lite-1x36781678.top/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
301 Moved Permanently 162 B URL HTTP/1.1 lite-1x36781678.top/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert quad9 Sinkholed
GET /line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 03 Dec 2022 19:08:34 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://lite-1x36781678.top/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10438
Expires: Sat, 03 Dec 2022 22:02:33 GMT
Date: Sat, 03 Dec 2022 19:08:35 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2199
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:35 GMT
Etag: "638b2570-1d7"
Last-Modified: Sat, 03 Dec 2022 18:31:56 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 18:18:16 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3019
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5199
Expires: Sat, 03 Dec 2022 20:35:14 GMT
Date: Sat, 03 Dec 2022 19:08:35 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fAPOpt7XTFN4I0EZA2zb0ezkRPwYfRLdtYTqyELA/5bKuaQCEahzquDFwaJXu7L9B88Ai/3uU3aajUKqnzItFg==
x-amz-request-id: Z67327NH3TDFVPJ9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 18:46:40 GMT
age: 1315
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:35 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 002be102dd57b317506b54febc9d7113
92f2230c7d738562a77926d0545f5f38c9d00432
c283d3b81594fa9b1108275afdc01e85369d7925704bb2b9836d03cc6a70b478
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C283D3B81594FA9B1108275AFDC01E85369D7925704BB2B9836D03CC6A70B478"
Last-Modified: Thu, 01 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3180
Expires: Sat, 03 Dec 2022 20:01:35 GMT
Date: Sat, 03 Dec 2022 19:08:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 18:08:58 GMT
cache-control: public,max-age=3600
age: 3577
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2190
Cache-Control: max-age=138886
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:35 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:43:21 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4wLIBr0HRFG3X9v8KUhSog==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lB5U6lRr+ggbBeYAx2kMYgTSAgY=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10170
Expires: Sat, 03 Dec 2022 21:58:06 GMT
Date: Sat, 03 Dec 2022 19:08:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10170
Expires: Sat, 03 Dec 2022 21:58:06 GMT
Date: Sat, 03 Dec 2022 19:08:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10170
Expires: Sat, 03 Dec 2022 21:58:06 GMT
Date: Sat, 03 Dec 2022 19:08:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 76650
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 65472
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcb89ca25035b2bbb71ae5dd175fcd40
544428cdad754b1bb7be3cd46a79bf078fd5b450
36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:53:20 GMT
age: 54917
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3abdcce275bb9723b4ac1d0c38cc8891
91f0d888c38db0899f106b652e3dcac062648099
ff411fc0d5abaf519d6600961ec51ad71ad9a02e23cc02ad818e27f0324b3d1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7657
x-amzn-requestid: c0dbd862-41cf-4fa8-ab6b-256763c63fbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1Fo6IAMF9EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-554ffbc83fd70c557437120f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V_7_ohQr9ENIjOvdvy65ZpJqg2OI9gzRdiuxCTJzl4qwXe2Nmu_tAQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:49:27 GMT
etag: "91f0d888c38db0899f106b652e3dcac062648099"
content-type: image/jpeg
age: 76750
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e74254b3fdce7d6b84a71a7aff43789
65c8b4abf957f9b54d99d0f78559e639adb29efb
f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -AurmlKwF0QgfsWBsV3ZN9ZyDhw1Zo82zUqrpkBbvbCfh0j7evV2Tg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 11:01:04 GMT
age: 29253
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 50789
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:08:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373464,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e978e99d70b65-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:08:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373464,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e978e99d5b52d-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:08:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373464,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e978e9c5ab4f9-OSL
v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
200 OK 698 B URL HTTP/2 v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash baf96800254904a05eee2ff49c94a801
847efb3449a8d7857f004192310aa2164a71d530
0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Sat, 03 Dec 2022 19:00:45 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 593
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/2fa387b6.modern.js
200 OK 661 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/2fa387b6.modern.js
IP
File type ASCII text, with very long lines (65479)
Size 661 kB (660957 bytes)
Hash b9e3f233870318cf81504e8d6a9d054f
0186d8b58cbdc7bf531a24b0d690b8b20271c044
46ba73ce61b83c6bf3cb381213beffb9d2c35b784138857a35d4660350783c47
GET /_nuxt/desktop/default/2fa387b6.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 660957
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-a15dd"
expires: Sun, 04 Dec 2022 14:23:15 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17127
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/fd164971.css
200 OK 49 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/fd164971.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8968e23d9c549d4b23fcd81fdb1d1928
f5d94ae466ab07e1a7407bcbc54f1ef3f72e95f3
ff2d03f5afdd375af01c45ab2497f9ff278aea674906c0ce41f2de63a9ab1826
GET /_nuxt/desktop/default/css/fd164971.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: text/css
content-length: 48612
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6842-bde4"
expires: Sun, 04 Dec 2022 13:12:52 GMT
last-modified: Fri, 02 Dec 2022 21:04:02 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 21345
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
200 OK 138 kB URL HTTP/2 lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (21153)
Size 138 kB (137708 bytes)
Hash a303b91e6b43af6925de6fe1f272cc6c
328f332be00c8e6f999f95cd6fe9c8cbb53e3cf1
38145e77b3568c8da9650e9eb6736208a3d7d7eb35aa3ac5f7d7cc2e10940935
Analyzer Verdict Alert quad9 Sinkholed
GET /us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: text/html; charset=utf-8
accept-ranges: none
content-encoding: gzip
server-timing: total;dur=1144;desc="Nuxt Server Time", dt_285;dur=1249
set-cookie: SESSION=194f1710bd3c54686d2719c853ae17b6; Path=/; HttpOnly; Secure; SameSite=Lax
lng=us; Path=/
vary: User-Agent, Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/401c3cac.css
200 OK 85 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/401c3cac.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d33ac876fe09b4b1b5377dec529365fe
3f9371f5407db1c5d10f256df9f4ddbe20efec5a
aaf39f64e48927af2b32d3060792634569e7455c56d4dcffe3336a7e5a9bfa61
GET /_nuxt/desktop/default/css/401c3cac.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: text/css
content-length: 85396
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-14d94"
expires: Sun, 04 Dec 2022 14:23:15 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17129
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/2ce3797c.modern.js
200 OK 538 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/2ce3797c.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 538 kB (538265 bytes)
Hash 6ff9a1fa19f3c3df39f01a61394f268e
4d4a8d48714b988aa3f6670d36c99e6590da594b
a76d058ec16b75c004dd1b5d68ef371dcc77444bbd1d3ff7cefbe03c44945411
GET /_nuxt/desktop/default/2ce3797c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 538265
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-83699"
expires: Sun, 04 Dec 2022 14:23:11 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17129
