r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4905
Expires: Sat, 03 Dec 2022 20:34:11 GMT
Date: Sat, 03 Dec 2022 19:12:26 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:26 GMT
Etag: "638b2570-1d7"
Last-Modified: Sat, 03 Dec 2022 18:31:56 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 002be102dd57b317506b54febc9d7113
92f2230c7d738562a77926d0545f5f38c9d00432
c283d3b81594fa9b1108275afdc01e85369d7925704bb2b9836d03cc6a70b478
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C283D3B81594FA9B1108275AFDC01E85369D7925704BB2B9836D03CC6A70B478"
Last-Modified: Thu, 01 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2953
Expires: Sat, 03 Dec 2022 20:01:39 GMT
Date: Sat, 03 Dec 2022 19:12:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 18:18:16 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3250
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11030
Expires: Sat, 03 Dec 2022 22:16:16 GMT
Date: Sat, 03 Dec 2022 19:12:26 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bZrHN8jVnk+iS4htjFxPPmpBfQd2EsdRf8Puy1Wu0lpdV2ktnKtgodQdzjiHC7m51/CItM1HAl8=
x-amz-request-id: 308479NQ9SWPQ6J6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 18:47:14 GMT
age: 1512
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 19:11:18 GMT
cache-control: public,max-age=3600
age: 68
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2421
Cache-Control: max-age=138886
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:26 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:47:12 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.43.253.52101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.253.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VCYIA9QaKMVXBab0J4C3Ag==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HYWqPWVOx2o9+mdN5tRRhtuma5Y=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:12:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e9d2b998ab517-OSL
v3.traincdn.com/_nuxt/desktop/default/6d7dc617.modern.js
8.254.252.212200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/6d7dc617.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (18205), with no line terminators
Hash cf97b3c17d13ba417ac5494484e54eb5
2ac797ee8d6b542828bf00c26d8a7d8b8930094d
ecb5f95bd7adc1744469ccaf946287d58b511160616053c26f85b017e6898f57
GET /_nuxt/desktop/default/6d7dc617.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 6922
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-1b0a"
expires: Sun, 04 Dec 2022 14:23:10 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17359
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
8.254.252.212200 OK 698 B URL HTTP/2 v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
IP 8.254.252.212:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash baf96800254904a05eee2ff49c94a801
847efb3449a8d7857f004192310aa2164a71d530
0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Sat, 03 Dec 2022 19:10:45 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 222
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/football/bg.webp
8.254.252.212200 OK 36 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/scoreboard/football/bg.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aba1eff9e4049600dd1a364251190057
346e9568a72e4f405c6364f58c45380a64107c82
aaf8ff644a41c6f97fe58bf579db9475edb0b9632eee317d45c7ffba359ea461
GET /genfiles/cms/1-285/desktop/scoreboard/football/bg.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: application/octet-stream
content-length: 35494
cache-control: public, max-age=120, s-maxage=600
etag: "aba1eff9e4049600dd1a364251190057"
expires: Sat, 03 Dec 2022 19:07:32 GMT
last-modified: Tue, 08 Dec 2020 07:35:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 415
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/2fa387b6.modern.js
8.254.252.212200 OK 661 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/2fa387b6.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (65479)
Size 661 kB (660957 bytes)
Hash b9e3f233870318cf81504e8d6a9d054f
0186d8b58cbdc7bf531a24b0d690b8b20271c044
46ba73ce61b83c6bf3cb381213beffb9d2c35b784138857a35d4660350783c47
GET /_nuxt/desktop/default/2fa387b6.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 660957
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-a15dd"
expires: Sun, 04 Dec 2022 14:23:15 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17357
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/401c3cac.css
8.254.252.212200 OK 85 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/401c3cac.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d33ac876fe09b4b1b5377dec529365fe
3f9371f5407db1c5d10f256df9f4ddbe20efec5a
aaf39f64e48927af2b32d3060792634569e7455c56d4dcffe3336a7e5a9bfa61
GET /_nuxt/desktop/default/css/401c3cac.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: text/css
content-length: 85396
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-14d94"
expires: Sun, 04 Dec 2022 14:23:15 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17359
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:12:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e9d2b9af7fac8-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:12:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e9d2b9b2f0afa-OSL
v3.traincdn.com/version.json
8.254.252.212200 OK 44 B URL HTTP/2 v3.traincdn.com/version.json
IP 8.254.252.212:0
Hash cff9589e069b136ed454cd48e4bb82fc
24f3cc8ed7a188402216f541f50f58f3fb75a755
2ff0594e6b3ae108093d527b95768f1d56e1a120a6d8e72d2bf90326ab1835af
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "638b559a-2c"
expires: Sat, 03 Dec 2022 19:12:33 GMT
last-modified: Sat, 03 Dec 2022 13:56:42 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 54
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/6c313d21.modern.js
8.254.252.212200 OK 93 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/6c313d21.modern.js
IP 8.254.252.212:0
File type Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (65466)
Hash 5ef3537fbd515d48de5692097ff0b73c
9aa0e38e0fdb4d15c54c04ad978a315a190e72f6
7b9860c137a093a7889b36a86f40b8713d9fd03b74cb04ebe4172690ecde87ba
GET /_nuxt/desktop/default/6c313d21.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 93447
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-16d07"
expires: Sun, 04 Dec 2022 14:23:17 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17357
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:12:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e9d2ba820b50b-OSL
v3.traincdn.com/_nuxt/desktop/default/css/fd164971.css
8.254.252.212200 OK 49 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/fd164971.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8968e23d9c549d4b23fcd81fdb1d1928
f5d94ae466ab07e1a7407bcbc54f1ef3f72e95f3
ff2d03f5afdd375af01c45ab2497f9ff278aea674906c0ce41f2de63a9ab1826
GET /_nuxt/desktop/default/css/fd164971.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: text/css
content-length: 48612
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6842-bde4"
expires: Sun, 04 Dec 2022 13:12:52 GMT
last-modified: Fri, 02 Dec 2022 21:04:02 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 21575
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c7d147ba990ad65a2c529051e54d88eb
3869832b21954526ad8cb8dafb7797149d519230
103f0118d67ea1a692c308d9b49f842738d44b99486050602e708f03f44d2686
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:12:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 03:03:03 GMT
