lite-1x36781678.top/fr/registration
301 Moved Permanently 162 B URL HTTP/1.1 lite-1x36781678.top/fr/registration
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert quad9 Sinkholed
GET /fr/registration HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 04 Dec 2022 08:50:10 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://lite-1x36781678.top/fr/registration
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6483
Expires: Sun, 04 Dec 2022 10:38:14 GMT
Date: Sun, 04 Dec 2022 08:50:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14300
Expires: Sun, 04 Dec 2022 12:48:31 GMT
Date: Sun, 04 Dec 2022 08:50:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5287
Cache-Control: max-age=97748
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:11 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:59:19 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9aYeyQ4JPzGTxQARwl7xv+BdsNQPRnximtrlP0KyBF3tp5HMMvAImnSV74pw8kZEmFav0ZRBdus=
x-amz-request-id: SHPNZ73294ZJKCWR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 08:46:54 GMT
age: 197
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 08:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1907
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 002be102dd57b317506b54febc9d7113
92f2230c7d738562a77926d0545f5f38c9d00432
c283d3b81594fa9b1108275afdc01e85369d7925704bb2b9836d03cc6a70b478
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C283D3B81594FA9B1108275AFDC01E85369D7925704BB2B9836D03CC6A70B478"
Last-Modified: Thu, 01 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11047
Expires: Sun, 04 Dec 2022 11:54:18 GMT
Date: Sun, 04 Dec 2022 08:50:11 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:50:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=324170,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77434b06bc44b50b-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:50:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=324170,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77434b06b853b527-OSL
v3.traincdn.com/_nuxt/desktop/default/css/fd164971.css
200 OK 49 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/fd164971.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8968e23d9c549d4b23fcd81fdb1d1928
f5d94ae466ab07e1a7407bcbc54f1ef3f72e95f3
ff2d03f5afdd375af01c45ab2497f9ff278aea674906c0ce41f2de63a9ab1826
GET /_nuxt/desktop/default/css/fd164971.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:11 GMT
content-type: text/css
content-length: 48612
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6842-bde4"
expires: Sun, 04 Dec 2022 13:12:52 GMT
last-modified: Fri, 02 Dec 2022 21:04:02 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 70639
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/08ae13d6.js
200 OK 680 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/08ae13d6.js
IP
File type Unicode text, UTF-8 text, with very long lines (65439)
Size 680 kB (679615 bytes)
Hash 1c724d41810b1c379890311f48ee384c
de3573ad97183a859449edbe8d3cc4a38bd32db8
f01ef530688696335bd477da05ca9c5a2ab54c7fd5bf5ad632c38fb43f7fe5cf
GET /_nuxt/desktop/default/08ae13d6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 679615
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5363-a5ebf"
expires: Sun, 04 Dec 2022 14:23:51 GMT
last-modified: Sat, 03 Dec 2022 13:47:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66406
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/401c3cac.css
200 OK 85 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/401c3cac.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d33ac876fe09b4b1b5377dec529365fe
3f9371f5407db1c5d10f256df9f4ddbe20efec5a
aaf39f64e48927af2b32d3060792634569e7455c56d4dcffe3336a7e5a9bfa61
GET /_nuxt/desktop/default/css/401c3cac.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:11 GMT
content-type: text/css
content-length: 85396
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-14d94"
expires: Sun, 04 Dec 2022 14:23:15 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66423
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:50:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=324170,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77434b06cbe81bfa-OSL
v3.traincdn.com/_nuxt/desktop/default/7a067df7.js
200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/7a067df7.js
IP
File type ASCII text, with very long lines (18343), with no line terminators
Hash 6444a4a387370876bd81297b66f84e4e
a824123c25a05978b4e773ced6b82a90283554d5
d20cf2c06a57daa2db0a212edf83a9c2c8a2efbc4c92bb28ca7618b4da68bd01
GET /_nuxt/desktop/default/7a067df7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 6949
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5363-1b25"
expires: Sun, 04 Dec 2022 14:24:17 GMT
last-modified: Sat, 03 Dec 2022 13:47:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66405
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/fr/registration
200 OK 602 kB URL HTTP/2 lite-1x36781678.top/fr/registration
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59982)
Size 602 kB (602538 bytes)
Hash 48e85cc2b79a2570fe0837a33b6cfdae
62f3af378e0730ea1cea504f45ac01527f666923
1f127d7fe03b4fdcd3406dd9ef7ec55629239a32f5b4a85e42983e153516831e
Analyzer Verdict Alert quad9 Sinkholed
GET /fr/registration HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:11 GMT
content-type: text/html; charset=utf-8
accept-ranges: none
content-encoding: gzip
server-timing: total;dur=1;desc="Nuxt Server Time", dt_285;dur=2
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: platform_type=desktop; Path=/; Expires=Wed, 07 Dec 2022 08:50:11 GMT
auid=sv0OpmOMX0OT+SI7BI0qAg==; expires=Mon, 04-Dec-23 08:50:11 GMT; path=/
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5273
Cache-Control: max-age=92673
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:11 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 10:34:44 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 08:11:19 GMT
cache-control: public,max-age=3600
age: 2332
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:50:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=324170,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77434b06b9fbb4fa-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:50:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=324170,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77434b06cea4fac8-OSL
v3.traincdn.com/_nuxt/desktop/default/0422ee0b.js
200 OK 108 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/0422ee0b.js
IP
File type ASCII text, with very long lines (65479)
Size 108 kB (108005 bytes)
Hash 1c6b033437f61f8b56580833f0ac3e29
7ee63c0d10f508b01ea940aec4604f1aa4559cff
d61490154d9f211c942d900dc09e4698cfbd02ba9a93a7e56793c1428b690a20
GET /_nuxt/desktop/default/0422ee0b.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 108005
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5363-1a5e5"
expires: Sun, 04 Dec 2022 14:23:51 GMT
last-modified: Sat, 03 Dec 2022 13:47:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66407
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/version.json
200 OK 44 B URL HTTP/2 v3.traincdn.com/version.json
IP
Hash cff9589e069b136ed454cd48e4bb82fc
24f3cc8ed7a188402216f541f50f58f3fb75a755
2ff0594e6b3ae108093d527b95768f1d56e1a120a6d8e72d2bf90326ab1835af
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "638b559a-2c"
expires: Sun, 04 Dec 2022 08:50:44 GMT
last-modified: Sat, 03 Dec 2022 13:56:42 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 28
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/6d7dc617.modern.js
200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/6d7dc617.modern.js
IP
File type ASCII text, with very long lines (18205), with no line terminators
Hash cf97b3c17d13ba417ac5494484e54eb5
2ac797ee8d6b542828bf00c26d8a7d8b8930094d
ecb5f95bd7adc1744469ccaf946287d58b511160616053c26f85b017e6898f57
GET /_nuxt/desktop/default/6d7dc617.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 6922
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-1b0a"
