-68d37291d4a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvyxSEjXIAMFT3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc9808-22daff920f5fe1201328ccee;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 05:13:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AOnXbzTBcVZ3quJx3NoNQC08Gk5_phyp8UiWCm6Dk4GPxl8FCaIC4w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 16:55:00 GMT
age: 28890
etag: "afbcb6617c7277ea42068c2aa1c8dcba02549873"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 003fc35e140a75a12b7795c3986426ec
da002b22e2a01f48a545b369d4403eabb17a10d5
bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 07:09:58 GMT
age: 63992
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a62e65-5d07-4259-aa47-d2491847eee9.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a62e65-5d07-4259-aa47-d2491847eee9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d29e7077f69b88a0108efeb7a2efe7e9
1958f83edeb8c6b68f17cead3fb5714f44e619eb
371f02a5b36ac3e52cc6c4e78f0980107a0f92105e79ee53278089ae5ff6de93
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a62e65-5d07-4259-aa47-d2491847eee9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10788
x-amzn-requestid: 8e1c8026-1eea-4eb0-810e-7ea43ed11f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyymWEsSoAMFykg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddcaf5-20fc23b535fa86f56a34fbae;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 03:03:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Nb86Kj6pqD3DFzCeTNtTGNXsNfHLvu4kgYq6qmhu2Ygya462lBl0lg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 05:11:31 GMT
age: 71099
etag: "1958f83edeb8c6b68f17cead3fb5714f44e619eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98179745-5078-472e-9610-33edd9a43956.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98179745-5078-472e-9610-33edd9a43956.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da137941b3b3ec5187780ff2bfaef328
29a8a1274d93a71bb356026b15b76ab48096163d
8260b49fa8fb9fb477072575eeb5fefd0b595b04db7840bca29d9f097f37ae9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98179745-5078-472e-9610-33edd9a43956.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10188
x-amzn-requestid: e13ea99d-1fac-47c6-9e50-6ada36f9d25b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f5ZxwG_NoAMFzhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0700b-61d7fbd866fef9920e5ae3d4;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 03:12:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GZIsSc_3eY9FIp3n4mRSQjiCbYp2c9xnARr20iceFrXh-Bj0OvcZXg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 03:53:15 GMT
etag: "29a8a1274d93a71bb356026b15b76ab48096163d"
content-type: image/jpeg
age: 75795
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 13:09:06 GMT
expires: Wed, 31 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 560844
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 22:02:00 GMT
expires: Mon, 05 Feb 2024 22:02:00 GMT
cache-control: public, max-age=31536000
age: 96870
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 07:51:59 GMT
expires: Thu, 01 Feb 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 493471
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1xlite-277345.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
178.253.15.12200 OK 352 B URL HTTP/2 1xlite-277345.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
IP 178.253.15.12:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dff72d4146e35a8262e6845d13a8df0
a291af970d3955b35c314e85712ceea3aca25d54
a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78
GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: image/png
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
expires: Fri, 03 Feb 2023 12:55:50 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/vendors/plugins.vue-notification-b5bb9776.modern.js
178.253.15.12200 OK 4.6 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/vendors/plugins.vue-notification-b5bb9776.modern.js
IP 178.253.15.12:0
File type ASCII text, with very long lines (12527), with no line terminators
Hash cc11d5b7bbd6e6858509feadbced10ce
92de5487b90e66565d1f62ad03cd40c0506c4b30
8272e7505b2d95de0730eb394dae39e1b31e4cb0fc99d0b45964d0e7afef2e46
GET /_nuxt/desktop/default/vendors/plugins.vue-notification-b5bb9776.modern.js HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 4563
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
vary: Accept-Encoding
etag: "63dd2f1a-11d3"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-568bcfd9.modern.js
178.253.15.12200 OK 22 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-568bcfd9.modern.js
IP 178.253.15.12:0
File type ASCII text, with very long lines (65476)
Hash 5dc25e067ee5924700e409963eb73cb1
7e2a61e3fb985b4af152335770f4854398bc8512
cbb81eff45780ffd409ada8dad098b3c9c910b1e5a2b5dbea9d64cc8fe0e3d49
GET /_nuxt/desktop/default/vendors/plugins.v-tooltip-568bcfd9.modern.js HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 21836
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
vary: Accept-Encoding
etag: "63dd2f1a-554c"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/css/9d6d1f35.css
178.253.15.12200 OK 2.1 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/css/9d6d1f35.css
IP 178.253.15.12:0
File type ASCII text, with very long lines (11724), with no line terminators
Hash ccb90ebd451b962282357528d3d337c5
b9cbffdd5689522a2e34505dff3563cde46373c8
a60ae5d37149d5d644bfabcee1da360ee61efe46dc1dcadabb44ed7ed77e238b
GET /_nuxt/desktop/default/css/9d6d1f35.css HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: text/css
content-length: 2126
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
vary: Accept-Encoding
etag: "63dd2f19-84e"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/css/328d4387.css
178.253.15.12200 OK 2.2 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/css/328d4387.css
IP 178.253.15.12:0
File type ASCII text, with very long lines (18385), with no line terminators
Hash 929aca40e43201b0f3257a0ced9e8813
fd964d7adfac6b709cad92fdddb7d207fd57ec05
429c3d3ba9a039180694733cda6d2e09c5b6dc5b088c3acb252b46ca9f9c2baf
GET /_nuxt/desktop/default/css/328d4387.css HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: text/css
content-length: 2197
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
vary: Accept-Encoding
etag: "63dd2f19-895"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/css/a1399e76.css
178.253.15.12200 OK 11 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/css/a1399e76.css
IP 178.253.15.12:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5277ed52198aad35fb4ceb4df4404c33
c9352525a7ec8dcc9c03ca51e84be37493b69d3a
20ab4393e2b8801e02b2adc6f3c1c1621a566583a06554863a79325076256942
GET /_nuxt/desktop/default/css/a1399e76.css HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: text/css
content-length: 10964
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
vary: Accept-Encoding
etag: "63dd2f1a-2ad4"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675731438198
178.253.15.12200 OK 145 B URL HTTP/2 1xlite-277345.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675731438198
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1675731438198 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
expires: Wed, 08 Feb 2023 00:56:30 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/pwa
178.253.15.12200 OK 15 B IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4766fd1b2ba2e236fd9364587f99ab
eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b
GET /pwa HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-277345.top/en
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/css/f9d99aa7.css
178.253.15.12200 OK 943 B URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/css/f9d99aa7.css
IP 178.253.15.12:0
File type ASCII text, with very long lines (3303), with no line terminators
Hash e4fd04067fd4cb615dafb76ce8c62729
1ba7bf93e0a2a8f316add4efd676d7268b4e7f6d
7dbd3f29a56002bfe747432dc14ef29fabf8556fc7998c85ee5a32b945d083f0
GET /_nuxt/desktop/default/css/f9d99aa7.css HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: text/css
content-length: 943
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
vary: Accept-Encoding
etag: "63dd2f1a-3af"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/plugins.vue-js-modal-a8cad600.modern.js
178.253.15.12200 OK 7.5 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/plugins.vue-js-modal-a8cad600.modern.js
IP 178.253.15.12:0
File type HTML document, ASCII text, with very long lines (25593), with no line terminators
Hash aa41c916dc85111e3c8acbcb362e5769
d753ee39db1ddc6d233c52e03acf17106960a010
26ee646ec4c91823540ee1eda8d65eba280068c82b4b725ab9e0fa72892ecd45
GET /_nuxt/desktop/default/plugins.vue-js-modal-a8cad600.modern.js HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 7507
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
vary: Accept-Encoding
etag: "63dd2f1a-1d53"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:30 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/desktop/default/date-fns-locale-21-86259fdc.modern.js
178.253.15.12200 OK 2.6 kB URL HTTP/2 1xlite-277345.top/_nuxt/desktop/default/date-fns-locale-21-86259fdc.modern.js
IP 178.253.15.12:0
File type ASCII text, with very long lines (9012), with no line terminators
Hash 7f71df8e5905c322b3d249323ff3f6a9
7e3d1e624bc7f16f2f6b3239bcdb5cbcef86e743
f687321546ec2f899f7652ec7d2b49f0f53392ebde3d8a9c056b8e28e7170fd4
GET /_nuxt/desktop/default/date-fns-locale-21-86259fdc.modern.js HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 2644
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
vary: Accept-Encoding
etag: "63dd2f1a-a54"
content-encoding: gzip
expires: Tue, 07 Feb 2023 01:56:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DC-99cae2fc.modern.js
8.254.252.216200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DC-99cae2fc.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (2509), with no line terminators
Hash dce8d0096cbc8c992ada35d76b5b0626
567bd5b7a95727ecbf6e69fff0607dd94f21d447
4ae3cfb4ab3e366245dd9c51cb7127ffb0a4f7f3e07e710289a057cfa4cec48a
GET /_nuxt/desktop/default/DC-99cae2fc.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 1084
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-43c"
expires: Tue, 07 Feb 2023 07:48:33 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61679
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 70d7e4cd91d9f630c160410d22c1cede
82f5d0fbb11bcde09c107b6c1cbc6e014bb08b85
b8679be6c92167c51793ca4a8774caf0a50949737a99652243208fcfda917faf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-178408567-1
142.250.74.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1759)
Hash c430c0d1bdd96d40e8ee121af6996a58
ca08ff673053211d90f43f5c9d235eba0501913e
aa6123cd96b13973b9968506b1305a09e7f9ff73ad7aaa6296df70f5a5e6c01c
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 Feb 2023 00:56:31 GMT
expires: Tue, 07 Feb 2023 00:56:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44874
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1xlite-277345.top/version.json?timestamp=1675731438470
178.253.15.12200 OK 44 B URL HTTP/2 1xlite-277345.top/version.json?timestamp=1675731438470
IP 178.253.15.12:0
Hash 2ff0903e2cf1934343d552ae57e72026
4ba867a032cfd0e85d695429de231d14c4c4dd56
ffa5642106dbd12dea7a3bd3a05ec8c1a34a9ce87385221b32f65da552cd631d
GET /version.json?timestamp=1675731438470 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: application/json
content-length: 44
last-modified: Fri, 03 Feb 2023 16:02:20 GMT
vary: Accept-Encoding
etag: "63dd300c-2c"
content-encoding: gzip
expires: Tue, 07 Feb 2023 00:57:31 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/sports-2000139.svg
178.253.15.12200 OK 140 kB URL HTTP/2 1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/sports-2000139.svg
IP 178.253.15.12:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (139671 bytes)
Hash 95a7538c7f2cfbc8021446764cc3bf86
8959d4627006248fed64144651c9739ca07a8e3a
af5903b0086c574a47008540f41a5eba563467a49dc0d65118af9a5ce07537fd
GET /_nuxt/Desktop/Default/svg-sprites/sports-2000139.svg HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
etag: W/"63dd2f1a-573c1"
expires: Wed, 08 Feb 2023 00:34:55 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
radar.cedexis.com/1593429750/radar.js
45.54.49.5200 OK 19 kB URL HTTP/1.1 radar.cedexis.com/1593429750/radar.js
IP 45.54.49.5:0
ASN #63911 NetActuate, Inc
File type ASCII text, with very long lines (1782)
Hash 2acb3c3179b2646943d1a8f5166743cc
56aa31a4027fec3dd8cc78114c6b0f3604716c14
0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 00:56:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:38 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0de-af5c"
Expires: Tue, 21 Feb 2023 00:56:31 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/country-2000139.svg
178.253.15.12200 OK 49 kB URL HTTP/2 1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/country-2000139.svg
IP 178.253.15.12:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e193d3049267a2c7995a807e6ae7eebe
53cedef5386fcbed9965f864e852d6a47d057897
faad7b20651473529b74b6f16e9c6a75c9ce3aa21b3bfdb6243504d7740a43d9
GET /_nuxt/Desktop/Default/svg-sprites/country-2000139.svg HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
etag: W/"63dd2f1a-26280"
expires: Wed, 08 Feb 2023 00:47:51 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/246a944858d7a07393dd4f6739f94bf9.png
8.254.252.216200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo-champ/246a944858d7a07393dd4f6739f94bf9.png
IP 8.254.252.216:0
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 9daf8b58d38593afa8f0d1956f5f8b3d
c9a27c3c80c611a3e51964ae104db70602f2c608
d7e4042b1e80a2c83c4d71eaba92918821b514511356eb608bd6e2af8e0d61ff
GET /sfiles/logo-champ/246a944858d7a07393dd4f6739f94bf9.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 18874
etag: "9daf8b58d38593afa8f0d1956f5f8b3d"
last-modified: Thu, 26 Aug 2021 08:40:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4606393
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8476.png
8.254.252.216200 OK 4.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8476.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ba26321b6d5de975c8f716065be94c9a
1f01ec65fbcae02b7634865c940ce64594ffaa43
d40a7ae6bafc3b7775ccd5d42af9ef7f1fa784e60956bbb5d0c2b8938471156f
GET /sfiles/logo_teams/8476.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 4297
etag: "ba26321b6d5de975c8f716065be94c9a"
last-modified: Tue, 13 Aug 2019 15:12:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8470.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8470.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 391a04385cd12847da850b28ea4567bf