Expires: Thu, 08 Dec 2022 03:03:02 GMT
Etag: "3869832b21954526ad8cb8dafb7797149d519230"
Cache-Control: max-age=373234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773e9d2b998bb517-OSL
v3.traincdn.com/_nuxt/desktop/default/2ce3797c.modern.js
8.254.252.212200 OK 538 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/2ce3797c.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 538 kB (538265 bytes)
Hash 6ff9a1fa19f3c3df39f01a61394f268e
4d4a8d48714b988aa3f6670d36c99e6590da594b
a76d058ec16b75c004dd1b5d68ef371dcc77444bbd1d3ff7cefbe03c44945411
GET /_nuxt/desktop/default/2ce3797c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 538265
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-83699"
expires: Sun, 04 Dec 2022 14:23:11 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17359
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 257913
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
142.250.74.35200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:09:46 GMT
expires: Fri, 01 Dec 2023 08:09:46 GMT
cache-control: public, max-age=31536000
age: 212561
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 257892
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 257911
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x36781678.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
178.253.14.166200 OK 352 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
IP 178.253.14.166:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dff72d4146e35a8262e6845d13a8df0
a291af970d3955b35c314e85712ceea3aca25d54
a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: image/png
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:12:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:12:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:12:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:12:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 65704
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcb89ca25035b2bbb71ae5dd175fcd40
544428cdad754b1bb7be3cd46a79bf078fd5b450
36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:53:20 GMT
age: 55148
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 51020
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 76882
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 379a4a1b95d3aa3c5a4f8e7f9abb030f
d45dceb3dc58a07197aa5077582b5b1cd2ff791a
1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V4Z3TZtTDMjnyxZx7VdJrKtZ-PbZkWnsQ0-1eFDem4TVyRGvk0dc7A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:39:57 GMT
age: 77551
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e74254b3fdce7d6b84a71a7aff43789
65c8b4abf957f9b54d99d0f78559e639adb29efb
f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -AurmlKwF0QgfsWBsV3ZN9ZyDhw1Zo82zUqrpkBbvbCfh0j7evV2Tg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 11:01:04 GMT
age: 29484
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094746612
178.253.14.166200 OK 145 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094746612
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1670094746612 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/pwa
178.253.14.166200 OK 15 B IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4766fd1b2ba2e236fd9364587f99ab
eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b
Analyzer Verdict Alert quad9 Sinkholed
GET /pwa HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=1
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/90006408.modern.js
8.254.252.212200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/90006408.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (2510), with no line terminators
Hash abf17d602c1b2b0f79a3251e371e2acb
5fe8be0b97b207f8cd378b9850b62db4536d5321
7646a5a971815fc3cd8b7d9a672ecf34293792ae4ec080ee49524da5319b96dc
GET /_nuxt/desktop/default/90006408.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 1084
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-43c"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg
178.253.14.166200 OK 8.4 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg
IP 178.253.14.166:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (18547), with no line terminators
Hash 7e09d5e2d1ad965370c55663319b3d52
0e9b72df5b57ab2ac4715cfdec7e615c728c6ffa
229e464b3516e4444e34cdfc5c4ffbf146d3e5b27ef887ff3651e2bd56204608
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/qatar-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-4873"
expires: Sun, 04 Dec 2022 18:24:57 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/version.json?timestamp=1670094746759
178.253.14.166200 OK 44 B URL HTTP/2 lite-1x36781678.top/version.json?timestamp=1670094746759
IP 178.253.14.166:0
Hash cff9589e069b136ed454cd48e4bb82fc
24f3cc8ed7a188402216f541f50f58f3fb75a755
2ff0594e6b3ae108093d527b95768f1d56e1a120a6d8e72d2bf90326ab1835af
Analyzer Verdict Alert quad9 Sinkholed
GET /version.json?timestamp=1670094746759 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: application/json
content-length: 44
last-modified: Sat, 03 Dec 2022 13:56:42 GMT
vary: Accept-Encoding
etag: "638b559a-2c"
content-encoding: gzip
expires: Sat, 03 Dec 2022 19:13:28 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-178408567-1
142.250.74.40200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP 142.250.74.40:0
File type ASCII text, with very long lines (1921)
Hash 91e430a34e3f567f09242577bf6191a5
ca9258839d973b2b7a1575010aeab4c839923dca
b45da40821a122b6426a165a13989feaddd566a72924726d2adcdeed8bbd7f8d
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 19:12:28 GMT
expires: Sat, 03 Dec 2022 19:12:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44647
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ab7d8171be0adeb15a77f07372a4e70e
eab3ab40f91268763d26c9738b54c64fe6f05b51
126bb7dd8761211cb6608e3abc4572459ea67efbe81fc8b1b3a057cdc2786407
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4439
Cache-Control: max-age=164294
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:28 GMT
Etag: "638b6d0b-1d7"
Expires: Mon, 05 Dec 2022 16:50:42 GMT
Last-Modified: Sat, 03 Dec 2022 15:36:43 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ab7d8171be0adeb15a77f07372a4e70e
eab3ab40f91268763d26c9738b54c64fe6f05b51
126bb7dd8761211cb6608e3abc4572459ea67efbe81fc8b1b3a057cdc2786407
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4440
Cache-Control: max-age=164294
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:29 GMT
Etag: "638b6d0b-1d7"
Expires: Mon, 05 Dec 2022 16:50:43 GMT
Last-Modified: Sat, 03 Dec 2022 15:36:43 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/common-200061.svg
178.253.14.166200 OK 42 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/common-200061.svg
IP 178.253.14.166:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5772644f9c94bbd94f5600e3a1561617
27f14c706752adaed1a17fe5108b60058bb2b8a9
2d495e98cd4a0c45a509c00e14d76d1624907a74918fbaf4dbfff5fed461f2f6
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/common-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-19794"
expires: Sun, 04 Dec 2022 18:24:57 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
radar.cedexis.com/1593429750/radar.js
35.241.57.45200 OK 21 kB URL HTTP/2 radar.cedexis.com/1593429750/radar.js
IP 35.241.57.45:0
File type ASCII text, with very long lines (7766)
Hash 5e1478e1053121aeb82605cb3e02ec25
910d1b1317c49ed621af762df0bad67722c914aa
766aca3506fb1da30dde1a777404c1c7a73eba131ed0dee3ca61923507868b88