expires: Sun, 04 Dec 2022 14:23:10 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66424
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/6c313d21.modern.js
200 OK 93 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/6c313d21.modern.js
IP
File type Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (65466)
Hash 5ef3537fbd515d48de5692097ff0b73c
9aa0e38e0fdb4d15c54c04ad978a315a190e72f6
7b9860c137a093a7889b36a86f40b8713d9fd03b74cb04ebe4172690ecde87ba
GET /_nuxt/desktop/default/6c313d21.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 93447
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-16d07"
expires: Sun, 04 Dec 2022 14:23:17 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66422
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/2fa387b6.modern.js
200 OK 661 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/2fa387b6.modern.js
IP
File type ASCII text, with very long lines (65479)
Size 661 kB (660957 bytes)
Hash b9e3f233870318cf81504e8d6a9d054f
0186d8b58cbdc7bf531a24b0d690b8b20271c044
46ba73ce61b83c6bf3cb381213beffb9d2c35b784138857a35d4660350783c47
GET /_nuxt/desktop/default/2fa387b6.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 660957
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-a15dd"
expires: Sun, 04 Dec 2022 14:23:15 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66422
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/2ce3797c.modern.js
200 OK 538 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/2ce3797c.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 538 kB (538265 bytes)
Hash 6ff9a1fa19f3c3df39f01a61394f268e
4d4a8d48714b988aa3f6670d36c99e6590da594b
a76d058ec16b75c004dd1b5d68ef371dcc77444bbd1d3ff7cefbe03c44945411
GET /_nuxt/desktop/default/2ce3797c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 538265
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-83699"
expires: Sun, 04 Dec 2022 14:23:11 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66424
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
200 OK 352 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dff72d4146e35a8262e6845d13a8df0
a291af970d3955b35c314e85712ceea3aca25d54
a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: image/png
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eRUa+0YYEbaZu3MgLIxfcQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: j4n2zXEVD95GFnY6Uiw06AkPBjM=
lite-1x36781678.top/_nuxt/desktop/default/css/957b3b12.css
200 OK 632 B URL HTTP/2 lite-1x36781678.top/_nuxt/desktop/default/css/957b3b12.css
IP
File type ASCII text, with very long lines (2717), with no line terminators
Hash b2728c192fb68b0ee850c6100bd18402
e56f52df2cfbbcd7f37aeddaf4bfcda1b586bbc8
e65d8128dccdb3dccb68c0749161a6307c87dbd000646ce77a4768fca83c627f
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/css/957b3b12.css HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: text/css
content-length: 632
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
vary: Accept-Encoding
etag: "638b5466-278"
content-encoding: gzip
expires: Sun, 04 Dec 2022 09:50:12 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/desktop/default/ad21b456.modern.js
200 OK 910 B URL HTTP/2 lite-1x36781678.top/_nuxt/desktop/default/ad21b456.modern.js
IP
File type ASCII text, with very long lines (2513), with no line terminators
Hash 27bba099a2bf2224f23689975f6cf387
4ae4bbf7e2621aabf7060aa9402bd3cdc6ba35cf
a5c4f39a6b6fc993b5ab63c4f2f3a094c18f5650c41ee2ddc5883a3823ebaedd
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/ad21b456.modern.js HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 910
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
vary: Accept-Encoding
etag: "638b5466-38e"
content-encoding: gzip
expires: Sun, 04 Dec 2022 09:50:12 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670143810737
200 OK 145 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670143810737
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1670143810737 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:13 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/pwa
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4766fd1b2ba2e236fd9364587f99ab
eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b
Analyzer Verdict Alert quad9 Sinkholed
GET /pwa HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x36781678.top/fr/registration
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:13 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=167
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Sun, 04 Dec 2022 11:06:18 GMT
Date: Sun, 04 Dec 2022 08:50:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Sun, 04 Dec 2022 11:06:18 GMT
Date: Sun, 04 Dec 2022 08:50:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Sun, 04 Dec 2022 11:06:18 GMT
Date: Sun, 04 Dec 2022 08:50:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Sun, 04 Dec 2022 11:06:18 GMT
Date: Sun, 04 Dec 2022 08:50:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Sun, 04 Dec 2022 11:06:18 GMT
Date: Sun, 04 Dec 2022 08:50:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 39631
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 10493
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1a6f4805f59db44f9d3520d88701a58
6a0258e8c97ce09f1723382c8a16d9682b7dc50c
ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7503
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZjCGkVIAMFpsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:23:21 GMT
age: 5212
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F757562c1-a4bf-4a51-bf99-64f3a0d51840.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F757562c1-a4bf-4a51-bf99-64f3a0d51840.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c37ed587ee5e3fbdc8cab86ef1345f9
364a32a224b2cacc26b138d57a8945c191e537b1
3c66654da4670e0d5ec87afb6c62f0a420d90875c57b280710f2592269a9303e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F757562c1-a4bf-4a51-bf99-64f3a0d51840.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8285
x-amzn-requestid: 882c673f-4e3f-4f84-a51d-bbac56f716eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAAEWUoAMFWuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-3a2c571d6272b3493ec2a1c5;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DX2amuyEjkaWng9x7x8TknBMeXzYPSW7pimxhVkcwOPPPbKrX0beQQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:24 GMT
etag: "364a32a224b2cacc26b138d57a8945c191e537b1"
content-type: image/jpeg
age: 39589
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1521243a6fc065bb631bfbde22886fa2
527220e4e8cd1065ce05fcd0694d0d703d817e2e
b83ebf768bbfb34f49d5467f3dfb43ceb3ca3d30d3454e6f37db9aef72d7689a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11482
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clssNEeAoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:17:35 GMT
age: 37958
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 591104ff3c76193fe3c24fbbbb332f7d
aa134912d4f5ddfb371c45d9975506246af68400
af0cbb5c37c901019c1e684fe9a019bb7a2fb8359909ab831b7ff86cbc3d0fec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9356
x-amzn-requestid: 11f22578-a356-4f74-99bf-6d8462e25fdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ckdKGG8RIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b4240-5c5fa5332d60db084c8d3bb6;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 12:34:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QjicIljz29ZU_XTAeiVG5u_Y6unOHCN1CzOBdtnyDRckYwsPkWToBg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:29:03 GMT
age: 12070
etag: "aa134912d4f5ddfb371c45d9975506246af68400"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lite-1x36781678.top/frontend-api/site-conf/getLangs
200 OK 15 kB URL HTTP/2 lite-1x36781678.top/frontend-api/site-conf/getLangs
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (51803), with no line terminators
Hash a02e1e30dc76697e051554ff7eced4b4
4bf13bd5a9a49e1ec1192743223edd2b8a8be123
313ebcad22b167e57d05d4cf5da837e0a767a6dd6f5a5c839dda06c1e8e37f4e
Analyzer Verdict Alert quad9 Sinkholed