32c2678036e06ff7b2af80127b98272115788744
2cfeafcd52e20c6add5b8908ae46e69a0e034bd15b6aa786b6b4bcb1cb5499ad
GET /sfiles/logo_teams/8470.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 11900
etag: "391a04385cd12847da850b28ea4567bf"
last-modified: Tue, 13 Aug 2019 15:12:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4530028
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8496.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8496.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c12fbb5ceb95d81f108b1bcd0adf9f4c
60debf59e73ba38b9d8c10ec0e201808fb4d8110
08d2049a9cd301c200c4fa1ab7cbc188889fc24c29f96072775c718bb1ecb1f8
GET /sfiles/logo_teams/8496.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 11826
etag: "c12fbb5ceb95d81f108b1bcd0adf9f4c"
last-modified: Tue, 13 Aug 2019 15:12:04 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8494.png
8.254.252.216200 OK 3.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8494.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash a3296817f4cfc34046fb43f25546fc77
ebec32247623ee79cf70d9f2505245c8eebe6b87
2c8646677d484313b2ab57a6303a9bd6ecdab98c57104db2df9c90ade94f4217
GET /sfiles/logo_teams/8494.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 3474
etag: "a3296817f4cfc34046fb43f25546fc77"
last-modified: Tue, 13 Aug 2019 15:12:04 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8468.png
8.254.252.216200 OK 3.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8468.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 1144e2df307a600a7fcc79b5f24ef886
bbe9fa8659c89f5fad25fb9af68cc86627295013
c7c32c05bb639c745622514dbf189f0a5998f9c7854a350d69d048fdbcdf9be4
GET /sfiles/logo_teams/8468.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 3139
etag: "1144e2df307a600a7fcc79b5f24ef886"
last-modified: Tue, 13 Aug 2019 15:12:02 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8508.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8508.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 832c54940e3260b61ce392938fce298f
3badf0d1f6f00c5a6f4d8e3d2b6d93cd15e694a6
4c808af3f04daab078aba6a9d16401fa4d12737b3b4d896e2eac4516f40bdc38
GET /sfiles/logo_teams/8508.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 10628
etag: "832c54940e3260b61ce392938fce298f"
last-modified: Tue, 13 Aug 2019 15:12:04 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4445448
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8472.png
8.254.252.216200 OK 9.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8472.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 12940575bfd35e81646f5c7c797a6d3e
690b1e9683e6ba0d9e8631632f8c52db93cbb36b
1a57d109d451376d7cec501e77ed18a8697586d6ba74aa947b8f35a35fcae3b1
GET /sfiles/logo_teams/8472.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 9667
etag: "12940575bfd35e81646f5c7c797a6d3e"
last-modified: Tue, 13 Aug 2019 15:12:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8510.png
8.254.252.216200 OK 8.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8510.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash a4a080c79eb9890bf7b9b0e2d86a032a
0c78be6e2758769556a53c2ac8cfa95ee854ff15
98afd6a8a12e4580f6807873f2727920718807a4f3c670ca37521c08f3572f10
GET /sfiles/logo_teams/8510.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 8630
etag: "a4a080c79eb9890bf7b9b0e2d86a032a"
last-modified: Tue, 13 Aug 2019 15:12:05 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4529431
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.png
IP 8.254.252.216:0
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 9adffbc80a8d207de772719c1fd5c56d
15040286d90d2f6aa7781b2e21ba860aa88752e9
a9e1ff151cd68dd773872cd25c8497850247cedee9bd91f3c172fe5415bd1f82
GET /sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 10864
etag: "9adffbc80a8d207de772719c1fd5c56d"
last-modified: Mon, 07 Oct 2019 07:09:56 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4606390
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/cf8c0f97a08d3fc281ae90089fce367b.png
8.254.252.216200 OK 9.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/cf8c0f97a08d3fc281ae90089fce367b.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c60205cbd7ee3d40dd126bce45de7e4b
f863d368fa552a7f0556668f422686e03b05b19d
1b14d1629222b533e76e28112c8b3a809523993f106777dd71ee8f9b6ffe2e44
GET /sfiles/logo_teams/cf8c0f97a08d3fc281ae90089fce367b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 9402
etag: "c60205cbd7ee3d40dd126bce45de7e4b"
last-modified: Sat, 04 Apr 2020 05:08:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4537321
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/fad63d98dbd2f6d48b2f66940a47167f.png
8.254.252.216200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/fad63d98dbd2f6d48b2f66940a47167f.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e20b46033ead3200429130555ca95f3f
22cfb79982b2708e9806426574ff52031c343c77
abafd011bf0d132d0623d19f0f800a4a0e53487ffed3d39ae07482f08a7fe765
GET /sfiles/logo_teams/fad63d98dbd2f6d48b2f66940a47167f.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 16504
etag: "e20b46033ead3200429130555ca95f3f"
last-modified: Tue, 26 Jan 2021 23:24:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4446394
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6872.png
8.254.252.216200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6872.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 185e10fbaadadaea795229138e0bfdb9
eb4c2acf185bd86600a489975268639cee848003
2ab58b16556412abc2b7b748c2220a20f165caedc319d9c49ce6dcddd8138559
GET /sfiles/logo_teams/6872.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 12995
cache-control: public, max-age=86400
etag: "185e10fbaadadaea795229138e0bfdb9"
expires: Sat, 04 Feb 2023 18:24:32 GMT
last-modified: Thu, 19 Jan 2023 14:27:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4446393
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ab10bfc7e3519727a4d20e317ce882f1.png
8.254.252.216200 OK 15 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/ab10bfc7e3519727a4d20e317ce882f1.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 1413a24186ceea8059a0f0240161cbb3
95a4744590dc7009ba128c27cba259da9c2a4321
3ec746a6f0b6f218093fdb99befbb0fa45f2fc9c1956ba7a0ea80c7d5d8bbfc7
GET /sfiles/logo_teams/ab10bfc7e3519727a4d20e317ce882f1.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 14605
etag: "1413a24186ceea8059a0f0240161cbb3"
last-modified: Wed, 29 Apr 2020 06:26:28 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4537321
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/be3dbfb428546c98d390c33af33005fc.png
8.254.252.216200 OK 31 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/be3dbfb428546c98d390c33af33005fc.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 014e77b1f6e5868ecddf9279c891c89d
86abfd4b77a88b18dbeddee0b17474ba6dc2058d
2e350864254da817875741bab81c09a7a6666deaac6d3e3efc2097e2c640b044
GET /sfiles/logo_teams/be3dbfb428546c98d390c33af33005fc.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 30698
etag: "014e77b1f6e5868ecddf9279c891c89d"
last-modified: Mon, 06 Jan 2020 22:11:58 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4534206
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6854.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6854.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c0182965a1f2e044a0adce40f40f3ed5
34010c62483d9b6b7e8662c2352b0d0daa5f9b43
89b9711a3ef4ef9c6116c01f7e2836261977109b90c5d02a65505b47e77412d6
GET /sfiles/logo_teams/6854.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 14244
etag: "c0182965a1f2e044a0adce40f40f3ed5"
last-modified: Tue, 13 Aug 2019 15:10:21 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4537321
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/36773.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/36773.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 89169eafb76e60710172d195a063a938
18e5b09e1f984f2765ffbf86878741086473b69b
3d27148bac4e8b8fd62703e9404fca20a8531acf3b9173f366dfbaeec49c395d
GET /sfiles/logo_teams/36773.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 12202
etag: "89169eafb76e60710172d195a063a938"
last-modified: Tue, 13 Aug 2019 15:05:15 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 6211443
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.png
8.254.252.216200 OK 3.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e1eb6e4adda0df3ef108df2dd55a4b14
1fc664d442a4cd6fa5e727d092e7bc5578ba2bee
4bb694aa22de366decc54a40a429512ee2180fa7142ea60f6ace42c011e09b96
GET /sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 3580
etag: "e1eb6e4adda0df3ef108df2dd55a4b14"
last-modified: Wed, 18 Sep 2019 19:23:05 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 6329099
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8520.png
8.254.252.216200 OK 9.8 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8520.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c244e7b175b3a9b789d5657a557f1c05
fc7ff8d9a1a7e616e21cc0d13c951f90aa0ffe70
5c91a44151114cf55053cb1c99d1482dabeb56c80c40024c32d94bb97318d06d
GET /sfiles/logo_teams/8520.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 9804
etag: "c244e7b175b3a9b789d5657a557f1c05"
last-modified: Tue, 13 Aug 2019 15:12:05 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8518.png
8.254.252.216200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8518.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e0502a079111a4b09f3105e8f0bf0442
672b2ea2ce2017c625b4f0a124344a01bdf45ed2
51e60907053fcae64ae693591cf331911d3b5c79abfafa371594deebbff23022
GET /sfiles/logo_teams/8518.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 6863
etag: "e0502a079111a4b09f3105e8f0bf0442"
last-modified: Tue, 13 Aug 2019 15:12:05 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4623224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ab28ed9c6013222081087674a65d074d.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/ab28ed9c6013222081087674a65d074d.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 424603a8510155bd116ea1992223307c
4519b0f5ab4f9993bbcb4ceea98e36faf7d76b10
1dc6e7ce5e9c097226ba942be3a45948cabff7cb529d820f223b9886f19c674d
GET /sfiles/logo_teams/ab28ed9c6013222081087674a65d074d.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 11812
etag: "424603a8510155bd116ea1992223307c"
last-modified: Mon, 11 Jul 2022 07:53:55 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4530028
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8514.png
8.254.252.216200 OK 8.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8514.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a92e01990179fe6803936d9ef572146
4a87082ccd2bfc021ef69b903eef88abe5c8a26a
54aa0d41eb6a01b1bada4d1b7c8bf18e94936e3813d319c70c64e8891affbc37
GET /sfiles/logo_teams/8514.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 8093
etag: "0a92e01990179fe6803936d9ef572146"
last-modified: Tue, 13 Aug 2019 15:12:05 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4534207
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7a98871f6f1ecbd539e3a7e1c5465ca7.png
8.254.252.216200 OK 8.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/7a98871f6f1ecbd539e3a7e1c5465ca7.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3235e5eac1ebefeb6f8ceef5bc65645a
6e934756cdf39f09f0afa269daead3332f92f53b
ce3a93fff35ebc7bff07a0c164f035ff01d28939226753537ad54ef550c29af7
GET /sfiles/logo_teams/7a98871f6f1ecbd539e3a7e1c5465ca7.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 8527
etag: "3235e5eac1ebefeb6f8ceef5bc65645a"
last-modified: Sun, 05 Apr 2020 05:07:22 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4534206
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6906.png
8.254.252.216200 OK 8.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6906.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 920ebe7b4ebf58bfdbdea39461c456d7
d02b10b43f8b38a22a7d7d8c6122871115ea9194
7eb23e17f14e81efaecfc10e6e3ea57fc4de32ab4bf6cbc52231b104b8da6d2d
GET /sfiles/logo_teams/6906.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 8692
etag: "920ebe7b4ebf58bfdbdea39461c456d7"
last-modified: Tue, 13 Aug 2019 15:10:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4446391
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6908.png
8.254.252.216200 OK 6.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6908.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8b7168fdf265273f3fe4cd6d30ccecad
db736e411a65392ddd60e25d45a572b5df3b2277
66c9cb63646a2f1299845f103bfe105a17e149c2c5bfa2ad931615df3c032e6a
GET /sfiles/logo_teams/6908.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 6144
etag: "8b7168fdf265273f3fe4cd6d30ccecad"
last-modified: Tue, 13 Aug 2019 15:10:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4607285
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6896.png
8.254.252.216200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6896.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d4c46a89fb287b2f0a361d105b6bcf89
681a2b1bf575c1e3a3c07c35698e72c0213cc6b5
146044c3df755d86704829deb02fa57f45a825bd2edf4d9f48ce51a5deb04f6a
GET /sfiles/logo_teams/6896.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 6914
etag: "d4c46a89fb287b2f0a361d105b6bcf89"
last-modified: Tue, 13 Aug 2019 15:10:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4534206
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/036bac5ccd2222d5c0bcab450545dae6.png
8.254.252.216200 OK 6.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/036bac5ccd2222d5c0bcab450545dae6.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ae77caddd1c5f1dadc117d71057e8023
c329dfa7456343a109deaebe8bf00fab8ed988ff
1654c03af6de286a42c355dac0a2a8f07262a0c4358545d965f2c3fda9e64f96
GET /sfiles/logo_teams/036bac5ccd2222d5c0bcab450545dae6.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 6033
etag: "ae77caddd1c5f1dadc117d71057e8023"
last-modified: Tue, 31 Mar 2020 09:00:50 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4605330
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6900.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6900.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ee083ae525cfe5b27ef66189306a13e0
f0236b568b70fe43ca360fc21cfd553a89692684
eb496d5e7135a09dcd3d0443082ff51c00f6eb31df45522d7e0c8070b7a2c42e
GET /sfiles/logo_teams/6900.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 14213
etag: "ee083ae525cfe5b27ef66189306a13e0"
last-modified: Tue, 13 Aug 2019 15:10:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4533989
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6890.png
8.254.252.216200 OK 9.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6890.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c8c1957f034e6bf08de9472bc9a0d7f