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:08:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373464,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e978e9c9e1bfe-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:08:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373464,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e978e9da9b503-OSL
v3.traincdn.com/version.json
200 OK 44 B URL HTTP/2 v3.traincdn.com/version.json
IP
Hash cff9589e069b136ed454cd48e4bb82fc
24f3cc8ed7a188402216f541f50f58f3fb75a755
2ff0594e6b3ae108093d527b95768f1d56e1a120a6d8e72d2bf90326ab1835af
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "638b559a-2c"
expires: Sat, 03 Dec 2022 19:09:33 GMT
last-modified: Sat, 03 Dec 2022 13:56:42 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
v3.traincdn.com/_nuxt/desktop/default/6c313d21.modern.js
200 OK 93 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/6c313d21.modern.js
IP
File type Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (65466)
Hash 5ef3537fbd515d48de5692097ff0b73c
9aa0e38e0fdb4d15c54c04ad978a315a190e72f6
7b9860c137a093a7889b36a86f40b8713d9fd03b74cb04ebe4172690ecde87ba
GET /_nuxt/desktop/default/6c313d21.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 93447
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-16d07"
expires: Sun, 04 Dec 2022 14:23:17 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17127
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
200 OK 2.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
Hash 28da1ee70c76eded517e229314f56a10
d7c6f9087ed8080812b1212b0ebc86e74960278b
93fd4e48862d7a9e80371955c3bfd0520de5c8a966093655ac890979711f4e88
GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 19:08:37 GMT
date: Sat, 03 Dec 2022 19:08:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 257662
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 257681
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:09:46 GMT
expires: Fri, 01 Dec 2023 08:09:46 GMT
cache-control: public, max-age=31536000
age: 212331
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 257683
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
200 OK 352 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dff72d4146e35a8262e6845d13a8df0
a291af970d3955b35c314e85712ceea3aca25d54
a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:37 GMT
content-type: image/png
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094516590
200 OK 145 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094516590
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1670094516590 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:38 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/pwa
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4766fd1b2ba2e236fd9364587f99ab
eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b
Analyzer Verdict Alert quad9 Sinkholed
GET /pwa HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:38 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/90006408.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/90006408.modern.js
IP
File type ASCII text, with very long lines (2510), with no line terminators
Hash abf17d602c1b2b0f79a3251e371e2acb
5fe8be0b97b207f8cd378b9850b62db4536d5321
7646a5a971815fc3cd8b7d9a672ecf34293792ae4ec080ee49524da5319b96dc
GET /_nuxt/desktop/default/90006408.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 1084
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-43c"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/version.json?timestamp=1670094516757
200 OK 44 B URL HTTP/2 lite-1x36781678.top/version.json?timestamp=1670094516757
IP
Hash cff9589e069b136ed454cd48e4bb82fc
24f3cc8ed7a188402216f541f50f58f3fb75a755
2ff0594e6b3ae108093d527b95768f1d56e1a120a6d8e72d2bf90326ab1835af
Analyzer Verdict Alert quad9 Sinkholed
GET /version.json?timestamp=1670094516757 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:38 GMT
content-type: application/json
content-length: 44
last-modified: Sat, 03 Dec 2022 13:56:42 GMT
vary: Accept-Encoding
etag: "638b559a-2c"
content-encoding: gzip
expires: Sat, 03 Dec 2022 19:09:38 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-178408567-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP
File type ASCII text, with very long lines (1921)
Hash 826a6abe22be0698977df3294c7f8f00
59e5d5a6f0dd5dc9dbfa87b6973d1e098198dcf7
72b8c18c093cfe9411fbe527a022326256f92b1451dbafdfa54d7309d197d183
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 19:08:38 GMT
expires: Sat, 03 Dec 2022 19:08:38 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44649
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
radar.cedexis.com/1593429750/radar.js
200 OK 19 kB URL HTTP/1.1 radar.cedexis.com/1593429750/radar.js
IP
ASN #63911 NetActuate, Inc
File type ASCII text, with very long lines (1782)
Hash 2acb3c3179b2646943d1a8f5166743cc
56aa31a4027fec3dd8cc78114c6b0f3604716c14
0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 19:08:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:38 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0de-af5c"
Expires: Sat, 17 Dec 2022 19:08:39 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
lite-1x36781678.top/web-api/api/converslon/load
200 OK 3.1 kB URL HTTP/2 lite-1x36781678.top/web-api/api/converslon/load
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (8764), with no line terminators
Hash 4a42b67c17687a538e62f9e7dc17b40f
b260682addf36223785400c6e46e8fedcebdd293
dd67bcbbbc727dd347dcb7c17f9eddaee9570e15a60ac533ba892435df0d19ab
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/converslon/load HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:38 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=33, dt_285;dur=37
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg
200 OK 9.1 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (18547), with no line terminators
Hash c9cff13978886c1d57d04255df22e4db
41af31370b2d2b585db09f7d4f1521c0eac55de4
03c357b4d8bdadfa64c6b1fe787cb72917fbdcf62c01508e44b2ec8d491bb7f6
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-4873"
expires: Sun, 04 Dec 2022 18:24:57 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/common-200061.svg
200 OK 49 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/common-200061.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash dddbdbee94e8b876a6fd58da806d9d7d
94b455cd0ec059f189b5f428ca8e40b7b496344b
4ef6032d633a0b62c760d4ccdc06c32f38aac8ea12327bbc030725b802c4d10a
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/common-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-19794"
expires: Sun, 04 Dec 2022 18:24:57 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/b8a07a4d.modern.js
200 OK 17 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/b8a07a4d.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (41008), with NEL line terminators
Hash 7bcff8ee821900ab818bccbe3aacfb18
7cdb68a2f86ab783790a8c55611d889b3338a5db
8c59a2987f391ab180400fa42a855c924a9f0b895ec66f474155b129ad05a935
GET /_nuxt/desktop/default/b8a07a4d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 16804
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-41a4"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
200 OK 454 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
IP
File type ASCII text, with very long lines (1429), with no line terminators
Hash 3ef2b8ba6a3526a39954a0a10aba35b7
048a604c003e56843f7223d68486a13f7bc02943
f75cfb56d6719c69a3999875215398d444a8a5c73d5000098198c6452acbb80b
GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6842-1c6"
expires: Sun, 04 Dec 2022 08:29:13 GMT
last-modified: Fri, 02 Dec 2022 21:04:02 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38366
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/7ac812ef.css
200 OK 1.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/7ac812ef.css
IP
File type ASCII text, with very long lines (5224), with no line terminators
Hash f00b03e099a232bc5f08fcb1042ae13d
51fa0abddb8ccd8806efcf1872db16a46defd6c4
4a23a179f01d554e11064d32419cfb999b7529f83ca213bba8eda7c55011bb76