GET /frontend-api/site-conf/getLangs HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:13 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
etag: W/"1071-79Kx18hVT1gI93nXZUImTDw0xHE"
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/internal/v1/blocks/check
204 No Content 0 B URL HTTP/2 lite-1x36781678.top/web-api/api/internal/v1/blocks/check
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/blocks/check HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Dec 2022 08:50:13 GMT
cache-control: no-cache, private
server-timing: p;dur=31, dt_285;dur=108
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/90006408.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/90006408.modern.js
IP
File type ASCII text, with very long lines (2510), with no line terminators
Hash abf17d602c1b2b0f79a3251e371e2acb
5fe8be0b97b207f8cd378b9850b62db4536d5321
7646a5a971815fc3cd8b7d9a672ecf34293792ae4ec080ee49524da5319b96dc
GET /_nuxt/desktop/default/90006408.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 1084
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-43c"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66418
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/version.json?timestamp=1670143811832
200 OK 44 B URL HTTP/2 lite-1x36781678.top/version.json?timestamp=1670143811832
IP
Hash cff9589e069b136ed454cd48e4bb82fc
24f3cc8ed7a188402216f541f50f58f3fb75a755
2ff0594e6b3ae108093d527b95768f1d56e1a120a6d8e72d2bf90326ab1835af
Analyzer Verdict Alert quad9 Sinkholed
GET /version.json?timestamp=1670143811832 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 44
last-modified: Sat, 03 Dec 2022 13:56:42 GMT
vary: Accept-Encoding
etag: "638b559a-2c"
content-encoding: gzip
expires: Sun, 04 Dec 2022 08:51:14 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ab7d8171be0adeb15a77f07372a4e70e
eab3ab40f91268763d26c9738b54c64fe6f05b51
126bb7dd8761211cb6608e3abc4572459ea67efbe81fc8b1b3a057cdc2786407
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6273
Cache-Control: max-age=117062
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:14 GMT
Etag: "638b6d0b-1d7"
Expires: Mon, 05 Dec 2022 17:21:16 GMT
Last-Modified: Sat, 03 Dec 2022 15:36:43 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=UA-178408567-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP
File type ASCII text, with very long lines (1921)
Hash 3839571d3075ac1f0a414558d39a353c
990398b899eb3a4569d1be2c54aead90f5f04451
aae1a8efe1254f509d63b663c9ffa36d8aae2854a26d74873fe87a0bf30bc464
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Dec 2022 08:50:14 GMT
expires: Sun, 04 Dec 2022 08:50:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44740
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x36781678.top/checker/redirect/stat/run/
200 OK 49 B URL HTTP/2 lite-1x36781678.top/checker/redirect/stat/run/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b7a9075de81cdb1a9fa74fa71b5126dd
9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20
Analyzer Verdict Alert quad9 Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/web-api/api/internal/v1/sessions/user
200 OK 6.5 kB URL HTTP/2 lite-1x36781678.top/web-api/api/internal/v1/sessions/user
IP
Hash 0c9dec8bb5480f6d30269fff3d8aef3c
b10ac7b63151ea8c5863624411843375fca137af
e1d22a692cd78603939137a565e538e897fbf1fc7ebd1bb199c33a6753207a29
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/sessions/user HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=27, dt_285;dur=28
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/51738160.modern.js
200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/51738160.modern.js
IP
File type ASCII text, with very long lines (13517), with no line terminators
Hash d165cee756c682d135e866f2b182bfe0
bddceed592c6a7859d8dd93a25560fae4de689ea
45ffc16dc0024935303225b2a65464661d63473dc3d29558a43146958b683025
GET /_nuxt/desktop/default/51738160.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 5376
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-1500"
expires: Sun, 04 Dec 2022 14:23:31 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66419
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/d201753e.modern.js
200 OK 26 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/d201753e.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 75efea6edd66a264040dca4b8e0b315f
326d0997d19a7d2bf5fc35f5438963660980e307
ea31dcedeca74f0bd23b3daa4b2a96f244b08d24091df896460a5e6032c7fc55
GET /_nuxt/desktop/default/d201753e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 26120
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-6608"
expires: Sun, 04 Dec 2022 14:23:33 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66419
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_express_day/fr/dictionary_f2176601d0b69bd8bfde614262ba3072.json
200 OK 420 B URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_express_day/fr/dictionary_f2176601d0b69bd8bfde614262ba3072.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (414), with no line terminators
Hash df84a28a47156ca1ae87cb2a51f24f4f
9a47e115a912a23109f581e941e5375a27544e06
63f0b8397d299535b1017307a7e902ac0d4e16f43984c046f398de87e650441d
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_express_day/fr/dictionary_f2176601d0b69bd8bfde614262ba3072.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
content-length: 420
last-modified: Fri, 02 Dec 2022 17:06:56 GMT
x-rgw-object-type: Normal
etag: "df84a28a47156ca1ae87cb2a51f24f4f"
cache-control: max-age=31536000
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_identification_modal/fr/dictionary_debb68ff805fa6343e4a7eca384f7eec.json
200 OK 355 B URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_identification_modal/fr/dictionary_debb68ff805fa6343e4a7eca384f7eec.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (349), with no line terminators
Hash 05682af6e97501a8f66795dd6b48b6a3
30a765fdb93334d9a3c0427811ee9a1b795b59b9
e39285a9b9e1a346608bda699a5fa2904ec77592a6fc617d6f92b0cf64f4f499
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_identification_modal/fr/dictionary_debb68ff805fa6343e4a7eca384f7eec.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
content-length: 355
last-modified: Fri, 02 Dec 2022 17:07:02 GMT
x-rgw-object-type: Normal
etag: "05682af6e97501a8f66795dd6b48b6a3"
cache-control: max-age=31536000
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 08:41:08 GMT
expires: Sun, 04 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 546
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_forgot_password/fr/dictionary_09682583fc79e76f4f0630476bd878d1.json
200 OK 2.1 kB URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_forgot_password/fr/dictionary_09682583fc79e76f4f0630476bd878d1.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (3699), with no line terminators
Hash 84a38d6e76fb09c661e7483104765469
c4e625a26692ca1fe15e86dffea4829c9ef0815d
0c4592f63d1e09e52a6368c4457af6c6cb66245667c823ef81ae9c5046b698f2
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/fr/dictionary_09682583fc79e76f4f0630476bd878d1.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:46 GMT
x-rgw-object-type: Normal
etag: W/"2ec3b791166b6ee54c737946203b53d9"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/media-api/external/v1/actual-list/285
200 OK 2.1 kB URL HTTP/2 lite-1x36781678.top/media-api/external/v1/actual-list/285
IP
Hash 54fac764fd80d5e7f27a435031b3e906
241decab5c4e917636db9ba326f6c247ab64d334
1946d993394a60194520f74e816bdbc9aa9520a798c670ea84a9cff5e67ab779
Analyzer Verdict Alert quad9 Sinkholed
GET /media-api/external/v1/actual-list/285 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
access-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE
access-control-allow-origin: https://gitlab.xbet.lan,https://doc.office.lan
content-encoding: gzip
server-timing: dt_285;dur=2
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_verify/fr/dictionary_ad177f3eee313f5dc39802b1f79739bd.json