3000928d8d6efa5711ec9b472f25888fbc0584eb
eaa3fd67bca5d827c745a79a0026f94b83a1c2cc8d8ce1502a4318e96021f411
GET /sfiles/logo_teams/6890.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 9905
etag: "9c8c1957f034e6bf08de9472bc9a0d7f"
last-modified: Tue, 13 Aug 2019 15:10:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4537321
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6884.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6884.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 79cc940770627c4646eea75225e00d94
344dbd33ec8ebb69e8979d196924b91c4942f55a
5acb9d5c290d6b2d816840ea47f8f8a61b0ec45d01fac2dc992fc2f76ecf86e5
GET /sfiles/logo_teams/6884.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 10927
etag: "79cc940770627c4646eea75225e00d94"
last-modified: Tue, 13 Aug 2019 15:10:23 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4534206
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f620f698f9b2c4e2b7def10be5960ecd.png
8.254.252.216200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f620f698f9b2c4e2b7def10be5960ecd.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash dcbde4f5fb75fea4aeda05d589fd6252
d1be995391a94c09c3b15cb424c7bf732641febc
b94a49f1d83ee4046af1740fd11a1b446055f26e18c4d70ad611eb9ef95cc404
GET /sfiles/logo_teams/f620f698f9b2c4e2b7def10be5960ecd.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 10246
etag: "dcbde4f5fb75fea4aeda05d589fd6252"
last-modified: Sat, 08 Aug 2020 02:39:08 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4533988
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6866.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6866.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash b9138b96dc424fe13e1f9f802f1b42d1
762e9bf77880a322585950abd7997a126d7971b2
8c009eed8d85b92e0a03d40efea40bd8f2580fad48e7293d442745e1e0a89724
GET /sfiles/logo_teams/6866.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 12418
etag: "b9138b96dc424fe13e1f9f802f1b42d1"
last-modified: Tue, 13 Aug 2019 15:10:22 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4607285
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a61cb7f025b17f36b3ae827e2a429521.png
8.254.252.216200 OK 20 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/a61cb7f025b17f36b3ae827e2a429521.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash a61cb7f025b17f36b3ae827e2a429521
401596d0fabdd682cf2df238186b3f309ffe2b43
24aa43fe85b9b84a366b8c444615967957ae1499edf83e785994c60128b77a30
GET /sfiles/logo_teams/a61cb7f025b17f36b3ae827e2a429521.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 20256
cache-control: public, max-age=86400
etag: "a61cb7f025b17f36b3ae827e2a429521"
expires: Tue, 07 Feb 2023 10:23:12 GMT
last-modified: Tue, 17 Jan 2023 07:50:14 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 53143
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8131671d2f9cff26f25edd80a161f849.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8131671d2f9cff26f25edd80a161f849.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 16041be7005e33f34ba043d89aedfb88
01963a0cebee7e5c0698838912ad4686b3df7fda
22eca936a8b072c65216788bb5b5430c232c20af4dd79f8e7b1c6eb3bfb00dc5
GET /sfiles/logo_teams/8131671d2f9cff26f25edd80a161f849.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 11258
cache-control: public, max-age=86400
etag: "16041be7005e33f34ba043d89aedfb88"
expires: Tue, 07 Feb 2023 06:38:53 GMT
last-modified: Tue, 17 Jan 2023 11:32:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 72415
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/19f41a9adb304f65d2ee799ab6d47b3f.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/19f41a9adb304f65d2ee799ab6d47b3f.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash b5c04c88ea7d5cbf92b56e00ef5bc111
31f873806dac8822ed4affc0a86ba52c64d39fee
cfabc57bf46c90b6a4d4a25d285bfe71b74bf049beb7bbf51567de340c6131e4
GET /sfiles/logo_teams/19f41a9adb304f65d2ee799ab6d47b3f.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 12132
cache-control: public, max-age=86400
etag: "b5c04c88ea7d5cbf92b56e00ef5bc111"
expires: Tue, 07 Feb 2023 06:05:07 GMT
last-modified: Tue, 17 Jan 2023 09:44:59 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 70951
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/282061441f011869f6f5971f7a01ff27.png
8.254.252.216200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/282061441f011869f6f5971f7a01ff27.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 764d7138794165c1376c5d69bc6bd4ed
8b67dc2b5fffe77093cdb08e6d0ca43fb13b8f90
1ea11a37289de0d49f7c489598d3a990d53ba9905592925e3a2576d95e7ec0be
GET /sfiles/logo_teams/282061441f011869f6f5971f7a01ff27.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: image/png
content-length: 12640
cache-control: public, max-age=86400
etag: "764d7138794165c1376c5d69bc6bd4ed"
expires: Tue, 07 Feb 2023 06:05:07 GMT
last-modified: Tue, 17 Jan 2023 13:26:38 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 81219
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/45a3de2a.css
8.254.252.216200 OK 2.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/45a3de2a.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (17112), with no line terminators
Hash 1b86624223650399482410b340d33c39
0b03af8fa94b7003f971ab334261ab3bca725c77
f92da5ffb043bd36f0f2c7d7a1fea8f5ccaffdd3538589f6654aa3d7e1babffb
GET /_nuxt/desktop/default/css/45a3de2a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 2166
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-876"
expires: Tue, 07 Feb 2023 12:28:41 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44882
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Betting.ChampResults/betting.SportMenuApp-731e0268.modern.js
8.254.252.216200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.ChampResults/betting.SportMenuApp-731e0268.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (10128), with no line terminators
Hash f8fd1b3409cf95fabdcc551759201f9c
fa7e1972a138fd5ea50109e7bbf34c5b1d541690
520603ff954360623e00bbab35fb77e77b31739d660015c8e80a2c831e2f89f6
GET /_nuxt/desktop/default/Page.Betting.ChampResults/betting.SportMenuApp-731e0268.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 2717
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-a9d"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61671
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/5645e90a.css
8.254.252.216200 OK 4.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/5645e90a.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (36151), with no line terminators
Hash 6c16fb1483a4265f200f84fe93c486d2
62aa6bf64a4bf118e508bac4c5474056f00bc877
6f1cec3cef63caee966b8f6470d516ea824d47f20276a87ae04199c950fb8714
GET /_nuxt/desktop/default/css/5645e90a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 4416
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-1140"
expires: Tue, 07 Feb 2023 12:28:41 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44873
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-2a6a363f.modern.js
8.254.252.216200 OK 35 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-2a6a363f.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d283fe8f22063984cbe45a0a856619d4
b0d0a24318c255642037373f632b942ea6737319
28c108fec98e7493db36c5eeb832b1cbcf2a4362f34186923d8c44ca50714c0d
GET /_nuxt/desktop/default/betting.SportMenuApp-2a6a363f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 34654
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-875e"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61665
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/1f9bd3f9-a2959aff.modern.js
8.254.252.216200 OK 6.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/1f9bd3f9-a2959aff.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (24890), with no line terminators
Hash 92ec145dc4d0048b879ed5f58dbf3928
50d6b118928fbe99b108829278fd89677d1976b0
8671bb0324260cd382ec0dd13b1e38f31ab7e9abd99bd6d11270157d07a2df4d
GET /_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/1f9bd3f9-a2959aff.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 6382
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-18ee"
expires: Tue, 07 Feb 2023 07:49:23 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61630
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.AdminRequest/Page.Office.BetsHi/963f8409-e254f8e8.modern.js
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.AdminRequest/Page.Office.BetsHi/963f8409-e254f8e8.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (57248), with no line terminators
Hash e3ac540ff68c4443424684e39d3331c9
4df11a58b02aa3aa0cc7e1d19bcd622cac0f9ca4
1819c1ddcf2393fd942544ce106996629371d1556bf7fb49d1a845155f6d604e
GET /_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.AdminRequest/Page.Office.BetsHi/963f8409-e254f8e8.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 14510
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-38ae"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61669
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/api/converslon/load
178.253.15.12200 OK 8.1 kB URL HTTP/2 1xlite-277345.top/web-api/api/converslon/load
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with very long lines (27853), with no line terminators
Hash 1d865433b795499d5d10dda46d7c025d
a96a151f6c319e9840106723830d86cf1895c69f
35853e2452eac9a27949d6333e62a62a61ce377915edc319379f79c9bb2e84b7
GET /web-api/api/converslon/load HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=18, dt_285;dur=20
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/0b8e2f10.css
8.254.252.216200 OK 2.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/0b8e2f10.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (14721), with no line terminators
Hash c04c2222df67be8053bf54f9e684e073
9debab0169247e61d04605d845a257ab9c0c4d9a
b30853320aceedf2da4856fa9053c47fd12986c635bf34134b96224a1178e3a0
GET /_nuxt/desktop/default/css/0b8e2f10.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 2404
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-964"
expires: Tue, 07 Feb 2023 12:30:19 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44882
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-f5235af0.modern.js
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-f5235af0.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (50495), with no line terminators
Hash 1da602d3d47796bf1e8f732e4f05796d
39dd9fa0ab20abb2d7f2a3abf41383a9069f27be
d76eb690629cea00d49a3bde7c131353b593a8f7f7b73ab2e3fc2afee64e8aab
GET /_nuxt/desktop/default/betting.CentralMenuApp-f5235af0.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 12457
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-30a9"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61669
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/3d6a92a8.css
8.254.252.216200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/3d6a92a8.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (19574), with no line terminators
Hash 38f64dff2f74b9d2fb4fd6f375d351b5
67d6f58356f5e15216dc11248c1733fc45872284
03b99b909d6b2d56a018cbedbafed406338062c379c0c5759e21def53c67a039
GET /_nuxt/desktop/default/css/3d6a92a8.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 2549
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-9f5"
expires: Tue, 07 Feb 2023 12:29:11 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44881
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-b8a778bc.modern.js
8.254.252.216200 OK 7.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-b8a778bc.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (29301), with no line terminators
Hash 5a4ede7af48041760124cd7e48d34a35
513a53b7667e036ecb65ca82754856421ac0d37d
a2c5df8910ac624f33a504caf72e548ec7e4d69a3b29f5bf20d567acd8dbdeca
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay-b8a778bc.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 7924
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-1ef4"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61671
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
8.254.252.216200 OK 454 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (1429), with no line terminators
Hash 2e608c9f5c1cf5a83292f527a4d989a7
22b90e9378fcbf8672365cdafe8fb58af95fba3d
cd2698bbea9a68ae2fbc7739d0ccbdedf4dded68f7ac8d0cd69a4a158f60ea4e
GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-1c6"
expires: Tue, 07 Feb 2023 08:30:50 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 59142
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-ff1f901e.modern.js
8.254.252.216200 OK 18 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-ff1f901e.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (43176), with NEL line terminators
Hash 894b8143139c9e94297417c9c1b7d10a
585fcc45d9ec7ecff96737ee52b0838846742a2f
852861604ba52b4b53805aed63936e1224d7ee71493054f32130c2225bcd40e8
GET /_nuxt/desktop/default/vendors/betting.media-ff1f901e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 17545
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-4489"
expires: Tue, 07 Feb 2023 07:48:51 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61661
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/398badd9.css
8.254.252.216200 OK 1.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/398badd9.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (5498), with no line terminators
Hash e21992f58d329c265b326d0ba8d59440
6210d114e7169c92cabb3589b6abba9e83078c33
91b5ccc3fc5186c54091da99b0fcadc43b92179c198b7a0b58dabc9a3880fd88
GET /_nuxt/desktop/default/css/398badd9.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 1238
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-4d6"
expires: Tue, 07 Feb 2023 12:28:28 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44890
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.media-4266d4d5.modern.js
8.254.252.216200 OK 4.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.media-4266d4d5.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (18679), with no line terminators
Hash 9dd22fc0cc8c003a56bb81300e13d7ee
0739a3548d353be70f4070a3df97acdbb488bc76
f070583d29059b8eddf591046c6fb6e51e1e2a3b42e7333dfe19fd6c26e751e0
GET /_nuxt/desktop/default/betting.media-4266d4d5.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 4563
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-11d3"
expires: Tue, 07 Feb 2023 07:48:51 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61662
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/237e5674.css
8.254.252.216200 OK 213 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/237e5674.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (369), with no line terminators