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript
last-modified: Mon, 29 Jun 2020 11:30:29 GMT
vary: Accept-Encoding
etag: W/"5ef9d0d5-af5c"
expires: Sat, 17 Dec 2022 19:12:29 GMT
cache-control: max-age=1209600, public
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/dccf2ab6.modern.js
8.254.252.212200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/dccf2ab6.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (2873), with no line terminators
Hash 6ba16c9fb5abb68dfede4af245ef9387
d0aac9d8856625dac1e9f021c13b4a7cd5d1f3ad
7335c87b770c1a00d2d68f2258ab2964af2f16d1c8dd4a916febff87c1e44ac0
GET /_nuxt/desktop/default/dccf2ab6.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 1114
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-45a"
expires: Sun, 04 Dec 2022 14:23:28 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17353
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_us.js
8.254.252.212200 OK 533 B URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_us.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (1159), with no line terminators
Hash 9a29b4843f7a1972bbcec87f97abd0c9
61a11e2c4bb84975d27b2d1fb667b4edd9193318
32b7d22742b7b18a108b15a04f7d625dac77414a7ab0cd627affcd79ce5cbe1c
GET /genfiles/cms/betstemplates/bets_model_map_short_us.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/javascript
content-length: 533
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"eca5449fb3e6c7bf8e2b526b8613dc63"
expires: Sat, 03 Dec 2022 19:06:25 GMT
last-modified: Sat, 03 Dec 2022 12:06:53 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 491
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/12601.png
178.253.14.166200 OK 10 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/12601.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cf0f619dd7329e71629341b471df0d70
22ea5772d8aa07884ec1ac1f2e24766392b07a6f
0725586b42b307c9d910d342414285b71df9391009d650b4302613323f73f6e4
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/12601.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: image/png
content-length: 10248
x-amz-id-2: F1LHRYGJFMfTQpggoRzAtXOjK/wfCoeXHIkMPu278vmRL/BLfvTd0nFuBuO/tTL96vEIF0m/hVWbnF4f6fwkYQ==
x-amz-request-id: SFASZ9MQG0ZT7RPM
last-modified: Tue, 13 Aug 2019 14:52:37 GMT
etag: "cf0f619dd7329e71629341b471df0d70"
x-amz-version-id: bH4DUdwtrpD0R2GZ1NhSnA1AxTpq7U7R
expires: Sun, 04 Dec 2022 19:12:29 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/12759.png
178.253.14.166200 OK 13 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/12759.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e9c33ff3cb0f246e67cd0ce669b6c153
93ffc0086a3bbcc577302ca0ed16b4a305018ee7
268bb3752bc873f4a26c4c13380b8ed2bab575ecffe2525385171dae177956ed
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/12759.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: image/png
content-length: 12817
x-amz-id-2: 2yQWHhcTeXhSlNrzgXGZrLX40FVCjU5N3bfWUSRl2LHPCwD/QdlyK/mfhljRKOF0V6z6D/19eC3gNEC67HHNEg==
x-amz-request-id: SFAKSX3H843AEB7A
last-modified: Tue, 13 Aug 2019 14:52:42 GMT
etag: "e9c33ff3cb0f246e67cd0ce669b6c153"
x-amz-version-id: pJWehdpggqBOeIKGR0FMKXUgNQv.lqnN
expires: Sun, 04 Dec 2022 19:12:29 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_0.js
8.254.252.212200 OK 3.5 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_0.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (12621), with no line terminators
Hash 70549a52167360ba4bb89c287f5f5264
af3e3c426fa8f70d472b9ea30d939d82c3ccf63f
b6da84b0e9f5eee980ba2e50cbe4f4a38499ba35738d4b8cf514d097d8eb7c60
GET /genfiles/cms/betstemplates/bets_model_short_us_0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/javascript
content-length: 3456
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"b707d91b97881a24d3622b36b6d6f1e2"
expires: Sat, 03 Dec 2022 19:13:11 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 94
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/9b8abd5c.css
8.254.252.212200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/9b8abd5c.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (6523), with no line terminators
Hash 4f5e039c3fca8784e758f52f65a571c2
3819b34cdc360e27cf360deab04f1e0762482610
33712de5b3ae67ccebbe547fcbb6ba6a8ea399d35e9994142abc7ef7d5cdc502
GET /_nuxt/desktop/default/css/9b8abd5c.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 1111
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-457"
expires: Sun, 04 Dec 2022 08:29:12 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38598
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/6afb7a94.modern.js
8.254.252.212200 OK 8.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/6afb7a94.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (35397), with no line terminators
Hash e7102b0d5295b42a1bf60d6a0dcee315
09ff64287dc1bdcf6995e94797dfc83b44f04ae6
e29673b60eb125409840c933e51669786d32ba4e63ebc6ce792f67b831a8b739
GET /_nuxt/desktop/default/6afb7a94.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 8442
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-20fa"
expires: Sun, 04 Dec 2022 14:23:26 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
8.254.252.212200 OK 454 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (1429), with no line terminators
Hash 3ef2b8ba6a3526a39954a0a10aba35b7
048a604c003e56843f7223d68486a13f7bc02943
f75cfb56d6719c69a3999875215398d444a8a5c73d5000098198c6452acbb80b
GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6842-1c6"
expires: Sun, 04 Dec 2022 08:29:13 GMT
last-modified: Fri, 02 Dec 2022 21:04:02 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38596
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/sports-200061.svg
178.253.14.166200 OK 148 kB URL HTTP/2 lite-1x36781678.top/_nuxt/Desktop/Default/svg-sprites/sports-200061.svg
IP 178.253.14.166:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (148353 bytes)
Hash 2816808b2b4c2bcfd85b32dbf1d5d497
a93d7375c1d6605b36937f724958d5ebd435fab2
641d3dff6df71be824694547254afb6278529986bd359bc3b7579a04948a5ae0
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/sports-200061.svg HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:28 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
etag: W/"638b5467-52ce3"
expires: Sun, 04 Dec 2022 18:31:20 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/18614420.modern.js
8.254.252.212200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/18614420.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (17802), with no line terminators
Hash 82958c79ddf3a5d4d2f5881df2fc23b9
72edf36bb1ea9ba72c194d3bdf3cd6619a01872b
eed32dbc5ec5d85eca0cc4c21e98156fc0799011f3d50d963cf574d5d2e144b8
GET /_nuxt/desktop/default/18614420.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 3899
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-f3b"
expires: Sun, 04 Dec 2022 14:23:26 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/7ac812ef.css
8.254.252.212200 OK 1.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/7ac812ef.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (5224), with no line terminators
Hash f00b03e099a232bc5f08fcb1042ae13d
51fa0abddb8ccd8806efcf1872db16a46defd6c4
4a23a179f01d554e11064d32419cfb999b7529f83ca213bba8eda7c55011bb76
GET /_nuxt/desktop/default/css/7ac812ef.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 1232
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-4d0"
expires: Sun, 04 Dec 2022 08:29:18 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38594