200 OK 1.1 kB URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_verify/fr/dictionary_ad177f3eee313f5dc39802b1f79739bd.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1441), with no line terminators
Hash ded7095f8ff13465b5475336290d2162
fecd5acecaf1666874e492bddef84a9368b19975
13e248c3c5c778bdf1b65d9c54625e48118408e0efaecb96132c7efcc51ffeae
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_verify/fr/dictionary_ad177f3eee313f5dc39802b1f79739bd.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:45 GMT
x-rgw-object-type: Normal
etag: W/"a0edec1fc9364c49e34a3986b3980d5f"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/converslon/load
200 OK 3.0 kB URL HTTP/2 lite-1x36781678.top/web-api/api/converslon/load
IP
Hash 57d8684ac3773a7d739fa4c7978e33c8
21a47935039955a929fd6fb3be642cc8c227b33a
9cff5121bfc3e1fba5bf3b4c8e383a36294b6905fa024f509a2901f0096b2f18
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/converslon/load HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=23, dt_285;dur=24
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/ce09588991267216069e3c0dcdebaffa.json
200 OK 442 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/ce09588991267216069e3c0dcdebaffa.json
IP
File type JSON data\012- , ASCII text
Hash 54c4965591cf536aa8edeb5916bf603c
66decad71bb0a6f8fba35b116e075b71fcea8362
8da60f8a293eca79b4db46c1e22e9167a4920f198c0537cb56bda9707abb4e67
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/ce09588991267216069e3c0dcdebaffa.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 442
last-modified: Tue, 18 Oct 2022 16:09:20 GMT
x-rgw-object-type: Normal
etag: "54c4965591cf536aa8edeb5916bf603c"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
radar.cedexis.com/1593429750/radar.js
200 OK 20 kB URL HTTP/2 radar.cedexis.com/1593429750/radar.js
IP
Hash c1f87c208d95b57475c1c6f2034abe8c
56ec6b6e55aeaa651cea1eb1fbab9539b0490a5b
1a7afd65bfb892d0f204c43db23113bca710b00c9c7380f7ebb3ba30c89b0aa7
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/javascript
last-modified: Mon, 29 Jun 2020 11:30:33 GMT
vary: Accept-Encoding
etag: W/"5ef9d0d9-af5c"
expires: Sun, 18 Dec 2022 08:50:14 GMT
cache-control: max-age=1209600, public
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/seo/metadata?url=https:%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&geo=137&language=fr
200 OK 721 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/seo/metadata?url=https:%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&geo=137&language=fr
IP
File type JSON data\012- , ASCII text
Hash 8a25010cfb39ea55b6e1a80855bdcb22
4e340f21df3e763cce3cd18e8e678cbd8a9d1007
ea72bf92a4c653b11269e8668a07ad8493579052b5699bcb71539bc1eebc8b32
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/seo/metadata?url=https:%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&geo=137&language=fr HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*, application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/vnd.api+json
cache-control: max-age=300, private
server-timing: p;dur=78, dt_285;dur=80
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_game/fr/dictionary_f995bf17787fe34b2484836d6ae71aba.json
200 OK 5.8 kB URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_game/fr/dictionary_f995bf17787fe34b2484836d6ae71aba.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (14500), with no line terminators
Hash 2dc1d6e0fa6f2ce85c04e87d4b47ead2
97fcd43871d6819d4eea299e0f30d1935f9b4858
2683b4ad51e7cd0235629f4ecb838ba31196b0bc6afa853fa53a018dde9b0c59
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_game/fr/dictionary_f995bf17787fe34b2484836d6ae71aba.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:41 GMT
x-rgw-object-type: Normal
etag: W/"d4610283079e6dd80a629fff89b73a92"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/seo/links/canonical?url=https:%2F%2Flite-1x36781678.top%2Ffr%2Fregistration
200 OK 901 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/seo/links/canonical?url=https:%2F%2Flite-1x36781678.top%2Ffr%2Fregistration
IP
File type JSON data\012- , ASCII text
Hash 0c5f2af62c5f702db539f8345faa5735
1965f17431eb7ace5756c06fe00d4b8a2fbd7ab1
9470fb84daf8d1308f2934084fb2c93328af5c21cc301b862911cbeec4146bd5
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/seo/links/canonical?url=https:%2F%2Flite-1x36781678.top%2Ffr%2Fregistration HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*, application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/vnd.api+json
cache-control: max-age=300, private
server-timing: p;dur=94, dt_285;dur=95
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/9ff29c5c1887a22d4ce1cedf1acfe66a.json
200 OK 698 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/9ff29c5c1887a22d4ce1cedf1acfe66a.json
IP
File type JSON data\012- , ASCII text
Hash 48a4ebb89730b25349ec152a0f637144
91d33953b00fa04e71b724ed52245f23d373ce43
429df5feb6040614f975a362627a0088c84ef62b2f89bb3fb6e98fd82f3fcc41
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/9ff29c5c1887a22d4ce1cedf1acfe66a.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 698
last-modified: Wed, 19 Oct 2022 15:58:45 GMT
x-rgw-object-type: Normal
etag: "48a4ebb89730b25349ec152a0f637144"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/2a42eb36fdb4d96f7534daf1596f1926.json
200 OK 222 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/2a42eb36fdb4d96f7534daf1596f1926.json
IP
File type JSON data\012- , ASCII text
Hash 4e0e27377a1e5bcd5f6462f4689bb58e
6d528a6e7626d4b39c8c8089d0fa5d2d22728095
853daf13541ddaabf8001908ab6e97b27653cdc13799127e5fce90be4ea481c8
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/2a42eb36fdb4d96f7534daf1596f1926.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 222
last-modified: Tue, 18 Oct 2022 16:15:36 GMT
x-rgw-object-type: Normal
etag: "4e0e27377a1e5bcd5f6462f4689bb58e"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/727b0ccce8354acfbea779e199f20649.json
200 OK 736 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/727b0ccce8354acfbea779e199f20649.json
IP
File type JSON data\012- , ASCII text
Hash 0aa15e4adc729bb6900444913c1adc1b
12bcd4b2cf3f72a43c3f2e2e68e4b49e22383f70
00006f177798ed80f9ed80c7a941c53a37f2f733bd17f3d6cdc867ee70295d86
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/727b0ccce8354acfbea779e199f20649.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 736
last-modified: Tue, 18 Oct 2022 16:11:35 GMT
x-rgw-object-type: Normal
etag: "0aa15e4adc729bb6900444913c1adc1b"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/3bfe924cc06f2788d738a91eff4573ad.json
200 OK 108 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/3bfe924cc06f2788d738a91eff4573ad.json
IP
File type JSON data\012- , ASCII text
Hash 70da60076a9002c40dd6e21741e20850
2c76fbb219782df6e8281ba00c7c939da8ad83b6
5a20813d1cfe34997e1719761c9cdc799cc2f6a5ff04c828e32cbdfac5831bc6
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/3bfe924cc06f2788d738a91eff4573ad.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 108
last-modified: Fri, 25 Nov 2022 08:28:43 GMT
x-rgw-object-type: Normal
etag: "70da60076a9002c40dd6e21741e20850"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/f21bfac77952011a6e229ba58adae02d.json
200 OK 256 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/f21bfac77952011a6e229ba58adae02d.json
IP
File type JSON data\012- , ASCII text
Hash 39fca623bcf1adfcddf94df7c4a64e56
7ae9112e0a0862e75880d16dd5dc5c08adf374cf
6c44cc918b0c5b8d1d75c6f1cf3c5e5a7818afd703d139ddb6701bb2c9488cf7
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/f21bfac77952011a6e229ba58adae02d.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 256
last-modified: Fri, 25 Nov 2022 13:34:46 GMT
x-rgw-object-type: Normal
etag: "39fca623bcf1adfcddf94df7c4a64e56"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/96edf33f2c6efbf4ef710c804d698cf4.json
200 OK 664 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/96edf33f2c6efbf4ef710c804d698cf4.json
IP
File type JSON data\012- , ASCII text
Hash 68062dbae68ed869d62fb8c5af952d15
11e7d6fd43c8e1857225dcad505e92aa39894218