Hash f605c256d7d25450cda9c0dd336b3fb9
b0811258d872723cb8a1372f90540c5aafcca985
6a2862377148ffd6ff4c7c55332ac8387ca9bfef3449d1d9b21c54971953986a
GET /_nuxt/desktop/default/css/237e5674.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 213
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-d5"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61669
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/GameProvider/Information.Feedback/Page.Betting.Game/Page.Betting.MultiLive/Page.C/cd316887-8526dc21.modern.js
8.254.252.216200 OK 6.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/GameProvider/Information.Feedback/Page.Betting.Game/Page.Betting.MultiLive/Page.C/cd316887-8526dc21.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (20912)
Hash ea446e5fd72ae2891883fa4d441617f1
1e76e31e0a687950fb6ed1ee8801459c202b0c58
e3c89e9fc526225fe60d13c803620517397d43e6eda92dd0d71f9b2d0791175c
GET /_nuxt/desktop/default/vendors/Auth.Forms/GameProvider/Information.Feedback/Page.Betting.Game/Page.Betting.MultiLive/Page.C/cd316887-8526dc21.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 6556
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-199c"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61668
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/6ddcb708.css
8.254.252.216200 OK 464 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/6ddcb708.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (1665), with no line terminators
Hash f12e111d56a043c0908c35b9a4a21826
38d30fec2e049ff760b7e7491cd61fba5a362cc2
0b9a5166fd24f9c72b74f7af408dfe9b36abc180eb23d11dbb7d26d0c303a0f6
GET /_nuxt/desktop/default/css/6ddcb708.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 464
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-1d0"
expires: Tue, 07 Feb 2023 14:15:04 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38510
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/2dd859ef.css
8.254.252.216200 OK 884 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/2dd859ef.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (3749), with no line terminators
Hash e3047b3df4343ca29ca4687c82110a6d
b18a329960a2c7265dc73e807aba3258f73502b8
43a1e7b41a2417d8f21bedf8ce8e1658a422888393f3d5c79fc110112c130f2f
GET /_nuxt/desktop/default/css/2dd859ef.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 884
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-374"
expires: Tue, 07 Feb 2023 08:44:15 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 58338
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/9ec65dba-dc5c470a.modern.js
8.254.252.216200 OK 8.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/9ec65dba-dc5c470a.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (24831), with no line terminators
Hash 322b67309adbe27caab41efd6c9c4b3e
ae0eaa0dd2041dfff8cbf2216f0195c0c753f6c1
db4faf0387cc34496126caf367ea50c6cd608c1da2af2dd49b8efae032cb86aa
GET /_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/9ec65dba-dc5c470a.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 8051
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-1f73"
expires: Tue, 07 Feb 2023 07:48:54 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61669
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Office.Support/RegistrationWidgetApp/modal.ForgotModal/modal.office.OfficeAddPhoneFormModal/mod/5d105333-81ab4e70.modern.js
8.254.252.216200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Office.Support/RegistrationWidgetApp/modal.ForgotModal/modal.office.OfficeAddPhoneFormModal/mod/5d105333-81ab4e70.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (12773), with no line terminators
Hash e7291418e49501540167890959aebaff
8bc52d525c7a38dc3d875bb51003832c2f1b49ae
0fc8a0ce62e2f99bf632b708a1eeb117acf9acdfc6214e48a1a5eab5d078cb2d
GET /_nuxt/desktop/default/Page.Office.Support/RegistrationWidgetApp/modal.ForgotModal/modal.office.OfficeAddPhoneFormModal/mod/5d105333-81ab4e70.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 3941
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-f65"
expires: Tue, 07 Feb 2023 07:48:51 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61661
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/f4276865.css
8.254.252.216200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/f4276865.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (17339), with no line terminators
Hash 2bec2f7dbeca98ae3b56871c8f00161e
586f05388288e2478e75c0c62826bb08c15d5ef4
dba5af378e7e841351c16d5fcf5c99189931ba54ce3fbf3d050d424d5a547f1a
GET /_nuxt/desktop/default/css/f4276865.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 2747
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-abb"
expires: Tue, 07 Feb 2023 12:28:41 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44881
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-6c3ed2d8.modern.js
8.254.252.216200 OK 15 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-6c3ed2d8.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash de3c0e317fc2a9ef002fdde433daacdf
252f9cacc357a4d76e2e10dafbfdf678423669b4
f4219af103978f500d76df113b32eae1bb4fc8519693175056cafb8be38e80b9
GET /_nuxt/desktop/default/RegistrationWidgetApp-6c3ed2d8.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 15397
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-3c25"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61665
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/2e30a051.css
8.254.252.216200 OK 2.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/2e30a051.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (20144), with no line terminators
Hash 19aaf1573d6c7797fbaede0d1ff943c5
edb64c34062b339d87700358f92760cdda43f04b
45b70109f49f4393918bb19c25754839d54d30ff2306c016e4d46218225e15cc
GET /_nuxt/desktop/default/css/2e30a051.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 2079
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-81f"
expires: Tue, 07 Feb 2023 12:30:19 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44841
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-f647f604.modern.js
8.254.252.216200 OK 24 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-f647f604.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (65472)
Hash d698db0fcf292e74f21d8a0496197416
d2031c89503bff075c08b9e787e28f6b6ccec6bf
5871775470565042628fbae005ebe4d9789068f9afd5812c4ed31d72f1936ffc
GET /_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-f647f604.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 23579
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-5c1b"
expires: Tue, 07 Feb 2023 07:48:47 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61669
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-54e3d24e.modern.js
8.254.252.216200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-54e3d24e.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (3603), with no line terminators
Hash c710faabf0ad4ff9b2a47857fca468df
36544ed46a4c18f396c8788a462440612ee94921
f41ec290122c34b9feb8c8aa11a0f738c590e5d07e94aa10e23cdf37936d1733
GET /_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-54e3d24e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 1084
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-43c"
expires: Tue, 07 Feb 2023 07:49:15 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61643
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/d1dbab34.css
8.254.252.216200 OK 5.3 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/d1dbab34.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (36378), with no line terminators
Hash 19f8f82a095c23e19517a1bebea65920
03ea00763d690c272e8e6c37ed38d534cc43dd3b
656c4d516cb603e6320cf080a5257742f8c8724c82c3b13992558f0107d4f152
GET /_nuxt/desktop/default/css/d1dbab34.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 5316
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-14c4"
expires: Tue, 07 Feb 2023 12:28:41 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44882
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-32f03b2d.modern.js
8.254.252.216200 OK 25 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-32f03b2d.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 1ec66062369b87e2c5a1163594b6e297
e2e563d0714cdd005f8c9cdc157f0772c945e4fe
77921279300c0cdcb539f92273b9a09e1d40cf90f74f5ec95a0af07a79654dec
GET /_nuxt/desktop/default/betting.coupon2-32f03b2d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 24716
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-608c"
expires: Tue, 07 Feb 2023 07:48:48 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61665
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-4bb6986a.modern.js
8.254.252.216200 OK 358 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-4bb6986a.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (399), with no line terminators
Hash 2694aa3941ae7b8772f56cbe22e79067
b333bc8d013f92824ea3fb4711e8be19a76ee470
4d9d11d7cce3425a44b3431b6b4b8b0df40b26532d77d934c58cede9b74b53bd
GET /_nuxt/desktop/default/DownloadAppWidgetAnalytics-4bb6986a.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 358
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-166"
expires: Tue, 07 Feb 2023 07:49:16 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61661
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 12:24:15 GMT
expires: Thu, 01 Feb 2024 12:24:15 GMT
cache-control: public, max-age=31536000
age: 477137
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/2a409fe7.css
8.254.252.216200 OK 1.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/2a409fe7.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (5354), with no line terminators
Hash 0ecfa7daa878c4e287bf5f411054a6a7
c129ca35388227d20f09d7c8c200bc65853cb389
153cba665536e646e37f925f8345ec935c1fe1c02838bd058977cb794b34df07
GET /_nuxt/desktop/default/css/2a409fe7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: text/css
content-length: 1035
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-40b"
expires: Tue, 07 Feb 2023 12:29:21 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44868
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-40e1cfde.modern.js
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-40e1cfde.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (42078), with no line terminators
Hash 69f6113027f0fd9756b724ece57c3c0c
ce7610feb09ead0845259e8b9dec8af7b0d59a15
a9d46de9f8d2cdee5af6b0404ef1a72d21b145ac33fc353bd44c8a2d086cdb1b
GET /_nuxt/desktop/default/betting.HomeSliderComponent-40e1cfde.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 11711
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-2dbf"
expires: Tue, 07 Feb 2023 07:50:02 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61591
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-6ba39157.modern.js
8.254.252.216200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-6ba39157.modern.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (2450), with no line terminators
Hash 58030eabeba7ffaee3f3e3e07e0673e1
93572e0749eb8ff680d62d8dbaf0774bf3bc0963
dc004167b880991d21235113ca8e8d84f10a72b795dd543778d9e15044509bdb
GET /_nuxt/desktop/default/ioc.dependencies.32-6ba39157.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 1079
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-437"
expires: Tue, 07 Feb 2023 07:48:48 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61665
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/domain-api/api/v1/domains/1xlite-277345.top
178.253.15.12200 OK 84 B URL HTTP/2 1xlite-277345.top/domain-api/api/v1/domains/1xlite-277345.top
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d04a6797f03d7f5bd2988b15ab7ebb24
18bd0fe1fe44e78db59d4f853969762a61065704
53b2acde0c844bb480636038b55685ab9848987ec6bf719a0eacb5eff43a6849
GET /domain-api/api/v1/domains/1xlite-277345.top HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/vnd.api+json
content-length: 84
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
178.253.15.12200 OK 2.2 kB URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7245), with no line terminators
Hash bfabac97c700d0bb35c71f891b36f8fb
e9deecdc2e632f760d5978d21c7fe76b6503e923
75371231a21f510ca47df8faf5f121e18b132daf9e78b698c269a7bdac54d35d
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 2219
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
178.253.15.12200 OK 248 B URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 94dcb410fc90886b240ac3d38549de3e
6764b6f82f43e8ba76fdf21e4a7bd0bc32a14b21
dd469f6563439725d7310a6675589d43aa8e570d772d6ce47f90b89068f9c873
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 248
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
178.253.15.12200 OK 9.0 kB URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (43976), with no line terminators
Hash 20c332c77c621c8f3a5537fbaf771174
5762d05cb5046ebddd58eec610c4cff53a93124d
dba76e644b39ddfc0303c98cb4082841e560a18a54947fd23c6ecdaa03df8919
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 8964
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/user/secure
178.253.15.12200 OK 58 B URL HTTP/2 1xlite-277345.top/web-api/user/secure
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with no line terminators
Hash cd630b2d802ac429f2469ad3ed731213
06d338de0caea47a20f290bd206d9394dca336de
52edc1b451020539745a3bb47aa2c91cc33ccaa84f94a13690ccc0eafb9c5732
POST /web-api/user/secure HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 58
server-timing: dt_285;dur=70
set-cookie: is_rtl=1; expires=Wed, 07-Feb-2024 00:56:33 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Tue, 14-Feb-2023 00:56:33 GMT; Max-Age=604800; path=/
v3fr=1; expires=Fri, 10-Feb-2023 00:56:33 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
_glhf=1675749169; expires=Tue, 07-Feb-2023 01:56:33 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=3&mode=4&country=137&virtualSports=true
178.253.15.12200 OK 9.5 kB URL HTTP/2 1xlite-277345.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=3&mode=4&country=137&virtualSports=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (46243), with no line terminators
Hash 509d8e88490d2d79eb027f339fc504a2
581922f927547468e50ad1da1e31ccc8321ecea5
f5647c692f97a1edd0b207a721db1398581c36ffd5c9a91595ef11d7a82e79f3
GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=3&mode=4&country=137&virtualSports=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 9538
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-dbc4cdbe.modern.js
8.254.252.216200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-dbc4cdbe.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (13485), with no line terminators
Hash 7f06e639dd356a59266d9c9f189ba386
0d6c16ba6360996937d586b90845213cb8bfc025
