ocsp.sectigo.com/
172.64.155.188 471 B IP 172.64.155.188:0
Hash c4de9f4bc9574b983c7e5228f684289f
c672c7305674d0aa685f610ace34fb32eb9c56b6
644b08fc24c0a951b2433f884aef38d59cc05a1be07948ddb918cca0071a0fc0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 21:58:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Apr 2023 03:03:01 GMT
Expires: Thu, 13 Apr 2023 03:03:00 GMT
Etag: "c672c7305674d0aa685f610ace34fb32eb9c56b6"
Cache-Control: max-age=449646,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b4588d7af14b51b-OSL
v3.traincdn.com/version.json
8.254.252.212 44 B URL v3.traincdn.com/version.json
IP 8.254.252.212:0
Hash 22f61e4c947c320e841d36009d67f3ab
681051feaf177de3c791d4d5c1e6d0e2a768ab37
2aa7eebd5eaafc7a32fc8db60481b17baea2f1807e24f4c7e07cb06360213a74
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "642ff148-2c"
expires: Fri, 07 Apr 2023 21:59:39 GMT
last-modified: Fri, 07 Apr 2023 10:32:40 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 15
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/runtime-8a3e39ef.modern.js
8.254.252.212 12 kB URL v3.traincdn.com/_nuxt/desktop/default/runtime-8a3e39ef.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (39424), with no line terminators
Hash 02b8c09acea5986a82f21c77b88bed8d
442fd36bd04dadc68e053006eb54e010bb550530
e4e886bd56e9982ba3f8754dd215a98837dd2bc1fad597e4b5915f2424431866
GET /_nuxt/desktop/default/runtime-8a3e39ef.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 12465
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-30b1"
expires: Sat, 08 Apr 2023 10:58:45 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39633
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/f6adb850.css
8.254.252.212 9.9 kB URL v3.traincdn.com/_nuxt/desktop/default/css/f6adb850.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash db21cf359e0e25b9a446ece64346c421
688bcab15fef1f2f165f023f7c6dd8b544edad25
ecbd1f9070e4e246ee348ae0cefc37d0521111f023fb8fa253d5d1a776e05846
GET /_nuxt/desktop/default/css/f6adb850.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: text/css
content-length: 9919
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-26bf"
expires: Sat, 08 Apr 2023 11:06:50 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39126
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/ef92b463.css
8.254.252.212 2.4 kB URL v3.traincdn.com/_nuxt/desktop/default/css/ef92b463.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (15075), with no line terminators
Hash 176a8951856bf1096cc6ad846702de67
61f951ff3e7163264dca734a1dc0544fe6fb8563
cc332c6c3b532fe4d6dd07fbc9069eddc75a0116adc3fe8018dc71d1b6fcfbad
GET /_nuxt/desktop/default/css/ef92b463.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: text/css
content-length: 2438
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-986"
expires: Sat, 08 Apr 2023 11:01:08 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39466
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.ChampResults/Page.Betting.Main/betting.SportMenuApp-80f0ba72.modern.js
8.254.252.212 5.5 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.ChampResults/Page.Betting.Main/betting.SportMenuApp-80f0ba72.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (16844), with no line terminators
Hash 5eea1dda018043b85699d7fa11a0c1eb
dc86e790b9d6b73ba70c7668d1cd28d0eabfa56d
cf35600465eeb71d7127fda059430cb8c66ba480db4bb3c21ffbf14660273cda
GET /_nuxt/desktop/default/vendors/Page.Betting.ChampResults/Page.Betting.Main/betting.SportMenuApp-80f0ba72.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 5471
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-155f"
expires: Sat, 08 Apr 2023 10:58:37 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-e3caf896.modern.js
8.254.252.212 12 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-e3caf896.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (41407), with no line terminators
Hash 23107b807408686e24201c1844d282d6
c0eb2ba5e22daa0a0f29aed90698b186d641d9e0
2965d370c7dec919050221c95a451c28dde72c08610d1c4a12a254089cf2f73a
GET /_nuxt/desktop/default/vendors/Page.Betting.Main-e3caf896.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 11976
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2ec8"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39625
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-b56e5440.modern.js
8.254.252.212 94 kB URL v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-b56e5440.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (65402), with no line terminators
Hash 639a502cf2f8b722b38a441b6f47918b
46a9b37fe77bdf8047b69a57e5707cabb2ce3f8d
3d44e80bbe51225ff70eb5bec1b80db0c073b810625931f7bd77aeaad4470b50
GET /_nuxt/desktop/default/Page.Betting.Main-b56e5440.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 93792
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-16e60"
expires: Sat, 08 Apr 2023 10:58:37 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/699bdf44.css
8.254.252.212 2.0 kB URL v3.traincdn.com/_nuxt/desktop/default/css/699bdf44.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (15871), with no line terminators
Hash e9ac7beb22cf7e9645b4dcce555daa62
b3970c243996a14baf175cc8edfc36d591fb4b4a
e73562747ace0fdc38cc8bebb86da5035ff66b9183ad10919d6a2c07cd2e4509
GET /_nuxt/desktop/default/css/699bdf44.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: text/css
content-length: 2023
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-7e7"
expires: Sat, 08 Apr 2023 11:01:16 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39457
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a3d809ac5e2288e4e9481d98ec096740
bcc954df9ae15af951de17cc58b85e9e62f2994a
1b0bf4130505b18ddc0b0dda41f2264139ca1886c0cf538b328b299433aaf470
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
172.64.155.188 471 B IP 172.64.155.188:0
Hash c4de9f4bc9574b983c7e5228f684289f
c672c7305674d0aa685f610ace34fb32eb9c56b6
644b08fc24c0a951b2433f884aef38d59cc05a1be07948ddb918cca0071a0fc0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 21:58:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Apr 2023 03:03:01 GMT
Expires: Thu, 13 Apr 2023 03:03:00 GMT
Etag: "c672c7305674d0aa685f610ace34fb32eb9c56b6"
Cache-Control: max-age=449646,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b4588d7cfa4b52d-OSL
v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Games.Game/6bc3950d-08d81083.modern.js
8.254.252.212200 OK 2.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Games.Game/6bc3950d-08d81083.modern.js
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (8164), with no line terminators
Hash 1cd6166c7eca213ce0303e3307286163
9901f6a28f1544f011abf6072fc7324cdfae41a7
56865aaeec1e40a8e241e03bccbb6af1ab5e1d1a84688050eeb651555dce4948
GET /_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Games.Game/6bc3950d-08d81083.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 2468
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-9a4"
expires: Sat, 08 Apr 2023 10:58:28 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39632
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
8.254.252.212 698 B URL v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
IP 8.254.252.212:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash baf96800254904a05eee2ff49c94a801
847efb3449a8d7857f004192310aa2164a71d530
0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Sat, 08 Apr 2023 11:01:01 GMT
last-modified: Fri, 31 Mar 2023 18:13:11 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39474
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/d6610376.css
8.254.252.212200 OK 10 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/d6610376.css
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 14ae5f533708da25110888c42a449e1d
14fb3e09876326c1e15e6613c679fa442512e0ef
e6c2d6195f68b4b179f3768a39a06eefacdb1e4162f552505b9265faec1b1525
GET /_nuxt/desktop/default/css/d6610376.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: text/css
content-length: 10223
cache-control: max-age=86400
content-encoding: gzip
etag: "642e7a69-27ef"
expires: Sat, 08 Apr 2023 10:44:05 GMT
last-modified: Thu, 06 Apr 2023 07:53:13 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 40488
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/app-220b0708.modern.js
8.254.252.212 189 kB URL v3.traincdn.com/_nuxt/desktop/default/app-220b0708.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 189 kB (189394 bytes)
Hash a81aec7f7b7b8e4c4c52395d54cc13d6
801168e1afb5ec09fb55e7b9772854227df95677
5030fa20bdb9fa4a0ac6f94119321d03bb36af3fc2e8169247b0be63343b1817
GET /_nuxt/desktop/default/app-220b0708.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 189394
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2e3d2"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39632
accept-ranges: bytes
X-Firefox-Spdy: h2
1xbet.com.gh/
83.147.204.21 1.5 kB IP 83.147.204.21:0
ASN #202492 Silverhill Group Holding Ltd
Hash 1d3767c735dd10fec4945bf6482745ef
be1870fa0c0b00b96998c2d33864efd4e858e3dc
4badc90a3a280cbfef886ad62d9e03eb738e2f493355c6764846a7776d91f1e5
GET / HTTP/1.1
Host: 1xbet.com.gh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
server: nginx
date: Fri, 07 Apr 2023 21:58:50 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: SESSION=e7325eb07b7e7f025154a085cabb7703; path=/; secure; HttpOnly; SameSite=Lax
_glhf=1680922506; expires=Fri, 07-Apr-2023 22:58:50 GMT; Max-Age=3600; path=/
dnb=1; path=/; httponly; samesite=lax
v3fr=1; expires=Mon, 10-Apr-2023 21:58:50 GMT; Max-Age=259200; path=/; httponly; samesite=lax
auid=U5PMFWQwkhoqGZAXA1Q3Ag==; path=/; secure; httponly; samesite=lax
x-reason: 1079,1026
cache-control: no-cache, private
location: /new-platform?url=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188 471 B IP 172.64.155.188:0
Hash c4de9f4bc9574b983c7e5228f684289f
c672c7305674d0aa685f610ace34fb32eb9c56b6
644b08fc24c0a951b2433f884aef38d59cc05a1be07948ddb918cca0071a0fc0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Apr 2023 21:58:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Apr 2023 03:03:01 GMT
Expires: Thu, 13 Apr 2023 03:03:00 GMT
Etag: "c672c7305674d0aa685f610ace34fb32eb9c56b6"
Cache-Control: max-age=449646,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b4588d7dfbab4ee-OSL
v3.traincdn.com/_nuxt/desktop/default/vendors/app-34407d05.modern.js
8.254.252.212 192 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/app-34407d05.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (65430)
Size 192 kB (192387 bytes)
Hash 68f3eec6d2749f133f0f738a0a6e9163
65634aa76c332e34a567b1aed06dbfcf9e3914e1
16d39d4bfe2bf06f74c84f4456ca3a371765a7dc662f597e3bdf8d60462b7800
GET /_nuxt/desktop/default/vendors/app-34407d05.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 192387
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2ef83"
expires: Sat, 08 Apr 2023 10:58:28 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39633
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/app-2defd4c3.modern.js
8.254.252.212 86 kB URL v3.traincdn.com/_nuxt/desktop/default/commons/app-2defd4c3.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (65476)
Hash 9be02c5b107e0c9769ad2c111e3fd25d
d5e6efe8c3b9bed86755ae6579e89e4252686957
7b1ee51f13381416c4814b4b82482bfe879865844653dcf2de2a0ec0cc259f9a
GET /_nuxt/desktop/default/commons/app-2defd4c3.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 86121
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-15069"
expires: Sat, 08 Apr 2023 10:58:37 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39632
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/0109a923.css
8.254.252.212 46 kB URL v3.traincdn.com/_nuxt/desktop/default/css/0109a923.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4ee99a8e2dcd3310c34b67e09fedc315
e9be51ab016b0f4a3d1cdfc49402d59efa6d9089
fb4589280b85ad0de996614baa978769f175436cc3c01d7f2b9fb2091caea2d2
GET /_nuxt/desktop/default/css/0109a923.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:53 GMT
content-type: text/css
content-length: 46539
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-b5cb"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39625
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a3d809ac5e2288e4e9481d98ec096740
bcc954df9ae15af951de17cc58b85e9e62f2994a
1b0bf4130505b18ddc0b0dda41f2264139ca1886c0cf538b328b299433aaf470
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a4f3d7004dcd1637d467b8f5fb0f747c
47cff64b38426ff595103a41993bb86dec2c740f
5d089225c0fabd0867bfda6b9b3c766d28cbeba5517da448d9d1225431b487b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a4f3d7004dcd1637d467b8f5fb0f747c
47cff64b38426ff595103a41993bb86dec2c740f
5d089225c0fabd0867bfda6b9b3c766d28cbeba5517da448d9d1225431b487b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a4f3d7004dcd1637d467b8f5fb0f747c
47cff64b38426ff595103a41993bb86dec2c740f
5d089225c0fabd0867bfda6b9b3c766d28cbeba5517da448d9d1225431b487b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:31:23 GMT
expires: Wed, 03 Apr 2024 10:31:23 GMT
cache-control: public, max-age=31536000
age: 300450
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Apr 2023 11:09:06 GMT
expires: Fri, 05 Apr 2024 11:09:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 125387
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:31:10 GMT
expires: Wed, 03 Apr 2024 10:31:10 GMT
cache-control: public, max-age=31536000
age: 300463
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a4f3d7004dcd1637d467b8f5fb0f747c
47cff64b38426ff595103a41993bb86dec2c740f
5d089225c0fabd0867bfda6b9b3c766d28cbeba5517da448d9d1225431b487b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
v3.traincdn.com/_nuxt/desktop/default/vendors/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.Cyber/93792699-104b608c.modern.js
8.254.252.212200 OK 6.4 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.Cyber/93792699-104b608c.modern.js
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (24723), with no line terminators
Hash dfd990f0f149adf2f093baadc025d18d
faff7b2caa8786782429bb43bb0f3a1cd243eb04
76ab35b11caee4aafc8075b4f8faeee795d67500cc0cbaa5f31194581c65664c
GET /_nuxt/desktop/default/vendors/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.Cyber/93792699-104b608c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 6369
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-18e1"
expires: Sat, 08 Apr 2023 10:58:37 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39627
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/genfiles/cms/pg/285/images/7ff608075eeeae857d6d0d4fc1d19854.png
178.253.15.27 653 B URL lite-1x05933835.top/genfiles/cms/pg/285/images/7ff608075eeeae857d6d0d4fc1d19854.png
IP 178.253.15.27:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/pg/285/images/7ff608075eeeae857d6d0d4fc1d19854.png HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: image/png
content-length: 653
last-modified: Fri, 31 Mar 2023 18:13:11 GMT
x-rgw-object-type: Normal
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Sat, 08 Apr 2023 21:58:54 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-14c3a5ad.modern.js
178.253.15.27 22 kB URL lite-1x05933835.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-14c3a5ad.modern.js
IP 178.253.15.27:0
File type ASCII text, with very long lines (65476)
Hash 2756469a7650525811bccb0693b88f0c
de7c3168b9e30a37ff669cb1072b8e643a7edca1
dfac5afe23c87079d2824dbfb17f40d87dbd3e5d46bfa4dfe4fa966069de9ce1
GET /_nuxt/desktop/default/vendors/plugins.v-tooltip-14c3a5ad.modern.js HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 21842
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-5552"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/css/ef92b463.css