394175d7ef745dcb58f08975e5ac15b7e8ccad77e1837e120a1d3029b69e60d8
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/96edf33f2c6efbf4ef710c804d698cf4.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 664
last-modified: Wed, 16 Nov 2022 08:19:04 GMT
x-rgw-object-type: Normal
etag: "68062dbae68ed869d62fb8c5af952d15"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/a05018c324ef6aca6b130942443d68ab.json
200 OK 460 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/a05018c324ef6aca6b130942443d68ab.json
IP
File type JSON data\012- , ASCII text
Hash d74cc569d2f38bafb30e38a05ebafdf1
596ca3844150fd05616ce352b0aad63984c6e3e3
5c8a5b17f7dd96a1975ce8940d502970e00baed3f99d6d9fa93cce4cf298c801
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/a05018c324ef6aca6b130942443d68ab.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 460
last-modified: Wed, 09 Nov 2022 07:07:00 GMT
x-rgw-object-type: Normal
etag: "d74cc569d2f38bafb30e38a05ebafdf1"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/67bdaaa57094203478808ca7eb37c94b.json
200 OK 462 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/67bdaaa57094203478808ca7eb37c94b.json
IP
File type JSON data\012- , ASCII text
Hash 088f3849a930b10bc6a23832d99f6500
1870c5ce885e49311279a8336319cae26f8a9f8e
9fa9ad7c324335c6dc8b961683476b0c27e49df91848d4ea48b0a361f454f2a9
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/67bdaaa57094203478808ca7eb37c94b.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 462
last-modified: Thu, 17 Nov 2022 06:08:33 GMT
x-rgw-object-type: Normal
etag: "088f3849a930b10bc6a23832d99f6500"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_identification/fr/dictionary_eb88e836742d824c667f2dc5ed58babe.json
200 OK 4.2 kB URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_identification/fr/dictionary_eb88e836742d824c667f2dc5ed58babe.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (9149), with no line terminators
Hash 216b224a85a91e4e88f1e7e0b909fb3e
8d8ddf0ed8f8ae4c586e6bfa155f0e1a157f3dcc
be562eddb54acf6355dcc1b1bab683f21d24d5bd52365c48239ce82507f55d65
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_identification/fr/dictionary_eb88e836742d824c667f2dc5ed58babe.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:07:02 GMT
x-rgw-object-type: Normal
etag: W/"49b7a111abcdec8fa038e741ae82c7b2"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/1c9e1c7a818ed54c3e5122e3bba03de0.json
200 OK 232 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/1c9e1c7a818ed54c3e5122e3bba03de0.json
IP
File type JSON data\012- , ASCII text
Hash 6e605b2b09c3e9a1aa3376519e70dc38
ec29be81bac6f9cecdea0878a269f5896a1d5e2b
18a297db9c132f46ccc8ccd1a1c84ff6bd334358be05749057ce8d67e38e918a
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/1c9e1c7a818ed54c3e5122e3bba03de0.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 232
last-modified: Sat, 29 Oct 2022 09:22:52 GMT
x-rgw-object-type: Normal
etag: "6e605b2b09c3e9a1aa3376519e70dc38"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/b7c2d85f777a0677ef3baf397653601d.json
200 OK 111 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/b7c2d85f777a0677ef3baf397653601d.json
IP
File type JSON data\012- , ASCII text
Hash faffb5bfe33fdb8649243907d7a94bdf
162710a0dc33e410dcd71ae0d0d668fb5435a12e
0f02c603df2967927c6486280e6fa82b407d37292b42cd2093e63c7736b0f324
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/b7c2d85f777a0677ef3baf397653601d.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 111
last-modified: Thu, 24 Nov 2022 19:45:04 GMT
x-rgw-object-type: Normal
etag: "faffb5bfe33fdb8649243907d7a94bdf"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/523d4e0b96057d7ae896e87678e2dbb5.json
200 OK 228 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/523d4e0b96057d7ae896e87678e2dbb5.json
IP
File type JSON data\012- , ASCII text
Hash 4fce640ac6641a46c85b83607a64693e
b1c2547f9b6ba1c27db78459b11faf8e728a7eb0
01b1223715ae91b226ddacff53d1f7059d6e51f0b70dcd1312e3bbb820e86449
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/523d4e0b96057d7ae896e87678e2dbb5.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 228
last-modified: Fri, 25 Nov 2022 13:48:19 GMT
x-rgw-object-type: Normal
etag: "4fce640ac6641a46c85b83607a64693e"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/f4d7ad12e277e08b7aa2f4d49cb7d822.json
200 OK 300 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/f4d7ad12e277e08b7aa2f4d49cb7d822.json
IP
File type JSON data\012- , ASCII text
Hash 48be76dca522651778b61fef1fd36f9b
197dc7f2871fcd308bad3bce323a80e86979f312
cc3b083e4f73b70afccad87ccf2272d175c9e83571bb59eac40d41ed48c54117
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/f4d7ad12e277e08b7aa2f4d49cb7d822.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 300
last-modified: Wed, 30 Nov 2022 10:46:49 GMT
x-rgw-object-type: Normal
etag: "48be76dca522651778b61fef1fd36f9b"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/d5a8008ac6789180c872f1ebb6f90432.json
200 OK 486 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/d5a8008ac6789180c872f1ebb6f90432.json
IP
File type JSON data\012- , ASCII text
Hash a4673e2782675c79c9bf2e7c64331947
893da4db2afd67a03d554ba66c405dc0675e8f33
7d6f31dd8e17fa7e52892c599bcf290a6268d34b7c9f64b402225257262ad1fe
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/d5a8008ac6789180c872f1ebb6f90432.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 486
last-modified: Thu, 17 Nov 2022 05:13:36 GMT
x-rgw-object-type: Normal
etag: "a4673e2782675c79c9bf2e7c64331947"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/d13a5a780383734f3abde1bcbdbcb87c.json
200 OK 220 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/d13a5a780383734f3abde1bcbdbcb87c.json
IP
File type JSON data\012- , ASCII text
Hash 723b2b0601dbe12d2dcdfd9f007fc8c1
bb855c3cbb9c4d45fa02214c6f3de76b60ad3f10
40b61a67ba21cf03f2cba7833994f2862582fd4fc7ee2e02083193c35f176d1a
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/d13a5a780383734f3abde1bcbdbcb87c.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 220
last-modified: Tue, 22 Nov 2022 11:42:38 GMT
x-rgw-object-type: Normal
etag: "723b2b0601dbe12d2dcdfd9f007fc8c1"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/1becdc1f6b59952249533c880c6880ec.json
200 OK 946 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/1becdc1f6b59952249533c880c6880ec.json
IP
File type JSON data\012- , ASCII text
Hash f41e20627f5e291f984b8554394c55e8
5b9d5e1b273b07f30ee54dfff81e60e90c433adc
20adb747045add70a6f3bcfa2aed39e89b248489cb297829f5e63d695cbfc032
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/1becdc1f6b59952249533c880c6880ec.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 946
last-modified: Wed, 30 Nov 2022 17:34:27 GMT
x-rgw-object-type: Normal
etag: "f41e20627f5e291f984b8554394c55e8"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/22e76df188a133f0bc36a72b3b3f4873.json
200 OK 210 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/22e76df188a133f0bc36a72b3b3f4873.json
IP
File type JSON data\012- , ASCII text
Hash f527e15d907f211b5113dbc56955faf1
25ddcfdc7fd0ce5ef631f86470c3a2e77a7aad8c
a1011fcf581117e91073315deb6afa6885be6809787d62f652de3796f129d983
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/22e76df188a133f0bc36a72b3b3f4873.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 210
last-modified: Thu, 24 Nov 2022 09:43:23 GMT
x-rgw-object-type: Normal
etag: "f527e15d907f211b5113dbc56955faf1"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/963d69167e291893dfa57175129c3059.json
200 OK 492 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/963d69167e291893dfa57175129c3059.json
IP
File type JSON data\012- , ASCII text
Hash 248ebfceaa7a36bfde55f8b07497f6a5
1d40f8938b10f6e73858ef4d9722e3c7961b74fa
0c3933781c8928cca0da1a5138222b9a80ffc87e3158b6b5f836685dd6004895
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/963d69167e291893dfa57175129c3059.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 492
last-modified: Wed, 30 Nov 2022 17:30:55 GMT
x-rgw-object-type: Normal