8a428f94da4415c5199b54e1630690845fb0f14bcb86e1196a0fbd5a946088d9
GET /_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-dbc4cdbe.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 5404
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f19-151c"
expires: Tue, 07 Feb 2023 07:48:45 GMT
last-modified: Fri, 03 Feb 2023 15:58:17 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61677
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/common-2000139.svg
178.253.15.12200 OK 70 kB URL HTTP/2 1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/common-2000139.svg
IP 178.253.15.12:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 69fa83baeef62c488dc168fca60bbc41
a37a2618b75dfdd90f7c307bad5a3e34dca46624
d4798e61f9ae9bfd4ede4e0c3ee765ec00d793baedccc11f283b43335610cd5e
GET /_nuxt/Desktop/Default/svg-sprites/common-2000139.svg HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:31 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
etag: W/"63dd2f1a-1b712"
expires: Wed, 08 Feb 2023 00:34:23 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/checker/redirect/stat/run/
178.253.15.12200 OK 49 B URL HTTP/2 1xlite-277345.top/checker/redirect/stat/run/
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b7a9075de81cdb1a9fa74fa71b5126dd
9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-db602da7.modern.js
8.254.252.216200 OK 5.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-db602da7.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (16094)
Hash 6de976c25e1165ee9c376ab3fb1ba8ec
9c6782024ac67852ce9dd836fa2fb7408ddabc7b
d861eedde45d7a41ac2fbbbb3f2a0f44d67106916f51baae000baa5d4799393b
GET /_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-db602da7.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 5563
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-15bb"
expires: Tue, 07 Feb 2023 07:48:56 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61661
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/467c56a0.css
8.254.252.216200 OK 1.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/467c56a0.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (4348), with no line terminators
Hash 191773ad83cdecff8ef63f8882be0249
f54114b5a4d5fbf3fb5a2c3da6228dadf83e05f1
37dec51bbe743831cb49956abe86dc5ea6b307543fa4e32fdd049d46d14fc3cf
GET /_nuxt/desktop/default/css/467c56a0.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: text/css
content-length: 1011
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-3f3"
expires: Tue, 07 Feb 2023 12:28:38 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44875
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-23451539.modern.js
8.254.252.216200 OK 3.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-23451539.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (8933), with no line terminators
Hash 4d4cc3cb29ba03a43134de85add338b0
1c00357d21aef00351d1b9a7fe6a656d1750eba8
6a9b3d146c6e82de22b9eed9eb0c654baf9514236017a670fb3fefd88ae0aa96
GET /_nuxt/desktop/default/DownloadAppWidget-23451539.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 3248
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-cb0"
expires: Tue, 07 Feb 2023 07:49:30 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61661
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.js
8.254.252.216200 OK 4.6 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.js
IP 8.254.252.216:0
File type Unicode text, UTF-8 text, with very long lines (21746), with no line terminators
Hash 8279b1f64bf54a007c742357ef6cd95c
e58b18c19bf034cd7675d55306514140fb8c0354
9ff2365e6f45ddddbdac4951d229681ac5682327b8ac516767d89f7c56e57c0d
GET /genfiles/cms/betstemplates/bets_model_full_en_0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: text/javascript
content-length: 4554
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"7231e7d64b96fb3be8cfbaf1f3543d90"
expires: Tue, 07 Feb 2023 03:11:48 GMT
last-modified: Tue, 31 Jan 2023 13:09:45 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 78294
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/api/v3/bonuses/first-deposit
178.253.15.12200 OK 7.1 kB URL HTTP/2 1xlite-277345.top/web-api/api/v3/bonuses/first-deposit
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (38320), with no line terminators
Hash 66075560ffde0a2df8174d005e01d073
f06513508c398a0d5c8ba52b82bca58b2b53fb92
b73d41dae830cdb1f39adc02c79a509af303685ae86978de22c4905bad02cdf9
GET /web-api/api/v3/bonuses/first-deposit HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=17, dt_285;dur=225
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/11705.png
8.254.252.216200 OK 4.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/11705.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 22ce10fe6133465192d543a860563c0d
ff469f1b8885e40954961895df26afd26c352739
2e9d31d30c6eccd37d1007b48eb2a87b3f4196f259ca30d71ed540b140abf57f
GET /sfiles/logo_teams/11705.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: image/png
content-length: 4083
cache-control: public, max-age=86400
etag: "22ce10fe6133465192d543a860563c0d"
expires: Tue, 07 Feb 2023 17:15:06 GMT
last-modified: Tue, 31 Jan 2023 11:06:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 27698
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7ddf578d897052a4e84fbc21359654ef.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/7ddf578d897052a4e84fbc21359654ef.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 290e38637049e2b22ec6922102f772d4
f87b49664920bb4e19b0e2e6ae46509797261d1d
9fe8289180ce2d1d93f8585fa500c01a8561a681da2260e8bd4733dbc972becf
GET /sfiles/logo_teams/7ddf578d897052a4e84fbc21359654ef.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: image/png
content-length: 10710
cache-control: public, max-age=86400
etag: "290e38637049e2b22ec6922102f772d4"
expires: Tue, 07 Feb 2023 19:29:12 GMT
last-modified: Tue, 31 Jan 2023 11:06:36 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 19641
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
178.253.15.12200 OK 2.2 kB URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7245), with no line terminators
Hash bfabac97c700d0bb35c71f891b36f8fb
e9deecdc2e632f760d5978d21c7fe76b6503e923
75371231a21f510ca47df8faf5f121e18b132daf9e78b698c269a7bdac54d35d
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 2219
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
178.253.15.12200 OK 9.0 kB URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (43976), with no line terminators
Hash 20c332c77c621c8f3a5537fbaf771174
5762d05cb5046ebddd58eec610c4cff53a93124d
dba76e644b39ddfc0303c98cb4082841e560a18a54947fd23c6ecdaa03df8919
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 8964
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675731441340
178.253.15.12200 OK 145 B URL HTTP/2 1xlite-277345.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675731441340
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1675731441340 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:34 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
expires: Wed, 08 Feb 2023 00:56:34 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/api/internal/v1/proof_of_age
178.253.15.12204 No Content 0 B URL HTTP/2 1xlite-277345.top/web-api/api/internal/v1/proof_of_age
IP 178.253.15.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web-api/api/internal/v1/proof_of_age HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 07 Feb 2023 00:56:34 GMT
cache-control: no-cache, private
server-timing: p;dur=36, dt_285;dur=42
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&mode=4&country=137&virtualSports=true
178.253.15.12200 OK 9.5 kB URL HTTP/2 1xlite-277345.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&mode=4&country=137&virtualSports=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (46243), with no line terminators
Hash 7d65c9a257287ef66c4f4434dbc6d4c5
5de4144360dfe8a975b40e18cce202af75262206
79039fc50056dcf03cbfe7b05bd20b754d1c31020c6e81e0f09d05b453b1f182
GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=en&mode=4&country=137&virtualSports=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:34 GMT
content-type: application/json; charset=utf-8
content-length: 9540
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
216.239.36.178200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.239.36.178:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 06 Feb 2023 23:45:20 GMT
expires: Tue, 07 Feb 2023 01:45:20 GMT
cache-control: public, max-age=7200
age: 4274
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5576.png
8.254.252.216200 OK 3.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/5576.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 7fc1ef938b7580911398f785952227d4
e1ac878a1f0e655023f4f2fd31bafa9c9681e047
06845437bf108b89785f9b7ecc99aca72d3e420c599a11055c1255963b96a612
GET /sfiles/logo_teams/5576.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 3411
cache-control: public, max-age=86400
etag: "7fc1ef938b7580911398f785952227d4"
expires: Tue, 07 Feb 2023 22:54:08 GMT
last-modified: Wed, 01 Feb 2023 08:35:39 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 32392
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5592.png
8.254.252.216200 OK 8.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/5592.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e344eda5d83fe6c862df8fd5785dc1b3
d7829aa14b0c56b12c59dc8ecc82ab35a1079833
48e995db321b8779323af399a2c86bc35fe0596471637dc737b24444d574fbd4
GET /sfiles/logo_teams/5592.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 8100
cache-control: public, max-age=86400
etag: "e344eda5d83fe6c862df8fd5785dc1b3"
expires: Tue, 07 Feb 2023 13:13:52 GMT
last-modified: Wed, 01 Feb 2023 08:34:20 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 57071
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a56df09a4317f10aac214f09799e5c91.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/a56df09a4317f10aac214f09799e5c91.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 75b58eb0fe20f43e01caf97289f3cb67
03a2e2e218ccefaebd9d1a339940d3407f156e1c
46de7a01ca5260df02109779738589808cd6e5f6de2b15c4a8161231d5a96efc
GET /sfiles/logo_teams/a56df09a4317f10aac214f09799e5c91.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 12133
cache-control: public, max-age=86400
etag: "75b58eb0fe20f43e01caf97289f3cb67"
expires: Tue, 07 Feb 2023 10:31:09 GMT
last-modified: Tue, 17 Jan 2023 13:06:35 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 51926
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7c6fc1c84937b3a51fc97477b4d3eeaf.png
8.254.252.216200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/7c6fc1c84937b3a51fc97477b4d3eeaf.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d8af1cb38104488734ac2ed92f427130
13f305e7c0d6267bbdc76e306625fd64608b70df
70e4740cfb49a3f779430773634cfb9b0e5c8cef400341680160941e2f331a39
GET /sfiles/logo_teams/7c6fc1c84937b3a51fc97477b4d3eeaf.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 13418
cache-control: public, max-age=86400
etag: "d8af1cb38104488734ac2ed92f427130"
expires: Wed, 08 Feb 2023 00:40:29 GMT
last-modified: Tue, 17 Jan 2023 13:27:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 51925
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8c11d56b6586cfc5203aeb371acac217.png
8.254.252.216200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8c11d56b6586cfc5203aeb371acac217.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c11d56b6586cfc5203aeb371acac217
4e80236587f4371dd545b0c7f43f5276fda92a75
6b84d0bf14cd3ae46cbcd16c513a3111c7f1e954700431958bf959c25f046aef
GET /sfiles/logo_teams/8c11d56b6586cfc5203aeb371acac217.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 10445
cache-control: public, max-age=86400
etag: "8c11d56b6586cfc5203aeb371acac217"
expires: Tue, 07 Feb 2023 12:59:45 GMT
last-modified: Wed, 01 Feb 2023 14:06:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 43010
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5212.png
8.254.252.216200 OK 9.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/5212.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 24fedda574a6cd4dde6a38795fcf3dab
da0d9c6674ad15edbe226ff3392af27a1d8eca33
998285d6d687f03bf49cb5ee3e259a8d6499c926e6645fe4d653da33e3076a7f
GET /sfiles/logo_teams/5212.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 9361
cache-control: public, max-age=86400
etag: "24fedda574a6cd4dde6a38795fcf3dab"
expires: Tue, 07 Feb 2023 13:16:13 GMT
last-modified: Tue, 31 Jan 2023 11:06:35 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 54816
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/57179.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/57179.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9a743ac7e25db309c09b178d039c07
8bc13522d0af626ff6a758e1c0b38e12a30a985f
36074eab984bb0bab26cc5a802b8f7ee1a991b6eeddb3140407c9f3fbd85068c
GET /sfiles/logo_teams/57179.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 12285
cache-control: public, max-age=86400
etag: "ad9a743ac7e25db309c09b178d039c07"
expires: Tue, 07 Feb 2023 15:24:48 GMT
last-modified: Thu, 19 Jan 2023 14:17:57 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 35252
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a08eb98238a32286b3d3dee330d56980.png
8.254.252.216200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/a08eb98238a32286b3d3dee330d56980.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash bf669ec4d323b8a09cf25ec050f7852c
5594970ccdf725925de6e2d95002e88b56bc58b7
86e2eecabddf70746b75e908e53b771c0aeaf445751e8b7a61e46dd7a930aa80
GET /sfiles/logo_teams/a08eb98238a32286b3d3dee330d56980.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 18612
etag: "bf669ec4d323b8a09cf25ec050f7852c"
last-modified: Fri, 05 Nov 2021 09:22:47 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4298251
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6f4306b44d3095d9547fd4a7709ef70c.png
8.254.252.216200 OK 18 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6f4306b44d3095d9547fd4a7709ef70c.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d984fe4a23856f1b79d4d54239f4003
d9c6abfc4a47502364f36f3c7f5fc3678551eb84
69887f8eb21fc00f4bf7a64acefef7a56d365ba98b86f11d7b7248234d2e0e29
GET /sfiles/logo_teams/6f4306b44d3095d9547fd4a7709ef70c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 17491
etag: "9d984fe4a23856f1b79d4d54239f4003"
last-modified: Fri, 29 Oct 2021 13:54:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4412596
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ae5d7df3da15095e1b1985c4de445e7a.png
8.254.252.216200 OK 42 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/ae5d7df3da15095e1b1985c4de445e7a.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash b6e0fd0785bde891031703d0d83c4242