178.253.15.27 2.4 kB URL lite-1x05933835.top/_nuxt/desktop/default/css/ef92b463.css
IP 178.253.15.27:0
File type ASCII text, with very long lines (15075), with no line terminators
Hash 176a8951856bf1096cc6ad846702de67
61f951ff3e7163264dca734a1dc0544fe6fb8563
cc332c6c3b532fe4d6dd07fbc9069eddc75a0116adc3fe8018dc71d1b6fcfbad
GET /_nuxt/desktop/default/css/ef92b463.css HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: text/css
content-length: 2438
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-986"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/css/699bdf44.css
178.253.15.27 2.0 kB URL lite-1x05933835.top/_nuxt/desktop/default/css/699bdf44.css
IP 178.253.15.27:0
File type ASCII text, with very long lines (15871), with no line terminators
Hash e9ac7beb22cf7e9645b4dcce555daa62
b3970c243996a14baf175cc8edfc36d591fb4b4a
e73562747ace0fdc38cc8bebb86da5035ff66b9183ad10919d6a2c07cd2e4509
GET /_nuxt/desktop/default/css/699bdf44.css HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: text/css
content-length: 2023
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-7e7"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/css/f6adb850.css
178.253.15.27 9.9 kB URL lite-1x05933835.top/_nuxt/desktop/default/css/f6adb850.css
IP 178.253.15.27:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash db21cf359e0e25b9a446ece64346c421
688bcab15fef1f2f165f023f7c6dd8b544edad25
ecbd1f9070e4e246ee348ae0cefc37d0521111f023fb8fa253d5d1a776e05846
GET /_nuxt/desktop/default/css/f6adb850.css HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: text/css
content-length: 9919
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-26bf"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/vendors/plugins.vue-notification-5f83c9d2.modern.js
178.253.15.27 4.6 kB URL lite-1x05933835.top/_nuxt/desktop/default/vendors/plugins.vue-notification-5f83c9d2.modern.js
IP 178.253.15.27:0
File type ASCII text, with very long lines (12527), with no line terminators
Hash 6efc7e2ea4422d847850ea49fcb0db20
e5d08a015e510474ed174d40d5f36af773cb3f45
5c7a46d2817bba9a1ed51a5de2b02a5c7516793611a7a59d1a4050754e19506d
GET /_nuxt/desktop/default/vendors/plugins.vue-notification-5f83c9d2.modern.js HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 4564
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-11d4"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/css/e1ad5afb.css
178.253.15.27 943 B URL lite-1x05933835.top/_nuxt/desktop/default/css/e1ad5afb.css
IP 178.253.15.27:0
File type ASCII text, with very long lines (3303), with no line terminators
Hash 721361b228487801ac9ed4a0861541e6
c6cb1e138d89630de94ae0c9a8587c0f01af8cbe
b169b556a9278bcee848ae251736c64a690f4f48b3f8332883c49a961d336459
GET /_nuxt/desktop/default/css/e1ad5afb.css HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: text/css
content-length: 943
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-3af"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/external-api/config/deprecated
178.253.15.27 11 kB URL lite-1x05933835.top/web-api/external-api/config/deprecated
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with very long lines (45232), with no line terminators
Hash 98ce77cd0ab7d6540dbac317e86d805c
a4449de4254f05f77c49a68cb3d3148fc91f2420
f5a1d702dd20a000546b64dab126471156ab111d7aab8fcaeaf62e61d203e6e1
GET /web-api/external-api/config/deprecated HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=133, dt_285;dur=137
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/desktop/default/date-fns-locale-21-04278471.modern.js
178.253.15.27 2.1 kB URL lite-1x05933835.top/_nuxt/desktop/default/date-fns-locale-21-04278471.modern.js
IP 178.253.15.27:0
File type ASCII text, with very long lines (6960), with no line terminators
Hash e360bf46b71385d8a5e9058ee01b5777
b508abf0f538d420db3b8ab05f489f62212a4dc8
fecc9f32ad9dec90d1f29b74974de14bd63043505fcec63d7c7dbdb268879f30
GET /_nuxt/desktop/default/date-fns-locale-21-04278471.modern.js HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 2132
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
vary: Accept-Encoding
etag: "642ff081-854"
content-encoding: gzip
expires: Fri, 07 Apr 2023 22:58:54 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DC-8a2de986.modern.js
8.254.252.212200 OK 1.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DC-8a2de986.modern.js
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (2510), with no line terminators
Hash a767a7b8932a4bbe09765756a1b85312
67b5220af0dedcef1005920c8c39444bda0c4688
1567db327118c32f043fbc50eb5ad21121a323d39a7e02856888bea00ed8e02e
GET /_nuxt/desktop/default/DC-8a2de986.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 1086
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-43e"
expires: Sat, 08 Apr 2023 10:58:42 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39627
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash f7355bc74e99a4a11a7c882870c8448d
1c8a1c828906682f74a848a4d2062f3e22733aa6
2513022949681b2dd7dca34dffb23eb5889d45435ddaea151cb5c2a541cf3417
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x05933835.top/version.json?timestamp=1680904734850
178.253.15.27 44 B URL lite-1x05933835.top/version.json?timestamp=1680904734850
IP 178.253.15.27:0
Hash 22f61e4c947c320e841d36009d67f3ab
681051feaf177de3c791d4d5c1e6d0e2a768ab37
2aa7eebd5eaafc7a32fc8db60481b17baea2f1807e24f4c7e07cb06360213a74
GET /version.json?timestamp=1680904734850 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:55 GMT
content-type: application/json
content-length: 44
last-modified: Fri, 07 Apr 2023 10:32:40 GMT
vary: Accept-Encoding
etag: "642ff148-2c"
content-encoding: gzip
expires: Fri, 07 Apr 2023 21:59:55 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-178408567-1
142.250.74.40 46 kB URL www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP 142.250.74.40:0
File type ASCII text, with very long lines (2206)
Hash 4f3e6d18f4575729fa635d476b356d8e
70c7becff43c3bb1c9c8dc2d3d7f8046ed67c9fa
3e45af4897800437702ebd17a33f7b4a6ebf4d38c3e1be3508d9b615990db6f3
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Apr 2023 21:58:55 GMT
expires: Fri, 07 Apr 2023 21:58:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46056
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash f7355bc74e99a4a11a7c882870c8448d
1c8a1c828906682f74a848a4d2062f3e22733aa6
2513022949681b2dd7dca34dffb23eb5889d45435ddaea151cb5c2a541cf3417
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:58:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
radar.cedexis.com/1593429750/radar.js
45.54.49.5200 OK 19 kB URL GET HTTP/1.1 radar.cedexis.com/1593429750/radar.js
IP 45.54.49.5:443
ASN #63911 NetActuate, Inc
Requested by https://lite-1x05933835.top/en
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
Fingerprint7F:30:E5:D7:D1:65:6B:D2:63:14:00:56:F3:55:CE:4A:B0:82:86:3F
ValidityTue, 14 Jun 2022 00:00:00 GMT - Wed, 14 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (1782)
Hash 2acb3c3179b2646943d1a8f5166743cc
56aa31a4027fec3dd8cc78114c6b0f3604716c14
0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Apr 2023 21:58:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:33 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0d9-af5c"
Expires: Fri, 21 Apr 2023 21:58:55 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.22-aee66dd4.modern.js
8.254.252.212 1.3 kB URL v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.22-aee66dd4.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (3429), with no line terminators
Hash 10d38f30e6ad8b794240422fe286db46
d7b3675a6ef40623c22767cf332b98442be94b8a
8283205a9a8373e6ec7cc64ecc2b1409eca878be596c2d2e23939353f3ff7d22
GET /_nuxt/desktop/default/ioc.dependencies.22-aee66dd4.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: application/javascript; charset=utf-8
content-length: 1254
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-4e6"
expires: Sat, 08 Apr 2023 10:58:46 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/Desktop/Default/svg-sprites/country-201012.svg
178.253.15.27 55 kB URL lite-1x05933835.top/_nuxt/Desktop/Default/svg-sprites/country-201012.svg
IP 178.253.15.27:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 2819a76e8f20b322eeab255eaed624fc
4dc166c7b10801af32dbb1e762ceb9a027cf61fc
ee701b30b5bf540ddbe0467805494c9ff1759f29095bf4d3351c848bd95ec9b3
GET /_nuxt/Desktop/Default/svg-sprites/country-201012.svg HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
etag: W/"642ff081-26288"
expires: Sat, 08 Apr 2023 21:58:35 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/017a5f60fe88418bcc86572843106c16.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/017a5f60fe88418bcc86572843106c16.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e27a9e257f6cbbab4cef0b826fb170a5
248c84fd7e3c7cbd12d88fd81372699a81794e33
71da49e82b295bb9be7f208f7898564f605d6540d51e1fe694f2c72a72dc5fae
GET /sfiles/logo_teams/017a5f60fe88418bcc86572843106c16.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 10258
cache-control: public, max-age=86400
etag: "e27a9e257f6cbbab4cef0b826fb170a5"
expires: Sat, 08 Apr 2023 09:20:09 GMT
last-modified: Sat, 28 Jan 2023 08:45:57 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 72036
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2372.webp
8.254.252.212 7.5 kB URL v3.traincdn.com/sfiles/logo_teams/2372.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6c1f04fed74ed82270e0fc22bc8d117a
9e11ec0652c6153d106b4ddfa7a27be8e2752fa3
12660769b58de57d8056f0b7d73c5e8de7dfae9a11c9878fa1926cf6458b4c64
GET /sfiles/logo_teams/2372.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 7542
cache-control: public, max-age=86400
etag: "6c1f04fed74ed82270e0fc22bc8d117a"
expires: Sat, 08 Apr 2023 09:20:09 GMT
last-modified: Tue, 31 Jan 2023 11:06:32 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 62065
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/bcf1ac919834723f704fd3d762fe67fa.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/bcf1ac919834723f704fd3d762fe67fa.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 125d437e4ff32e1a9d633fb560358fd6
f7629874b61686e0c36be0d2736090c8f121cb54
79431fba67160aeda9fe0e582f60330b99ac7f2652f98844f21cac975d578d9f
GET /sfiles/logo_teams/bcf1ac919834723f704fd3d762fe67fa.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 10510
cache-control: public, max-age=86400
etag: "125d437e4ff32e1a9d633fb560358fd6"
expires: Sat, 08 Apr 2023 08:51:29 GMT
last-modified: Tue, 17 Jan 2023 13:14:08 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 47248
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/845ece49c7d5b22e9f33a88826ccaec0.webp
8.254.252.212 9.3 kB URL v3.traincdn.com/sfiles/logo_teams/845ece49c7d5b22e9f33a88826ccaec0.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 44bd1a90a2c4dc91aa10ba72a9d4f68e
dc518411ed9ac45d450de63eb786e4249e8ac68a
8e24fb9b7841f24ffebae04a73a02a4038bc9d65825fbebc19dc1422b9113855
GET /sfiles/logo_teams/845ece49c7d5b22e9f33a88826ccaec0.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 9256
cache-control: public, max-age=86400
etag: "44bd1a90a2c4dc91aa10ba72a9d4f68e"
expires: Fri, 07 Apr 2023 22:40:42 GMT
last-modified: Tue, 17 Jan 2023 10:50:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 83894
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2414.webp
8.254.252.212 6.5 kB URL v3.traincdn.com/sfiles/logo_teams/2414.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2e638f2b745c7970c6c2438f53bf50ca
a1e705db9159b405cc5f42e145ec53938a6ae9a8
d88134d0bdefb5ffb47f29f73f57e3ac64a373756b8548dd2018c72ad0c44fc0
GET /sfiles/logo_teams/2414.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 6470
cache-control: public, max-age=86400
etag: "2e638f2b745c7970c6c2438f53bf50ca"
expires: Sat, 08 Apr 2023 09:20:09 GMT
last-modified: Wed, 01 Feb 2023 08:58:36 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 62065
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/25f49c3ba7cdaa1b83b037443c8ff230.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/25f49c3ba7cdaa1b83b037443c8ff230.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash dde1662de3e9b0f42e7588bcd82ffdea
ad1b9a15ce79813ebcb33c2b99abb12d6904777c
41afaeeb5ff7214a470396bd19fdd790dc6c368a72652fc2f17d98f1d06a8d2c
GET /sfiles/logo_teams/25f49c3ba7cdaa1b83b037443c8ff230.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 9972
cache-control: public, max-age=86400
etag: "dde1662de3e9b0f42e7588bcd82ffdea"
expires: Sat, 08 Apr 2023 19:36:37 GMT
last-modified: Tue, 31 Jan 2023 13:53:01 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 48973
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1946.webp
8.254.252.212 12 kB URL v3.traincdn.com/sfiles/logo_teams/1946.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4f0a5bf1223545bf5a856474df7d681e
86afd52f492d647f273901be5ca8e81e53359c34
e5aba091f39e1bd98a09e5cde28614a0d3ac3d33fe9c100de60c84204a111b3c
GET /sfiles/logo_teams/1946.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 11748
cache-control: public, max-age=86400
etag: "4f0a5bf1223545bf5a856474df7d681e"
expires: Sat, 08 Apr 2023 12:37:45 GMT
last-modified: Wed, 01 Feb 2023 08:22:15 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 33671
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3470.webp
8.254.252.212 5.7 kB URL v3.traincdn.com/sfiles/logo_teams/3470.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c01d406a4eb42307cb8e12ad3f1894b9
a1218e4973d0e428a029755aef35058cc1e1fc8a
7387ccd73a8f7749321c76d49639ac929d1c70216bb1e681c9498eebc1b92329
GET /sfiles/logo_teams/3470.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 5690
cache-control: public, max-age=86400
etag: "c01d406a4eb42307cb8e12ad3f1894b9"
expires: Sat, 08 Apr 2023 11:28:19 GMT
last-modified: Tue, 31 Jan 2023 14:35:00 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37837
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ecb74e78c9dcc79d089d4d4ff496fd69.webp
8.254.252.212 9.5 kB URL v3.traincdn.com/sfiles/logo_teams/ecb74e78c9dcc79d089d4d4ff496fd69.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e97569018a48590bc0eca358814b7d8
0b1d3e7514a3632c0beda3268cc1dac97dea5445
d2cafd5334a672a6da2bd1bde180bd6b61e3d0dc0b3a9f951afa0ce1616b8622
GET /sfiles/logo_teams/ecb74e78c9dcc79d089d4d4ff496fd69.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 9532
cache-control: public, max-age=86400
etag: "8e97569018a48590bc0eca358814b7d8"
expires: Sat, 08 Apr 2023 08:01:13 GMT
last-modified: Tue, 17 Jan 2023 10:59:59 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 52759
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7191cc96b1b4e85b06b67d41256f5185.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/7191cc96b1b4e85b06b67d41256f5185.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e56fccf7db8acb2e063469d400d33cc3
d97ba6b69a6bb2012b339af0ca09b171539ec2f7
dcf65118acb0364bc74707531386a3f4e3c28966f15c53e947c381f4b6303c5b
GET /sfiles/logo_teams/7191cc96b1b4e85b06b67d41256f5185.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 10442
cache-control: public, max-age=86400
etag: "e56fccf7db8acb2e063469d400d33cc3"
expires: Sat, 08 Apr 2023 18:34:04 GMT
last-modified: Tue, 17 Jan 2023 11:17:01 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 12302
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/67987.webp
8.254.252.212 14 kB URL v3.traincdn.com/sfiles/logo_teams/67987.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cb582fe2c419e5ba8fbd85a217b1ffd7
cbad4a99ed9a7af67215ce6b16b7f66f4f2e225a
7ffa1ddbc7c358a35535641a604e54859af32dfb6ae0a331090a428e436a78f3