GET /_nuxt/desktop/default/css/7ac812ef.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: text/css
content-length: 1232
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-4d0"
expires: Sun, 04 Dec 2022 08:29:18 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38364
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/18614420.modern.js
200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/18614420.modern.js
IP
File type ASCII text, with very long lines (17802), with no line terminators
Hash 82958c79ddf3a5d4d2f5881df2fc23b9
72edf36bb1ea9ba72c194d3bdf3cd6619a01872b
eed32dbc5ec5d85eca0cc4c21e98156fc0799011f3d50d963cf574d5d2e144b8
GET /_nuxt/desktop/default/18614420.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 3899
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-f3b"
expires: Sun, 04 Dec 2022 14:23:26 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/36c9343a.css
200 OK 912 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/36c9343a.css
IP
File type ASCII text, with very long lines (3693), with no line terminators
Hash 1b7cc7024ef238173e96baf5dc448d32
a082b995c9ff91d8329b69f7f6fd917470b131d8
8eb90f00e3a2beefd31f5df844497b4e60988655f68946d865251c7feff4b778
GET /_nuxt/desktop/default/css/36c9343a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: text/css
content-length: 912
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-390"
expires: Sun, 04 Dec 2022 08:29:27 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38354
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/9cf4f571.modern.js
200 OK 11 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/9cf4f571.modern.js
IP
File type ASCII text, with very long lines (40010), with no line terminators
Hash 6caefd9632c3e51aaa2d8a11e3d1bca1
b68bf8721a3fb18eb56acdb14163e62870dd832e
750e97c7416eb9b3f829b500e192acec1b751cd7391c14342ceaa080ea500a3e
GET /_nuxt/desktop/default/9cf4f571.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 10723
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-29e3"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/cefdc903.css
200 OK 508 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/cefdc903.css
IP
File type ASCII text, with very long lines (1570), with no line terminators
Hash 407282b72b766ff8bb504e6c6111c2f2
2f187937e2a5b0b8876b2815b77b2389d5b62a98
0571d1ff3828485f8d28670419fb8e7cea41d0c55396d07d5d22997cfbe3abb0
GET /_nuxt/desktop/default/css/cefdc903.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: text/css
content-length: 508
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-1fc"
expires: Sun, 04 Dec 2022 08:29:27 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38354
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/f133b146.modern.js
200 OK 1.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/f133b146.modern.js
IP
File type ASCII text, with very long lines (4822), with no line terminators
Hash 015d7f6932ed928c8d617573c19e5bda
897a2c212e37f164e758ca8c2dad542c16691fcd
66e46f4f264bcfc918e38f1047be6561806cd9b09b86e3e27110f162c8bf1679
GET /_nuxt/desktop/default/f133b146.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 1810
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-712"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b0e615fc.css
200 OK 2.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b0e615fc.css
IP
File type ASCII text, with very long lines (18717), with no line terminators
Hash c7e379c6dd6ad0cea02bbd481745213e
2e29ba4e194ce2a75d0040f9cae47aa1c1093ce8
e6458342af05bbfd3a550bc95e4e1a28805a497c4805eeb92f5fc2ad9d16a768
GET /_nuxt/desktop/default/css/b0e615fc.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: text/css
content-length: 1999
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-7cf"
expires: Sun, 04 Dec 2022 08:29:18 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38364
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/17f2a34f.css
200 OK 3.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/17f2a34f.css
IP
File type ASCII text, with very long lines (21596), with no line terminators
Hash 810742d30dd06618e1a3001239c686b2
ca3557ae5a3bf273a4989e28b664911805b4f280
589228496dff2c5ce760a133c9465c07c067ad8ae87c14671b4a55703439b243
GET /_nuxt/desktop/default/css/17f2a34f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: text/css
content-length: 3810
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-ee2"
expires: Sun, 04 Dec 2022 11:38:10 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 27036
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/0fbe1718.modern.js
200 OK 882 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/0fbe1718.modern.js
IP
File type ASCII text, with very long lines (3162), with no line terminators
Hash d67581c7ad4b9832ecbd97f9d7fd6850
297ea7b8f31fa1e5623e3afd2c6b2bb31009154c
44b64dfa7bd6e2cefee3107481890944aec7ff3f164f0ff2020b6604f800b679
GET /_nuxt/desktop/default/0fbe1718.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 882
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-372"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/8dee1e7e.modern.js
200 OK 14 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/8dee1e7e.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 4aeb431004edc0cb46c56cf860dca319
2679bb3b591e7ac94d49a15f725ca2a9d060181c
51585b43ed1fd390e205ffa3e6b27b892480da0476c3989c68d5e38d1a80df1f
GET /_nuxt/desktop/default/8dee1e7e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 13460
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-3494"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ff39bf78.modern.js
200 OK 331 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ff39bf78.modern.js
IP
File type ASCII text, with very long lines (397), with no line terminators
Hash 063b188f9b340e81c0ac93486907b8e5
84616cd11245c2959e4f8d2f36501087da2ae659
1ae9860da5e49fd7c77f994805de01fd6896c3055a1513c16c515251d4bd7bef
GET /_nuxt/desktop/default/ff39bf78.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 331
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-14b"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/729687a5.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/729687a5.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (2452), with no line terminators
Hash 53f074713865fdc271e98f5f70d7dee1
5899e95a97021fe405735630b0c51a6c6f2fea8a
26d79f6f1a9795ea365a24b352bc0d2ef65123790c7852d4b69dc791884b2796
GET /_nuxt/desktop/default/729687a5.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 1060
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-424"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17122
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=us
200 OK 641 B URL HTTP/2 lite-1x36781678.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=us
IP
File type JSON data\012- , ASCII text, with very long lines (1194), with no line terminators
Hash a23a2f4eaf01d1c450d74365a03ec0d5
0203c8c82f421d6456222bd24710e61cac295ebc
128a101aa204eee5abbe3ff0e3f3c7363561a543d2c0acf8112bfd8cb98e4b63
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/json; charset=utf-8
content-length: 641
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us
200 OK 731 B URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us
IP
File type JSON data\012- , ASCII text, with very long lines (1310), with no line terminators
Hash 2e2be0f2632b68fce02af6fd41b17fde
ae830637633cbb464658cd34aabe5351957fe1b0
b41b2aeb9dc9ad537cf74cebfc8d1fb95cd5115d2b985117a159e48713ff5390
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/json; charset=utf-8
content-length: 731
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LineFeed/GetTopGamesStatZip?lng=us
200 OK 1.2 kB URL HTTP/2 lite-1x36781678.top/service-api/LineFeed/GetTopGamesStatZip?lng=us
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (4037), with no line terminators
Hash 5d3f84241d8b4b924b919f62f80096f2
1a506535d5507f30facaa35cb0e50485801392f6
f750c4dcbc85b716d4c6714b595bbc273178848c0ead9e7ea6110384922c01c6
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetTopGamesStatZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/json; charset=utf-8
content-length: 1182