8ad2982832c754ba1d625bef9b478abf99eaec42
1f7f8baeba3e84dd90d36fcb0618e11faf96ebee38b4b896307d95869939d701
GET /sfiles/logo_teams/ae5d7df3da15095e1b1985c4de445e7a.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 41618
etag: "b6e0fd0785bde891031703d0d83c4242"
last-modified: Wed, 07 Oct 2020 00:36:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4412596
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a2c93cbfa58a35e5cbeeaa78cdd5526a.png
8.254.252.216200 OK 6.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/a2c93cbfa58a35e5cbeeaa78cdd5526a.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 808cf7c6f4ece8678172a269cd9f644b
74b0606ef2dde23b38f436fc81a242c814a6f4f4
2b1299cd8a86b388f7673861016aada99db3e45bd0c8fce62cb7988ea41304d3
GET /sfiles/logo_teams/a2c93cbfa58a35e5cbeeaa78cdd5526a.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 6389
etag: "808cf7c6f4ece8678172a269cd9f644b"
last-modified: Tue, 29 Nov 2022 11:59:50 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4439420
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7676.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/7676.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9cf2dada9b42b9278d95f10a3a00b821
cff27c7ae5d8c59c51ac95294f5fc0f56a6db92e
465749728f7ed7299949faa0d968dfd06d94ff42723a3653e6efa75e83616696
GET /sfiles/logo_teams/7676.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 11277
etag: "9cf2dada9b42b9278d95f10a3a00b821"
last-modified: Tue, 13 Aug 2019 15:11:17 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4439419
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/592cc3ca06aab68165a7a78fa0a6386d.png
8.254.252.216200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/592cc3ca06aab68165a7a78fa0a6386d.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d0f8e9678140f22dcef5a308152a73c7
2465d7d0729bf304aa4cd3b1e213ecba24b49c48
d6aa933197fffa75f1d6ec982e7b91458a922806aeecd40c673c3aedf1717c4d
GET /sfiles/logo_teams/592cc3ca06aab68165a7a78fa0a6386d.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 18564
cache-control: public, max-age=86400
etag: "d0f8e9678140f22dcef5a308152a73c7"
expires: Tue, 07 Feb 2023 18:36:12 GMT
last-modified: Thu, 19 Jan 2023 10:43:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 33034
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/67a121219b6a675043c4f38ad9aa0e34.png
8.254.252.216200 OK 8.8 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/67a121219b6a675043c4f38ad9aa0e34.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 67a121219b6a675043c4f38ad9aa0e34
b5f0227b5d367bb44c087a440c6df10cc0154cef
38b8b7127ea6bbf92d1d84372194d3abe7f04ca4e1b2428de3520251369c9815
GET /sfiles/logo_teams/67a121219b6a675043c4f38ad9aa0e34.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 8836
cache-control: public, max-age=86400
etag: "67a121219b6a675043c4f38ad9aa0e34"
expires: Tue, 07 Feb 2023 18:36:12 GMT
last-modified: Thu, 19 Jan 2023 12:19:42 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 33034
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/59061.png
8.254.252.216200 OK 3.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/59061.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash da44b47d65149c4c910ea53855df2287
3f4bb6c20d6414ccb725ba00bf6e0151e7d3f965
6d814ff862e4ea3289fbb55016a057e2ecab4252362792988d1990a27fb789f0
GET /sfiles/logo_teams/59061.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 2996
cache-control: public, max-age=86400
etag: "da44b47d65149c4c910ea53855df2287"
expires: Tue, 07 Feb 2023 23:16:33 GMT
last-modified: Wed, 01 Feb 2023 10:42:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 59904
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2468299cca798e866638d59adf79ca2c.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2468299cca798e866638d59adf79ca2c.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2468299cca798e866638d59adf79ca2c
e202e5c03cc135c8cc7bc156bd1325f67fc39c91
c09fc522e3682e32fb28d518e1fb028c84d6dddd598539fd376ea01eccd595f0
GET /sfiles/logo_teams/2468299cca798e866638d59adf79ca2c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 12424
cache-control: public, max-age=86400
etag: "2468299cca798e866638d59adf79ca2c"
expires: Tue, 07 Feb 2023 23:16:33 GMT
last-modified: Sat, 28 Jan 2023 09:16:54 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 11892
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1151155.png
8.254.252.216200 OK 24 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/1151155.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 79bd82b413037e4c738c1ffa9513b3ce
651d4d77ca1cd0a3671fd2631f509532a77914ee
c06195b06428550e002a90a9f186d2852fa492810db631f5cad226ba0ecee2fa
GET /sfiles/logo_teams/1151155.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 23830
cache-control: public, max-age=86400
etag: "79bd82b413037e4c738c1ffa9513b3ce"
expires: Tue, 07 Feb 2023 22:22:34 GMT
last-modified: Tue, 17 Jan 2023 09:05:10 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41732
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/337069.png
8.254.252.216200 OK 20 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/337069.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash f91597a1e7e5e3fcea2a82238e21e820
d1e9a4b4e538428d2c0b4c99b2816a49677d6fe3
ed7a9befe888949266fdd2905d4cbb256333a6623075ddd618a78d9b937b494e
GET /sfiles/logo_teams/337069.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 19579
cache-control: public, max-age=86400
etag: "f91597a1e7e5e3fcea2a82238e21e820"
expires: Wed, 08 Feb 2023 00:19:32 GMT
last-modified: Tue, 17 Jan 2023 10:49:17 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 2224
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/0081a6897f3b3dfbf0d172c9b81282de.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/0081a6897f3b3dfbf0d172c9b81282de.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 79028a96b75435c42a6daf3594f6c20a
95f5b2cfeb5dcfeddc6fc7b7347ec5fccaa6c358
f6c21622249d55e62a5f12a8a291ae93e56cadcd47b2803f8e822b81ced2a97a
GET /sfiles/logo_teams/0081a6897f3b3dfbf0d172c9b81282de.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 13958
cache-control: public, max-age=86400
etag: "79028a96b75435c42a6daf3594f6c20a"
expires: Tue, 07 Feb 2023 22:22:34 GMT
last-modified: Tue, 17 Jan 2023 13:22:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10227
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/b2c0deff4da2f73cb03db1c9e6bf784a.png
8.254.252.216200 OK 18 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/b2c0deff4da2f73cb03db1c9e6bf784a.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 38a595bf783ab9689e326734fa71b7be
bde18d07d3167770791a5fac61648aa278f0a484
20e9a34e1988639a09fd05839633c5bc5d487d135fa48bc5bbaa2f1c8518f399
GET /sfiles/logo_teams/b2c0deff4da2f73cb03db1c9e6bf784a.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 17831
cache-control: public, max-age=86400
etag: "38a595bf783ab9689e326734fa71b7be"
expires: Tue, 07 Feb 2023 22:22:33 GMT
last-modified: Tue, 17 Jan 2023 09:46:15 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 11728
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f18a442f9febfa37ec5ba4958bec95ae.png
8.254.252.216200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f18a442f9febfa37ec5ba4958bec95ae.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash fdfcd0d67651154cec5fff833ea5ffb9
619857efe07186dd99f02809e22c635326ee1290
0ccb71b2cfca343b3916003db2731cb5fff6b4bd1e657ff03e4b859e7679eba8
GET /sfiles/logo_teams/f18a442f9febfa37ec5ba4958bec95ae.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 15543
cache-control: public, max-age=86400
etag: "fdfcd0d67651154cec5fff833ea5ffb9"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 13:11:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4809
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/71af58e4c0966258928627189eb9e532.png
8.254.252.216200 OK 17 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/71af58e4c0966258928627189eb9e532.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 9629de8741a68917b0c09139e26bd9c5
48614caead250d586671124d46ce94b1a5b36644
176899e4ee45f158f422b4d4943276ebbc5c906d65c021c04b0775ef49333df2
GET /sfiles/logo_teams/71af58e4c0966258928627189eb9e532.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 17279
cache-control: public, max-age=86400
etag: "9629de8741a68917b0c09139e26bd9c5"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 14:01:22 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4809
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/9af23e42915f10afd2be47b9ca3db017.png
8.254.252.216200 OK 8.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo-champ/9af23e42915f10afd2be47b9ca3db017.png
IP 8.254.252.216:0
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 9af23e42915f10afd2be47b9ca3db017
56afc9db0c826e232b365aa21c60e70412673704
0332637f5419c56213f0bdebd54c2340a90f3c0f47bda8c5ddf742b7b4a5396d
GET /sfiles/logo-champ/9af23e42915f10afd2be47b9ca3db017.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 8279
etag: "9af23e42915f10afd2be47b9ca3db017"
last-modified: Wed, 18 Dec 2019 11:39:02 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4446479
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8302.png
8.254.252.216200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8302.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c412e4a3472b3b4ff141cbb5a4d4e00d
6f30fa997f13a7c530731dceb713fa694691a571
b11f77e3bce7a0f11d9912713e5e47acaa40d7b736990418c0627bbd5913e49f
GET /sfiles/logo_teams/8302.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 10239
etag: "c412e4a3472b3b4ff141cbb5a4d4e00d"
last-modified: Tue, 13 Aug 2019 15:11:55 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4446477
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/defaultlogo.png
8.254.252.216200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/defaultlogo.png
IP 8.254.252.216:0
File type PNG image data, 55 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 72c91e676105dc1628e8a636554bfcfd
c0162ae779e4000be14b99e96981ff309a41b0ee
d10053f91feb4cd1a54f46fdcb8eb5193e4396a09e6341458edcf2f38ada718b
GET /sfiles/logo_teams/defaultlogo.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 2713
etag: "72c91e676105dc1628e8a636554bfcfd"
last-modified: Tue, 13 Aug 2019 15:13:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 6075076
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/69930ce70f9479fec50c5985a4c35094.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/69930ce70f9479fec50c5985a4c35094.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 8346dbf6debf16997a1772456c326c25
9da8c1ffc2e8d4218b281450ea8f9dddef28943e
6e0ea4a467d0e81ad558e0a7554374a18fedfb0d47eb0cb0265f4fde84298d5f
GET /sfiles/logo_teams/69930ce70f9479fec50c5985a4c35094.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 13879
cache-control: public, max-age=86400
etag: "8346dbf6debf16997a1772456c326c25"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 13:19:05 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10083
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4e35aa2bdd0dd4c81b8839c1580b68d6.png
8.254.252.216200 OK 5.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/4e35aa2bdd0dd4c81b8839c1580b68d6.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 6dd561cf219a0f0990ef94dea4354289
d006a3330e87e2c941338bfa873961cffeee6bbf
f445e1b3b4dd6bbb4b1e9f9a80b8d7a94cb09cc279dfab4f8509780457e8ffb3
GET /sfiles/logo_teams/4e35aa2bdd0dd4c81b8839c1580b68d6.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 5629
etag: "6dd561cf219a0f0990ef94dea4354289"
last-modified: Thu, 27 Aug 2020 19:43:02 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4446478
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/c9239c2147a7baa27994be3088ce87f7.png
8.254.252.216200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/c9239c2147a7baa27994be3088ce87f7.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 48ae086835223f94e37d0c5aa2689539
854916d9ba1f5f09f0329901e60476548cd6b163
c3ac5b7eaad585463afcef6c710ada0def3d9138f468779cf21c03b7e1d9b5bd
GET /sfiles/logo_teams/c9239c2147a7baa27994be3088ce87f7.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 15879
cache-control: public, max-age=86400
etag: "48ae086835223f94e37d0c5aa2689539"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 10:20:03 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1375
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f2d3364f28d132f86bc374a8d22470d9.png
8.254.252.216200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f2d3364f28d132f86bc374a8d22470d9.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 30ac956e64ade86a0f4c5f4cc239a066
6e93b2fa5f0b64007f17b51e93f6fbf9bd9254a7
c521a8e4a662dfbe6a8b7cebf7e4eef49a9713a927a54c2f279445c97619ed07
GET /sfiles/logo_teams/f2d3364f28d132f86bc374a8d22470d9.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 16424
cache-control: public, max-age=86400
etag: "30ac956e64ade86a0f4c5f4cc239a066"
expires: Tue, 07 Feb 2023 22:22:34 GMT
last-modified: Tue, 17 Jan 2023 08:52:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10221
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a6eebe56291694b98dbeb74d183d595e.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/a6eebe56291694b98dbeb74d183d595e.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 75db5c5328fb31d95d25404242dd52d7
624c9ec0884f42107bab70ba03f0d90dc287401d
676c7bc88eaf49bf76200b2e99b03d12d548bdf9d06e0a5409501d569e0914e5
GET /sfiles/logo_teams/a6eebe56291694b98dbeb74d183d595e.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 11004
cache-control: public, max-age=86400
etag: "75db5c5328fb31d95d25404242dd52d7"
expires: Tue, 07 Feb 2023 20:16:22 GMT
last-modified: Tue, 17 Jan 2023 13:41:59 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 16813
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8ec91f37172897464853e34202c35dcc.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8ec91f37172897464853e34202c35dcc.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f87bd29e65aeae29523fe7c0958ccc7
6de9fd09956fe382869e63ae7cfc9b4fe6153c1b
918402fb96a099a19ab35dd0a7e60cc1c7cd0955509a44714b8e01c7969997f6
GET /sfiles/logo_teams/8ec91f37172897464853e34202c35dcc.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 13913
cache-control: public, max-age=86400
etag: "1f87bd29e65aeae29523fe7c0958ccc7"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 13:22:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 19687
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/cde4a894e766bb356eb97f4e4fe88134.png