GET /sfiles/logo_teams/67987.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 13788
cache-control: public, max-age=86400
etag: "cb582fe2c419e5ba8fbd85a217b1ffd7"
expires: Sat, 08 Apr 2023 02:04:57 GMT
last-modified: Tue, 17 Jan 2023 13:52:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 83347
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/Desktop/Default/svg-sprites/sports-201012.svg
178.253.15.27 153 kB URL lite-1x05933835.top/_nuxt/Desktop/Default/svg-sprites/sports-201012.svg
IP 178.253.15.27:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size 153 kB (152646 bytes)
Hash 124219ce1032873cfe98f67de3b736cc
23d78e90a1ff2ad35db36686a005ab82b99105b6
a01d12780dfc45ee1d7a908642eb3133a8d157d21ae626754fdb9bc0a9cd6986
GET /_nuxt/Desktop/Default/svg-sprites/sports-201012.svg HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
etag: W/"642ff081-58c50"
expires: Sat, 08 Apr 2023 21:58:35 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f458a060a8ed9194e9e47096552287f0.webp
8.254.252.212 4.2 kB URL v3.traincdn.com/sfiles/logo_teams/f458a060a8ed9194e9e47096552287f0.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5f756e733c8a46dcbe435f36ecca76c7
81b30ccd115b03643596f8b07eb595347c8b5858
1d11b19e0c2d8b19c5dac02ee3f65b507c52857ad5715ac8ed1d122785f1009f
GET /sfiles/logo_teams/f458a060a8ed9194e9e47096552287f0.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 4194
cache-control: public, max-age=86400
etag: "5f756e733c8a46dcbe435f36ecca76c7"
expires: Sat, 08 Apr 2023 20:04:22 GMT
last-modified: Tue, 28 Feb 2023 06:24:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 6879
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/aeb2c900be4267bc724f40461977480c.webp
8.254.252.212 9.8 kB URL v3.traincdn.com/sfiles/logo_teams/aeb2c900be4267bc724f40461977480c.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f05f002fef372605e3e80525b08e56d0
f5e6de3da0b3a9325d47e54d2e1ffd0a0b94584b
719c949b8637a83400cdd933c41f8ba2b57473c23578e3bbe88ed15ebcd980b4
GET /sfiles/logo_teams/aeb2c900be4267bc724f40461977480c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 9798
cache-control: public, max-age=86400
etag: "f05f002fef372605e3e80525b08e56d0"
expires: Sat, 08 Apr 2023 14:23:49 GMT
last-modified: Tue, 17 Jan 2023 11:16:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 27309
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3482.webp
8.254.252.212 6.5 kB URL v3.traincdn.com/sfiles/logo_teams/3482.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1baa42d22f337804d00531d9e670981f
aa9a888b2abd641a81eb28353041142b6dc8fe01
ccaff9db51e28ad90fdc2dd0303b6a6e54e50421c4b8c770f6d55a5e638ebc3b
GET /sfiles/logo_teams/3482.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 6460
cache-control: public, max-age=86400
etag: "1baa42d22f337804d00531d9e670981f"
expires: Sat, 08 Apr 2023 14:31:49 GMT
last-modified: Tue, 31 Jan 2023 14:35:11 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 26828
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/70fd2da62f9f18ad5b4d3bfba1e5198f.webp
8.254.252.212 4.3 kB URL v3.traincdn.com/sfiles/logo_teams/70fd2da62f9f18ad5b4d3bfba1e5198f.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5c72b9f15669e572bad549f4b042dc08
82368d07ca446ea94c7d3cd05780e65bd7066216
8f6d94740471a01e971b3ae650f29a28df4a27829cceee06ccb56e4f91c44ea0
GET /sfiles/logo_teams/70fd2da62f9f18ad5b4d3bfba1e5198f.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 4274
cache-control: public, max-age=86400
etag: "5c72b9f15669e572bad549f4b042dc08"
expires: Sat, 08 Apr 2023 15:00:52 GMT
last-modified: Tue, 31 Jan 2023 14:38:22 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 25084
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/242c15e83775dc22e4da99a8910db6c5.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/242c15e83775dc22e4da99a8910db6c5.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d58153317434e8c8efba825aa7300fff
c7403a5e88277a5508d7ecf9bc89d5586f6f5815
87702413a72462b8ec626e29dc9d3e8b8b141d6f568d650f5a43c13be5eeff7c
GET /sfiles/logo_teams/242c15e83775dc22e4da99a8910db6c5.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 10526
cache-control: public, max-age=86400
etag: "d58153317434e8c8efba825aa7300fff"
expires: Sat, 08 Apr 2023 14:23:48 GMT
last-modified: Tue, 28 Feb 2023 06:58:57 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 27308
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3456.webp
8.254.252.212 13 kB URL v3.traincdn.com/sfiles/logo_teams/3456.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b630d10b6c83c71d5c44c3cc7752e327
ddb728c06265ec11bd644ecf717ad5afd2e64e03
26604c393b0fafd1ba174f8ab5b2cdcf23f6d2be61405cde43eb2d5fe9697716
GET /sfiles/logo_teams/3456.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 12938
cache-control: public, max-age=86400
etag: "b630d10b6c83c71d5c44c3cc7752e327"
expires: Sat, 08 Apr 2023 13:19:20 GMT
last-modified: Wed, 01 Feb 2023 08:11:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 32767
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3488.webp
8.254.252.212 7.3 kB URL v3.traincdn.com/sfiles/logo_teams/3488.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 907b3c2e8973721414dd1e691cbaf34a
891d03c0293d47e9a0266b1760220b1263db05ad
5c29da94567378e3a57d0f8b017d76535be140172fca43ba9900b988a1a00e20
GET /sfiles/logo_teams/3488.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 7336
cache-control: public, max-age=86400
etag: "907b3c2e8973721414dd1e691cbaf34a"
expires: Sat, 08 Apr 2023 11:59:01 GMT
last-modified: Wed, 01 Feb 2023 08:11:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 36667
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/new-platform/en/49223c42f60d952d9ddbb080d276b05995a788ab4cdcb9fff947951f56319b36
178.253.15.27 108 kB URL lite-1x05933835.top/web-api/new-platform/en/49223c42f60d952d9ddbb080d276b05995a788ab4cdcb9fff947951f56319b36
IP 178.253.15.27:0
Size 108 kB (107742 bytes)
Hash 2f313d1650a1570c2276dde3344111af
0d19997d4d7468b1a728e996ed32b7b2bee23811
587de29870a2e1a0578023b2857c4afbecd0e3cfee6ebfc4968ee8718f4131aa
GET /web-api/new-platform/en/49223c42f60d952d9ddbb080d276b05995a788ab4cdcb9fff947951f56319b36 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 07 Apr 2023 21:58:50 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, private
location: /
server-timing: p;dur=51, dt_285;dur=52
set-cookie: platform_type=desktop; Path=/; Expires=Mon, 10 Apr 2023 21:58:50 GMT
SESSION=552abf9acfb889e4edcbb16aeafa80d8; path=/; secure; HttpOnly; SameSite=Lax
ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
auid=sv0PG2QwkhozxDDSA2IbAg==; path=/; secure; httponly; samesite=lax
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f99b236129f8b5c46ec126343df9a719.webp
8.254.252.212200 OK 8.5 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo_teams/f99b236129f8b5c46ec126343df9a719.webp
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4986053898bf0b64175348e709591e9b
b80e4cb0e9d97b5f5b9ed86050c5cccc41297a85
9daf80f5258d177dc63354eeca8421517986e97f6882ed3ad84a3b1c1570d32d
GET /sfiles/logo_teams/f99b236129f8b5c46ec126343df9a719.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 8510
cache-control: public, max-age=86400
etag: "4986053898bf0b64175348e709591e9b"
expires: Fri, 07 Apr 2023 22:46:47 GMT
last-modified: Tue, 17 Jan 2023 13:19:01 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 83554
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3548.webp
8.254.252.212 5.3 kB URL v3.traincdn.com/sfiles/logo_teams/3548.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 909d1ea8e23c885e0a70d5cc018acce0
737cc90f371bebbcee915d2be26d0de1b89f108b
b073c4acdfd6831840826ef26d1f3d2c07dd502101c13611a8cf06eefa56f42c
GET /sfiles/logo_teams/3548.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 5252
cache-control: public, max-age=86400
etag: "909d1ea8e23c885e0a70d5cc018acce0"
expires: Sat, 08 Apr 2023 14:17:10 GMT
last-modified: Wed, 01 Feb 2023 08:11:50 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 28108
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3602.webp
8.254.252.212 6.8 kB URL v3.traincdn.com/sfiles/logo_teams/3602.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b5866c2015ccaf8f023b58184a034064
744d5f47a4742fef37ce04ed15c644ee40bb326d
61ca2c4ff1ccd857d8fdf2f592a294fe82af6de518a37475a95dcb08bf8ada47
GET /sfiles/logo_teams/3602.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 6840
cache-control: public, max-age=86400
etag: "b5866c2015ccaf8f023b58184a034064"
expires: Sat, 08 Apr 2023 11:33:22 GMT
last-modified: Wed, 01 Feb 2023 08:49:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37653
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3542.webp
8.254.252.212 11 kB URL v3.traincdn.com/sfiles/logo_teams/3542.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2d8cdad714a020c1e976f51755d1e171
c99056daae4900c1cb0679f7ec8f382c33caa80e
a240cbc80cb76adfbd04c57dc3ad314abe52f05fc6777c1b255044ac37abfa14
GET /sfiles/logo_teams/3542.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 10624
cache-control: public, max-age=86400
etag: "2d8cdad714a020c1e976f51755d1e171"
expires: Sat, 08 Apr 2023 11:30:46 GMT
last-modified: Wed, 01 Feb 2023 12:02:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37691
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3550.webp
8.254.252.212 4.5 kB URL v3.traincdn.com/sfiles/logo_teams/3550.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c1d7fb0d17f84120df83fd14249d7359
829e5bf316865b2b62c37fc3db151fd20efd4cc2
6166ef8503b21ee018e4c15aa46ee9117691a6796dcc7822956436023b4182b6
GET /sfiles/logo_teams/3550.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 4474
cache-control: public, max-age=86400
etag: "c1d7fb0d17f84120df83fd14249d7359"
expires: Sat, 08 Apr 2023 12:26:15 GMT
last-modified: Tue, 31 Jan 2023 14:38:20 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34818
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/04abe3fa4260dc224a6ab0949c5b8b35.webp
8.254.252.212 5.9 kB URL v3.traincdn.com/sfiles/logo_teams/04abe3fa4260dc224a6ab0949c5b8b35.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cb8cb4ffce4a5a7e66566bb5ad4264ac
edc315510cdd4fb0a911ab96ed828f137835be7e
87cfceb4ac3ae385035ab4d6ff7c941965fe67dc00a0089718609fbe07fbe7c6
GET /sfiles/logo_teams/04abe3fa4260dc224a6ab0949c5b8b35.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 5868
cache-control: public, max-age=86400
etag: "cb8cb4ffce4a5a7e66566bb5ad4264ac"
expires: Sat, 08 Apr 2023 11:47:49 GMT
last-modified: Wed, 01 Feb 2023 08:50:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 36667
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7de8b3eae76ac0d58323af784feb2dcb.webp
8.254.252.212200 OK 11 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo_teams/7de8b3eae76ac0d58323af784feb2dcb.webp
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 509dd06334b6c90fa72be0e952585f4a
c3da6e18c57691114926badc5b35da3044f466e8
f6ca4021b474d2a853280ba0e6459b8a3cb96e00171d742c399009a4c69f3cfd
GET /sfiles/logo_teams/7de8b3eae76ac0d58323af784feb2dcb.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 11148
cache-control: public, max-age=86400
etag: "509dd06334b6c90fa72be0e952585f4a"
expires: Sat, 08 Apr 2023 21:00:16 GMT
last-modified: Tue, 17 Jan 2023 10:18:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 45123
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/98245b1f53d53528e21ed7e518a7ca7e.webp
8.254.252.212 9.8 kB URL v3.traincdn.com/sfiles/logo_teams/98245b1f53d53528e21ed7e518a7ca7e.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1a0953beff71aced0f6d522a73ec5d4c
c67a43e4a7d6a8b90a020f1df4461c408edce26b
4c792334903adc76ed663be46f189b521fed98ec0d5bc910ce71fb8af26799e0
GET /sfiles/logo_teams/98245b1f53d53528e21ed7e518a7ca7e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 9756
cache-control: public, max-age=86400
etag: "1a0953beff71aced0f6d522a73ec5d4c"
expires: Sat, 08 Apr 2023 20:04:22 GMT
last-modified: Fri, 20 Jan 2023 07:01:27 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 6879
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/28abadef918c096062217ae8a5237cf4.webp
8.254.252.212200 OK 6.5 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo_teams/28abadef918c096062217ae8a5237cf4.webp
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 327fd5790a368fe3fca908acaaeb6f1c
5006bb2b2c984ada6e0b32ed3b9d73dc015223bc
ed041da34ffc5a0e1a8263acd2e5aa970c8019d2d57d21d3e8f7def9cfebb203
GET /sfiles/logo_teams/28abadef918c096062217ae8a5237cf4.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 6450
cache-control: public, max-age=86400
etag: "327fd5790a368fe3fca908acaaeb6f1c"
expires: Sat, 08 Apr 2023 12:26:15 GMT
last-modified: Wed, 01 Feb 2023 12:07:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34819
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3337bd1754a182417644c9afb7711da7.webp
8.254.252.212200 OK 9.4 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo_teams/3337bd1754a182417644c9afb7711da7.webp
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash d012aa1eb348bd2f842a822fe63a0ed5
0151b28c4ac579d0fc4616196d6fd81da25d99be
a3e1590921f6e483ec2505619feabf6442dcca19d67e77db067d5287526abdf6
GET /sfiles/logo_teams/3337bd1754a182417644c9afb7711da7.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 9438
cache-control: public, max-age=86400
etag: "d012aa1eb348bd2f842a822fe63a0ed5"
expires: Sat, 08 Apr 2023 21:00:16 GMT
last-modified: Tue, 17 Jan 2023 11:15:42 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 3525
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/0ddb0a89a756749b10b5fb29caf83697.webp
8.254.252.212 11 kB URL v3.traincdn.com/sfiles/logo_teams/0ddb0a89a756749b10b5fb29caf83697.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6148e791a578dbf484601f18010106c9
9b6ddb6db42b42f5e00c79c9cf6426541e504cbf
3e03430162f912fff9ef24f3ce26b12e63e466d1d593d7b829969bc5c7a4e0eb
GET /sfiles/logo_teams/0ddb0a89a756749b10b5fb29caf83697.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 11198
cache-control: public, max-age=86400
etag: "6148e791a578dbf484601f18010106c9"
expires: Sat, 08 Apr 2023 18:34:06 GMT
last-modified: Sat, 14 Jan 2023 15:47:00 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 12302
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/defaultlogo.webp
8.254.252.212 912 B URL v3.traincdn.com/sfiles/logo_teams/defaultlogo.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1f9fd5849d8f450f793022d336ddc71e
e1db1567aa449ac2caa9935665488947e28c27b9
7e4a6e1ba7c9e5a69c5266c92d6f07d004716a04b08c4c7eb661d817193c0d53
GET /sfiles/logo_teams/defaultlogo.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 912
cache-control: public, max-age=86400
etag: "1f9fd5849d8f450f793022d336ddc71e"
expires: Sat, 08 Apr 2023 11:01:15 GMT
last-modified: Tue, 21 Mar 2023 09:22:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 39464
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/295169.webp
8.254.252.212 13 kB URL v3.traincdn.com/sfiles/logo_teams/295169.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1a527320903255af02565587aa10c793
89714bc86069e25105c30f7e07e213c625683e1d
a20143f038d44856b754db73a8fd46bf2c9e8f929fb781ca6e7c8d826f9e2437
GET /sfiles/logo_teams/295169.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 12692
cache-control: public, max-age=86400
etag: "1a527320903255af02565587aa10c793"
expires: Sat, 08 Apr 2023 21:46:53 GMT
last-modified: Wed, 01 Feb 2023 08:42:10 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 723
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/65e3e972954419765c3ce21698edf6cb.webp