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/36c9343a.css
8.254.252.212200 OK 912 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/36c9343a.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (3693), with no line terminators
Hash 1b7cc7024ef238173e96baf5dc448d32
a082b995c9ff91d8329b69f7f6fd917470b131d8
8eb90f00e3a2beefd31f5df844497b4e60988655f68946d865251c7feff4b778
GET /_nuxt/desktop/default/css/36c9343a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 912
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-390"
expires: Sun, 04 Dec 2022 08:29:27 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38584
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/9cf4f571.modern.js
8.254.252.212200 OK 11 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/9cf4f571.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (40010), with no line terminators
Hash 6caefd9632c3e51aaa2d8a11e3d1bca1
b68bf8721a3fb18eb56acdb14163e62870dd832e
750e97c7416eb9b3f829b500e192acec1b751cd7391c14342ceaa080ea500a3e
GET /_nuxt/desktop/default/9cf4f571.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 10723
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-29e3"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b0e615fc.css
8.254.252.212200 OK 2.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b0e615fc.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (18717), with no line terminators
Hash c7e379c6dd6ad0cea02bbd481745213e
2e29ba4e194ce2a75d0040f9cae47aa1c1093ce8
e6458342af05bbfd3a550bc95e4e1a28805a497c4805eeb92f5fc2ad9d16a768
GET /_nuxt/desktop/default/css/b0e615fc.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 1999
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-7cf"
expires: Sun, 04 Dec 2022 08:29:18 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38594
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/cefdc903.css
8.254.252.212200 OK 508 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/cefdc903.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (1570), with no line terminators
Hash 407282b72b766ff8bb504e6c6111c2f2
2f187937e2a5b0b8876b2815b77b2389d5b62a98
0571d1ff3828485f8d28670419fb8e7cea41d0c55396d07d5d22997cfbe3abb0
GET /_nuxt/desktop/default/css/cefdc903.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 508
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-1fc"
expires: Sun, 04 Dec 2022 08:29:27 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38584
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ff39bf78.modern.js
8.254.252.212200 OK 331 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ff39bf78.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (397), with no line terminators
Hash 063b188f9b340e81c0ac93486907b8e5
84616cd11245c2959e4f8d2f36501087da2ae659
1ae9860da5e49fd7c77f994805de01fd6896c3055a1513c16c515251d4bd7bef
GET /_nuxt/desktop/default/ff39bf78.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 331
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-14b"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/8dee1e7e.modern.js
8.254.252.212200 OK 14 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/8dee1e7e.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 4aeb431004edc0cb46c56cf860dca319
2679bb3b591e7ac94d49a15f725ca2a9d060181c
51585b43ed1fd390e205ffa3e6b27b892480da0476c3989c68d5e38d1a80df1f
GET /_nuxt/desktop/default/8dee1e7e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 13460
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-3494"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/17f2a34f.css
8.254.252.212200 OK 3.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/17f2a34f.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (21596), with no line terminators
Hash 810742d30dd06618e1a3001239c686b2
ca3557ae5a3bf273a4989e28b664911805b4f280
589228496dff2c5ce760a133c9465c07c067ad8ae87c14671b4a55703439b243
GET /_nuxt/desktop/default/css/17f2a34f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: text/css
content-length: 3810
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-ee2"
expires: Sun, 04 Dec 2022 11:38:10 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 27266
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/f133b146.modern.js
8.254.252.212200 OK 1.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/f133b146.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (4822), with no line terminators
Hash 015d7f6932ed928c8d617573c19e5bda
897a2c212e37f164e758ca8c2dad542c16691fcd
66e46f4f264bcfc918e38f1047be6561806cd9b09b86e3e27110f162c8bf1679
GET /_nuxt/desktop/default/f133b146.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 1810
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-712"
expires: Sun, 04 Dec 2022 14:23:27 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/0fbe1718.modern.js
8.254.252.212200 OK 882 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/0fbe1718.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (3162), with no line terminators
Hash d67581c7ad4b9832ecbd97f9d7fd6850
297ea7b8f31fa1e5623e3afd2c6b2bb31009154c
44b64dfa7bd6e2cefee3107481890944aec7ff3f164f0ff2020b6604f800b679
GET /_nuxt/desktop/default/0fbe1718.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 882
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-372"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17352
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/729687a5.modern.js
8.254.252.212200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/729687a5.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (2452), with no line terminators
Hash 53f074713865fdc271e98f5f70d7dee1
5899e95a97021fe405735630b0c51a6c6f2fea8a
26d79f6f1a9795ea365a24b352bc0d2ef65123790c7852d4b69dc791884b2796
GET /_nuxt/desktop/default/729687a5.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 1060
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-424"
expires: Sun, 04 Dec 2022 14:23:29 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17353
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetTopGamesStatZip?lng=us
178.253.14.166200 OK 1.6 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetTopGamesStatZip?lng=us
IP 178.253.14.166:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5171), with no line terminators
Hash 4dd5922a9b1dba02367663252e8bcf73
942d7ada7009ccbc24b9f885fa9b4cf574df1840
55967de60987ce45ed1a5ecd3d3de84f90b42a8cc8c2204179695abd2fef84fd
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 1636
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/SubscriptionService/api/GetEventTypesByGameId?lng=us&gameId=416459782&Source=0
178.253.14.166200 OK 164 B URL HTTP/2 lite-1x36781678.top/service-api/SubscriptionService/api/GetEventTypesByGameId?lng=us&gameId=416459782&Source=0
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash b463492422c9cd868a1d5cd420806545
f10054f5d6c39c02b2dfaf5c4bd994c3560588ad
3fa26d06afbaf63073a48d9b6dc5ebd4189cb00a98b2b1a7fe6a29f3412bc372
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/SubscriptionService/api/GetEventTypesByGameId?lng=us&gameId=416459782&Source=0 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 164
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=us
178.253.14.166200 OK 641 B URL HTTP/2 lite-1x36781678.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=us
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with very long lines (1194), with no line terminators