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/domain-api/api/v1/domains/lite-1x36781678.top
200 OK 86 B URL HTTP/2 lite-1x36781678.top/domain-api/api/v1/domains/lite-1x36781678.top
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d6ce170df0fd95ce1ace683582698106
54337307d42777444d983f580ae04db2811b2c1c
bf25f0e6d9bc1fa43c30596d7292607f8bbf2222f38b9104106731b0a73b02ae
Analyzer Verdict Alert quad9 Sinkholed
GET /domain-api/api/v1/domains/lite-1x36781678.top HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/vnd.api+json
content-length: 86
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Fus%2Fline%2Fqatar%2Ffootball%2F1938952-fifa-world-cup-2022%2F153458541-argentina-australia&language=us
200 OK 38 B URL HTTP/2 lite-1x36781678.top/frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Fus%2Fline%2Fqatar%2Ffootball%2F1938952-fifa-world-cup-2022%2F153458541-argentina-australia&language=us
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7e5f0649cceedb563f3037fcd2dc2629
e274dd8ff75b14d8b7d2d86cea5b8bc415de58ac
cc2d7c3416bb5bbb515f151fbf694edbc44b497fca10f87b61fb31ab0b43a548
Analyzer Verdict Alert quad9 Sinkholed
GET /frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Fus%2Fline%2Fqatar%2Ffootball%2F1938952-fifa-world-cup-2022%2F153458541-argentina-australia&language=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: application/json; charset=utf-8
content-length: 38
access-control-allow-origin: *
etag: W/"26-4nTdj/dbFNi30ths6luLxBXeWKw"
server-timing: requestTime; dur=37.491644; desc="req_t", renderTime; dur=37.507303; desc="rend_t", total; dur=38.672458; desc="Total Response Time"
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/51738160.modern.js
200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/51738160.modern.js
IP
File type ASCII text, with very long lines (13517), with no line terminators
Hash d165cee756c682d135e866f2b182bfe0
bddceed592c6a7859d8dd93a25560fae4de689ea
45ffc16dc0024935303225b2a65464661d63473dc3d29558a43146958b683025
GET /_nuxt/desktop/default/51738160.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 5376
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-1500"
expires: Sun, 04 Dec 2022 14:23:31 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17125
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/d201753e.modern.js
200 OK 26 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/d201753e.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 75efea6edd66a264040dca4b8e0b315f
326d0997d19a7d2bf5fc35f5438963660980e307
ea31dcedeca74f0bd23b3daa4b2a96f244b08d24091df896460a5e6032c7fc55
GET /_nuxt/desktop/default/d201753e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 26120
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-6608"
expires: Sun, 04 Dec 2022 14:23:33 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17125
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/RefGameService/FindMainLiveByLineId?id=153458541
200 OK 253 B URL HTTP/2 lite-1x36781678.top/service-api/RefGameService/FindMainLiveByLineId?id=153458541
IP
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash f530d8a3097fff9aa45aaeaf970d912c
5232a0d36a4ae0c5fcf5bfc646b99939141a8806
8f3c3d8fe40109d441616746ccdc6d069446ee104262cc047a1c156fcda37184
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/RefGameService/FindMainLiveByLineId?id=153458541 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json; charset=utf-8
content-length: 253
cache-control: private,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/checker/redirect/stat/run/
200 OK 49 B URL HTTP/2 lite-1x36781678.top/checker/redirect/stat/run/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b7a9075de81cdb1a9fa74fa71b5126dd
9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20
Analyzer Verdict Alert quad9 Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json; charset=utf-8
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LineFeed/WebGetTopChampsZip?lng=us&country=137&gr=285
200 OK 642 B URL HTTP/2 lite-1x36781678.top/service-api/LineFeed/WebGetTopChampsZip?lng=us&country=137&gr=285
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1293), with no line terminators
Hash f351e8946310f171a040968f2c621807
921b449f52911656f167c5f8c22de490046eeb79
7fbba4b8e2cf5efcd0e4aef56daaa482d62dd466aad6d76ca5876e7209e839b1
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/WebGetTopChampsZip?lng=us&country=137&gr=285 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json; charset=utf-8
content-length: 642
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_0.js
200 OK 3.5 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_0.js
IP
File type Unicode text, UTF-8 text, with very long lines (12621), with no line terminators
Hash 70549a52167360ba4bb89c287f5f5264
af3e3c426fa8f70d472b9ea30d939d82c3ccf63f
b6da84b0e9f5eee980ba2e50cbe4f4a38499ba35738d4b8cf514d097d8eb7c60
GET /genfiles/cms/betstemplates/bets_model_short_us_0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: text/javascript
content-length: 3456
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"b707d91b97881a24d3622b36b6d6f1e2"
expires: Sat, 03 Dec 2022 19:02:56 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 465
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/12763.png
200 OK 9.0 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/12763.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e78eafbbfca261f2d1cabbcf42aa119
fded45a704f16e0ad1a15990c3377d5511e0733a
3e26735514b613611003e24dae3da783efe9ca540c8657937f2d253aabb23064
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/12763.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 9029
x-amz-id-2: TYfm4K2IG7lHjFlEVQQ5mtGPm09P+h6woq0HnazdZmrgopHnszBC87In3rBuvL3AltIk8B3QjO+KuGcVYbdeBA==
x-amz-request-id: Z010RZ59MA4XN3P2
last-modified: Tue, 13 Aug 2019 14:52:42 GMT
etag: "3e78eafbbfca261f2d1cabbcf42aa119"
x-amz-version-id: 1mgDLgD.fwQ7DpNSaztpJpNkRYkZPh7I
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/11815.png
200 OK 10 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/11815.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 07580f93cb4ba3ae4de105342108f3cc
49ea3bb211d3f8a9e80fa854f321276c2fe99e4c
02a7f8c33d6d0eb13286d155a2e3df576c162232dc876f85cff98c52b69c1213
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/11815.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 10178
x-amz-id-2: MlJxz2Anm23OZjC4pVgK5D+g7LUKIBfDcMscakDuR1LZPuF9T96BWc3dC2XvpGSH51UNtiy4fJqzoSIxMH5Kag==
x-amz-request-id: Z019XTQBXWPGJ3P1
last-modified: Tue, 13 Aug 2019 14:52:12 GMT
etag: "07580f93cb4ba3ae4de105342108f3cc"
x-amz-version-id: i3uAf24P2KthxS.9Vq9KfeUb03FNx0i0
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/33421.png
200 OK 11 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/33421.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2d8f1289246627583edd18ab6f409e47
00b8cd65e503158a9246b718222a259eaa0267d2
8102d15f631d817da05e9767e384cb29ee44d79f9582742b51966c4b88a8fb3b
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/33421.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 10981
x-amz-id-2: 8hHKvIIOwVLvkPp4JqZT7qV2iZDjdEJVATwxdBNsPU5cvmLDzM7ngQ4eE4xIyJgGsCCCRgOA+w6RNwGdzQeUvQ==
x-amz-request-id: DMVMW9834JTYCDEC
last-modified: Tue, 13 Aug 2019 15:04:36 GMT
etag: "2d8f1289246627583edd18ab6f409e47"
x-amz-version-id: vsbJ3RTmuBgIXRcRBczfGdO5sA3az.kd
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/11863.png
200 OK 18 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/11863.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c34435ae849a7dc1751080f135901449
5df948ed267f9db3f4b5502a0f95218d1b17f1ae
7567a31a51ecd340de58489530e8a64caad07f0104aedec4f2305ae961c25111
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/11863.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 18134
x-amz-id-2: wHlDtzQvt3ZxwFeOiFp8Y55BmptBOvY5oNd5J18wFfW8nbyJPRRHm7MBVY45qFRGMSPx9w52sY6qfQbwgrXnMw==
x-amz-request-id: DMVZYW4W5301K8YM
last-modified: Tue, 13 Aug 2019 14:52:14 GMT
etag: "c34435ae849a7dc1751080f135901449"
x-amz-version-id: KVDkuACZdhy6y40eD9XCHkHI9xisglWi