8.254.252.212 9.0 kB URL v3.traincdn.com/sfiles/logo_teams/65e3e972954419765c3ce21698edf6cb.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 413cfa120d6d79d6f4f4982894d3e1db
2d6bbe471679e66695fd0f02a7ce0d0570eb0985
4383844eca998d66dc8ae920cc8872c39ae10be58d794979a88716c8f0edc697
GET /sfiles/logo_teams/65e3e972954419765c3ce21698edf6cb.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 8982
cache-control: public, max-age=86400
etag: "413cfa120d6d79d6f4f4982894d3e1db"
expires: Sat, 08 Apr 2023 12:18:51 GMT
last-modified: Tue, 31 Jan 2023 13:33:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34808
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5198.webp
8.254.252.212 4.3 kB URL v3.traincdn.com/sfiles/logo_teams/5198.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 41c604ab075d62331898e434bfdbf8ff
d280e222db57fd6f81f33a6b6a007d2c1c079c99
eabe109c7585392eeb9a3c36bbdcf770d8ce8e663607150e92c15d3355af2787
GET /sfiles/logo_teams/5198.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 4328
cache-control: public, max-age=86400
etag: "41c604ab075d62331898e434bfdbf8ff"
expires: Sat, 08 Apr 2023 21:04:13 GMT
last-modified: Wed, 01 Feb 2023 08:35:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 3284
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/83b500ce2fbb122814f7973d7e41c7a2.webp
8.254.252.212 7.2 kB URL v3.traincdn.com/sfiles/logo_teams/83b500ce2fbb122814f7973d7e41c7a2.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8286cb35d473d849fdfb7f616bf675cc
d224b94a77cf14800be474b55d5e000bb0cc81ef
647e49cc20ea19e0f670a2a69fdba655678f333677f422e64195d4bd02eca3e2
GET /sfiles/logo_teams/83b500ce2fbb122814f7973d7e41c7a2.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 7212
cache-control: public, max-age=86400
etag: "8286cb35d473d849fdfb7f616bf675cc"
expires: Sat, 08 Apr 2023 03:15:26 GMT
last-modified: Tue, 24 Jan 2023 16:06:31 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 67410
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/53039.webp
8.254.252.212 7.7 kB URL v3.traincdn.com/sfiles/logo_teams/53039.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f68dbab1a89089c44f667a8da1180780
3fff138c494980196d897769594e4d870b8888dc
d052d32bb5c353c835d91a8233b1f766e9fff8ac008ee62fa769c807e1a9a8fb
GET /sfiles/logo_teams/53039.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 7714
cache-control: public, max-age=86400
etag: "f68dbab1a89089c44f667a8da1180780"
expires: Sat, 08 Apr 2023 21:04:12 GMT
last-modified: Tue, 31 Jan 2023 10:55:16 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 54731
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3566.webp
8.254.252.212 8.0 kB URL v3.traincdn.com/sfiles/logo_teams/3566.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash fb7c854c3b8b164cb93cdaa580918cc5
80e496648d83f34dd1dd297afe8dcc6be289fdac
3a92e3f62be708f7292481ed5283b382efba712892ab52d4739a3b22f275a4df
GET /sfiles/logo_teams/3566.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: image/webp
content-length: 8018
cache-control: public, max-age=86400
etag: "fb7c854c3b8b164cb93cdaa580918cc5"
expires: Sat, 08 Apr 2023 12:24:05 GMT
last-modified: Wed, 01 Feb 2023 08:11:44 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34819
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227 9.6 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:33:07 GMT
expires: Wed, 03 Apr 2024 10:33:07 GMT
cache-control: public, max-age=31536000
age: 300349
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
178.253.15.27 2.6 kB URL lite-1x05933835.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (9135), with no line terminators
Hash 0f4d1c3135238235942107387c6046a7
0ffa1fbfc15e83eebeb67c28e4ecc3ca60c2d918
93dcda463fa4d7bffcfb2caf53501441dfb0397db9d9e310d2296e5517bd5118
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:56 GMT
content-type: application/json; charset=utf-8
content-length: 2610
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
178.253.15.27 88 B URL lite-1x05933835.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with no line terminators
Hash cb41a88ff43bbf14302fe7266a35d76d
4c0c7d1c22c7a6c4c661df8966d9154536fa4313
2de5c51dc3d129eb5567c2f67ea3afb49535ea570887202c1ab058570fec4270
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/json; charset=utf-8
content-length: 88
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/session-api/sessions/user
178.253.15.27 16 B URL lite-1x05933835.top/session-api/sessions/user
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 646b2e82b65602d35f7aa6283c387e3a
b163a70c5df8e4b0861a23a04f8a6f78393747f4
b68bf12405ee2cb5b76764df21dbc2df0953ddff4072ddc5281d1aab05e8c4ab
GET /session-api/sessions/user HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/json
content-length: 16
cache-control: no-cache, private
server-timing: p;dur=0.62799453735352
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
178.253.15.27 10 kB URL lite-1x05933835.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (55034), with no line terminators
Hash 510fd73316369d70d4d26ca2dab92b5b
49ac304b66ebbb2839f49820804a081dbf2ed168
c2a223b4d694359b171a8192b4b23a165ba133becb6d834dae1d33e08a836130
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/json; charset=utf-8
content-length: 10495
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3448.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/3448.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 78906c0749562deb0cb24c2c9ad2b722
c9a07ae16c2596899eee1e4a358f2d825a4c9236
40e893d95e80721ee771cd6ad386f294202c04b9f3fcf7c2e6984f3bc87fe2eb
GET /sfiles/logo_teams/3448.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: image/webp
content-length: 10280
cache-control: public, max-age=86400
etag: "78906c0749562deb0cb24c2c9ad2b722"
expires: Sat, 08 Apr 2023 12:18:48 GMT
last-modified: Wed, 01 Feb 2023 09:41:28 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34809
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Cyber.Game/Page.Office.Account/Page.Office.BetsHistory/Pag/afa80ebf-37f94173.modern.js
8.254.252.212 15 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Cyber.Game/Page.Office.Account/Page.Office.BetsHistory/Pag/afa80ebf-37f94173.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (58300), with no line terminators
Hash bb2544bb75cc55edeb4cac6e54e4145e
b0a93411c4857be167b21519520eccb9322a4376
16c2cf1af371d55974e60cce318c66727713e7be4838e89f31708ad1846f9e7c
GET /_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Cyber.Game/Page.Office.Account/Page.Office.BetsHistory/Pag/afa80ebf-37f94173.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 15102
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-3afe"
expires: Sat, 08 Apr 2023 10:58:46 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/3fe6f0e5.css
8.254.252.212 1.2 kB URL v3.traincdn.com/_nuxt/desktop/default/css/3fe6f0e5.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (5463), with no line terminators
Hash d9bc5e755024649d3312676c610b7dff
808a36284ded848d4f237c3b9c7b5c521433a63b
49253a6c1ea866dab6e0f8a7c7ec86b174d0b88a812675c48b17c2b0bcad5313
GET /_nuxt/desktop/default/css/3fe6f0e5.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 1237
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-4d5"
expires: Sat, 08 Apr 2023 11:01:28 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39450
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-40b78210.modern.js
8.254.252.212 18 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-40b78210.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (43586), with NEL line terminators
Hash 1653c58c5be8630d494c7fe607e8a87b
0cac5fb17edc6cc0e1c38f968c4774f9f81d7080
8c48f864809e02f6fafa5d8341614be5f7544475b7940d00a229167770c8917f
GET /_nuxt/desktop/default/vendors/betting.media-40b78210.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 17696
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-4520"
expires: Sat, 08 Apr 2023 10:58:48 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/239b3a82.css
8.254.252.212 454 B URL v3.traincdn.com/_nuxt/desktop/default/css/239b3a82.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (1429), with no line terminators
Hash 2f37eab2076db2e0b7acde1a5e47f67e
b5c6a6757d176c4000439188da333b5b193d263e
367ef8a8e53a910452cfc93d875857591c1c9745c5c461fd33caee30d630ca39
GET /_nuxt/desktop/default/css/239b3a82.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1c6"
expires: Sat, 08 Apr 2023 11:00:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39512
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.media-24dcefbf.modern.js
8.254.252.212 4.9 kB URL v3.traincdn.com/_nuxt/desktop/default/betting.media-24dcefbf.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (19643), with no line terminators
Hash 06d6a4e076a9240ee0cd5afc5734a103
ce688d436fabd57c8519baa6c103f683cfc4ecac
a6071c30cbcd60ef173b4f1dc18418c4d9f799625121f249ba96e3a5db910f0c
GET /_nuxt/desktop/default/betting.media-24dcefbf.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 4850
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-12f2"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/dc565949-0214466f.modern.js
8.254.252.212 8.0 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/dc565949-0214466f.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (24831), with no line terminators
Hash 361d36c1a66c41ed153bf636830e2822
fe68ae13b1171fcd362347c3100547eee3676ea0
85651a767ad02af41f4d85cbee3f1e7382394353c39170b7685ee6cc7e769146
GET /_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/dc565949-0214466f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 8043
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1f6b"
expires: Sat, 08 Apr 2023 10:59:06 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39619
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/bfa1338b.css
8.254.252.212 464 B URL v3.traincdn.com/_nuxt/desktop/default/css/bfa1338b.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (1665), with no line terminators
Hash ae1ff5db6c8ed16a67529b2474ffcf0a
b2168482f00efda466ee51e6ad38f8fb743c3674
99086134bc7240120eebcc7d4e073fa06192aee4242e2dbe4657b36a48b65b9e
GET /_nuxt/desktop/default/css/bfa1338b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 464
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1d0"
expires: Sat, 08 Apr 2023 11:01:17 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39462
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/ffa946f4.css
8.254.252.212 683 B URL v3.traincdn.com/_nuxt/desktop/default/css/ffa946f4.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (2027), with no line terminators
Hash 3ead27b08a5ce0a408a80bfb1f1ea770
4c343bd11a54bb983993b0e7fa42628c2923d260
b035f540e52e1aa6dfa6c3244eec214989650d70e4e87ca42b11ef178e8b20e3
GET /_nuxt/desktop/default/css/ffa946f4.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 683
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2ab"
expires: Sat, 08 Apr 2023 11:07:01 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39116
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/1182ca3f.css
8.254.252.212200 OK 6.4 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/1182ca3f.css
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (52247), with no line terminators
Hash a9fd279cd9fba7ea519eacc52d09c939
b79e71a3cfe65117d291504e5c5f054547de979e
f746033488239ef9323b17365e9b7291bd60576905a6ad1bd51f0fa98f6e89e0
GET /_nuxt/desktop/default/css/1182ca3f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 6411
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-190b"
expires: Sat, 08 Apr 2023 11:07:14 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39116
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Layout.Betting.ExpressDay-468c65c3.modern.js
8.254.252.212 5.1 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/Layout.Betting.ExpressDay-468c65c3.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (14906), with no line terminators
Hash f194d4a06943065d8854946d2b37dc3e
db2e329492c3a9138c50e29d3b2a374bcb458692
a1c3c244a8dacceaca3ee3ea607afbe23625ded8050062a8943894701badbdd5
GET /_nuxt/desktop/default/vendors/Layout.Betting.ExpressDay-468c65c3.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 5057
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-13c1"
expires: Sat, 08 Apr 2023 10:58:48 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-c9ca2cf6.modern.js
8.254.252.212 6.7 kB URL v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-c9ca2cf6.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (24470), with no line terminators
Hash ab7e05ac54b0d50601f7dd1e0e254c3a
95b69d0ec93aac464bdfa397068cce486d4e2135
bf93011b918e936240e817d4d88f5242e8154e5cd38f7160b2cae360bbee7d40
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay-c9ca2cf6.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 6663
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1a07"
expires: Sat, 08 Apr 2023 10:59:01 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/91dbb6dc.css
8.254.252.212 2.1 kB URL v3.traincdn.com/_nuxt/desktop/default/css/91dbb6dc.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (10437), with no line terminators
Hash 3634b2f900015aa27c0c1120c3b5ec65
4b04daaec6b192b135e8340f68db6490607201e6
535fc8b813e1f31c43303ee16306d1fdf405be30790c19898dfdcfc9fdd16dbe
GET /_nuxt/desktop/default/css/91dbb6dc.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 2100
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-834"
expires: Sat, 08 Apr 2023 11:07:02 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39118
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-d63a4870.modern.js
8.254.252.212 1.1 kB URL v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-d63a4870.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (3603), with no line terminators
Hash 3033729661bc52aa3e0e958cc10cbf5f
ccd09955ce10a7ce5efeb40548e680c7832b5b1d
3752be399817fd9ef8bf3e715f7293c47f4e6e8f74a1319893f74047c6fcd071
GET /_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-d63a4870.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 1082
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-43a"
expires: Sat, 08 Apr 2023 10:58:55 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/153900b2.css
8.254.252.212 2.0 kB URL v3.traincdn.com/_nuxt/desktop/default/css/153900b2.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (20215), with no line terminators
Hash 656c984ced952101ec61888405df41b6
9c6a3c0919af0ad9e22ad224275eeba9f30975d9
5ad6e24a98a5e2c8b5558cc3f095bd32fb0ba8aa1068af8a85db6874757cb914
GET /_nuxt/desktop/default/css/153900b2.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 2023
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-7e7"
expires: Sat, 08 Apr 2023 11:31:55 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37625
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/1f811a30.css
8.254.252.212 1.0 kB URL v3.traincdn.com/_nuxt/desktop/default/css/1f811a30.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (5212), with no line terminators
Hash 5b953880db826eecbee44862ccbc8c99
40e9f2e360749f268c9c1f893b5e050b9b023bcb
f667a8bd4a3749d81d2aec546a37cfd4e177913d2f5ebfe050e0ec378b63737e
GET /_nuxt/desktop/default/css/1f811a30.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 1019
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-3fb"
expires: Sat, 08 Apr 2023 11:00:37 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39501
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-eda4feeb.modern.js
8.254.252.212 11 kB URL v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-eda4feeb.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (42057), with no line terminators