Hash a23a2f4eaf01d1c450d74365a03ec0d5
0203c8c82f421d6456222bd24710e61cac295ebc
128a101aa204eee5abbe3ff0e3f3c7363561a543d2c0acf8112bfd8cb98e4b63
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 641
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/domain-api/api/v1/domains/lite-1x36781678.top
178.253.14.166200 OK 86 B URL HTTP/2 lite-1x36781678.top/domain-api/api/v1/domains/lite-1x36781678.top
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d6ce170df0fd95ce1ace683582698106
54337307d42777444d983f580ae04db2811b2c1c
bf25f0e6d9bc1fa43c30596d7292607f8bbf2222f38b9104106731b0a73b02ae
Analyzer Verdict Alert quad9 Sinkholed
GET /domain-api/api/v1/domains/lite-1x36781678.top HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/vnd.api+json
content-length: 86
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us
178.253.14.166200 OK 701 B URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with very long lines (1290), with no line terminators
Hash 7e2cb33ce3dca5c29943d31d33c610be
12bf364994699d3a0b66cc8a18ee62386b1c5e14
d743e094f30016036778c50d43c2fa01a5776eb31417baafbf3299c9de7b0f2c
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 701
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137
178.253.14.166200 OK 248 B URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137
IP 178.253.14.166:0
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash acbbe5c6f7910e59290f316a5cdb7ee9
cd50fad48f20e56e034274c6c2817e95862f9ed2
4fb8eed6dd0f9a710907a3bb7a85e6561f0e1e0410d03635f3eb54c5e725d78a
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 248
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/user/secure
178.253.14.166200 OK 57 B URL HTTP/2 lite-1x36781678.top/web-api/user/secure
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash becad0db5cf8879872c6e0698937fa7a
77756d030dd1f2034c02c6d3860c871dd9aec7ae
413a1ccbe364da2c0a736e9ae206a2c13fe6e7740e2379364aeb0f5d33add707
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/user/secure HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://lite-1x36781678.top
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 57
server-timing: dt_285;dur=49
set-cookie: is_rtl=1; expires=Sun, 03-Dec-2023 19:12:30 GMT; Max-Age=31536000; path=/; HttpOnly
tzo=3; expires=Sun, 03-Dec-2023 19:12:30 GMT; Max-Age=31536000; path=/
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
_glhf=1670112526; expires=Sat, 03-Dec-2022 20:12:30 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&language=us
178.253.14.166200 OK 38 B URL HTTP/2 lite-1x36781678.top/frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&language=us
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7e5f0649cceedb563f3037fcd2dc2629
e274dd8ff75b14d8b7d2d86cea5b8bc415de58ac
cc2d7c3416bb5bbb515f151fbf694edbc44b497fca10f87b61fb31ab0b43a548
Analyzer Verdict Alert quad9 Sinkholed
GET /frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x36781678.top%2Fus%2Flive%2Ffootball%2F1938952-fifa-world-cup-2022%2F416459782-argentina-australia&language=us HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 38
access-control-allow-origin: *
etag: W/"26-4nTdj/dbFNi30ths6luLxBXeWKw"
server-timing: requestTime; dur=41.76177; desc="req_t", renderTime; dur=41.772534; desc="rend_t", total; dur=42.681597; desc="Total Response Time"
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/51738160.modern.js
8.254.252.212200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/51738160.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (13517), with no line terminators
Hash d165cee756c682d135e866f2b182bfe0
bddceed592c6a7859d8dd93a25560fae4de689ea
45ffc16dc0024935303225b2a65464661d63473dc3d29558a43146958b683025
GET /_nuxt/desktop/default/51738160.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 5376
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-1500"
expires: Sun, 04 Dec 2022 14:23:31 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17355
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/d201753e.modern.js
8.254.252.212200 OK 26 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/d201753e.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 75efea6edd66a264040dca4b8e0b315f
326d0997d19a7d2bf5fc35f5438963660980e307
ea31dcedeca74f0bd23b3daa4b2a96f244b08d24091df896460a5e6032c7fc55
GET /_nuxt/desktop/default/d201753e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 26120
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5467-6608"
expires: Sun, 04 Dec 2022 14:23:33 GMT
last-modified: Sat, 03 Dec 2022 13:51:35 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17355
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_37.js
8.254.252.212200 OK 3.8 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_37.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (15145), with no line terminators
Hash 7e9b1bbfaf94c3eac1bba66e7bf5033b
72404c11ea3d8c1fa3545e9827c758a3cc07a09a
1087b6d777f0018d013fba0391eb2fbbba84ea1b29d745a12416b7869a6b12ce
GET /genfiles/cms/betstemplates/bets_model_short_us_37.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: text/javascript
content-length: 3793
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"ba56011e0c8fa67477df02dbba5956ac"
expires: Sat, 03 Dec 2022 19:07:53 GMT
last-modified: Sat, 03 Dec 2022 12:06:51 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 419
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_24.js
8.254.252.212200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_24.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (15629), with no line terminators
Hash d25467250621ee913d368f7ddfaa75b7
bc87da4b0e471baaf6df4283c6f9a3cb7fb2bc42
35ed98cea906d7b455adeadb1362375891cd06012bfbd8ffc51e1ac04861f83d
GET /genfiles/cms/betstemplates/bets_model_short_us_24.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: text/javascript
content-length: 3897
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"1311b05b0870721b7fb96a0a894a1565"
expires: Sat, 03 Dec 2022 19:08:26 GMT
last-modified: Sat, 03 Dec 2022 12:06:51 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 464
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
178.253.14.166200 OK 3.7 kB URL HTTP/2 lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with very long lines (13125), with no line terminators
Hash b46be13e06f76a039e3a17a205423f46
fcb869e1f1b583d2550099efe0c5b50748125e83
3b9a452c41866c6503a6cf54c8c9ec8dfc8dd3efd54d9cdd9cd531e6e67d8a5e
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=31, dt_285;dur=33
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_2.js
8.254.252.212200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_2.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (11096), with no line terminators
Hash 2be1e642b64034dab3b48f29dab05103
73339595bae9194bde19974e6cc84dad3349ae0f
16461298dd5beccfecd7505bfbec4a9617af658ba911a93364e22b09fa1c6a5f
GET /genfiles/cms/betstemplates/bets_model_short_us_2.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: text/javascript
content-length: 2719
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"fc5011dbe75dc2c6e5ae808c3e05bc6f"
expires: Sat, 03 Dec 2022 19:11:44 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 166
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/checker/redirect/stat/run/
178.253.14.166200 OK 49 B URL HTTP/2 lite-1x36781678.top/checker/redirect/stat/run/
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b7a9075de81cdb1a9fa74fa71b5126dd
9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20