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/1380811.png
200 OK 20 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/1380811.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash bfb790754d83c87bd58dfd3d01be3391
1268ead8d282da82d41cb77091b03216b5ea650c
8964cd40bf0ce22319384aae52c8271c888e2dca24db0692642382bc778994af
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/1380811.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 20378
x-amz-id-2: z5B/evhDGwbuzpPt1J7iB2llhV18dp7uqo7o6DzUlmAVo5jvwgGzjyeBbXG+YpN6ozBjRAStgWt+ZdkcrIp3sA==
x-amz-request-id: K5WDB1K57ESMJH25
last-modified: Tue, 13 Aug 2019 14:53:19 GMT
etag: "bfb790754d83c87bd58dfd3d01be3391"
x-amz-version-id: 7daHrvxL63qLxCUW.Wl0Vi8j_NMBHKir
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/91fefbd7cd8306fc30adfbd2efe12a53.png
200 OK 42 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/91fefbd7cd8306fc30adfbd2efe12a53.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f6c5d5c9ead7b06f0749cb9dbaa9ddaf
ad30787111551937e986b6bc7b83b5915a98b6b7
ad7320f9afdcd503feeaf71dd663656341528576c03f9ebc8bcf30627abfe975
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/91fefbd7cd8306fc30adfbd2efe12a53.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 41595
x-amz-id-2: 0Lh0hZtsryIEXgg+h0CDYZIxUl81UN83zHRJDt+YQsOd+joASo8uwdajCRPhMwXx2+XVmfefhCy6BxUn9fdIXA==
x-amz-request-id: 2WN0K76R2K5W1SN5
last-modified: Sat, 19 Dec 2020 20:14:04 GMT
etag: "f6c5d5c9ead7b06f0749cb9dbaa9ddaf"
x-amz-version-id: BgApSMxfjx.DKHR.IpdgbazD8v467KsA
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/c0f67fefc927bc6fe4f5b39742f81d9d.png
200 OK 21 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/c0f67fefc927bc6fe4f5b39742f81d9d.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 583263cb7fb9b51ed078d976e8a54982
2dbd7a628fed9b243fe1c548b42153715f7df0b8
29f12707ae3e3a37fe3f59d131756af755075ae77d980b962cea592fd67c8e8d
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/c0f67fefc927bc6fe4f5b39742f81d9d.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 20763
x-amz-id-2: eAberJiM3wNBDIKQ4AqZM2i5bBglWl1Yi9CL+G63KfQOKXL68FvNbvqRxNw+MtPUQ/ZBC4OuSns9JgBPijJDgw==
x-amz-request-id: 2WN2NAHV21NSBRA6
last-modified: Tue, 01 Jun 2021 05:54:19 GMT
etag: "583263cb7fb9b51ed078d976e8a54982"
x-amz-version-id: BSVNfXjuuYaUpsBEPUEW.UNwnF2tPh9X
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/dd85b3bf1f1b9ed38883b0bdc73b8a9e.png
200 OK 19 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/dd85b3bf1f1b9ed38883b0bdc73b8a9e.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c01459f0a8d2b978398d89e88e82bb53
1646e02efc3365b26af7ddaaf1b9ef6d4055a07e
76902699e8bf6b068b2b0d3a9e6ebdf58495b3cd90090da237328ef17af16fe7
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/dd85b3bf1f1b9ed38883b0bdc73b8a9e.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png, image/jpeg
content-length: 18920
x-amz-id-2: Nr7FKZKEBPVhvNXhh0PWNPO11s+9VDGCNj4NdECdoYapfsI/J6kIav1myugEygh8qER0oOvwXdkqZIXHX8L3Wg==
x-amz-request-id: 2WN9THKY5R4G6ZY1
last-modified: Sun, 26 Jan 2020 19:30:39 GMT
etag: "c01459f0a8d2b978398d89e88e82bb53"
x-amz-version-id: KdIyxLUNAoqUUEZbcLRDV9EzYOSVFyEx
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/8c9c6fa975ff2ae462ddf635b6f02396.png
200 OK 25 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/8c9c6fa975ff2ae462ddf635b6f02396.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d91ea0fcdfad31b291261ba1dae14a10
a3529b3ef4c3f5385e83bbfd72fe2c1352857a8c
8ae9ae4cb35ec65b04c97af12a5de1ae84630eb7da7ac8a7609d6ec3d89b0c89
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/8c9c6fa975ff2ae462ddf635b6f02396.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 24939
x-amz-id-2: 1SB3Zju/kC4nPtUEMzhrK4xCL/wiMH5BNr9j4fr8C+JpGsD/V8r79ylah7zSYzBS5Se0A8rVuIlgQzjqp+dm1Q==
x-amz-request-id: WHAYR5SPEWKNA46B
last-modified: Wed, 23 Nov 2022 07:46:17 GMT
etag: "d91ea0fcdfad31b291261ba1dae14a10"
x-amz-version-id: 9Mw1qs6YJj2Y8iMlFF89AYOgTyqfVRaS
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/3480.png
200 OK 12 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/3480.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e498fcf391c008c7416c6cf0283ed8b
5d55c20e7be7435de2a167905f1a5f69428ed46d
c0b40f885cfe168601eafbd9560595e7d746a8dfaad396bc37e92f2899b58fcc
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/3480.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 12079
x-amz-id-2: 9vRZ/N4O1phG973l3UFIDKyJVGBHZJkg0tAy+FjOZ1I9Hq5qN5tlrOWIN1Vx3JUWw/lS8qik13CfSjdeyqYsiA==
x-amz-request-id: 5CC791544Z49PSQG
last-modified: Tue, 13 Aug 2019 15:04:52 GMT
etag: "3e498fcf391c008c7416c6cf0283ed8b"
x-amz-version-id: oHniSIL4dkPUd6yyNyrrOP2Zj9Ii7vSo
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
200 OK 7.6 kB URL HTTP/2 lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
IP
Hash 63f24aae5b6eac914bbd8c77d49c9fb8
78fe5acda7f23551c31c0b7b3789e50740bec38e
738bb4f86f188d020ac578f8ff09a0a87f121cec1865d57d7abaa352863a81a7
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=47, dt_285;dur=210
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137
200 OK 22 kB URL HTTP/2 lite-1x36781678.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137
IP
Hash 61a6f0fe11b942d094fec23c7f9b004f
d75e328d8fed25fb15b50cff157a78841b86bf24
a5974311c318f97dc803bbd78ba5009fe200b267373b8b55dd83f2e604d211dc
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=255, dt_285;dur=257
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/555bb880ed6ff398a859563182cf4160.png
200 OK 7.1 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/555bb880ed6ff398a859563182cf4160.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8cc1625e2152bd9c176cc156e62e63ae
ee8ebb49201e69ede057aeb2f78e8c0268d06f31
24e7379ca751299e25b3f98edcf50a25fca9a37209effceb260802573c0fbf85
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/555bb880ed6ff398a859563182cf4160.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 7091
x-amz-id-2: 1Wx1snG/iFDLqumsDSUuTBteYljfCQpeH8vTT10WD0KRt8862KmCkTxpBlIF3v2a3aXqsUcDph0OlHMJ4MGNOQ==
x-amz-request-id: Z5BTYTTEFV87GNYN
last-modified: Thu, 15 Sep 2022 09:59:11 GMT
etag: "8cc1625e2152bd9c176cc156e62e63ae"
x-amz-version-id: I9Ag8BIPikgItsXkzBrdLIAkn4kTXpwj
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/4a499b86cdea577754cec1c3de30af5f.png
200 OK 70 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/4a499b86cdea577754cec1c3de30af5f.png
IP
File type PNG image data, 100 x 100, 16-bit/color RGBA, non-interlaced\012- data
Hash 5e50f524c09b06e8059e2f64380fed17
c2b84a86e927fbff4f0813d8f2858bf24974f49d
b1a615a3cbdee633f3e166dd571981341acc21b23601f41e068ce15bf51bc127
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/4a499b86cdea577754cec1c3de30af5f.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/png
content-length: 70109
x-amz-id-2: FF24A7eZvZdfNke9jVxjHI0jrdD/Ker7colUIRIEoBglS6XcCmmqW7JJvy1cBPqM5dK9nnhwtVP1kfLkdNFusQ==
x-amz-request-id: WHAWZ1FA5QD9Z936
last-modified: Fri, 17 Jun 2022 12:52:02 GMT
etag: "5e50f524c09b06e8059e2f64380fed17"
x-amz-version-id: nTqcqRgJhvNvJxbB2L10YCI.lyfyrJl0
expires: Sun, 04 Dec 2022 19:08:40 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/games-images/ico-logo/white/desk/343.svg
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/games-images/ico-logo/white/desk/343.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (22224)
Hash ec2f953bc550d8559d5d3847c0ac61b5
02169e4bbc5964848d6f46ff239794e32db6e589
e2cae2e289d45b0ea140ae52bc05800717dfc7a0122a85d651bfd2eefd312373
GET /sfiles/games-images/ico-logo/white/desk/343.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/svg+xml
content-length: 10983
cache-control: max-age=86400
content-encoding: gzip
etag: W/"4fc440a1a3d8be975531b9e083d83b93"
expires: Sun, 04 Dec 2022 10:14:14 GMT
last-modified: Wed, 16 Nov 2022 15:19:43 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-meta-origin-date-iso8601: 2022-11-16T14:16:25.000Z
age: 32074
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 18:41:08 GMT
expires: Sat, 03 Dec 2022 20:41:08 GMT
cache-control: public, max-age=7200
age: 1652