Hash d9895d6aa9afc39a2f2f6e2211241bd2
7c51f19460f453cce34e2a274e1133ae6ab5b9b4
f1ce10ba37205f4081ca42d73cd355fc352249d3b9be49f4ec9a32aee6212053
GET /_nuxt/desktop/default/betting.CentralMenuApp-eda4feeb.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 11432
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2ca8"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-7dc21d88.modern.js
8.254.252.212 12 kB URL v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-7dc21d88.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (42036), with no line terminators
Hash eea28ef308f1d0de79d933f2beacd606
21795d195e67c795df9731372d5ddb0edf71290f
1b1274ab0707f983d945bcfde4ae487afb3c0ba8d6cf115c329a18af181b99aa
GET /_nuxt/desktop/default/betting.HomeSliderComponent-7dc21d88.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 11666
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2d92"
expires: Sat, 08 Apr 2023 10:59:18 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39618
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-78168251.modern.js
8.254.252.212 24 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-78168251.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (65472)
Hash 441a4b86a78c6ffb7509262b7d27a13f
55d98c8271726193b22aac4b41c7377022a969de
d77ec8ea3aa408b326a7f38ae1c685e793c502ccda30296300ab1c4a77c6b4c5
GET /_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-78168251.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 23581
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-5c1d"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-cd751f96.modern.js
8.254.252.212 18 kB URL v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-cd751f96.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash e428d0680641bbf32ea24505ab94e300
b033d2e0c046cb56dbe7c5afa70ca1c7a0f8d038
48d8e6553b6d030f95bd8364becde4ad9ac747b0be43d4499f20c7a066bcf1f1
GET /_nuxt/desktop/default/RegistrationWidgetApp-cd751f96.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 17849
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-45b9"
expires: Sat, 08 Apr 2023 10:58:55 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39614
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-2d399b9b.modern.js
8.254.252.212200 OK 30 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-2d399b9b.modern.js
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash fc4e84a1efd12ae601558e86acc70c18
db090941f6f847f212069438f67b66c41587408f
faacc07d83b85176f3bef211081ca89310d9886d68b8588493401a8d30024f57
GET /_nuxt/desktop/default/betting.coupon2-2d399b9b.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 30436
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-76e4"
expires: Sat, 08 Apr 2023 10:59:01 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39625
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=2&mode=4&country=137&virtualSports=true&gr=285
178.253.15.27 7.1 kB URL lite-1x05933835.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=2&mode=4&country=137&virtualSports=true&gr=285
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash a7f51e7842bada5970ec763090394705
387fe5a6ffaf55e48286eab0b32d8ccecc9fa8c7
730afbe609dd6381f7289e3fb95cd830577a22b3a7f1997fd72174d4e83bb83b
GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=2&mode=4&country=137&virtualSports=true&gr=285 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/json; charset=utf-8
content-length: 7064
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/4361b72a.css
8.254.252.212 5.6 kB URL v3.traincdn.com/_nuxt/desktop/default/css/4361b72a.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (37951), with no line terminators
Hash 8d6436c17cd56421e12efe425895f91f
2afe3ea256be95f93aba1313381a02362f38e148
5881ba763c56d39cc49075002aef46aad35f3659facafd6c111e5c7e8732c28b
GET /_nuxt/desktop/default/css/4361b72a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 5554
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-15b2"
expires: Sat, 08 Apr 2023 11:07:02 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39116
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-31b1b3ea.modern.js
8.254.252.212 37 kB URL v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-31b1b3ea.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4f731fa0e82449b4ff1ae40e7daeb1cf
b6fdde2735a517ee86a5e85f89793c48072ed37e
3809963a91092c59fcc87ecbdb174b0bb406bd73f40d695671ee02a5876811c7
GET /_nuxt/desktop/default/betting.SportMenuApp-31b1b3ea.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 37279
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-919f"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-1d70f341.modern.js
8.254.252.212 1.1 kB URL v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-1d70f341.modern.js
IP 8.254.252.212:0
File type Unicode text, UTF-8 text, with very long lines (2450), with no line terminators
Hash 9a1b7b3454c1a55383007c4a488c52d4
8aad7ae8db5234b178077a9bfd2d2dc1800cb934
70a8e59b9636c1b1f920f888c14b3a3ea22ee131a0f1aae940c0003b6f42beac
GET /_nuxt/desktop/default/ioc.dependencies.32-1d70f341.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 1080
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-438"
expires: Sat, 08 Apr 2023 10:58:58 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39625
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/6834162e-1c6ad233.modern.js
8.254.252.212 7.0 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/6834162e-1c6ad233.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (26300), with no line terminators
Hash ed330f19b873f1d445f5ca5a7079c137
6e794a506b45a4df0529cc080c67ba61138a4669
1a4a17039dd57c18bb55fd18e9d3328505a3b701bc6d63efc0b4fa19f02b10ce
GET /_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/6834162e-1c6ad233.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 7002
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1b5a"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/RegistrationWidgetApp/components/userControl.auth_form_extended/registration.Main/da7322db-a0c3bc9f.modern.js
8.254.252.212200 OK 9.7 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/RegistrationWidgetApp/components/userControl.auth_form_extended/registration.Main/da7322db-a0c3bc9f.modern.js
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (26814)
Hash bb5fec6b8c8f33dc940daaddb920478d
465caebb5656e1a5256765ab1958ae15e91e45ab
14edb76bbbb3ba8d077990583b7d258adf7bc7844b2dae4ce7b34454ccc85a6c
GET /_nuxt/desktop/default/vendors/Auth.Forms/RegistrationWidgetApp/components/userControl.auth_form_extended/registration.Main/da7322db-a0c3bc9f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 9730
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-2602"
expires: Sat, 08 Apr 2023 10:59:06 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39619
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b43a7564.css
8.254.252.212 2.5 kB URL v3.traincdn.com/_nuxt/desktop/default/css/b43a7564.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (18974), with no line terminators
Hash 3bea3c06b1bdd1773ac1f0f3eef63c9b
921a9bbb48f3d1ac86f7acb6460b3055d050998b
cb9b384f9d28f148f74fec415552d9158e5ae722adc6dbbd961c775675df250c
GET /_nuxt/desktop/default/css/b43a7564.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 2536
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-9e8"
expires: Sat, 08 Apr 2023 11:07:01 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39116
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/99a7c1ef06d2b3b09030b42a3439f968.webp
8.254.252.212 4.7 kB URL v3.traincdn.com/sfiles/logo_teams/99a7c1ef06d2b3b09030b42a3439f968.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3789d1ca1e8287ead80f9e26d814bac4
008541f0b127bb887b5deb39426f473f3c1a7c9d
11d9c326a4eee640c3cde645b5c0b8fc128fcbee730006964eb96cd6040ba553
GET /sfiles/logo_teams/99a7c1ef06d2b3b09030b42a3439f968.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: image/webp
content-length: 4714
cache-control: public, max-age=86400
etag: "3789d1ca1e8287ead80f9e26d814bac4"
expires: Sat, 08 Apr 2023 19:43:22 GMT
last-modified: Tue, 31 Jan 2023 11:06:30 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 8797
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/24a303cdc0a24b99485aebc26ff13f55.webp
8.254.252.212 5.5 kB URL v3.traincdn.com/sfiles/logo_teams/24a303cdc0a24b99485aebc26ff13f55.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 706f68633c47c63be9d8e9d58bf0b4c7
07fa91f68596c70cab70863371fe8a1081cc3915
f03e6a48800c2a138afefab2133386ccb3a8e2be5dfa9c8032458cdd083f7f72
GET /sfiles/logo_teams/24a303cdc0a24b99485aebc26ff13f55.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: image/webp
content-length: 5520
cache-control: public, max-age=86400
etag: "706f68633c47c63be9d8e9d58bf0b4c7"
expires: Sat, 08 Apr 2023 13:03:49 GMT
last-modified: Tue, 31 Jan 2023 14:38:10 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 32768
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2f0d1152e896d9ead623347d79dd9e59.webp
8.254.252.212 4.3 kB URL v3.traincdn.com/sfiles/logo_teams/2f0d1152e896d9ead623347d79dd9e59.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 692554bf1f9e93ceed67d3bcee7e15e0
031bd620ec5a06a5a7e7e3ad7c30191043259f8f
bec043576f8314070e2dbc872f6a91540c8e448d0b370e0f7921ac8e7f5e38c4
GET /sfiles/logo_teams/2f0d1152e896d9ead623347d79dd9e59.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: image/webp
content-length: 4268
cache-control: public, max-age=86400
etag: "692554bf1f9e93ceed67d3bcee7e15e0"
expires: Sat, 08 Apr 2023 03:10:52 GMT
last-modified: Tue, 31 Jan 2023 14:21:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 67685
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Auth.Forms/Information.Feedback/Page.Office.Account/Page.Office.Security/Page.Office.Support/Registr/dba7b5c3-ee1f6cc2.modern.js
8.254.252.212200 OK 2.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Auth.Forms/Information.Feedback/Page.Office.Account/Page.Office.Security/Page.Office.Support/Registr/dba7b5c3-ee1f6cc2.modern.js
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (7596), with no line terminators
Hash 18e5c667cf776a428d0cb49761a17b1f
b4f9c9f375b3b1fd7634d7d39c48787a4fe3ce2b
3064daa6e2f67b767b6b14a54fc257284206e1050b9c7733e158d0bbd200f6c3
GET /_nuxt/desktop/default/Auth.Forms/Information.Feedback/Page.Office.Account/Page.Office.Security/Page.Office.Support/Registr/dba7b5c3-ee1f6cc2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 2475
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-9ab"
expires: Sat, 08 Apr 2023 10:59:05 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39619
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-a434857f.modern.js
8.254.252.212 361 B URL v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-a434857f.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (401), with no line terminators
Hash ccd12e4106ff112ec1f5534230480acf
fcf699dd7d6c31c7a091f5588320f6ada3e9fd77
881160dc94ddeb09f0f30d272a42613b9ce68a19f8a4553d6b03ee47acc7f85a
GET /_nuxt/desktop/default/DownloadAppWidgetAnalytics-a434857f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 361
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-169"
expires: Sat, 08 Apr 2023 10:59:01 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/user/secure
178.253.15.27 57 B URL lite-1x05933835.top/web-api/user/secure
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 65d4473a2190052523d4faefcdea98eb
8e41b68cb5fbeaa4de9be0e99c8752e86c84972f
0957dead88a2377691466685d7619cddca0706c7a2f06755f8a73bf07db9aada
POST /web-api/user/secure HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/json; charset=utf-8
content-length: 57
server-timing: dt_285;dur=517
set-cookie: is_rtl=1; expires=Sat, 06-Apr-2024 21:58:57 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Fri, 14-Apr-2023 21:58:57 GMT; Max-Age=604800; path=/
v3fr=1; expires=Mon, 10-Apr-2023 21:58:57 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
_glhf=1680922513; expires=Fri, 07-Apr-2023 22:58:57 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/checker/redirect/stat/run/
178.253.15.27 26 kB URL lite-1x05933835.top/checker/redirect/stat/run/
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 90de6714b7187cf20c36ee759642802c
a3673b34673a8706ecdeb507db679a6385fbf154
71a6c70e9f4cf209158b65044ee15a72f8d0eac2f8ae418024386bd9ab7663da
GET /checker/redirect/stat/run/ HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
api-supported-versions: 1.0
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-697e5b6f.modern.js
8.254.252.212 5.4 kB URL v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-697e5b6f.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (13482), with no line terminators
Hash 24455f88bed4035e637338f7bfd8347f
8a945fc31142098ed485ae0ebc97223accf6a404
5806ba8636318ff33dc2cba52d7b206e279e31c5f16a6857092aca6dca8e9bc0
GET /_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-697e5b6f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 5408
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1520"
expires: Sat, 08 Apr 2023 10:58:58 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39616
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/98bd8d3e.css
8.254.252.212 1.2 kB URL v3.traincdn.com/_nuxt/desktop/default/css/98bd8d3e.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (5183), with no line terminators
Hash 79e84cbe58aadae0c93c1498bcbc0d79
f8523f2eefc35d5b7224a803cc9e2a8a47ca4eae
031a60f920d4b9dc8d6981668ff1e4af3b576ff7adc71eba0b7bbf4ea0742576
GET /_nuxt/desktop/default/css/98bd8d3e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 1152
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-480"
expires: Sat, 08 Apr 2023 11:00:52 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39486
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-00625c80.modern.js
8.254.252.212 5.6 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-00625c80.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (16094)
Hash 860bcc275938d9f801068b77dbe6193d
b53664507d655f35545df4fd584de708f34d09dc
16ad94436874b2f95a9e698626fb94b77c672c2bf438a264d7a62075324c05d4
GET /_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-00625c80.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 5564
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-15bc"
expires: Sat, 08 Apr 2023 10:58:31 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-f9caa486.modern.js
8.254.252.212 4.1 kB URL v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-f9caa486.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (11803), with no line terminators
Hash 3770ca6b10692895b2d5a2391bf45c5a
66083c201837ecef6403b92b941abae7d0fec9ee
8bc9561180558dc3a91c3eb27ebadd5830682326918d0632c8454d4b75c0fc10
GET /_nuxt/desktop/default/DownloadAppWidget-f9caa486.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 4051
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-fd3"
expires: Sat, 08 Apr 2023 10:59:04 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2-26d9a3da.modern.js
8.254.252.212 5.2 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2-26d9a3da.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (17979), with no line terminators
Hash 69cef4958ce37dea28832e1bb859237c
c4f59c7fc63eea85044b9202859e805e7c0af62a
c4b6d868a6ef144d7f6a0329a7e7390f429d03af8c23e2bd8c85e897fa03e8d9
GET /_nuxt/desktop/default/vendors/betting.coupon2-26d9a3da.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 5153
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1421"
expires: Sat, 08 Apr 2023 10:58:55 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39626