Analyzer Verdict Alert quad9 Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json; charset=utf-8
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_11.js
8.254.252.212200 OK 3.5 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_11.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (14112), with no line terminators
Hash 3b384693268c2cf2e36537b5488aa2bb
077b120b17c7e8a78537efdd33fd257db56817dd
4414a474e6eefb0ca26d7d29613ff438930e857f816d932c619b05ef8d49d254
GET /genfiles/cms/betstemplates/bets_model_short_us_11.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: text/javascript
content-length: 3535
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"399218d54c527ba43e471101ca0ca735"
expires: Sat, 03 Dec 2022 19:14:05 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 25
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_1.js
8.254.252.212200 OK 2.6 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_us_1.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (10098), with no line terminators
Hash 96c6d2a33eb4ae78ca1fc9f6d863b6cd
ef42c753c3e045f2288309c4af9ca9bf47812930
da07421eae9eca7d18e9bd3513d9851488faea057e25f6037e506b1efbc57603
GET /genfiles/cms/betstemplates/bets_model_short_us_1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: text/javascript
content-length: 2572
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"f9f18ba9c9be3c1a92f049dfd8271bda"
expires: Sat, 03 Dec 2022 19:14:30 GMT
last-modified: Sat, 03 Dec 2022 12:06:50 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 7
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/games-images/ico-logo/white/desk/343.svg
8.254.252.212200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/games-images/ico-logo/white/desk/343.svg
IP 8.254.252.212:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (22224)
Hash ec2f953bc550d8559d5d3847c0ac61b5
02169e4bbc5964848d6f46ff239794e32db6e589
e2cae2e289d45b0ea140ae52bc05800717dfc7a0122a85d651bfd2eefd312373
GET /sfiles/games-images/ico-logo/white/desk/343.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/svg+xml
content-length: 10983
cache-control: max-age=86400
content-encoding: gzip
etag: W/"4fc440a1a3d8be975531b9e083d83b93"
expires: Sun, 04 Dec 2022 10:14:14 GMT
last-modified: Wed, 16 Nov 2022 15:19:43 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-meta-origin-date-iso8601: 2022-11-16T14:16:25.000Z
age: 32304
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/config/getVideoAccessConfig
178.253.14.166200 OK 14 kB URL HTTP/2 lite-1x36781678.top/web-api/external-api/config/getVideoAccessConfig
IP 178.253.14.166:0
Hash f0964dbd5fad1d847515e022f0d1528f
1d323c637c49e3ad4eaab1092aeb59dc507cd6c3
bdae624ad2ee7fdcc2d940297f9fb546bacd25fd9d7dda30457c932b6a310ff2
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/config/getVideoAccessConfig HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=54, dt_285;dur=56
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/11863.png
178.253.14.166200 OK 18 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/11863.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c34435ae849a7dc1751080f135901449
5df948ed267f9db3f4b5502a0f95218d1b17f1ae
7567a31a51ecd340de58489530e8a64caad07f0104aedec4f2305ae961c25111
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/11863.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 18134
x-amz-id-2: wHlDtzQvt3ZxwFeOiFp8Y55BmptBOvY5oNd5J18wFfW8nbyJPRRHm7MBVY45qFRGMSPx9w52sY6qfQbwgrXnMw==
x-amz-request-id: DMVZYW4W5301K8YM
last-modified: Tue, 13 Aug 2019 14:52:14 GMT
etag: "c34435ae849a7dc1751080f135901449"
x-amz-version-id: KVDkuACZdhy6y40eD9XCHkHI9xisglWi
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/1380811.png
178.253.14.166200 OK 20 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/1380811.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash bfb790754d83c87bd58dfd3d01be3391
1268ead8d282da82d41cb77091b03216b5ea650c
8964cd40bf0ce22319384aae52c8271c888e2dca24db0692642382bc778994af
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/1380811.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 20378
x-amz-id-2: z5B/evhDGwbuzpPt1J7iB2llhV18dp7uqo7o6DzUlmAVo5jvwgGzjyeBbXG+YpN6ozBjRAStgWt+ZdkcrIp3sA==
x-amz-request-id: K5WDB1K57ESMJH25
last-modified: Tue, 13 Aug 2019 14:53:19 GMT
etag: "bfb790754d83c87bd58dfd3d01be3391"
x-amz-version-id: 7daHrvxL63qLxCUW.Wl0Vi8j_NMBHKir
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/91fefbd7cd8306fc30adfbd2efe12a53.png
178.253.14.166200 OK 42 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/91fefbd7cd8306fc30adfbd2efe12a53.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f6c5d5c9ead7b06f0749cb9dbaa9ddaf
ad30787111551937e986b6bc7b83b5915a98b6b7
ad7320f9afdcd503feeaf71dd663656341528576c03f9ebc8bcf30627abfe975
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/91fefbd7cd8306fc30adfbd2efe12a53.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 41595
x-amz-id-2: 0Lh0hZtsryIEXgg+h0CDYZIxUl81UN83zHRJDt+YQsOd+joASo8uwdajCRPhMwXx2+XVmfefhCy6BxUn9fdIXA==
x-amz-request-id: 2WN0K76R2K5W1SN5
last-modified: Sat, 19 Dec 2020 20:14:04 GMT
etag: "f6c5d5c9ead7b06f0749cb9dbaa9ddaf"
x-amz-version-id: BgApSMxfjx.DKHR.IpdgbazD8v467KsA
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/c0f67fefc927bc6fe4f5b39742f81d9d.png
178.253.14.166200 OK 21 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/c0f67fefc927bc6fe4f5b39742f81d9d.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 583263cb7fb9b51ed078d976e8a54982
2dbd7a628fed9b243fe1c548b42153715f7df0b8
29f12707ae3e3a37fe3f59d131756af755075ae77d980b962cea592fd67c8e8d
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/c0f67fefc927bc6fe4f5b39742f81d9d.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 20763
x-amz-id-2: eAberJiM3wNBDIKQ4AqZM2i5bBglWl1Yi9CL+G63KfQOKXL68FvNbvqRxNw+MtPUQ/ZBC4OuSns9JgBPijJDgw==
x-amz-request-id: 2WN2NAHV21NSBRA6
last-modified: Tue, 01 Jun 2021 05:54:19 GMT
etag: "583263cb7fb9b51ed078d976e8a54982"
x-amz-version-id: BSVNfXjuuYaUpsBEPUEW.UNwnF2tPh9X
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/dd85b3bf1f1b9ed38883b0bdc73b8a9e.png
178.253.14.166200 OK 19 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/dd85b3bf1f1b9ed38883b0bdc73b8a9e.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c01459f0a8d2b978398d89e88e82bb53
1646e02efc3365b26af7ddaaf1b9ef6d4055a07e
76902699e8bf6b068b2b0d3a9e6ebdf58495b3cd90090da237328ef17af16fe7
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/dd85b3bf1f1b9ed38883b0bdc73b8a9e.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png, image/jpeg
content-length: 18920
x-amz-id-2: Nr7FKZKEBPVhvNXhh0PWNPO11s+9VDGCNj4NdECdoYapfsI/J6kIav1myugEygh8qER0oOvwXdkqZIXHX8L3Wg==
x-amz-request-id: 2WN9THKY5R4G6ZY1
last-modified: Sun, 26 Jan 2020 19:30:39 GMT
etag: "c01459f0a8d2b978398d89e88e82bb53"
x-amz-version-id: KdIyxLUNAoqUUEZbcLRDV9EzYOSVFyEx
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/4a499b86cdea577754cec1c3de30af5f.png
178.253.14.166200 OK 70 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/4a499b86cdea577754cec1c3de30af5f.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 16-bit/color RGBA, non-interlaced\012- data
Hash 5e50f524c09b06e8059e2f64380fed17
c2b84a86e927fbff4f0813d8f2858bf24974f49d
b1a615a3cbdee633f3e166dd571981341acc21b23601f41e068ce15bf51bc127
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/4a499b86cdea577754cec1c3de30af5f.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 70109