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/default/bg.jpg
200 OK 50 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/default/bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1380x224, components 3\012- data
Hash 2e93ef6d8c4d3b8732ac9e499fa5845c
c31b842fd8df03721ee45429d6e514b6937483c3
58676e6226fd3ad29498d580a1de23872b1dfcd90828044ab5cac70b00afd466
GET /genfiles/cms/1-285/desktop/scoreboard/default/bg.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: image/jpg
content-length: 49983
cache-control: public, max-age=120, s-maxage=600
etag: "2e93ef6d8c4d3b8732ac9e499fa5845c"
expires: Sat, 03 Dec 2022 19:07:40 GMT
last-modified: Sat, 07 Nov 2020 10:32:59 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 380
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/default/bg.webp
200 OK 32 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/default/bg.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x224, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3781e799e86a7b822e2f1c46be85dc1f
73cd91c6fdf75d412f57e1b7db1cf08e1df22de4
a4c47fcda49367ebb80ef0c6fa449ea01690c6f52bb2403ad6aca8a4bc245ad7
GET /genfiles/cms/1-285/desktop/scoreboard/default/bg.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/octet-stream
content-length: 32530
cache-control: public, max-age=120, s-maxage=600
etag: "3781e799e86a7b822e2f1c46be85dc1f"
expires: Sat, 03 Dec 2022 19:01:23 GMT
last-modified: Tue, 08 Dec 2020 07:32:57 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 558
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetTopGamesStatZip?lng=us
200 OK 1.6 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetTopGamesStatZip?lng=us
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5379), with no line terminators
Hash ea9a0205d1d29088fbfcacd7b45cd76f
a7824c56bbc3edcd337d78818f7a2879f4b27a95
2deee66aba8918a1409e976b9c14dcb81c4b2b10fd914107ebcaec377eafcede
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/json; charset=utf-8
content-length: 1620
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&tz=3&marketType=1
200 OK 4.2 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&tz=3&marketType=1
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (26846), with no line terminators
Hash 49610b9f79e16e2401d80afce8bced36
e90daf439c74b58e9b8a43d783a0a4840227c885
ff45521aaded320cf64befe0169a137c2036a7c2c6de4f08f1e835e1dc551053
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&tz=3&marketType=1 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/json; charset=utf-8
content-length: 4184
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/seo/metadata?url=https:%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&geo=137&language=us
200 OK 672 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/seo/metadata?url=https:%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&geo=137&language=us
IP
Hash 78b988d6847124413a21499d59f6e73e
29af85db1bbb74369d0b9984a422058ce1377e94
43f16875155024ac633fae7b9514606252530f1eac2697daa67468eca557ac3b
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/seo/metadata?url=https:%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&geo=137&language=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*, application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/vnd.api+json
cache-control: max-age=300, private
server-timing: p;dur=23, dt_285;dur=25
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137
200 OK 248 B URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137
IP
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash acbbe5c6f7910e59290f316a5cdb7ee9
cd50fad48f20e56e034274c6c2817e95862f9ed2
4fb8eed6dd0f9a710907a3bb7a85e6561f0e1e0410d03635f3eb54c5e725d78a
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/json; charset=utf-8
content-length: 248
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 678f0728bf53c1cd6e4e8299ee27d64e
99b4a9ebf5bce649f03155c504041d946a488324
990f68023ad1850b5b99c9fac85656c325e87e5c9d52bd37f6bd805c54bcf331
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2532
Cache-Control: max-age=145690
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:08:41 GMT
Etag: "638b2aef-116"
Expires: Mon, 05 Dec 2022 11:36:51 GMT
Last-Modified: Sat, 03 Dec 2022 10:54:39 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
lite-1x36781678.top/web-api/external-api/seo/links/canonical?url=https:%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia
200 OK 716 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/seo/links/canonical?url=https:%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia
IP
Hash 13d1cd116e9034b5d72ab64f5fd72180
0373f4ec5ca1632f2bc5ca698e1d1821fd792e3e
3954f91f95da6b08f6e9d73116b3149488532a125605a996e93ef47099655574
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/seo/links/canonical?url=https:%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*, application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/vnd.api+json
cache-control: max-age=300, private
server-timing: p;dur=85, dt_285;dur=88
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/4c82ecfc.modern.js
200 OK 636 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/4c82ecfc.modern.js
IP
File type ASCII text, with very long lines (1340), with no line terminators
Hash f4d729182b25aec859c78650744a3576
8a7a085341a140d269a6e3c812c025ea4afd8523
e65c4c1880294b6264633ffe0a3e1b947a3bc040ba0d877c97b49295386c5bdc
GET /_nuxt/desktop/default/4c82ecfc.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 636
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-27c"
expires: Sun, 04 Dec 2022 14:23:18 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17123
accept-ranges: bytes
X-Firefox-Spdy: h2
suphelper.com/widget/injector.js
200 OK 51 kB URL HTTP/2 suphelper.com/widget/injector.js
IP
File type Unicode text, UTF-8 text, with very long lines (38365)
Hash fb4c94a467ee98235659452c7fcaee86
b7c1068289e359067113872322b8dfea01952b80
0e99d6f4020bb5814873e174d515ef50f55b7dd5ea125081ba7f15980cf78de1
GET /widget/injector.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-e69da972-5c83-4067-8339-90d3f52d256e' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=300
last-modified: Fri, 02 Dec 2022 12:57:18 GMT
etag: W/"28e6c-184d2e9a3b0"
vary: Accept-Encoding
cf-cache-status: HIT
age: 241
server: cloudflare
cf-ray: 773e97a74e310a37-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b25b894b.css
200 OK 418 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b25b894b.css
IP
File type ASCII text, with very long lines (907), with no line terminators
Hash 0ba2188224f315df6562e1955bce1f38
067e1310d27d823be723ec7b1a130b2b10b3a38d
e8a30381a28d76b7c1de7336ef990e8ef330e4c52462eea0d81de9143bb53d11
GET /_nuxt/desktop/default/css/b25b894b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/css
content-length: 418
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-1a2"
expires: Sun, 04 Dec 2022 08:29:58 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38334
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_3.js
200 OK 3.5 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_3.js
IP
File type ASCII text, with very long lines (12964), with no line terminators
Hash 6ce7f9c711eb5879e37abeba61c2bc1b
5005f3143c460096b081e7e68d90f37d64ce575b
232ce1d1cd08957cd3bdd489d5f08827fc978ccc1a353a3842ccef0c0e93f280
GET /genfiles/cms/betstemplates/bets_model_short_us_3.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/javascript
content-length: 3528
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"4c73d9fe2b39ba4d7255c23314a004f7"
expires: Sat, 03 Dec 2022 19:03:00 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 484
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_37.js
200 OK 3.8 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_37.js
IP
File type ASCII text, with very long lines (15145), with no line terminators
Hash 7e9b1bbfaf94c3eac1bba66e7bf5033b
72404c11ea3d8c1fa3545e9827c758a3cc07a09a
1087b6d777f0018d013fba0391eb2fbbba84ea1b29d745a12416b7869a6b12ce
GET /genfiles/cms/betstemplates/bets_model_short_us_37.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/javascript