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/a7fb392f.css
8.254.252.212 1.7 kB URL v3.traincdn.com/_nuxt/desktop/default/css/a7fb392f.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (11416), with no line terminators
Hash df6a58ca67b5cdae799a1c6b201fac3f
790299a89ca918760aff1897bb7471a75758afc5
769024eff9df6d912b55e74b03bd0f3edaeb5cdadea17cd148a4af3971456324
GET /_nuxt/desktop/default/css/a7fb392f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:57 GMT
content-type: text/css
content-length: 1655
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-677"
expires: Sat, 08 Apr 2023 14:33:28 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 26730
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66&l=dataLayer&cx=c
142.250.74.40200 OK 83 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66&l=dataLayer&cx=c
IP 142.250.74.40:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3C:0B:85:94:2A:86:0A:B3:D0:9E:43:A9:87:6A:FB:56:49:9F:F6:B8
ValidityMon, 20 Mar 2023 08:17:43 GMT - Mon, 12 Jun 2023 08:17:42 GMT
File type ASCII text, with very long lines (28084)
Hash c1b40d68dc8ae08bfdaa623e82ab4b4f
32ccb975b6d61af54d201d3b4a0f090945b36f5d
bda3cb87be49a41ee58ff4b06a9100072ca11d3ee3bdbaaca70d6ab0e9aa3e64
GET /gtag/js?id=G-7JGWL9SV66&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.googletagmanager.com
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Apr 2023 21:58:58 GMT
expires: Fri, 07 Apr 2023 21:58:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82737
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
v3.traincdn.com/_nuxt/desktop/default/css/02afb0f7.css
8.254.252.212 408 B URL v3.traincdn.com/_nuxt/desktop/default/css/02afb0f7.css
IP 8.254.252.212:0
File type ASCII text, with very long lines (1137), with no line terminators
Hash efec3e50e006522abb64d4914d68cf5f
03ee89fca7463e697916144bcd41c2b5c31eea32
6563aea9b2bee40b9c58fb5f6b9f10aa674057ce64a1d15c24bcab295244e656
GET /_nuxt/desktop/default/css/02afb0f7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: text/css
content-length: 408
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-198"
expires: Sat, 08 Apr 2023 11:01:37 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39447
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-d66c8d87.modern.js
8.254.252.212 668 B URL v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-d66c8d87.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (1341), with no line terminators
Hash 9f2b000063a3c80527882699ab70fc00
93b7b0809621e4627281487a6938a315057718e2
f92e63dfe6259f4b1e1d8fc6865ed9672a361bd8141e67d1df2160e30bbbe9d9
GET /_nuxt/desktop/default/betting.SportsMenuCompact-d66c8d87.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 668
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-29c"
expires: Sat, 08 Apr 2023 10:59:10 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39619
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
178.253.15.27 2.6 kB URL lite-1x05933835.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10184), with no line terminators
Hash 611e671c4389564f5b0daa68a7265285
55d5bb2e23225e4a8d07691e0e36bbbe9f061dc9
f913d6c57910f58401a0ff1875650ef249686506fd6138452fbf4f2ae2d93b4d
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: application/json; charset=utf-8
content-length: 2567
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LineFeed/GetSportsShortZip?lng=en&tz=2&country=137&virtualSports=true&gr=285&groupChamps=true
178.253.15.27 1.9 kB URL lite-1x05933835.top/service-api/LineFeed/GetSportsShortZip?lng=en&tz=2&country=137&virtualSports=true&gr=285&groupChamps=true
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6303), with no line terminators
Hash 18de1de4a27e36a4b5229b248ec52d51
2fe513f1b2890b1baada3052059e743d11893f73
36624ddfdb12c2e7630e94c8c9d26b542d3347dcbc93d191dd7df938c283ad87
GET /service-api/LineFeed/GetSportsShortZip?lng=en&tz=2&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: application/json; charset=utf-8
content-length: 1890
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/fb3c42518642087febce0489211e4e3b.svg
8.254.252.212 694 B URL v3.traincdn.com/genfiles/cms/pg/285/images/fb3c42518642087febce0489211e4e3b.svg
IP 8.254.252.212:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1220), with no line terminators
Hash a699de039c0638e5c6ebeaad243be4c4
9a619e308c67ecdec7aa74c269fa2949bd11e4a5
7786275801b6d2eaa49de8906f9e8e2934b2f700f42ff61a4cc8ce96d2cdef73
GET /genfiles/cms/pg/285/images/fb3c42518642087febce0489211e4e3b.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: image/svg+xml
content-length: 694
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"3ae81b002dca46d3b732ce3e03ae35c6"
expires: Sat, 08 Apr 2023 11:01:19 GMT
last-modified: Fri, 31 Mar 2023 18:13:11 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39460
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
178.253.15.27 611 B URL lite-1x05933835.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with very long lines (1225), with no line terminators
Hash 103495c7158fab364e0ef9c303db254c
9946efe6d94f7adfd7d46885929c235a4fb7b854
b879ab886b3283509f9be27c604c6457e377eb0d5b899177144ced5a811a3196
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: application/json; charset=utf-8
content-length: 611
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
178.253.15.27 668 B URL lite-1x05933835.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with very long lines (1449), with no line terminators
Hash 0fdced40d38cebc1b702e88910ca2ac2
8e4ef14d18d7073e78222625e565713b2c4e4520
8ab508849187f8b96a0ca9f93f16b41882a7a9dfeaf8debd2c6a33633ea57d86
GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=en HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:58 GMT
content-type: application/json; charset=utf-8
content-length: 668
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/mobile
178.253.15.27 334 B URL lite-1x05933835.top/web-api/mobile
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with very long lines (334), with no line terminators
Hash 7fc21d5f3603f5a94060619cd6ca97aa
7490927ceaa0165f8ecb73f0634ef3e267f1f4d5
ead9d888466edc5634db0fefd753f949deb6903f91d29df9efe4d88f5637b285
POST /web-api/mobile HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: application/json; charset=utf-8
content-length: 334
server-timing: dt_285;dur=319
set-cookie: is_rtl=1; expires=Sat, 06-Apr-2024 21:58:59 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
8.254.252.212 51 kB URL v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
IP 8.254.252.212:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1380x248, components 3\012- data
Hash 15b1bda7b31ccc5eacce67afbe6f160b
d41eac3583bb0495a008b0d1e4a584d103feb436
2e1b52936d0c7081d46010cd49e236aed8cefc16adad7c908c108aff4a73718d
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: image/jpeg
content-length: 51087
cache-control: public, max-age=86400
etag: "15b1bda7b31ccc5eacce67afbe6f160b"
expires: Sat, 08 Apr 2023 11:00:43 GMT
last-modified: Fri, 31 Mar 2023 16:28:42 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39497
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
8.254.252.212200 OK 147 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1380x248, components 3\012- data
Size 147 kB (147402 bytes)
Hash 9d1ab102184100544b4a72fcc6a8c458
79a64d17a182311cf4f856e39c83e3d9c5b1e55b
0fd0800599423b6bc4c2fe90c96f0025f4dd0d13d0c4b535e9421e21049a0903
GET /genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: image/jpeg
content-length: 147402
cache-control: public, max-age=86400
etag: "9d1ab102184100544b4a72fcc6a8c458"
expires: Sat, 08 Apr 2023 11:00:51 GMT
last-modified: Fri, 31 Mar 2023 16:28:31 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39488
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/a321c27f3964c8102b23af11f79d820f.jpg
8.254.252.212 84 kB URL v3.traincdn.com/genfiles/cms/1/desktop/banner/a321c27f3964c8102b23af11f79d820f.jpg
IP 8.254.252.212:0
File type JPEG image data, progressive, precision 8, 1380x248, components 3\012- data
Hash c848fc8e8d9c4f436d7e247149b2809a
1b34b3552f0bbdf4c961fcae912e33817693fb48
8e40219296925c997b69986e3f7360eeb187cf147093002b207167afb4657b1a
GET /genfiles/cms/1/desktop/banner/a321c27f3964c8102b23af11f79d820f.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: image/jpeg
content-length: 84280
cache-control: public, max-age=86400
etag: "c848fc8e8d9c4f436d7e247149b2809a"
expires: Sat, 08 Apr 2023 04:21:15 GMT
last-modified: Thu, 06 Apr 2023 04:16:10 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 63711
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/c4814879b7343a55333a250f8ff20339.jpg
8.254.252.212 275 kB URL v3.traincdn.com/genfiles/cms/1/desktop/banner/c4814879b7343a55333a250f8ff20339.jpg
IP 8.254.252.212:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.1 (Windows), datetime=2022:11:18 13:24:12], baseline, precision 8, 1380x248, components 3\012- data
Size 275 kB (275031 bytes)
Hash 1d78b25536d46a434917801c2168a15a
019946e6d0b63da8f9fe130446ce6239e7625c4f
6d600d8b07eab7edaae3534f705c728bdfcd8342734c84fb639103b2a67d83b4
GET /genfiles/cms/1/desktop/banner/c4814879b7343a55333a250f8ff20339.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: image/jpeg
content-length: 275031
cache-control: public, max-age=86400
etag: "1d78b25536d46a434917801c2168a15a"
expires: Sat, 08 Apr 2023 11:01:21 GMT
last-modified: Fri, 31 Mar 2023 16:28:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39460
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/banner/9e54c184047b2973da778b13b7e5eb99.jpg
8.254.252.212 121 kB URL v3.traincdn.com/genfiles/cms/1/desktop/banner/9e54c184047b2973da778b13b7e5eb99.jpg
IP 8.254.252.212:0
File type JPEG image data, progressive, precision 8, 1380x248, components 3\012- data
Size 121 kB (120943 bytes)
Hash 9ef06f8e9bdf3e37e8266333c7687028
87c50554a6e434989525f9177db7fc85c3191c04
8a7eba174fda734eb5d3897b2a72beb3c5f5c6b410acbe0db0183f0728d9007f
GET /genfiles/cms/1/desktop/banner/9e54c184047b2973da778b13b7e5eb99.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: image/jpeg
content-length: 120943
cache-control: public, max-age=86400
etag: "9ef06f8e9bdf3e37e8266333c7687028"
expires: Sat, 08 Apr 2023 12:32:58 GMT
last-modified: Fri, 07 Apr 2023 12:24:54 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 34014
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 34746d07e5195b40b9fec471a4d47fd4
e3af22e00271b57ab786b6d609f420e6355ccb9f
c4185f3cb3239712d2046fb8588a53d398889ba8fcb46335a0a979e744658e0f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1599366573.1680904740>m=45je3430&aip=1&z=285874300
142.250.74.163 42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1599366573.1680904740>m=45je3430&aip=1&z=285874300
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1599366573.1680904740>m=45je3430&aip=1&z=285874300 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Apr 2023 21:59:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 34746d07e5195b40b9fec471a4d47fd4
e3af22e00271b57ab786b6d609f420e6355ccb9f
c4185f3cb3239712d2046fb8588a53d398889ba8fcb46335a0a979e744658e0f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json
8.254.252.212 4.5 kB URL v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json
IP 8.254.252.212:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (21692), with no line terminators
Hash 9a18445cb9f493ffddb193d60daa301e
48eca76dccb95758afc2e66ce8b9c1e0e32c8a5c
03a6d84dcb9a3cfc93f70770675e9da440560f62290cdb3f56703870b22b5429
GET /genfiles/cms/betstemplates/bets_model_full_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/json
content-length: 4501
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"9c1e449d0b116b398773068b48d4e44f"
expires: Sat, 08 Apr 2023 11:01:04 GMT
last-modified: Fri, 07 Apr 2023 10:06:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39477
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1680904740473
178.253.15.27 145 B URL lite-1x05933835.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1680904740473
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ba0d31eb708662ea0084322503447f5
6c1a9421f4328ce29f59a98191d02a8b1abc45d3
c968c7e207ad41002b8f5c1a77835fc7da5fe5e9ead6a4831a4c7be99c70c37d
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1680904740473 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167; _ga_7JGWL9SV66=GS1.1.1680904740.1.0.1680904740.60.0.0; _ga=GA1.1.1599366573.1680904740
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/json
content-length: 145
last-modified: Fri, 31 Mar 2023 18:12:26 GMT
x-rgw-object-type: Normal
etag: "0ba0d31eb708662ea0084322503447f5"
expires: Sat, 08 Apr 2023 21:59:00 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json
8.254.252.212 3.7 kB URL v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json
IP 8.254.252.212:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (13983), with no line terminators
Hash 5ea3cec9f0b5d44ca45c98411492fbe5
a16cd82443bb6d454fba748e2338756b30597c38
5cffcb8b4ef1e4e4ca15fad6aca7b79e47612ec5a78f1e225f9f1433a8b153e4
GET /genfiles/cms/betstemplates/bets_model_short_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/json
content-length: 3746
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"4f8f8657a322af0cc811a2b41b320398"
expires: Sat, 08 Apr 2023 11:01:10 GMT
last-modified: Fri, 07 Apr 2023 10:06:48 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39475
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_en.json
8.254.252.212200 OK 519 B URL GET HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_en.json
IP 8.254.252.212:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintF7:A7:ED:9E:3B:F4:CE:E8:C3:22:A8:4F:B3:10:2E:81:09:E4:33:24
ValidityThu, 10 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1167), with no line terminators
Hash 5c95e06f9eac7bc5983c2b6ffd409e70
5535cf594c6e4f1473ba0c34c37b18afd66fae34
d7b688d2da6e73060a3af2baaa624bdd5bdebbcd1efcfd98e88cbe5235a01249
GET /genfiles/cms/betstemplates/bets_model_map_short_en.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/json
content-length: 519
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"077010c97ee347d3379beeedadb372ef"
expires: Sat, 08 Apr 2023 11:40:25 GMT
last-modified: Fri, 07 Apr 2023 10:06:51 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39416
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/api/internal/v1/proof_of_age
178.253.15.27 0 B URL lite-1x05933835.top/web-api/api/internal/v1/proof_of_age
IP 178.253.15.27:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web-api/api/internal/v1/proof_of_age HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167; _ga_7JGWL9SV66=GS1.1.1680904740.1.0.1680904740.60.0.0; _ga=GA1.1.1599366573.1680904740
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Apr 2023 21:59:00 GMT
cache-control: no-cache, private
server-timing: p;dur=33, dt_285;dur=38
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/registration/fields
178.253.15.27200 OK 11 kB URL POST HTTP/2 lite-1x05933835.top/web-api/registration/fields
IP 178.253.15.27:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerLet's Encrypt
Subjectlite-1x05933835.top
FingerprintF3:70:B6:71:E5:E0:54:4F:42:50:F7:A7:AA:B5:53:86:F1:AC:84:97
ValidityTue, 04 Apr 2023 11:59:15 GMT - Mon, 03 Jul 2023 11:59:14 GMT
Hash b657faa31fe641c2a88754b78462656f
f9c0941bdaa43f16fee5b38c627a0b666bdfc709
3a90d08c8782d1ed3a5d756587822512b81ef8cb886f8c75582f0337a8fef0e0
POST /web-api/registration/fields HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Content-Type: application/json
Content-Length: 19