x-amz-id-2: FF24A7eZvZdfNke9jVxjHI0jrdD/Ker7colUIRIEoBglS6XcCmmqW7JJvy1cBPqM5dK9nnhwtVP1kfLkdNFusQ==
x-amz-request-id: WHAWZ1FA5QD9Z936
last-modified: Fri, 17 Jun 2022 12:52:02 GMT
etag: "5e50f524c09b06e8059e2f64380fed17"
x-amz-version-id: nTqcqRgJhvNvJxbB2L10YCI.lyfyrJl0
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/8c9c6fa975ff2ae462ddf635b6f02396.png
178.253.14.166200 OK 25 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/8c9c6fa975ff2ae462ddf635b6f02396.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d91ea0fcdfad31b291261ba1dae14a10
a3529b3ef4c3f5385e83bbfd72fe2c1352857a8c
8ae9ae4cb35ec65b04c97af12a5de1ae84630eb7da7ac8a7609d6ec3d89b0c89
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/8c9c6fa975ff2ae462ddf635b6f02396.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 24939
x-amz-id-2: 1SB3Zju/kC4nPtUEMzhrK4xCL/wiMH5BNr9j4fr8C+JpGsD/V8r79ylah7zSYzBS5Se0A8rVuIlgQzjqp+dm1Q==
x-amz-request-id: WHAYR5SPEWKNA46B
last-modified: Wed, 23 Nov 2022 07:46:17 GMT
etag: "d91ea0fcdfad31b291261ba1dae14a10"
x-amz-version-id: 9Mw1qs6YJj2Y8iMlFF89AYOgTyqfVRaS
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/411537d257ec2752d3e5efd1ca2f118a.png
178.253.14.166200 OK 35 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/411537d257ec2752d3e5efd1ca2f118a.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 874242abbaed76294186f6547f80cdc3
12785fa3e2f8da9e0693a766cbe897b05687a229
772923e919b9da9f526c89c3400e9fed0e31fe0295aaea6f5b03bb875ca9dd9c
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/411537d257ec2752d3e5efd1ca2f118a.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 35078
x-amz-id-2: 696U7VSkeAXUVsDGmpOREWnmptqi6998aKI+qByoUy+6mMmCqFcZhCEdCqqTcYLszxW83fsHqYyLiMnVxDvfBQ==
x-amz-request-id: RA3311TD9HRWC1JN
last-modified: Fri, 05 Mar 2021 16:54:06 GMT
etag: "874242abbaed76294186f6547f80cdc3"
x-amz-version-id: eOIrtjnVjq5A._rnroDGdNnpN7kTyF4z
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/286417.png
178.253.14.166200 OK 14 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/286417.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 753e073404e89697caa12aa66ecec44d
777248bc21af2ab87aefc85faf90dc39959595fe
0c8d8fe96e844863d863a585a58e65cb41f3d3e6bd9dd519f60b0c57b3d3e697
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/286417.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 13536
x-amz-id-2: DniBZsdVrLWpMU8q+isaMTqqF15Oveq8NBTPwlpDVl4xKJN+4DrN0daqeTT4A9Oa+sJEmoRRQ2h54N8HM9LKuA==
x-amz-request-id: RA3C4F3MPV12M28J
last-modified: Tue, 13 Aug 2019 15:03:38 GMT
etag: "753e073404e89697caa12aa66ecec44d"
x-amz-version-id: kD8ZLjRkG6lDVIlnFeFRdRGiXx6ZuHNt
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/3480.png
178.253.14.166200 OK 12 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/3480.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e498fcf391c008c7416c6cf0283ed8b
5d55c20e7be7435de2a167905f1a5f69428ed46d
c0b40f885cfe168601eafbd9560595e7d746a8dfaad396bc37e92f2899b58fcc
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/3480.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 12079
x-amz-id-2: 9vRZ/N4O1phG973l3UFIDKyJVGBHZJkg0tAy+FjOZ1I9Hq5qN5tlrOWIN1Vx3JUWw/lS8qik13CfSjdeyqYsiA==
x-amz-request-id: 5CC791544Z49PSQG
last-modified: Tue, 13 Aug 2019 15:04:52 GMT
etag: "3e498fcf391c008c7416c6cf0283ed8b"
x-amz-version-id: oHniSIL4dkPUd6yyNyrrOP2Zj9Ii7vSo
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/sfiles/logo_teams/8d9281ab017c1a5e92cfca34496404ff.png
178.253.14.166200 OK 7.5 kB URL HTTP/2 lite-1x36781678.top/sfiles/logo_teams/8d9281ab017c1a5e92cfca34496404ff.png
IP 178.253.14.166:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d9281ab017c1a5e92cfca34496404ff
e873674375517be5a7fd8370bf8ae5b9211601d0
fa62c53482efd9d3c1ace4fca40b2ec11df73715389455097e94679b78d827d2
Analyzer Verdict Alert quad9 Sinkholed
GET /sfiles/logo_teams/8d9281ab017c1a5e92cfca34496404ff.png HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=3; ggru=160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: image/png
content-length: 7452
x-amz-id-2: 73Xix0VhzOje62a3U1KafLZo+c+vdXd5XG6M9Dnf9K33/donMXsmaqRV/D2enbkMqvmx3nsOm27vKxbkax+GJA==
x-amz-request-id: 5CC6KB5YPH2H3G8N
last-modified: Tue, 13 Aug 2019 15:12:29 GMT
etag: "8d9281ab017c1a5e92cfca34496404ff"
x-amz-version-id: t8RJLMucENSHMjrPukKd.oUliMcMmnLO
expires: Sun, 04 Dec 2022 19:12:30 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&marketType=1
178.253.14.166200 OK 4.3 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&marketType=1
IP 178.253.14.166:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (27255), with no line terminators
Hash d32b3299e4feab99a50adc0a7adfe53d
c6b7351eae344364c01a02b233a03fd58c177e43
6b0c002ba520dc63c0102c3ab2a5a95fca51f9255dfd693ab2d69b6738e45dfd
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetGameZip?id=416459782&lng=us&isSubGames=true&GroupEvents=true&countevents=250&grMode=4&topGroups=&marketType=1 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:31 GMT
content-type: application/json; charset=utf-8
content-length: 4264
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/api/internal/v1/proof_of_age
178.253.14.166204 No Content 0 B URL HTTP/2 lite-1x36781678.top/web-api/api/internal/v1/proof_of_age
IP 178.253.14.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/internal/v1/proof_of_age HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 19:12:31 GMT
cache-control: no-cache, private
server-timing: p;dur=29, dt_285;dur=35
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/weblightapi/getpopulareventparams
178.253.14.166200 OK 135 B URL HTTP/2 lite-1x36781678.top/web-api/weblightapi/getpopulareventparams
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash e4cfdceed510b70219f3f8d34f460b7a
4ea91886eaf4bc54b80fa8d5fc01291073f3ffec
3d30beb47c4f5b41ad05baa30ff0b519d4423c8ee4f03b7acd734e2978361e23
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/weblightapi/getpopulareventparams HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:31 GMT
content-type: application/json; charset=utf-8
content-length: 135
server-timing: dt_285;dur=52
set-cookie: is_rtl=1; expires=Sun, 03-Dec-2023 19:12:31 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/80e28604.modern.js
8.254.252.212200 OK 960 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/80e28604.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (2008), with no line terminators
Hash 5096394c7e2179fdbda74460c7da4465
496218fd7af04d25a402e6aa4d1420e15800edae
80b9cd92cdb7ab63eb24a0175c3cf76c1c8011160d74fc9806dc430b2081726f
GET /_nuxt/desktop/default/80e28604.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 960
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-3c0"
expires: Sun, 04 Dec 2022 14:23:36 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17335
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094749062
178.253.14.166200 OK 145 B URL HTTP/2 lite-1x36781678.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1670094749062
IP 178.253.14.166:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1670094749062 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:31 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b25b894b.css
8.254.252.212200 OK 418 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b25b894b.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (907), with no line terminators
Hash 0ba2188224f315df6562e1955bce1f38
067e1310d27d823be723ec7b1a130b2b10b3a38d