etag: "248ebfceaa7a36bfde55f8b07497f6a5"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/ca16a13e90c218de51d3f5edfe6f0cc2.json
200 OK 228 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/ca16a13e90c218de51d3f5edfe6f0cc2.json
IP
File type JSON data\012- , ASCII text
Hash 5cac928a2f45d0805307a9c8f0aa78c4
ce1cfd7863d2f2ae2d9f5118c19a5b54c28391db
5b8285b661cd6d67311bba7e6e4bc4443540743ac6b0fa07e82a5a351a521a8c
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/ca16a13e90c218de51d3f5edfe6f0cc2.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 228
last-modified: Wed, 30 Nov 2022 10:02:19 GMT
x-rgw-object-type: Normal
etag: "5cac928a2f45d0805307a9c8f0aa78c4"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/8b6052052084c476e3df736ea07421c2.json
200 OK 225 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/8b6052052084c476e3df736ea07421c2.json
IP
File type JSON data\012- , ASCII text
Hash 6a2755cb70b088e6141be598de61c5a6
f7f991fbf9eefc45b0a72c3a43828dc00a6910bc
9610dc037558698fe911191eef8997ee9252feba71a66f9d96a01ed558c8ba1f
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/8b6052052084c476e3df736ea07421c2.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 225
last-modified: Sat, 03 Dec 2022 11:12:15 GMT
x-rgw-object-type: Normal
etag: "6a2755cb70b088e6141be598de61c5a6"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/7c7e70d318bb14ce46630ac438ad4964.json
200 OK 440 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/7c7e70d318bb14ce46630ac438ad4964.json
IP
File type JSON data\012- , ASCII text
Hash 5d188375d8dce00cbdc0fd574d8e0bae
5fd7ecea863c61a9efc148ca5385f7e52d6b3d66
4357dc067ba824d9050578640f19cc65fc448031413178b43f57f56971781de8
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/7c7e70d318bb14ce46630ac438ad4964.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
content-length: 440
last-modified: Thu, 01 Dec 2022 11:01:29 GMT
x-rgw-object-type: Normal
etag: "5d188375d8dce00cbdc0fd574d8e0bae"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
200 OK 698 B URL HTTP/2 v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash baf96800254904a05eee2ff49c94a801
847efb3449a8d7857f004192310aa2164a71d530
0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Sun, 04 Dec 2022 08:52:10 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 4
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 306979
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-5671CMJ6T4>m=2oebu0&_p=1287546929&cid=679392198.1670143812&ul=en-us&sr=1280x1024&_s=1&sid=1670143812&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&dt=Bookmaker%201XBET.COM.%20Cotes%20%C3%A9lev%C3%A9es.%20Service%20client%C3%A8le%2024H%20sur%2024&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-5671CMJ6T4>m=2oebu0&_p=1287546929&cid=679392198.1670143812&ul=en-us&sr=1280x1024&_s=1&sid=1670143812&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&dt=Bookmaker%201XBET.COM.%20Cotes%20%C3%A9lev%C3%A9es.%20Service%20client%C3%A8le%2024H%20sur%2024&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5671CMJ6T4>m=2oebu0&_p=1287546929&cid=679392198.1670143812&ul=en-us&sr=1280x1024&_s=1&sid=1670143812&sct=1&seg=0&dl=https%3A%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&dt=Bookmaker%201XBET.COM.%20Cotes%20%C3%A9lev%C3%A9es.%20Service%20client%C3%A8le%2024H%20sur%2024&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lite-1x36781678.top
date: Sun, 04 Dec 2022 08:50:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/common-200061.svg
200 OK 41 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/common-200061.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 7bb6dce3b6f3163f5053894d4b50af91
9aa638fb284662a4818da2c5ea7d21848cf9d101
120a407cb6b43ddb16fc300de412505737c70bb1e5fb8c82a1d992730aa2b9e7
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/common-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-19794"
expires: Sun, 04 Dec 2022 23:25:57 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/1671ed4a.css
200 OK 1.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/1671ed4a.css
IP
File type ASCII text, with very long lines (9717), with no line terminators
Hash 7a40f22a5295c689b707c5df0e8126e5
7787ca2df6f068a54be1d332378c378445e05b84
b187496ddc7ad1214da5bf5ec7af863939fc8ad5ed0a8634cfe59f066e8e126a
GET /_nuxt/desktop/default/css/1671ed4a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: text/css
content-length: 1876
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-754"
expires: Sun, 04 Dec 2022 11:38:30 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 76326
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/e082f2758e8ee5513c9ecfd310537b82.json
200 OK 13 kB URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/e082f2758e8ee5513c9ecfd310537b82.json
IP
File type JSON data\012- , ASCII text
Hash dd97cc62afe5df867a41881f0f40511f
1e801ca4ef75ea6af2aaf5695b5a0fa4aec09fe9
ebfd1a4045a2455b11f1c45b24b9ec84f2a68c4543696dc1d25ec785be9cbe80
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/e082f2758e8ee5513c9ecfd310537b82.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Thu, 24 Nov 2022 08:55:06 GMT
x-rgw-object-type: Normal
etag: W/"56a5191b630a20b1a28c83a0f23b7f6e"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/9cf4f571.modern.js
200 OK 11 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/9cf4f571.modern.js
IP
File type ASCII text, with very long lines (40010), with no line terminators
Hash 6caefd9632c3e51aaa2d8a11e3d1bca1
b68bf8721a3fb18eb56acdb14163e62870dd832e
750e97c7416eb9b3f829b500e192acec1b751cd7391c14342ceaa080ea500a3e
GET /_nuxt/desktop/default/9cf4f571.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 10723
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-29e3"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66418
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
200 OK 454 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
IP
File type ASCII text, with very long lines (1429), with no line terminators
Hash cbe0d933664d1e9753b9c32f3418437c
ca965b4addff0759c6cf5e8d4fbd84785acfa761
a55cfd19ce4a80397cd2a63804c3b1f7b0d72ffc941eacffdaa21ae37aaec663
GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-1c6"
expires: Mon, 05 Dec 2022 08:29:14 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1262
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/85f3ad2fefdf6cf8013420a52216ad5e.json
200 OK 5.6 kB URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/85f3ad2fefdf6cf8013420a52216ad5e.json
IP
File type JSON data\012- , ASCII text
Hash 072db76c1bffe3cd0eb7fe88108b6fd4
56eef56c09a4d6d9d10a8a07086d5419886b1e43
5e73137c6f29dd2d7f46a8c93ee046ab5568b5b58146eafbc7dee14d4cdfeaa9
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/85f3ad2fefdf6cf8013420a52216ad5e.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 22:30:12 GMT
x-rgw-object-type: Normal
etag: W/"7fa85aa95ecbe1c45e22f8c639344f42"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/b8a07a4d.modern.js
200 OK 17 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/b8a07a4d.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (41008), with NEL line terminators
Hash 7bcff8ee821900ab818bccbe3aacfb18
7cdb68a2f86ab783790a8c55611d889b3338a5db
8c59a2987f391ab180400fa42a855c924a9f0b895ec66f474155b129ad05a935
GET /_nuxt/desktop/default/b8a07a4d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 16804
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-41a4"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66418
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/7ac812ef.css
200 OK 1.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/7ac812ef.css
IP
File type ASCII text, with very long lines (5224), with no line terminators
Hash a2f637ac3d62c2068442df3d1dc4960b
e8740c1088142337502b09536f9f004a99cfbac8
486a3fc5642cced6a4b563503ce0c186635c878540770833c4cfe2806ef944e0
GET /_nuxt/desktop/default/css/7ac812ef.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: text/css
content-length: 1232
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-4d0"