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167; _ga_7JGWL9SV66=GS1.1.1680904740.1.0.1680904740.60.0.0; _ga=GA1.1.1599366573.1680904740
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/json; charset=utf-8
content-encoding: gzip
server-timing: dt_285;dur=111
set-cookie: is_rtl=1; expires=Sat, 06-Apr-2024 21:59:00 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Registration.Fields-510d3d0e.modern.js
8.254.252.212 8.0 kB URL v3.traincdn.com/_nuxt/desktop/default/Registration.Fields-510d3d0e.modern.js
IP 8.254.252.212:0
File type ASCII text, with very long lines (37691), with no line terminators
Hash 41c4b54b423f380b259e8b2bf53ff8a2
cd14e35642100738348bf62ac9770beb5f3253e1
da759a126103f07f33473bc83bc1047886e492a223d53173d5a11e2fa70e274b
GET /_nuxt/desktop/default/Registration.Fields-510d3d0e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 7973
cache-control: max-age=86400
content-encoding: gzip
etag: "642ff081-1f25"
expires: Sat, 08 Apr 2023 10:59:00 GMT
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 39614
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3430&_p=1520361205&_gaz=1&cid=1599366573.1680904740&ul=en-us&sr=1280x1024&_s=1&sid=1680904740&sct=1&seg=0&dl=https%3A%2F%2Flite-1x05933835.top%2Fen&dt=Online%20sports%20betting%20at%201xBet.%20Norway%20%E1%90%89%20lite-1x05933835.top&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3430&_p=1520361205&_gaz=1&cid=1599366573.1680904740&ul=en-us&sr=1280x1024&_s=1&sid=1680904740&sct=1&seg=0&dl=https%3A%2F%2Flite-1x05933835.top%2Fen&dt=Online%20sports%20betting%20at%201xBet.%20Norway%20%E1%90%89%20lite-1x05933835.top&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je3430&_p=1520361205&_gaz=1&cid=1599366573.1680904740&ul=en-us&sr=1280x1024&_s=1&sid=1680904740&sct=1&seg=0&dl=https%3A%2F%2Flite-1x05933835.top%2Fen&dt=Online%20sports%20betting%20at%201xBet.%20Norway%20%E1%90%89%20lite-1x05933835.top&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lite-1x05933835.top
date: Fri, 07 Apr 2023 21:59:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lite-1x05933835.top/service-api/LiveBet/Secure/WebGetTax?partner=1&gr=285&country=137&betSum=150&cf=0¤cyId=63¤cyIso=NOK&lng=en&taxMode=0
178.253.15.27 145 B URL lite-1x05933835.top/service-api/LiveBet/Secure/WebGetTax?partner=1&gr=285&country=137&betSum=150&cf=0¤cyId=63¤cyIso=NOK&lng=en&taxMode=0
IP 178.253.15.27:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 60c6ea4ff727db347f3964388691ab64
3dc1914c9f60969b1191967721798c5242ecf1a7
2011756095d8630e18f0432a7670afe10464db23dcc0e0d7a54190fba30706c0
GET /service-api/LiveBet/Secure/WebGetTax?partner=1&gr=285&country=137&betSum=150&cf=0¤cyId=63¤cyIso=NOK&lng=en&taxMode=0 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167; _ga_7JGWL9SV66=GS1.1.1680904740.1.0.1680904740.60.0.0; _ga=GA1.1.1599366573.1680904740
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:59:01 GMT
content-type: application/json; charset=utf-8
content-length: 145
cache-control: public,max-age=600
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/api/v3/bonuses/welcome-bonuses
178.253.15.27 31 kB URL lite-1x05933835.top/web-api/api/v3/bonuses/welcome-bonuses
IP 178.253.15.27:0
Hash 7c5975cc4c57fa73d8af9a9b2eceba66
2b40a2b3122157589aac93a47befe27f2b5440f5
ed5b950f7480c6a95b5a01a21516fcabbc03ae8fa8bb1c19295dc527f85596b9
GET /web-api/api/v3/bonuses/welcome-bonuses HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=16, dt_285;dur=19
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a924385d7ecca95930d0f19f9f3671dc.webp
8.254.252.212 14 kB URL v3.traincdn.com/sfiles/logo_teams/a924385d7ecca95930d0f19f9f3671dc.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 81870074924509d7d7f1e1e3b94a4bb2
4c613f0d737fb07dd2c835ddc2f28eb88e71983e
d82845866ff83e19b59eb441311fe41d47d95711972c5a313920123ec9596b34
GET /sfiles/logo_teams/a924385d7ecca95930d0f19f9f3671dc.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:01 GMT
content-type: image/webp
content-length: 14286
cache-control: public, max-age=86400
etag: "81870074924509d7d7f1e1e3b94a4bb2"
expires: Sat, 08 Apr 2023 07:32:07 GMT
last-modified: Fri, 27 Jan 2023 11:52:10 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 52015
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/dd1cb9d8c8ea61ce21414f179a460139.webp
8.254.252.212 9.7 kB URL v3.traincdn.com/sfiles/logo_teams/dd1cb9d8c8ea61ce21414f179a460139.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cc686615da8e1d8210420fb0fe81a22b
6f0da627317a987a576de3a737780bb970560518
f26c0d6cbcb5b117ad3d797b28bfd4961fbd22210f3f3a48e4f094c8c3e81cd4
GET /sfiles/logo_teams/dd1cb9d8c8ea61ce21414f179a460139.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:01 GMT
content-type: image/webp
content-length: 9658
cache-control: public, max-age=86400
etag: "cc686615da8e1d8210420fb0fe81a22b"
expires: Sat, 08 Apr 2023 19:43:22 GMT
last-modified: Sat, 21 Jan 2023 12:44:35 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 52015
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/47333.webp
8.254.252.212 9.4 kB URL v3.traincdn.com/sfiles/logo_teams/47333.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1561c792e4a8be67c1907bb0621f4deb
56a3a6ff8c5b66882adaa681f8c811e894a45d79
1edda654f70a2352b5a02cb095a824e9f7894c04b990679f69500ddbafd9c7bf
GET /sfiles/logo_teams/47333.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:01 GMT
content-type: image/webp
content-length: 9414
cache-control: public, max-age=86400
etag: "1561c792e4a8be67c1907bb0621f4deb"
expires: Sat, 08 Apr 2023 20:10:14 GMT
last-modified: Sat, 21 Jan 2023 09:57:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 22753
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/173111.webp
8.254.252.212 5.8 kB URL v3.traincdn.com/sfiles/logo_teams/173111.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6d568b3e4e34d1db4040527717e4da08
e12f9aed81d9a4874614198b56eddad6795b9e69
12dda0c188b4fb764cdbe0f08085af808721feae894e5d2f58726ff5cd062708
GET /sfiles/logo_teams/173111.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:01 GMT
content-type: image/webp
content-length: 5824
cache-control: public, max-age=86400
etag: "6d568b3e4e34d1db4040527717e4da08"
expires: Sat, 08 Apr 2023 20:10:14 GMT
last-modified: Sat, 21 Jan 2023 09:46:46 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 22753
accept-ranges: bytes
X-Firefox-Spdy: h2
suphelper.com/widget/assets/roll_up.b7a1632bea7ba7d1c4a667e88144a7db.svg
104.16.42.72 18 kB URL suphelper.com/widget/assets/roll_up.b7a1632bea7ba7d1c4a667e88144a7db.svg
IP 104.16.42.72:0
File type SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (470), with no line terminators
Hash 697b0eb6cf59cb654062a8c79ae374e2
6d872bdd5b4533cca56872696fd2f09d015e5573
dd034736e95dd0bfd7ffec4baa0bdd820573c9ad2e08c3c2e310b763403c608b
GET /widget/assets/roll_up.b7a1632bea7ba7d1c4a667e88144a7db.svg HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: suphelper.com
Connection: keep-alive
Referer: https://suphelper.com/widget/?build=1678449095031&lang=en&langInited=true&opener=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: image/svg+xml
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-1665e38b-f0b5-439b-a093-2678ee0eb09f' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=2592000
last-modified: Fri, 10 Mar 2023 11:52:11 GMT
etag: W/"1d8-186cb5d3df8"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2222059
server: cloudflare
cf-ray: 7b458906ab122e0b-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
suphelper.com/widget/public/chunk.9e9a4ae65db929e8a147.js
104.16.42.72 409 kB URL suphelper.com/widget/public/chunk.9e9a4ae65db929e8a147.js
IP 104.16.42.72:0
File type ASCII text, with very long lines (55331)
Size 409 kB (409396 bytes)
Hash b6066ff31b3a59c605815fc0f91da1fb
66e61959c8e7500dfe85eade1f622a06cff46935
0332d81f6ce8d8039974fad7d336a4a9c6e4cea2aed7b581d0f96a2a123bf9bc
GET /widget/public/chunk.9e9a4ae65db929e8a147.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: suphelper.com
Connection: keep-alive
Referer: https://suphelper.com/widget/?build=1678449095031&lang=en&langInited=true&opener=full
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-bcfdf4cb-17a7-41fb-b747-20e829f6158f' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-bcfdf4cb-17a7-41fb-b747-20e829f6158f' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-bcfdf4cb-17a7-41fb-b747-20e829f6158f' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=2592000
last-modified: Thu, 09 Mar 2023 06:41:03 GMT
etag: W/"15380a-186c51a0818"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2560169
server: cloudflare
cf-ray: 7b4589068ad32e0b-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
v3.traincdn.com/sfiles/logo_teams/7a3d29cc63f9be011714e0a3d8e908fc.webp
8.254.252.212 6.0 kB URL v3.traincdn.com/sfiles/logo_teams/7a3d29cc63f9be011714e0a3d8e908fc.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash bef48942f8cb36c29a3d055bc347e3b3
53ba082704df7ac23427b1fd0e5c1594178018eb
d4687f64856e95b68de6d44c6e954f9cad1d0a38d40eea4a431a11eb7ae36a67
GET /sfiles/logo_teams/7a3d29cc63f9be011714e0a3d8e908fc.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:01 GMT
content-type: image/webp
content-length: 6046
cache-control: public, max-age=86400
etag: "bef48942f8cb36c29a3d055bc347e3b3"
expires: Sat, 08 Apr 2023 02:39:47 GMT
last-modified: Sat, 21 Jan 2023 12:12:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 69554
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/_nuxt/Desktop/Default/svg-sprites/common-201012.svg
178.253.15.27 64 kB URL lite-1x05933835.top/_nuxt/Desktop/Default/svg-sprites/common-201012.svg
IP 178.253.15.27:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f9d6145aa38426848a319e8379aec855
f9ff188c0424321c5f093d495929ee2faf62e183
4a1c7a0951edb7b357adb1360ca9ba82d33b34680176718ce0530fd45adfd745
GET /_nuxt/Desktop/Default/svg-sprites/common-201012.svg HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:54 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 07 Apr 2023 10:29:21 GMT
etag: W/"642ff081-1e7eb"
expires: Sat, 08 Apr 2023 21:58:44 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/default/img/icons/pixels2.svg?v=1680904738
178.253.15.27 4.2 kB URL lite-1x05933835.top/web-api/default/img/icons/pixels2.svg?v=1680904738
IP 178.253.15.27:0
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash 7e7696d822fffdc73cdb3ebc4190567f
0647735b979244935a5e24a0d0cfdae2a05fe3d1
6b6d2b8eb734e777f510a694a8f1f81cefd19bb99ac36af4034f4492154fcfa6
GET /web-api/default/img/icons/pixels2.svg?v=1680904738 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:58:59 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=31, dt_285;dur=35
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
suphelper.com/widget/assets/talk.16399b00c482d1e1e4c80e076c333cb6.svg
104.16.42.72 3.2 kB URL suphelper.com/widget/assets/talk.16399b00c482d1e1e4c80e076c333cb6.svg
IP 104.16.42.72:0
File type SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (335), with no line terminators
Hash 47dc901b581ab68690b063b6023d38e8
f1ceab83668834ea83d0c75552fcfa7d52c84ab2
f0aec6bc9a81af88f595a9a55b5828103c873160a0e39e8321cd136686936b4f
GET /widget/assets/talk.16399b00c482d1e1e4c80e076c333cb6.svg HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: suphelper.com
Connection: keep-alive
Referer: https://suphelper.com/widget/?build=1678449095031&lang=en&langInited=true&opener=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: image/svg+xml
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-55f1b64f-0866-4e7c-9c99-9aeb7c16556f' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=2592000
last-modified: Fri, 10 Mar 2023 11:52:11 GMT
etag: W/"155-186cb5d3df8"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2227534
server: cloudflare
cf-ray: 7b458906ab072e0b-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
v3.traincdn.com/sfiles/logo_teams/59db105ce0bf71f2e4bdb29fa0a9c317.webp
8.254.252.212 7.4 kB URL v3.traincdn.com/sfiles/logo_teams/59db105ce0bf71f2e4bdb29fa0a9c317.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6e09df5a1616523030b6a6f4a0d6a27c
f2b4139dcb906d8a5752855cd23e8015f3b3934b
43c8121e9d3cb242ba6d81e4408dfdc4a27102a7db97d37dc27d6ea7e721a160
GET /sfiles/logo_teams/59db105ce0bf71f2e4bdb29fa0a9c317.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 7388
cache-control: public, max-age=86400
etag: "6e09df5a1616523030b6a6f4a0d6a27c"
expires: Sat, 08 Apr 2023 19:43:22 GMT
last-modified: Wed, 01 Feb 2023 10:33:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8975b6fb52c3a6218607bf6a8355c0b9.webp
8.254.252.212 11 kB URL v3.traincdn.com/sfiles/logo_teams/8975b6fb52c3a6218607bf6a8355c0b9.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1fdf763f83c3d15189da4c48312f06e1
e512a5a1d66a755b4afb6b6bfbc3a8f1087ad3d0
62998caae875f16527720fc5a6308bf6e11ba08e1fa710da2bb3479c05f4f5fc
GET /sfiles/logo_teams/8975b6fb52c3a6218607bf6a8355c0b9.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 11200
cache-control: public, max-age=86400
etag: "1fdf763f83c3d15189da4c48312f06e1"
expires: Sat, 08 Apr 2023 19:33:57 GMT
last-modified: Fri, 27 Jan 2023 11:36:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4072.webp
8.254.252.212 7.0 kB URL v3.traincdn.com/sfiles/logo_teams/4072.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 31b380c2e150865ea01f59ac3ca04bfc
aa1f5ef5e69b60708387fdb8849fbed60ba220aa
a49d04cdaff3ef81f4de31a33b1d6c0ce8eb702f341c2453e1587c8ea5faabdf
GET /sfiles/logo_teams/4072.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 6970
cache-control: public, max-age=86400
etag: "31b380c2e150865ea01f59ac3ca04bfc"
expires: Sat, 08 Apr 2023 19:43:22 GMT
last-modified: Wed, 01 Feb 2023 12:03:39 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/dd5f2d4eadc1007a8735d2b74d918bf6.webp
8.254.252.212 11 kB URL v3.traincdn.com/sfiles/logo_teams/dd5f2d4eadc1007a8735d2b74d918bf6.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45d71542c1fd15d785d34fd27b3015c6
b873fd51bf198311f8a3d1cc8f8e458400a59119
5b0b26c036dc0c9b27852f5293407646733fde22428a672a5370c400e8b1eb4c
GET /sfiles/logo_teams/dd5f2d4eadc1007a8735d2b74d918bf6.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 10550
cache-control: public, max-age=86400
etag: "45d71542c1fd15d785d34fd27b3015c6"
expires: Sat, 08 Apr 2023 19:48:19 GMT
last-modified: Wed, 01 Feb 2023 12:03:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/957ee057ab29cdba4bfbda043abe8458.webp
8.254.252.212 11 kB URL v3.traincdn.com/sfiles/logo_teams/957ee057ab29cdba4bfbda043abe8458.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 22f273a9dfd768513edeac38e429b470
68bb587b360914013d849ae15379712ff99211bb
ec51db6968d301423d307b7efd49478ac2badeff0195bcfa19c361f6a27bc35e
GET /sfiles/logo_teams/957ee057ab29cdba4bfbda043abe8458.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 10564
cache-control: public, max-age=86400
etag: "22f273a9dfd768513edeac38e429b470"
expires: Sat, 08 Apr 2023 19:48:19 GMT
last-modified: Tue, 31 Jan 2023 13:37:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2201f86ef83bd7715b415d91cfafd035.webp
8.254.252.212 17 kB URL v3.traincdn.com/sfiles/logo_teams/2201f86ef83bd7715b415d91cfafd035.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 32f2b7588f34915f79afd328e546081e
18f0968aaf809bcb3ac6aaa943af7fe5b2e45166
7be1016bf7a84b289a2a70d2cd96d3f97469e5e6856a9a609d6fd676c70a5dd8
GET /sfiles/logo_teams/2201f86ef83bd7715b415d91cfafd035.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 16686
cache-control: public, max-age=86400
etag: "32f2b7588f34915f79afd328e546081e"
expires: Sat, 08 Apr 2023 19:48:19 GMT