8.254.252.216200 OK 15 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/cde4a894e766bb356eb97f4e4fe88134.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e936379ac7c29c86589f37c09be6e75
bab3128631b9a5f46ccc1dbff7477083ee1455d2
549efb2a98bb172d76c656a27afcebfa8819898f187c5248b86a5b1ebfd5252f
GET /sfiles/logo_teams/cde4a894e766bb356eb97f4e4fe88134.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 14751
cache-control: public, max-age=86400
etag: "3e936379ac7c29c86589f37c09be6e75"
expires: Wed, 08 Feb 2023 00:39:07 GMT
last-modified: Tue, 17 Jan 2023 13:20:17 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 55243
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/462ffee4926f761314456da168cb800b.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/462ffee4926f761314456da168cb800b.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3127c12a17f8ac27cd2a889322abeeb0
ae80bafe3faab1da1b38bbb7a2bab151ef6e588f
607b98e1ba4c64ceb85c1d5acd2611983838b4f808d582f593ce566a7a9dbc89
GET /sfiles/logo_teams/462ffee4926f761314456da168cb800b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 13557
cache-control: public, max-age=86400
etag: "3127c12a17f8ac27cd2a889322abeeb0"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Thu, 19 Jan 2023 07:21:11 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10083
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/88779e9a13ae16630c9cc5de70c4b761.png
8.254.252.216200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/88779e9a13ae16630c9cc5de70c4b761.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9edf1f958d18972dc5d44e4b379f4afe
f01f2e5810856f5c806516a854d2f996584752f3
dbe28ef6d6f60638abc75866abd5fb1191d741cd4af19b5933166827940d4709
GET /sfiles/logo_teams/88779e9a13ae16630c9cc5de70c4b761.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 16139
cache-control: public, max-age=86400
etag: "9edf1f958d18972dc5d44e4b379f4afe"
expires: Tue, 07 Feb 2023 13:30:55 GMT
last-modified: Tue, 17 Jan 2023 09:33:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 46894
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/80840b5dac7770d9f553a013503ba560.png
8.254.252.216200 OK 20 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/80840b5dac7770d9f553a013503ba560.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4eb660558e9f91f5986e7a78fedfaaf0
05f989e4d6a74192145865fe17183ae9c03d6c76
57cbc89e31d156eb1fb666c365612ae5295a5f86688b2c71ea6352dcfb9feea2
GET /sfiles/logo_teams/80840b5dac7770d9f553a013503ba560.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 20383
cache-control: public, max-age=86400
etag: "4eb660558e9f91f5986e7a78fedfaaf0"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 08:06:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10083
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5a7b55eb25929270d5fb82c92114907c.png
8.254.252.216200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/5a7b55eb25929270d5fb82c92114907c.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cb299cae70d8d802a478cb3736f012dc
497c4f2e310bc8c26d56d4cc19bde129f876eee9
9a9ec90dece34298cbfcfc6fc23f47e4ac4966d2a3f9835473f1aa36f75bccff
GET /sfiles/logo_teams/5a7b55eb25929270d5fb82c92114907c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: image/png
content-length: 13190
cache-control: public, max-age=86400
etag: "cb299cae70d8d802a478cb3736f012dc"
expires: Wed, 08 Feb 2023 00:33:40 GMT
last-modified: Tue, 17 Jan 2023 12:05:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10083
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 02f6b3a8540155d3c352d75c2712d53d
ae429097daa790014cba1b00e3bee3ebd2952f03
06d4cf5240376e8b435c1f790a19aa7ff45136ffbe9870f6ac039868a7f7cd86
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2092
Cache-Control: max-age=124366
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:35 GMT
Etag: "63e0dc65-116"
Expires: Wed, 08 Feb 2023 11:29:21 GMT
Last-Modified: Mon, 06 Feb 2023 10:54:29 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 02f6b3a8540155d3c352d75c2712d53d
ae429097daa790014cba1b00e3bee3ebd2952f03
06d4cf5240376e8b435c1f790a19aa7ff45136ffbe9870f6ac039868a7f7cd86
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2092
Cache-Control: max-age=124366
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 00:56:35 GMT
Etag: "63e0dc65-116"
Expires: Wed, 08 Feb 2023 11:29:21 GMT
Last-Modified: Mon, 06 Feb 2023 10:54:29 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
1xlite-277345.top/service-api/LiveFeed/Get1x2_VZip?sports=1,2,3,4,6,8,10,40,66,85&champs=11113,12821,13589,28787,67559,88637,96463,110163,118663,127733&count=10&lng=en&mode=4&country=137&getEmpty=true&isRecommendations=true
178.253.15.12200 OK 3.9 kB URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/Get1x2_VZip?sports=1,2,3,4,6,8,10,40,66,85&champs=11113,12821,13589,28787,67559,88637,96463,110163,118663,127733&count=10&lng=en&mode=4&country=137&getEmpty=true&isRecommendations=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (20941), with no line terminators
Hash 5221d8377754b72fb91d28a2c969ea56
749ee15cb22bdd2f9788424fcd9e77c5895e7411
aca4d804d6345956f3f25b26fbd87a970a36b24a9576bcfa2c0d0ecd328cea17
GET /service-api/LiveFeed/Get1x2_VZip?sports=1,2,3,4,6,8,10,40,66,85&champs=11113,12821,13589,28787,67559,88637,96463,110163,118663,127733&count=10&lng=en&mode=4&country=137&getEmpty=true&isRecommendations=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: application/json; charset=utf-8
content-length: 3913
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/c22cfef9.css
8.254.252.216200 OK 415 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c22cfef9.css
IP 8.254.252.216:0
File type ASCII text, with very long lines (1183), with no line terminators
Hash 14512eada9d68e91a193ee784ed075f9
597dccfc2dacd4b67aa6a42f356f2715b511f181
4d798934d49140244e48867f0f900fa067c6217a96436b58f37093cfba2f15d3
GET /_nuxt/desktop/default/css/c22cfef9.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: text/css
content-length: 415
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-19f"
expires: Tue, 07 Feb 2023 12:29:13 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 44868
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-5847a47f.modern.js
8.254.252.216200 OK 667 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-5847a47f.modern.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (1341), with no line terminators
Hash 4b4a8018cefd154c8fb2a5c23cefddfa
f371c3168a5976660b0b101c3024a77f61bbb91d
efa661fc825e79af5ed15f0d2c5463280aa5a4ad56f7bfa6a9e32d263f4eaee0
GET /_nuxt/desktop/default/betting.SportsMenuCompact-5847a47f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 667
cache-control: max-age=86400
content-encoding: gzip
etag: "63dd2f1a-29b"
expires: Tue, 07 Feb 2023 07:49:10 GMT
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 61646
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
178.253.15.12200 OK 2.6 kB URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10248), with no line terminators
Hash 1f3b5f20e8033c4617679aebc0d2ba84
69cf8f7dbf2e0615c841709f8f9671963c1cf73e
def6534958a86ea3f473d86d1f4991b7fe3cdbabafec00411ed5cd29152c2d44
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: application/json; charset=utf-8
content-length: 2642
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&groupChamps=true
178.253.15.12200 OK 1.8 kB URL HTTP/2 1xlite-277345.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&groupChamps=true
IP 178.253.15.12:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5695), with no line terminators
Hash 8881df5246f2aca8a2b3812da145965d
a7c16d94f5d3881ba3cb3a30b02ccea216f31d14
fc1859097806a0f732f39b8ab9a378c7aa93db331cbff2d21649fc726bbdf51b
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:36 GMT
content-type: application/json; charset=utf-8
content-length: 1775
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f3d2073-c3ab-46e1-ba5b-8ee86228a330.jpeg
34.120.237.76200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f3d2073-c3ab-46e1-ba5b-8ee86228a330.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36cb274f24946af017753e90bde33287
e3c6e612459058bef9623b4a5080dbd693b5ce60
036a4f784f8b251bfd0f9eb2ad253637bbaaa5bb7ca9ee721298e531d09dbf3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f3d2073-c3ab-46e1-ba5b-8ee86228a330.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4070
x-amzn-requestid: 6722ea03-f2fa-4775-a362-aef820c99085
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzXPSEQXoAMFxow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de0594-36cd3a40489d553d62bb3ace;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:13:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ro_1ALz_mAFkRUFe38Txy96RX0CCdL67jmDtipQ3j_xz568Hqe_iCA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 17:57:24 GMT
age: 25153
etag: "e3c6e612459058bef9623b4a5080dbd693b5ce60"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
suphelper.com/widget/injector.js
104.16.43.72200 OK 46 kB URL HTTP/2 suphelper.com/widget/injector.js
IP 104.16.43.72:0
File type Unicode text, UTF-8 text, with very long lines (38365)
Hash 5847666bdd9f7855147c59a0e7a894d2
036fdb5ae57848c5a5a385cfbb2a03216e28963e
b829b4530203c0106f6d5f64adfc8fcfa7174e3bdcee0e110e49c1187ca1542a
GET /widget/injector.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:35 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-d49403fd-098b-41ec-b2fa-70a24447f25c' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=300
last-modified: Tue, 03 Jan 2023 09:24:23 GMT
etag: W/"28e6c-18576f23558"
vary: Accept-Encoding
cf-cache-status: HIT
age: 241
server: cloudflare
cf-ray: 79582aa68a070a40-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1xlite-277345.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
178.253.15.12200 OK 713 B URL HTTP/2 1xlite-277345.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with very long lines (1329), with no line terminators
Hash ea7165bdb50bc5a564e2e39fe15670df
938376262696ed97c79823e63bc0c6dd42987a6b
3c2fd82fd02d73717ae1af11b59d2090afbbad562929272024e21d00858cc7ee
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:37 GMT
content-type: application/json; charset=utf-8
content-length: 713
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94a975a866d575be68f687fd81a36f5b
16f334adff0205badeb468d248f925504137782a
d550618f7c7e902ca0f4f57f8da3199b22063f242e0fa07f10fe6631b35e026b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5584
x-amzn-requestid: 130aa2ee-b175-4658-9c82-8f49944207dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpdejHeaIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0f90-4f9c757a30af548878052b0d;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9URXL7tafn0kenWtzS1LRu2q0bgjM8ZC4NCS6L6MMPkvBqIHDOMugA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:15:10 GMT
age: 9688
etag: "16f334adff0205badeb468d248f925504137782a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3210&_p=1781850539&cid=140381024.1675731445&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675731445&sct=1&seg=0&dl=https%3A%2F%2F1xlite-277345.top%2Fen&dt=Online%20sports%20betting%20at%201xBet.%20%E1%90%89%201xlite-277345.top&en=page_view&_fv=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3210&_p=1781850539&cid=140381024.1675731445&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675731445&sct=1&seg=0&dl=https%3A%2F%2F1xlite-277345.top%2Fen&dt=Online%20sports%20betting%20at%201xBet.%20%E1%90%89%201xlite-277345.top&en=page_view&_fv=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je3210&_p=1781850539&cid=140381024.1675731445&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675731445&sct=1&seg=0&dl=https%3A%2F%2F1xlite-277345.top%2Fen&dt=Online%20sports%20betting%20at%201xBet.%20%E1%90%89%201xlite-277345.top&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-277345.top
date: Tue, 07 Feb 2023 00:56:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_en.js
8.254.252.216200 OK 538 B URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_en.js
IP 8.254.252.216:0
File type ASCII text, with very long lines (1178), with no line terminators
Hash 04f0ed5df614c4c4937ba3e7ed17d4af
e7b1b4ef1bc2dccb0da04b6d0bf86a7687e616c4
eb76423eaf8cfb9c2d81639498fac9679e5daae652f64ca7febb0276446b61cd
GET /genfiles/cms/betstemplates/bets_model_map_short_en.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: text/javascript
content-length: 538
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"45e0685767607caaef34312ef989c44c"
expires: Tue, 07 Feb 2023 03:19:18 GMT
last-modified: Tue, 31 Jan 2023 13:09:43 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 77846
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/82473.png
8.254.252.216200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/82473.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 95116f5db8b93b74f780646f46501472
f785f043add06be5644245afc943162a32065d8e
a652a8fe79bccba1dcc70b42c728d75e174149f673d2d4ac96de502dabae2ea3
GET /sfiles/logo_teams/82473.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/png
content-length: 13990
cache-control: public, max-age=86400
etag: "95116f5db8b93b74f780646f46501472"
expires: Tue, 07 Feb 2023 21:25:38 GMT
last-modified: Wed, 01 Feb 2023 12:58:08 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 12661
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ea59274f76a3f3091f39394afd7307f7.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/ea59274f76a3f3091f39394afd7307f7.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 198baed1163f31c2370974273f6af584
effeb582929edf3ad68b39ca6536492aeba7939a
e6b8eedb110de3fad6417865a4a5dcca04e1935d357e207c1a1441b25e9aef7f
GET /sfiles/logo_teams/ea59274f76a3f3091f39394afd7307f7.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/png
content-length: 12353
cache-control: public, max-age=86400
etag: "198baed1163f31c2370974273f6af584"
expires: Tue, 07 Feb 2023 21:25:38 GMT
last-modified: Fri, 27 Jan 2023 13:30:07 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 12661
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/eb6f3859611aa1e94a66cc69a90f1703.png
8.254.252.216200 OK 4.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/eb6f3859611aa1e94a66cc69a90f1703.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash bf480754c716e69885b966bfa630d720
97ec8200368ba518350be3373b79a2755be42866
c6e71b7c02b9331739f7c1faa7c7cf42bdf748fb0df7b9e83870ad52226154e3
GET /sfiles/logo_teams/eb6f3859611aa1e94a66cc69a90f1703.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/png
content-length: 4740
etag: "bf480754c716e69885b966bfa630d720"
last-modified: Wed, 22 Jun 2022 11:23:21 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4443393
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f83eae9fadb04eefa05d087668e3e076.png