expires: Mon, 05 Dec 2022 08:29:32 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1260
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/18614420.modern.js
200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/18614420.modern.js
IP
File type ASCII text, with very long lines (17802), with no line terminators
Hash 82958c79ddf3a5d4d2f5881df2fc23b9
72edf36bb1ea9ba72c194d3bdf3cd6619a01872b
eed32dbc5ec5d85eca0cc4c21e98156fc0799011f3d50d963cf574d5d2e144b8
GET /_nuxt/desktop/default/18614420.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 3899
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-f3b"
expires: Sun, 04 Dec 2022 14:23:26 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66418
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 306960
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/6865d64a.css
200 OK 790 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/6865d64a.css
IP
File type ASCII text, with very long lines (2893), with no line terminators
Hash 7f0c418c377ff808ce87cf31173ab33f
f3087eb16cf5bb6c36373fbf287aee0128634568
7aafc299664778f596199b225209fa3674d579f2c44207593ef6f4e8334df395
GET /_nuxt/desktop/default/css/6865d64a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: text/css
content-length: 790
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-316"
expires: Mon, 05 Dec 2022 08:32:58 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1155
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/36c9343a.css
200 OK 912 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/36c9343a.css
IP
File type ASCII text, with very long lines (3693), with no line terminators
Hash 2e003174a07595ff738e3c63c0ce8ec0
37521a4d17105fcbc5abc1e5cd3503073962c09e
7c832819ccc9faf28808d1f1af9feaf1c99bd6da9d6c277b2321e3a825e20520
GET /_nuxt/desktop/default/css/36c9343a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: text/css
content-length: 912
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-390"
expires: Mon, 05 Dec 2022 08:29:32 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1246
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/729687a5.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/729687a5.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (2452), with no line terminators
Hash 53f074713865fdc271e98f5f70d7dee1
5899e95a97021fe405735630b0c51a6c6f2fea8a
26d79f6f1a9795ea365a24b352bc0d2ef65123790c7852d4b69dc791884b2796
GET /_nuxt/desktop/default/729687a5.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 1060
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-424"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 66418
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&language=fr
200 OK 38 B URL HTTP/2 lite-1x36781678.top/frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&language=fr
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7e5f0649cceedb563f3037fcd2dc2629
e274dd8ff75b14d8b7d2d86cea5b8bc415de58ac
cc2d7c3416bb5bbb515f151fbf694edbc44b497fca10f87b61fb31ab0b43a548
Analyzer Verdict Alert quad9 Sinkholed
GET /frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Ffr%2Fregistration&language=fr HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/json; charset=utf-8
content-length: 38
access-control-allow-origin: *
etag: W/"26-4nTdj/dbFNi30ths6luLxBXeWKw"
server-timing: requestTime; dur=38.765851; desc="req_t", renderTime; dur=38.776088; desc="rend_t", total; dur=40.300702; desc="Total Response Time"
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
200 OK 11 kB URL HTTP/2 lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
IP
File type JSON data\012- , ASCII text, with very long lines (22224)
Hash 0e1daf4df695715e7079efbd10f0cef0
c6ed28ee6609551701098f9a70717811010820a2
f425a9263816571f98c12a9b93c5d85dc463c2cba55708ca67fe1d5daaacefce
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=31, dt_285;dur=32
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=679392198.1670143812&jid=1630780868&gjid=1410897017&_gid=880143727.1670143812&_u=aGBAAUACQAAAACAAI~&z=1780122872
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=679392198.1670143812&jid=1630780868&gjid=1410897017&_gid=880143727.1670143812&_u=aGBAAUACQAAAACAAI~&z=1780122872
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=679392198.1670143812&jid=1630780868&gjid=1410897017&_gid=880143727.1670143812&_u=aGBAAUACQAAAACAAI~&z=1780122872 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://lite-1x36781678.top
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 04 Dec 2022 08:50:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/internal/v1/proof_of_age
204 No Content 0 B URL HTTP/2 lite-1x36781678.top/web-api/api/internal/v1/proof_of_age
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/proof_of_age HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
cache-control: no-cache, private
server-timing: p;dur=28, dt_285;dur=33
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670143813350
200 OK 145 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670143813350
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1670143813350 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/web-api/user/secure
200 OK 58 B URL HTTP/2 lite-1x36781678.top/web-api/user/secure
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 15dd5c8d6b7bd3f36d16b6a5652f98ad
f0176625eabe60a5afd898577ade4b904a13a449
2bdf25683cb67fdda5203379f3471bb829dd50f6526ca7a64efa5164ba7500bd
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/user/secure HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/json; charset=utf-8
content-length: 58
server-timing: dt_285;dur=55
set-cookie: is_rtl=1; expires=Mon, 04-Dec-2023 08:50:15 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Sun, 11-Dec-2022 08:50:15 GMT; Max-Age=604800; path=/
v3fr=1; expires=Wed, 07-Dec-2022 08:50:15 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
_glhf=1670161591; expires=Sun, 04-Dec-2022 09:50:15 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg
200 OK 8.8 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (18547), with no line terminators
Hash d01c7d62703037af9a6109e4e6c32027
bb2cfbba9fc8cb85fddb59ae14a87c67729c583c
ade3945b9db31fd260c2b407d4cbcedd83a093853a1b6d5c29a00fea709b4531
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-4873"
expires: Mon, 05 Dec 2022 00:18:00 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/registration
200 OK 7.8 kB URL HTTP/2 lite-1x36781678.top/web-api/registration
IP
Hash 2da54146d326c548465e4bbecf73b37c
51e69cf9b3e0703db0900f617ef5454eef4cf660
a5b7bae226eb1227a9441d9191516bcbb2501237e336d04625d5c197883bbca4
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/registration HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Content-Type: application/json
Content-Length: 18
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670161591
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:16 GMT
content-type: application/json; charset=utf-8
content-encoding: gzip
server-timing: dt_285;dur=1085
set-cookie: is_rtl=1; expires=Mon, 04-Dec-2023 08:50:16 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/07a3ca529c7238b39e6ea96c468392b9.json
200 OK 11 kB URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/07a3ca529c7238b39e6ea96c468392b9.json
IP
File type JSON data\012- , ASCII text
Hash d0a3eaeb257d17fe836198e5191ac714
75413c26e24442299a98b474bf8fafdfd7c00cb4
da282e774b7f2eb755653f1843aca7d4d83049b60b3cfabfb5d8ec1cfe301125
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/07a3ca529c7238b39e6ea96c468392b9.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 16:11:06 GMT
x-rgw-object-type: Normal
etag: W/"f59c1e6281d7fde1046ba13d9ca87203"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/64f42359.css
200 OK 1.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/64f42359.css
IP
File type ASCII text, with very long lines (6860), with no line terminators
Hash 093eee2fbd11162abbd112a061157c61
5539bb174383965b685bc39bb245e0775d692bc2
2b421bf9903ceb0adfa042efc967b232b2ab1f921b91d5af5d9c7b1767ff6ec3