content-length: 3793
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"ba56011e0c8fa67477df02dbba5956ac"
expires: Sat, 03 Dec 2022 19:07:53 GMT
last-modified: Sat, 03 Dec 2022 12:06:51 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 190
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_24.js
200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_24.js
IP
File type ASCII text, with very long lines (15629), with no line terminators
Hash d25467250621ee913d368f7ddfaa75b7
bc87da4b0e471baaf6df4283c6f9a3cb7fb2bc42
35ed98cea906d7b455adeadb1362375891cd06012bfbd8ffc51e1ac04861f83d
GET /genfiles/cms/betstemplates/bets_model_short_us_24.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/javascript
content-length: 3897
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"1311b05b0870721b7fb96a0a894a1565"
expires: Sat, 03 Dec 2022 19:08:26 GMT
last-modified: Sat, 03 Dec 2022 12:06:51 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 235
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_1.js
200 OK 2.6 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_1.js
IP
File type ASCII text, with very long lines (10098), with no line terminators
Hash 96c6d2a33eb4ae78ca1fc9f6d863b6cd
ef42c753c3e045f2288309c4af9ca9bf47812930
da07421eae9eca7d18e9bd3513d9851488faea057e25f6037e506b1efbc57603
GET /genfiles/cms/betstemplates/bets_model_short_us_1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/javascript
content-length: 2572
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"f9f18ba9c9be3c1a92f049dfd8271bda"
expires: Sat, 03 Dec 2022 19:04:13 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 388
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_2.js
200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_2.js
IP
File type Unicode text, UTF-8 text, with very long lines (11096), with no line terminators
Hash 2be1e642b64034dab3b48f29dab05103
73339595bae9194bde19974e6cc84dad3349ae0f
16461298dd5beccfecd7505bfbec4a9617af658ba911a93364e22b09fa1c6a5f
GET /genfiles/cms/betstemplates/bets_model_short_us_2.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/javascript
content-length: 2719
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"fc5011dbe75dc2c6e5ae808c3e05bc6f"
expires: Sat, 03 Dec 2022 19:01:47 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 539
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_11.js
200 OK 3.5 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_11.js
IP
File type ASCII text, with very long lines (14112), with no line terminators
Hash 3b384693268c2cf2e36537b5488aa2bb
077b120b17c7e8a78537efdd33fd257db56817dd
4414a474e6eefb0ca26d7d29613ff438930e857f816d932c619b05ef8d49d254
GET /genfiles/cms/betstemplates/bets_model_short_us_11.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:41 GMT
content-type: text/javascript
content-length: 3535
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"399218d54c527ba43e471101ca0ca735"
expires: Sat, 03 Dec 2022 19:03:40 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 422
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094520053
200 OK 145 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094520053
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1670094520053 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/internal/v1/proof_of_age
204 No Content 0 B URL HTTP/2 lite-1x36781678.top/web-api/api/internal/v1/proof_of_age
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/proof_of_age HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
cache-control: no-cache, private
server-timing: p;dur=41, dt_285;dur=47
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&marketType=1
200 OK 4.2 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&marketType=1
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (26846), with no line terminators
Hash 15a6b670bd24aea2d7903d7501d04fa3
a8a0d84cbfca7696e487942c2e00398a333364ea
1c9e7d4e6242fc00a4433f44d3530e49cd3f4749027a9ffb16cae67d9c64a910
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&marketType=1 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: application/json; charset=utf-8
content-length: 4183
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/weblightapi/getpopulareventparams
200 OK 135 B URL HTTP/2 lite-1x36781678.top/web-api/weblightapi/getpopulareventparams
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e4cfdceed510b70219f3f8d34f460b7a
4ea91886eaf4bc54b80fa8d5fc01291073f3ffec
3d30beb47c4f5b41ad05baa30ff0b519d4423c8ee4f03b7acd734e2978361e23
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/weblightapi/getpopulareventparams HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: application/json; charset=utf-8
content-length: 135
server-timing: dt_285;dur=56
set-cookie: is_rtl=1; expires=Sun, 03-Dec-2023 19:08:42 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Sat, 10-Dec-2022 19:08:42 GMT; Max-Age=604800; path=/
v3fr=1; expires=Tue, 06-Dec-2022 19:08:42 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/e33e0016.css
200 OK 850 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/e33e0016.css
IP
File type ASCII text, with very long lines (5264), with no line terminators
Hash 46f55f61fae6594089c4925548b925f0
848e3a6ae35c90110e3928b612b749989af27a41
04cda2a426406fb16bd1ccf9680b26b6c1b73eab9c60bc589963d37378e5d5ae
GET /_nuxt/desktop/default/css/e33e0016.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: text/css
content-length: 850
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-352"
expires: Sun, 04 Dec 2022 08:55:52 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 36771
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/faf2f9e2.modern.js
200 OK 2.3 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/faf2f9e2.modern.js
IP
File type ASCII text, with very long lines (7766), with no line terminators
Hash bb84c24426618f059bc5c5d9f5c792fd
8492a889bab444fb56736c231c8b6a4f66e6478c
65dfd37d566ed88a5160a0799e3aed641e6b99acc5add467e57f25f1d3d93874
GET /_nuxt/desktop/default/faf2f9e2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 2323
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-913"
expires: Sun, 04 Dec 2022 14:25:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17074
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-5671CMJ6T4>m=2oebu0&_p=897206204&cid=595620684.1670094520&ul=en-us&sr=1280x1024&_s=1&sid=1670094519&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&dt=Football%20%E1%90%89%20Argentina%20-%20Australia%20%3A%20FIFA%20World%20Cup%202022%20%E1%90%89%20Live%20sports%20betting%20%E1%90%89%20%221xBET%22%20%E1%90%89%20lite-1x36781678.top&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-5671CMJ6T4>m=2oebu0&_p=897206204&cid=595620684.1670094520&ul=en-us&sr=1280x1024&_s=1&sid=1670094519&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&dt=Football%20%E1%90%89%20Argentina%20-%20Australia%20%3A%20FIFA%20World%20Cup%202022%20%E1%90%89%20Live%20sports%20betting%20%E1%90%89%20%221xBET%22%20%E1%90%89%20lite-1x36781678.top&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5671CMJ6T4>m=2oebu0&_p=897206204&cid=595620684.1670094520&ul=en-us&sr=1280x1024&_s=1&sid=1670094519&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&dt=Football%20%E1%90%89%20Argentina%20-%20Australia%20%3A%20FIFA%20World%20Cup%202022%20%E1%90%89%20Live%20sports%20betting%20%E1%90%89%20%221xBET%22%20%E1%90%89%20lite-1x36781678.top&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lite-1x36781678.top