8.254.252.216200 OK 21 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f83eae9fadb04eefa05d087668e3e076.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9a5f5f5ead204c8f55f9f38aa5e6f45c
d4ad6b47cccc50a95b8916825d48b042666bf72c
2b8a2db63b8cea1023e0fa6876f8fa8d3e1eb23a073d348057cc0d65011b7861
GET /sfiles/logo_teams/f83eae9fadb04eefa05d087668e3e076.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/png
content-length: 20869
etag: "9a5f5f5ead204c8f55f9f38aa5e6f45c"
last-modified: Wed, 22 Jun 2022 11:20:22 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4553170
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/9c932ff1f15dd919cb3ae102233019f2.png
8.254.252.216200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/9c932ff1f15dd919cb3ae102233019f2.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8003079646de1f41a3b944dc1eba6c54
a124f835a15c4a34f72c72e44cac1e58d5fc4c0f
759ea6862e68bfae0469df33bd4c3e8d1cf463ae819e9e39c63fe3d24a91f2c5
GET /sfiles/logo_teams/9c932ff1f15dd919cb3ae102233019f2.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/png
content-length: 11053
cache-control: public, max-age=86400
etag: "8003079646de1f41a3b944dc1eba6c54"
expires: Tue, 07 Feb 2023 23:59:53 GMT
last-modified: Tue, 31 Jan 2023 23:22:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3405
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d2204a4043d8318066cc32a2afe45635.png
8.254.252.216200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d2204a4043d8318066cc32a2afe45635.png
IP 8.254.252.216:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash adc0d7ca77a6cc5edfc131bf94a73067
7b9b9a09b03c05339193281a4268b578de5692e1
381ffecc7fcab554ca6df4b9a61250840bf800a18d06054461575084b49671a1
GET /sfiles/logo_teams/d2204a4043d8318066cc32a2afe45635.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/png
content-length: 11453
cache-control: public, max-age=86400
etag: "adc0d7ca77a6cc5edfc131bf94a73067"
expires: Wed, 08 Feb 2023 00:11:05 GMT
last-modified: Wed, 18 Jan 2023 11:39:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3403
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/fb3c42518642087febce0489211e4e3b.svg
8.254.252.216200 OK 694 B URL HTTP/2 v3.traincdn.com/genfiles/cms/pg/285/images/fb3c42518642087febce0489211e4e3b.svg
IP 8.254.252.216:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1220), with no line terminators
Hash a699de039c0638e5c6ebeaad243be4c4
9a619e308c67ecdec7aa74c269fa2949bd11e4a5
7786275801b6d2eaa49de8906f9e8e2934b2f700f42ff61a4cc8ce96d2cdef73
GET /genfiles/cms/pg/285/images/fb3c42518642087febce0489211e4e3b.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/svg+xml
content-length: 694
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"3ae81b002dca46d3b732ce3e03ae35c6"
expires: Tue, 07 Feb 2023 03:11:40 GMT
last-modified: Fri, 24 Dec 2021 11:54:08 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 78324
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
8.254.252.216200 OK 51 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
IP 8.254.252.216:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1380x248, components 3\012- data
Hash 15b1bda7b31ccc5eacce67afbe6f160b
d41eac3583bb0495a008b0d1e4a584d103feb436
2e1b52936d0c7081d46010cd49e236aed8cefc16adad7c908c108aff4a73718d
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/jpeg
content-length: 51087
cache-control: public, max-age=120, s-maxage=600
etag: "15b1bda7b31ccc5eacce67afbe6f160b"
expires: Tue, 07 Feb 2023 18:55:13 GMT
last-modified: Wed, 14 Dec 2022 04:51:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 21685
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
8.254.252.216200 OK 147 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
IP 8.254.252.216:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1380x248, components 3\012- data
Size 147 kB (147402 bytes)
Hash 9d1ab102184100544b4a72fcc6a8c458
79a64d17a182311cf4f856e39c83e3d9c5b1e55b
0fd0800599423b6bc4c2fe90c96f0025f4dd0d13d0c4b535e9421e21049a0903
GET /genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/jpeg
content-length: 147402
cache-control: public, max-age=120, s-maxage=600
etag: "9d1ab102184100544b4a72fcc6a8c458"
expires: Tue, 07 Feb 2023 03:09:56 GMT
last-modified: Wed, 21 Dec 2022 11:04:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 78409
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
8.254.252.216304 Not Modified 0 B URL HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
IP 8.254.252.216:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Wed, 14 Dec 2022 04:51:38 GMT
If-None-Match: "15b1bda7b31ccc5eacce67afbe6f160b"
TE: trailers
HTTP/2 304 Not Modified
date: Tue, 07 Feb 2023 00:56:38 GMT
cache-control: public, max-age=120, s-maxage=600
etag: "15b1bda7b31ccc5eacce67afbe6f160b"
expires: Tue, 07 Feb 2023 18:55:13 GMT
last-modified: Wed, 14 Dec 2022 04:51:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 21685
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
8.254.252.216200 OK 147 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
IP 8.254.252.216:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1380x248, components 3\012- data
Size 147 kB (147402 bytes)
Hash 9d1ab102184100544b4a72fcc6a8c458
79a64d17a182311cf4f856e39c83e3d9c5b1e55b
0fd0800599423b6bc4c2fe90c96f0025f4dd0d13d0c4b535e9421e21049a0903
GET /genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/jpeg
content-length: 147402
cache-control: public, max-age=120, s-maxage=600
etag: "9d1ab102184100544b4a72fcc6a8c458"
expires: Tue, 07 Feb 2023 03:09:56 GMT
last-modified: Wed, 21 Dec 2022 11:04:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 78409
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/registration
178.253.15.12200 OK 194 kB URL HTTP/2 1xlite-277345.top/web-api/registration
IP 178.253.15.12:0
Size 194 kB (194530 bytes)
Hash 61908f91d2229f3a80be151c19372cc3
635eb956b8e35490054cfdf1659997b0796c3d71
93271b327fa2e27aee55b73e77e51e72cd91b8cb0a8d86489eb7b28df0e5cd46
POST /web-api/registration HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Content-Type: application/json
Content-Length: 17
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0; _ga=GA1.1.140381024.1675731445; _gid=GA1.2.1957375890.1675731445; _ga_7JGWL9SV66=GS1.1.1675731445.1.0.1675731445.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: application/json; charset=utf-8
content-encoding: gzip
server-timing: dt_285;dur=73
set-cookie: is_rtl=1; expires=Wed, 07-Feb-2024 00:56:38 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/mobile
178.253.15.12200 OK 332 B URL HTTP/2 1xlite-277345.top/web-api/mobile
IP 178.253.15.12:0
File type JSON data\012- , ASCII text, with very long lines (332), with no line terminators
Hash 0c77eb97d37dcbbdf38735f50905cb79
6b4b208152458a8db3ee0ea36b51d8ba4d47c4fc
d291b5e8d97f6f391ad12e0ae7f46fbe3c741021e624d884887479caff3c32e3
POST /web-api/mobile HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://1xlite-277345.top
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0; _ga=GA1.1.140381024.1675731445; _gid=GA1.2.1957375890.1675731445; _ga_7JGWL9SV66=GS1.1.1675731445.1.0.1675731445.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: application/json; charset=utf-8
content-length: 332
server-timing: dt_285;dur=89
set-cookie: is_rtl=1; expires=Wed, 07-Feb-2024 00:56:38 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/b32e32090f3ff2e6d6480dc4ccb0642b.jpg
8.254.252.216200 OK 180 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/b32e32090f3ff2e6d6480dc4ccb0642b.jpg
IP 8.254.252.216:0
File type JPEG image data, baseline, precision 8, 1380x248, components 3\012- data
Size 180 kB (180037 bytes)
Hash 8a7e9adf7de552088e310a27ef673b04
9a7f060a864cf518c1ba7243e0f2a008f9a9c2ca
6651c587dd52bf3dbdc81c14be5beaa01bb487980c68be040fc354f1604e3934
GET /genfiles/cms/1/desktop/banner/b32e32090f3ff2e6d6480dc4ccb0642b.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/jpg
content-length: 147269
cache-control: public, max-age=120, s-maxage=600
etag: "7aacb632845e02f96f0c2c19bbd2caef"
expires: Tue, 07 Feb 2023 03:16:27 GMT
last-modified: Fri, 18 Nov 2022 14:50:51 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 78029
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/c4814879b7343a55333a250f8ff20339.jpg
8.254.252.216200 OK 455 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/c4814879b7343a55333a250f8ff20339.jpg
IP 8.254.252.216:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.1 (Windows), datetime=2022:11:18 13:24:12], baseline, precision 8, 1380x248, components 3\012- data
Size 455 kB (455255 bytes)
Hash 430f6636117f624139d2983f19666ae4
157bcc204d5dbe861df116aad873043d187521cf
6de512195851addb5bde4f3d9006132614e931e47e413af798a43f44bd964966
GET /genfiles/cms/1/desktop/banner/c4814879b7343a55333a250f8ff20339.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/jpeg
content-length: 275031
cache-control: public, max-age=86400
etag: "1d78b25536d46a434917801c2168a15a"
expires: Tue, 07 Feb 2023 06:38:35 GMT
last-modified: Fri, 27 Jan 2023 06:37:31 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 65885
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddd9c2a-2de8-4fe1-9341-c81dbdc66411.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddd9c2a-2de8-4fe1-9341-c81dbdc66411.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8f45e0cfda7ebdf13b6655900fb72de
b1f1fda9abc0abb565646ae011a6fddfd151177e
79621fce88059818e39c5d4a835bf82e38a942d1459453c57df0ef5b40a7030d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddd9c2a-2de8-4fe1-9341-c81dbdc66411.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4857
x-amzn-requestid: 3ac95b8f-c805-4f6f-85ed-2b4c960992aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fqR7VHmUIAMFuEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da637b-69f32e635cfb19f05b002cd3;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 13:04:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y7bJZuR6O48sN7OHZYNJsEPEalPrqQI3_3nxreM1-ODL6AZQKwrjIg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
age: 10880
etag: "b1f1fda9abc0abb565646ae011a6fddfd151177e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1xlite-277345.top/en
178.253.15.12200 OK 0 B IP 178.253.15.12:0
GET /en HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:29 GMT
content-type: text/html; charset=utf-8
accept-ranges: none
content-encoding: gzip
server-timing: total;dur=823;desc="Nuxt Server Time", dt_285;dur=971
set-cookie: SESSION=ce64b177f758b8df0871a8297dec433a; Path=/; HttpOnly; Secure; SameSite=Lax
lng=en; Path=/
vary: User-Agent, Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/api/v3/bonuses/welcome-bonuses
178.253.15.12200 OK 0 B URL HTTP/2 1xlite-277345.top/web-api/api/v3/bonuses/welcome-bonuses
IP 178.253.15.12:0
GET /web-api/api/v3/bonuses/welcome-bonuses HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:37 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=18, dt_285;dur=19
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1x-xredbet708793.top/
178.253.47.25307 Temporary Redirect 0 B IP 178.253.47.25:0
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: 1x-xredbet708793.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 307 Temporary Redirect
server: nginx
date: Tue, 07 Feb 2023 00:56:28 GMT
content-type: text/html; charset=utf-8
location: https://1xlite-277345.top/
x-frame-options: SAMEORIGIN
set-cookie: SESSION=9736f5ebca05c81823b19c7297627b06; path=/; secure; HttpOnly; SameSite=Lax
_glhf=1675749164; expires=Tue, 07-Feb-2023 01:56:28 GMT; Max-Age=3600; path=/
v3fr=1; expires=Fri, 10-Feb-2023 00:56:28 GMT; Max-Age=259200; path=/; httponly; samesite=lax
auid=sv0vGWPhobxPnVgNA2ClAg==; path=/; secure; httponly; samesite=lax
x-reason: 1080,1078,1074,1026
cache-control: no-cache, private
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/api/internal/v1/sessions/user
178.253.15.12200 OK 0 B URL HTTP/2 1xlite-277345.top/web-api/api/internal/v1/sessions/user
IP 178.253.15.12:0
GET /web-api/api/internal/v1/sessions/user HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=29, dt_285;dur=30
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137
178.253.15.12200 OK 0 B URL HTTP/2 1xlite-277345.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137
IP 178.253.15.12:0
GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:33 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=80, dt_285;dur=81
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/default/img/icons/pixels2.svg?v=1675731444
178.253.15.12200 OK 0 B URL HTTP/2 1xlite-277345.top/web-api/default/img/icons/pixels2.svg?v=1675731444
IP 178.253.15.12:0
GET /web-api/default/img/icons/pixels2.svg?v=1675731444 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:37 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=39, dt_285;dur=41
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/web-api/external-api/v3/banners?project_id=285&country_code=ID&language=en&platform=2§ion=6&is_auth=false&limit=100
178.253.15.12200 OK 0 B URL HTTP/2 1xlite-277345.top/web-api/external-api/v3/banners?project_id=285&country_code=ID&language=en&platform=2§ion=6&is_auth=false&limit=100
IP 178.253.15.12:0
GET /web-api/external-api/v3/banners?project_id=285&country_code=ID&language=en&platform=2§ion=6&is_auth=false&limit=100 HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:37 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=38, dt_285;dur=39
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/coloredSvg-2000139.svg
178.253.15.12200 OK 0 B URL HTTP/2 1xlite-277345.top/_nuxt/Desktop/Default/svg-sprites/coloredSvg-2000139.svg
IP 178.253.15.12:0
GET /_nuxt/Desktop/Default/svg-sprites/coloredSvg-2000139.svg HTTP/1.1
Host: 1xlite-277345.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-277345.top/en
Cookie: platform_type=desktop; auid=sv0PDGPhobxW/4PHA2tUAg==; SESSION=ce64b177f758b8df0871a8297dec433a; lng=en; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675749169; che_g=c7e015c8-28de-9ffc-a531-ffe6efec2c15; ggru=146; tzo=0; _ga=GA1.1.140381024.1675731445; _gid=GA1.2.1957375890.1675731445; _ga_7JGWL9SV66=GS1.1.1675731445.1.0.1675731445.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:56:38 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 03 Feb 2023 15:58:18 GMT
etag: W/"63dd2f1a-8acb"
expires: Wed, 08 Feb 2023 00:46:46 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8ec9ce3-b686-41f5-8011-400eea8266d1.jpeg
0 B URL img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8ec9ce3-b686-41f5-8011-400eea8266d1.jpeg
IP :0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8ec9ce3-b686-41f5-8011-400eea8266d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site