GET /_nuxt/desktop/default/css/64f42359.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:17 GMT
content-type: text/css
content-length: 1356
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-54c"
expires: Mon, 05 Dec 2022 08:30:55 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1215
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c9e0bb25e8c28e8b10038806b0a7190
9fa6097aeb8eacde8ba7c9ab80a7a7d2405ae2bc
f4864000960be2f888ed7d2467f74130231fed6f56ad48ff15861f5769e95a58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=explicit&hl=fr
200 OK 556 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=fr
IP
File type ASCII text, with very long lines (852), with no line terminators
Hash b1f4ab48c1e3729bb090f8e00697d390
581d4110ff1f4ac6bb82941352c6368001b1d7d9
2c5d980b82f44dee6057dd8c3cc1992b7b2ddd497637eaa9d963e4a22ed12351
GET /recaptcha/api.js?render=explicit&hl=fr HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 04 Dec 2022 08:50:17 GMT
date: Sun, 04 Dec 2022 08:50:17 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_coupon/fr/dictionary_b39fbad46c829db3c74970808cf46c08.json
200 OK 171 kB URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_coupon/fr/dictionary_b39fbad46c829db3c74970808cf46c08.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (15126), with no line terminators
Size 171 kB (170724 bytes)
Hash cd8972eccea0d0b37f3ae6a6edd2fc18
1df769678a282fff813837dfad61b0d4655d5a97
57085b4974617800c760604178290bdcd8d4f3a5610be272b92ee51104f260fe
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_coupon/fr/dictionary_b39fbad46c829db3c74970808cf46c08.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:41 GMT
x-rgw-object-type: Normal
etag: W/"e668f409da4ac752d4b4023ad79775c8"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 212535
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0\012- data
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 04:50:09 GMT
expires: Thu, 30 Nov 2023 04:50:09 GMT
cache-control: public, max-age=31536000
age: 360009
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 230975
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 08:50:11 GMT
date: Sun, 04 Dec 2022 08:50:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_main/fr/dictionary_839f8fcb65c61757166ecbe08a4ad0ab.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_main/fr/dictionary_839f8fcb65c61757166ecbe08a4ad0ab.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_main/fr/dictionary_839f8fcb65c61757166ecbe08a4ad0ab.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:40 GMT
x-rgw-object-type: Normal
etag: W/"f65256c61902da335e2a0d32f58912cf"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/v3/bonuses/welcome-bonuses
200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/api/v3/bonuses/welcome-bonuses
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/v3/bonuses/welcome-bonuses HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=19, dt_285;dur=20
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/4859c69270068cb31f2a2fb722826891.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/4859c69270068cb31f2a2fb722826891.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/4859c69270068cb31f2a2fb722826891.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 15 Nov 2022 11:12:55 GMT
x-rgw-object-type: Normal
etag: W/"8dce7e9364e1d53b09a5801507da06ee"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/70494f5df0c0a827f1f586c2805b3679.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/70494f5df0c0a827f1f586c2805b3679.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/70494f5df0c0a827f1f586c2805b3679.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 16:07:31 GMT
x-rgw-object-type: Normal
etag: W/"cbe2ce664dbd0ca60f712a9f8d9dbe66"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_registration/fr/dictionary_dc02f6d4bae20235fcbea748450fcc8c.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_registration/fr/dictionary_dc02f6d4bae20235fcbea748450fcc8c.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_registration/fr/dictionary_dc02f6d4bae20235fcbea748450fcc8c.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:45 GMT
x-rgw-object-type: Normal
etag: W/"d380340c4d36537f328fe5a8964575b7"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=32, dt_285;dur=33
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/web/v1/config/actualDomain
200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/api/web/v1/config/actualDomain
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/web/v1/config/actualDomain HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:13 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=28, dt_285;dur=29
set-cookie: SESSION=a539542270c6444098343c29ffd494bf; path=/; secure; HttpOnly; SameSite=Lax
ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/85c2f6928c4caff0c56cef6ecb21cd24.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/85c2f6928c4caff0c56cef6ecb21cd24.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/85c2f6928c4caff0c56cef6ecb21cd24.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Wed, 09 Nov 2022 10:48:09 GMT
x-rgw-object-type: Normal
etag: W/"d774a20d976867de41cb2d1b84c4133b"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=fr&fCountry=137
200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=fr&fCountry=137
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=fr&fCountry=137 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=81, dt_285;dur=82
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/22c183db3438ae09a17e9e4f9e9d3987.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/1-285/desktop/media_asset/22c183db3438ae09a17e9e4f9e9d3987.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/1-285/desktop/media_asset/22c183db3438ae09a17e9e4f9e9d3987.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 16:10:31 GMT
x-rgw-object-type: Normal
etag: W/"29a9c36ce44c85f35239642207f6248f"
content-encoding: br
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_auth/fr/dictionary_3975aa74840657d6686a308f9bfa7098.json
200 OK 0 B URL HTTP/2 lite-1x36781678.top/genfiles/web-app-v2/dictionary2/v3_auth/fr/dictionary_3975aa74840657d6686a308f9bfa7098.json
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/web-app-v2/dictionary2/v3_auth/fr/dictionary_3975aa74840657d6686a308f9bfa7098.json HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1920; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 02 Dec 2022 17:06:42 GMT
x-rgw-object-type: Normal
etag: W/"086d26a6b3256260d63c907d60077e42"
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/default/img/icons/pixels2.svg?v=1670143813
200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/default/img/icons/pixels2.svg?v=1670143813
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/default/img/icons/pixels2.svg?v=1670143813 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/fr/registration
Cookie: platform_type=desktop; auid=sv0OpmOMX0OT+SI7BI0qAg==; lng=fr; SESSION=a539542270c6444098343c29ffd494bf; tzo=0; window_width=1280; che_g=4b529a05-4c1f-e0b3-d51f-8c7575fcb011; _ga=GA1.1.679392198.1670143812; _gid=GA1.2.880143727.1670143812; _ga_5671CMJ6T4=GS1.1.1670143812.1.1.1670143812.0.0.0; _ga_7JGWL9SV66=GS1.1.1670143812.1.1.1670143812.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:50:15 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=36, dt_285;dur=37
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
suphelper.com/widget/injector.js
200 OK 0 B URL HTTP/2 suphelper.com/widget/injector.js
IP
GET /widget/injector.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:50:17 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-e69da972-5c83-4067-8339-90d3f52d256e' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=300
last-modified: Fri, 02 Dec 2022 12:57:18 GMT
etag: W/"28e6c-184d2e9a3b0"
vary: Accept-Encoding
cf-cache-status: HIT
age: 131
server: cloudflare
cf-ray: 77434b290a580d52-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
178.253.14.166
34.117.237.239
104.16.42.72
23.36.77.32
93.184.220.29