e8a30381a28d76b7c1de7336ef990e8ef330e4c52462eea0d81de9143bb53d11
GET /_nuxt/desktop/default/css/b25b894b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:32 GMT
content-type: text/css
content-length: 418
cache-control: max-age=86400
content-encoding: gzip
etag: "638a6841-1a2"
expires: Sun, 04 Dec 2022 08:29:58 GMT
last-modified: Fri, 02 Dec 2022 21:04:01 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 38565
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/4c82ecfc.modern.js
8.254.252.212200 OK 636 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/4c82ecfc.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (1340), with no line terminators
Hash f4d729182b25aec859c78650744a3576
8a7a085341a140d269a6e3c812c025ea4afd8523
e65c4c1880294b6264633ffe0a3e1b947a3bc040ba0d877c97b49295386c5bdc
GET /_nuxt/desktop/default/4c82ecfc.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 636
cache-control: max-age=86400
content-encoding: gzip
etag: "638b5466-27c"
expires: Sun, 04 Dec 2022 14:23:18 GMT
last-modified: Sat, 03 Dec 2022 13:51:34 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17354
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/Get1x2_VZip?sports=1,2,3,4,6,40,66,85,236,274&champs=13589,30619,88637,96463,110163,125983,127733,1938952,2050671,2303012&count=10&lng=us&mode=4&country=137&getEmpty=true&isRecommendations=true
178.253.14.166200 OK 5.4 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/Get1x2_VZip?sports=1,2,3,4,6,40,66,85,236,274&champs=13589,30619,88637,96463,110163,125983,127733,1938952,2050671,2303012&count=10&lng=us&mode=4&country=137&getEmpty=true&isRecommendations=true
IP 178.253.14.166:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (22316), with no line terminators
Hash 2c64c34561ac1780093fc971e91c9528
7aaddd8b082fb0cbf9a62423b7e1a0718cc3eba6
9b8fe279a74472862f5a6ea7ba4f1a1d1b8196b543430d0ffead7386c48aaf01
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/Get1x2_VZip?sports=1,2,3,4,6,40,66,85,236,274&champs=13589,30619,88637,96463,110163,125983,127733,1938952,2050671,2303012&count=10&lng=us&mode=4&country=137&getEmpty=true&isRecommendations=true HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:31 GMT
content-type: application/json; charset=utf-8
content-length: 5416
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/service-api/LiveFeed/GetSportsShortZip?sports=1&champs=1938952&lng=us&gr=285&country=137&virtualSports=true&groupChamps=true
178.253.14.166200 OK 6.0 kB URL HTTP/2 lite-1x36781678.top/service-api/LiveFeed/GetSportsShortZip?sports=1&champs=1938952&lng=us&gr=285&country=137&virtualSports=true&groupChamps=true
IP 178.253.14.166:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (21659), with no line terminators
Hash 8dea009c6ce2b7ece4995bf0663bb4e2
4d702422d4dff6056a0262bc4c9559097ef08a82
60d1571c2d8edfeb05fb6f3b06d8d25aa2933b585f7d7159346d04ba95d9a5ed
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetSportsShortZip?sports=1&champs=1938952&lng=us&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:32 GMT
content-type: application/json; charset=utf-8
content-length: 5991
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 18:46:55 GMT
expires: Sat, 03 Dec 2022 20:46:55 GMT
cache-control: public, max-age=7200
age: 1537
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 678f0728bf53c1cd6e4e8299ee27d64e
99b4a9ebf5bce649f03155c504041d946a488324
990f68023ad1850b5b99c9fac85656c325e87e5c9d52bd37f6bd805c54bcf331
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2763
Cache-Control: max-age=145690
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:12:32 GMT
Etag: "638b2aef-116"
Expires: Mon, 05 Dec 2022 11:40:42 GMT
Last-Modified: Sat, 03 Dec 2022 10:54:39 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
lite-1x36781678.top/web-api/api/converslon/load
178.253.14.166200 OK 2.4 kB URL HTTP/2 lite-1x36781678.top/web-api/api/converslon/load
IP 178.253.14.166:0
Hash 97abae60b1baeb8189c15a4cc02276b2
b36a053c1f21db943ddc8c52ecb74a9739420df2
99d9fc352d34677a4d9cea068ad01ec98270ec6dbb0e451611498614fff96c31
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/converslon/load HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:29 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=19, dt_285;dur=21
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
178.253.14.166200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/getFirstDepositBonus
IP 178.253.14.166:0
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=31, dt_285;dur=33
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
suphelper.com/widget/injector.js
104.16.42.72200 OK 0 B URL HTTP/2 suphelper.com/widget/injector.js
IP 104.16.42.72:0
GET /widget/injector.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x36781678.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:12:32 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-e69da972-5c83-4067-8339-90d3f52d256e' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=300
last-modified: Fri, 02 Dec 2022 12:57:18 GMT
etag: W/"28e6c-184d2e9a3b0"
vary: Accept-Encoding
cf-cache-status: HIT
age: 169
server: cloudflare
cf-ray: 773e9d4c9e55991a-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137
178.253.14.166200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137
IP 178.253.14.166:0
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:30 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=85, dt_285;dur=87
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
178.253.14.166200 OK 0 B URL HTTP/2 lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
IP 178.253.14.166:0
Analyzer Verdict Alert quad9 Sinkholed
GET /us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094725.0.0.0; _ga=GA1.2.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094725.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112503
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:27 GMT
content-type: text/html; charset=utf-8
accept-ranges: none
content-encoding: gzip
server-timing: total;dur=816;desc="Nuxt Server Time", dt_285;dur=823
set-cookie: SESSION=002a3c25b60ed486024250668db371b5; Path=/; HttpOnly; Secure; SameSite=Lax
lng=us; Path=/
vary: User-Agent, Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x36781678.top/web-api/g/d0ca87ca0c055faea6b302d5cd2422e05ce295e3
178.253.14.166200 OK 0 B URL HTTP/2 lite-1x36781678.top/web-api/g/d0ca87ca0c055faea6b302d5cd2422e05ce295e3
IP 178.253.14.166:0
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/g/d0ca87ca0c055faea6b302d5cd2422e05ce295e3 HTTP/1.1
Host: lite-1x36781678.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x36781678.top/us/live/football/1938952-fifa-world-cup-2022/416459782-argentina-australia
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Origin: https://lite-1x36781678.top
Content-Length: 31220
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0OpmOLn4FbgyI4BEUfAg==; che_g=12019ccc-3ca0-7979-05e0-b58dcc39ed77; _ga_5671CMJ6T4=GS1.1.1670094723.1.1.1670094750.0.0.0; _ga=GA1.1.1616237309.1670094723; _ga_7JGWL9SV66=GS1.1.1670094723.1.1.1670094750.0.0.0; _gid=GA1.2.2078665111.1670094723; _gat_gtag_UA_178408567_1=1; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1670112526; SESSION=002a3c25b60ed486024250668db371b5; lng=us; window_width=1280; tzo=0; ggru=160
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:12:34 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=20, dt_285;dur=21
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2