date: Sat, 03 Dec 2022 19:08:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-7JGWL9SV66>m=2oebu0&_p=897206204&cid=595620684.1670094520&ul=en-us&sr=1280x1024&_s=1&sid=1670094519&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&dt=Football%20%E1%90%89%20Argentina%20-%20Australia%20%3A%20FIFA%20World%20Cup%202022%20%E1%90%89%20Live%20sports%20betting%20%E1%90%89%20%221xBET%22%20%E1%90%89%20lite-1x36781678.top&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7JGWL9SV66>m=2oebu0&_p=897206204&cid=595620684.1670094520&ul=en-us&sr=1280x1024&_s=1&sid=1670094519&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&dt=Football%20%E1%90%89%20Argentina%20-%20Australia%20%3A%20FIFA%20World%20Cup%202022%20%E1%90%89%20Live%20sports%20betting%20%E1%90%89%20%221xBET%22%20%E1%90%89%20lite-1x36781678.top&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=2oebu0&_p=897206204&cid=595620684.1670094520&ul=en-us&sr=1280x1024&_s=1&sid=1670094519&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&dt=Football%20%E1%90%89%20Argentina%20-%20Australia%20%3A%20FIFA%20World%20Cup%202022%20%E1%90%89%20Live%20sports%20betting%20%E1%90%89%20%221xBET%22%20%E1%90%89%20lite-1x36781678.top&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lite-1x36781678.top
date: Sat, 03 Dec 2022 19:08:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/football/bg.webp
200 OK 36 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/football/bg.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aba1eff9e4049600dd1a364251190057
346e9568a72e4f405c6364f58c45380a64107c82
aaf8ff644a41c6f97fe58bf579db9475edb0b9632eee317d45c7ffba359ea461
GET /genfiles/cms/1-285/desktop/scoreboard/football/bg.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: application/octet-stream
content-length: 35494
cache-control: public, max-age=120, s-maxage=600
etag: "aba1eff9e4049600dd1a364251190057"
expires: Sat, 03 Dec 2022 19:07:32 GMT
last-modified: Tue, 08 Dec 2020 07:35:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 190
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/12601.png
200 OK 10 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/12601.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cf0f619dd7329e71629341b471df0d70
22ea5772d8aa07884ec1ac1f2e24766392b07a6f
0725586b42b307c9d910d342414285b71df9391009d650b4302613323f73f6e4
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/12601.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0; tzo=0; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: image/png
content-length: 10248
x-amz-id-2: F1LHRYGJFMfTQpggoRzAtXOjK/wfCoeXHIkMPu278vmRL/BLfvTd0nFuBuO/tTL96vEIF0m/hVWbnF4f6fwkYQ==
x-amz-request-id: SFASZ9MQG0ZT7RPM
last-modified: Tue, 13 Aug 2019 14:52:37 GMT
etag: "cf0f619dd7329e71629341b471df0d70"
x-amz-version-id: bH4DUdwtrpD0R2GZ1NhSnA1AxTpq7U7R
expires: Sun, 04 Dec 2022 19:08:42 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/12759.png
200 OK 13 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/12759.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e9c33ff3cb0f246e67cd0ce669b6c153
93ffc0086a3bbcc577302ca0ed16b4a305018ee7
268bb3752bc873f4a26c4c13380b8ed2bab575ecffe2525385171dae177956ed
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/12759.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0; tzo=0; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: image/png
content-length: 12817
x-amz-id-2: 2yQWHhcTeXhSlNrzgXGZrLX40FVCjU5N3bfWUSRl2LHPCwD/QdlyK/mfhljRKOF0V6z6D/19eC3gNEC67HHNEg==
x-amz-request-id: SFAKSX3H843AEB7A
last-modified: Tue, 13 Aug 2019 14:52:42 GMT
etag: "e9c33ff3cb0f246e67cd0ce669b6c153"
x-amz-version-id: pJWehdpggqBOeIKGR0FMKXUgNQv.lqnN
expires: Sun, 04 Dec 2022 19:08:42 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/SubscriptionService/api/GetEventTypesByGameId?lng=us&gameId=416459782&Source=0
200 OK 164 B URL HTTP/2 lite-1x36781678.top/service-api/SubscriptionService/api/GetEventTypesByGameId?lng=us&gameId=416459782&Source=0
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash b463492422c9cd868a1d5cd420806545
f10054f5d6c39c02b2dfaf5c4bd994c3560588ad
3fa26d06afbaf63073a48d9b6dc5ebd4189cb00a98b2b1a7fe6a29f3412bc372
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/SubscriptionService/api/GetEventTypesByGameId?lng=us&gameId=416459782&Source=0 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8; _ga=GA1.1.595620684.1670094520; _gid=GA1.2.1684621505.1670094520; _ga_5671CMJ6T4=GS1.1.1670094519.1.1.1670094519.0.0.0; _ga_7JGWL9SV66=GS1.1.1670094519.1.1.1670094519.0.0.0; tzo=0; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:42 GMT
content-type: application/json; charset=utf-8
content-length: 164
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/config/getVideoAccessConfig
200 OK 8.5 kB URL HTTP/2 lite-1x36781678.top/web-api/external-api/config/getVideoAccessConfig
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (46448), with no line terminators
Hash e940951038f59cf5d87707eff3667084
0dc0d97da105e8a2b5247fbb2ddbd0de0968a737
f21c5b41040aadb97a4a5c7da15e6d2c87c7758dbbdb6c3a60693d9f7ddf6f8e
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/config/getVideoAccessConfig HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=54, dt_285;dur=57
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 379a4a1b95d3aa3c5a4f8e7f9abb030f
d45dceb3dc58a07197aa5077582b5b1cd2ff791a
1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V4Z3TZtTDMjnyxZx7VdJrKtZ-PbZkWnsQ0-1eFDem4TVyRGvk0dc7A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:39:57 GMT
age: 77326
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/football/bg.jpg
200 OK 51 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/football/bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x480, components 3\012- data
Hash 604d8166464f873e51ef1ecbcb36505c
13d51eb88b9b9c18dabc83f30ee2780f09026995
fecb69ff811d815889608f5a9f2466387dae92cf2db23fce56db7e05e0c4db00
GET /genfiles/cms/1-285/desktop/scoreboard/football/bg.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:44 GMT
content-type: image/jpg
content-length: 51418
cache-control: public, max-age=120, s-maxage=600
etag: "604d8166464f873e51ef1ecbcb36505c"
expires: Sat, 03 Dec 2022 19:01:15 GMT
last-modified: Sat, 07 Nov 2020 10:56:00 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 569
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/80e28604.modern.js
200 OK 960 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/80e28604.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (2008), with no line terminators
Hash 5096394c7e2179fdbda74460c7da4465
496218fd7af04d25a402e6aa4d1420e15800edae
80b9cd92cdb7ab63eb24a0175c3cf76c1c8011160d74fc9806dc430b2081726f
GET /_nuxt/desktop/default/80e28604.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:08:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 960
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-3c0"
expires: Sun, 04 Dec 2022 14:23:36 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17108
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/sports-200061.svg
200 OK 0 B URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/sports-200061.svg
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/sports-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:39 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-52ce3"
expires: Sun, 04 Dec 2022 18:31:20 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/translation-api/by-lang/us
200 OK 0 B URL HTTP/2 lite-1x36781678.top/translation-api/by-lang/us
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /translation-api/by-lang/us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280; che_g=a2c10443-7999-f03d-336a-2a345ab57bc8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
302 Found 0 B URL HTTP/2 lite-1x36781678.top/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sat, 03 Dec 2022 19:08:36 GMT
location: /us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
reason-v3: empty_lang
server-timing: total;dur=157;desc="Nuxt Server Time", dt_285;dur=615
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: platform_type=desktop; Path=/; Expires=Tue, 06 Dec 2022 19:08:35 GMT
auid=sv0OpmOLnrSfRCInBEcjAg==; expires=Sun, 03-Dec-23 19:08:36 GMT; path=/
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/line/qatar/football/1938952-fifa-world-cup-2022/153458541-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLnrSfRCInBEcjAg==; SESSION=194f1710bd3c54686d2719c853ae17b6; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:08:40 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=31, dt_285;dur=33
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
178.253.14.166
142.250.74.110
104.16.43.72
93.184.220.29
95.101.11.115