last-modified: Wed, 01 Feb 2023 10:58:01 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/e879a1e26fd5aeee10d5940505dd8d08.webp
8.254.252.212 13 kB URL v3.traincdn.com/sfiles/logo_teams/e879a1e26fd5aeee10d5940505dd8d08.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6ef95c4c44a515d91d687f187999a96f
1d4c5738351751482b6a0f509a07f8e7f78c6cd6
ee85f37b1ea978bc2ccb7052316f6309b19e392264999e6283818fa788738507
GET /sfiles/logo_teams/e879a1e26fd5aeee10d5940505dd8d08.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 13086
cache-control: public, max-age=86400
etag: "6ef95c4c44a515d91d687f187999a96f"
expires: Sat, 08 Apr 2023 19:48:19 GMT
last-modified: Wed, 01 Feb 2023 12:03:36 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2408.webp
8.254.252.212 7.9 kB URL v3.traincdn.com/sfiles/logo_teams/2408.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3f5a03e9f6014574868c58cfe39295b8
bb3c5f541bc9460491acd234248bea3a082ca05e
f3e56d7703531ea1527daa7b8b37bc1149885d8497cb02ed86febf0588e16243
GET /sfiles/logo_teams/2408.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 7906
cache-control: public, max-age=86400
etag: "3f5a03e9f6014574868c58cfe39295b8"
expires: Sat, 08 Apr 2023 08:51:20 GMT
last-modified: Tue, 31 Jan 2023 13:55:37 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 62043
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d34e4574cd88b73aa6b7a54eb7c42335.webp
8.254.252.212 15 kB URL v3.traincdn.com/sfiles/logo_teams/d34e4574cd88b73aa6b7a54eb7c42335.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash caa556c6e2c32dcfebb5aed8af4af11f
a7de67d9c1a125a2fb3117e19309ead4b65d19d7
4040f3e978c12576b5408f116a270bc3bd082f9a3c70415aa8cf46e48b6d4fcc
GET /sfiles/logo_teams/d34e4574cd88b73aa6b7a54eb7c42335.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 14694
cache-control: public, max-age=86400
etag: "caa556c6e2c32dcfebb5aed8af4af11f"
expires: Sat, 08 Apr 2023 19:48:19 GMT
last-modified: Tue, 24 Jan 2023 13:21:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 11019
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/366407.webp
8.254.252.212 11 kB URL v3.traincdn.com/sfiles/logo_teams/366407.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1e8b3ef2310f5595b13164aa84be50fa
77f4c875ba8863e72d1a0fcff64e260f51719b8e
59ee084fb39fa34df68e0ae835d9015e40031fef3ebe47fd6a6d74128be914c9
GET /sfiles/logo_teams/366407.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 10860
cache-control: public, max-age=86400
etag: "1e8b3ef2310f5595b13164aa84be50fa"
expires: Sat, 08 Apr 2023 16:04:55 GMT
last-modified: Sat, 28 Jan 2023 08:56:29 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 21249
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/140661.webp
8.254.252.212 7.5 kB URL v3.traincdn.com/sfiles/logo_teams/140661.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d7b103d0cb879b022485a10633622471
58f9d1cde22ba05ae9f4ac5ba6e6c260aacd2c11
d90bee57eb9402b06fafa2ec7c5ecd9e00067f6761f87c7bb347f82e9bf2dcd8
GET /sfiles/logo_teams/140661.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 7480
cache-control: public, max-age=86400
etag: "d7b103d0cb879b022485a10633622471"
expires: Sat, 08 Apr 2023 08:51:20 GMT
last-modified: Tue, 31 Jan 2023 12:23:15 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 62043
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/07e24e7fbfd31489270503d0342d6a6e.webp
8.254.252.212 3.7 kB URL v3.traincdn.com/sfiles/logo_teams/07e24e7fbfd31489270503d0342d6a6e.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4a820f9229ae9370a4c70d78adfe785c
f90f45ce8f7db6e848b67a1c47e53609134ffef1
2ffc568f6387e8bfa9f4c68ac44950117c0bd957eab9ed635847471127ba8139
GET /sfiles/logo_teams/07e24e7fbfd31489270503d0342d6a6e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 3748
cache-control: public, max-age=86400
etag: "4a820f9229ae9370a4c70d78adfe785c"
expires: Sat, 08 Apr 2023 19:43:22 GMT
last-modified: Fri, 27 Jan 2023 15:53:19 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 21247
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5604.webp
8.254.252.212 6.6 kB URL v3.traincdn.com/sfiles/logo_teams/5604.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2e22f993b2ce1d52a2a14cf085eca99d
f6b999a5d7c2d050481543988785409733ac4d48
15451f9f2d987f39b6cfd5f0b196b415e3845aa29e49b7a4161ad6aff51ddfb3
GET /sfiles/logo_teams/5604.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 6552
cache-control: public, max-age=86400
etag: "2e22f993b2ce1d52a2a14cf085eca99d"
expires: Sat, 08 Apr 2023 21:32:36 GMT
last-modified: Wed, 01 Feb 2023 08:47:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 1586
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/02e7728a14332f2364895d085c4dac57.webp
8.254.252.212 3.3 kB URL v3.traincdn.com/sfiles/logo_teams/02e7728a14332f2364895d085c4dac57.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b30c7bbe9395305641851a19ac8a3774
d19ccc04079fe3dfbfaae768645aff7578273074
36d3ac2471e4afa9aa7d26d14fe509463c1ff0ed3240c151f919874beceb7a7e
GET /sfiles/logo_teams/02e7728a14332f2364895d085c4dac57.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 3314
cache-control: public, max-age=86400
etag: "b30c7bbe9395305641851a19ac8a3774"
expires: Sat, 08 Apr 2023 13:50:31 GMT
last-modified: Wed, 01 Feb 2023 07:48:32 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 29312
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5288.webp
8.254.252.212 5.4 kB URL v3.traincdn.com/sfiles/logo_teams/5288.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d8bf94ce3f9e7653028e87eb8624fc76
ff6ec0b33eb6b197bc71ad3830f629a3b0cc6f6d
836702129ad639a7e9b973837eaf4a70432d31b4ca7793bdcd14ac1a1df43147
GET /sfiles/logo_teams/5288.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 5372
cache-control: public, max-age=86400
etag: "d8bf94ce3f9e7653028e87eb8624fc76"
expires: Sat, 08 Apr 2023 14:58:11 GMT
last-modified: Wed, 01 Feb 2023 08:03:27 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 25481
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/c348416e75e2b8f39afad9a20acf9b4b.webp
8.254.252.212 14 kB URL v3.traincdn.com/sfiles/logo_teams/c348416e75e2b8f39afad9a20acf9b4b.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2e7700cde109f68a69d548d2961c3e37
f06b38bc2afb05cdbade9693a849e18fbb41617e
8c4d08906a910513e974b583bc5effaf87279b3e3867ed4cd52045e930656fd5
GET /sfiles/logo_teams/c348416e75e2b8f39afad9a20acf9b4b.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 13694
cache-control: public, max-age=86400
etag: "2e7700cde109f68a69d548d2961c3e37"
expires: Sat, 08 Apr 2023 13:50:30 GMT
last-modified: Wed, 01 Feb 2023 08:24:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 29727
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/5280.webp
8.254.252.212 13 kB URL v3.traincdn.com/sfiles/logo_teams/5280.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 42d31464b2421318e03955ff4257d91b
1e6191ca930f2629765a724dcd4e00c7b5af0805
b8db9ffcd4c18fbcdbdc9b2f43cc628ba6782856ff61d6662c6ee3edcfa7814d
GET /sfiles/logo_teams/5280.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 13046
cache-control: public, max-age=86400
etag: "42d31464b2421318e03955ff4257d91b"
expires: Sat, 08 Apr 2023 11:42:09 GMT
last-modified: Tue, 31 Jan 2023 13:33:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37016
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.webp
8.254.252.212 7.1 kB URL v3.traincdn.com/sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6861d17ac7afdbd03900b0c03425b6f1
5201de6cef48508e814fc9a88af45910eb3b08d2
1c5759915875e722ace165be850897c8fcd2e3c379c1c421ded927d407d27727
GET /sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 7098
cache-control: public, max-age=86400
etag: "6861d17ac7afdbd03900b0c03425b6f1"
expires: Sat, 08 Apr 2023 11:09:38 GMT
last-modified: Tue, 03 Jan 2023 17:00:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 38968
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6872.webp
8.254.252.212 10 kB URL v3.traincdn.com/sfiles/logo_teams/6872.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 529e3cb6f42d6c6ac30053bb5851b71e
8c436bad4a63504a31c30bec2e4b51eeaa5c58f9
ca43b099861d4dc7bd2199eb864f69b47923aea538daf39f794e1baf0811aeb1
GET /sfiles/logo_teams/6872.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 10398
cache-control: public, max-age=86400
etag: "529e3cb6f42d6c6ac30053bb5851b71e"
expires: Sat, 08 Apr 2023 02:52:41 GMT
last-modified: Thu, 19 Jan 2023 14:27:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 68789
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/bab6e873720e8ff8728f46cd70b87c6c.webp
8.254.252.212 5.5 kB URL v3.traincdn.com/sfiles/logo_teams/bab6e873720e8ff8728f46cd70b87c6c.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 295959cfd605316bf0bed45f7651169e
2fcdee116e6c53e3f6c53cb2229b1eb65fc4e738
87917a863351ccbfcbf402449affe23ac19595f33066531131e34e04646c7462
GET /sfiles/logo_teams/bab6e873720e8ff8728f46cd70b87c6c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 5524
cache-control: public, max-age=86400
etag: "295959cfd605316bf0bed45f7651169e"
expires: Sat, 08 Apr 2023 00:55:15 GMT
last-modified: Thu, 19 Jan 2023 14:27:33 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 75860
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/167095.webp
8.254.252.212 7.9 kB URL v3.traincdn.com/sfiles/logo_teams/167095.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e371493e8b6971a53dc150ee54728b8d
ea963f113c688a7529d157fbbeeabdc493bf1294
a3d576c55279aef7144de7fc83c67ebefa9191638d94b7f4fa37950bd6c852ab
GET /sfiles/logo_teams/167095.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 7872
cache-control: public, max-age=86400
etag: "e371493e8b6971a53dc150ee54728b8d"
expires: Sat, 08 Apr 2023 12:16:40 GMT
last-modified: Wed, 01 Feb 2023 10:50:02 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34943
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3552.webp
8.254.252.212 6.4 kB URL v3.traincdn.com/sfiles/logo_teams/3552.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0806f46a853d0e83c43099a97b162efc
0cd2ef5d01b390a1467f7651b47026e835ad9d55
5e9c77a3aae2fe5b309c79697386556a872d8d613bcf613d6bcff5b6c6c8c60d
GET /sfiles/logo_teams/3552.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 6424
cache-control: public, max-age=86400
etag: "0806f46a853d0e83c43099a97b162efc"
expires: Sat, 08 Apr 2023 12:24:05 GMT
last-modified: Wed, 01 Feb 2023 07:35:29 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34824
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3534.webp
8.254.252.212 810 B URL v3.traincdn.com/sfiles/logo_teams/3534.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 00cfe2477fec8fcf01701655615a662e
7db92edd30c4afba97ae792648a59e861ae4550e
9d03418216e16521ecd821c89437919fb39c840a625827235fdbd1bc2bf5cdab
GET /sfiles/logo_teams/3534.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 810
cache-control: public, max-age=86400
etag: "00cfe2477fec8fcf01701655615a662e"
expires: Sat, 08 Apr 2023 12:26:15 GMT
last-modified: Wed, 01 Feb 2023 12:02:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34824
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.webp
8.254.252.212 1.6 kB URL v3.traincdn.com/sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2d082841f48b2b4301a04015ebf819c7
c48ff3dd0c8f5b23a4ee4725728b2e638bc8abae
e274b283fd9ce4f6704367e7c676d0e88b3356d31eba68d5fd96d71a3689e162
GET /sfiles/logo_teams/e1eb6e4adda0df3ef108df2dd55a4b14.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 1616
cache-control: public, max-age=86400
etag: "2d082841f48b2b4301a04015ebf819c7"
expires: Sat, 08 Apr 2023 11:33:22 GMT
last-modified: Tue, 31 Jan 2023 14:45:27 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37932
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/cfd1bfc198db93d38683d5f5e491d9cf.webp
8.254.252.212 17 kB URL v3.traincdn.com/sfiles/logo_teams/cfd1bfc198db93d38683d5f5e491d9cf.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e211a97c9e0851e9b34d76f2961ddbbf
832da972e743fee031a5d20786df8107c5643e1e
b0b5f1fbc5dedf467f59ebf0885915460f3bbdb72256ac57aa6f26d082f82529
GET /sfiles/logo_teams/cfd1bfc198db93d38683d5f5e491d9cf.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 16814
cache-control: public, max-age=86400
etag: "e211a97c9e0851e9b34d76f2961ddbbf"
expires: Sat, 08 Apr 2023 21:22:29 GMT
last-modified: Sat, 21 Jan 2023 16:09:31 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 36308
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/308809.webp
8.254.252.212 14 kB URL v3.traincdn.com/sfiles/logo_teams/308809.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2f8f4d27ce5f539bb1c57b87d1a34f33
df7b12b9be52f2c63bc248d6287042fdb0ef2cf3
2383a5ef20811b9f4749c1e7b3b177160a636da73f4ffcab7ccd6fdff449577f
GET /sfiles/logo_teams/308809.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:02 GMT
content-type: image/webp
content-length: 13624
cache-control: public, max-age=86400
etag: "2f8f4d27ce5f539bb1c57b87d1a34f33"
expires: Sat, 08 Apr 2023 21:22:29 GMT
last-modified: Wed, 01 Feb 2023 08:19:51 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 36308
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash a017e60cf93d0e227f7ed6960b1b2462
f3b37e24f6561a237d72e99722a78d9f98361420
9f2d92adbe14ad77c1e24761ed49035ad165990f58aae83f49dfd7b54f267a07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Apr 2023 21:59:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_1.json
8.254.252.212 2.5 kB URL v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_1.json
IP 8.254.252.212:0
File type JSON data\012- , ASCII text, with very long lines (10044), with no line terminators
Hash f6be4017a6ba6c30c30362160faa5080
ee1c688120ccd62f6175eaaff8f31b2d7cccdc67
0e3326ec11947803261d79f328bed9c742f38003a77f3c64faf9cfc4a4f75e03
GET /genfiles/cms/betstemplates/bets_model_short_en_1.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:03 GMT
content-type: application/json
content-length: 2521
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"b607cd71ca2b886219a430cb5e45a884"
expires: Sat, 08 Apr 2023 11:01:41 GMT
last-modified: Fri, 07 Apr 2023 10:06:48 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 39442
accept-ranges: bytes
X-Firefox-Spdy: h2
suphelper.com/widget/public/bundle.33fa17097bdc6cb1de6c.js
104.16.42.72 44 kB URL suphelper.com/widget/public/bundle.33fa17097bdc6cb1de6c.js
IP 104.16.42.72:0
File type Unicode text, UTF-8 text, with very long lines (65162), with no line terminators
Hash 04dbd3acd987d5d8925d8af74f9cb940
73adf70662598f17009f7f4dc91605326104d2ac
02230dc00bff157f2a6810f37279f116fbea6b957613e213f6d532bbba137b25
GET /widget/public/bundle.33fa17097bdc6cb1de6c.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: suphelper.com
Connection: keep-alive
Referer: https://suphelper.com/widget/?build=1678449095031&lang=en&langInited=true&opener=full
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-bcab0e1c-c55c-45e3-9467-104b201c6ce3' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=2592000
last-modified: Fri, 10 Mar 2023 11:52:11 GMT
etag: W/"33ba5-186cb5d3df8"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2455079
server: cloudflare
cf-ray: 7b4589068ad62e0b-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
v3.traincdn.com/sfiles/logo_teams/2d290eeaf0e8743c5ad9b7991132c77b.webp
8.254.252.212 8.5 kB URL v3.traincdn.com/sfiles/logo_teams/2d290eeaf0e8743c5ad9b7991132c77b.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e0928cb40b0b325f94273d6b00642f12
8876e1a43b9d62f184844260e796a8c3db9405f5
80f7a507a3daa1d847530e4dcd08cead219ce783816d46eb037866b558913f80
GET /sfiles/logo_teams/2d290eeaf0e8743c5ad9b7991132c77b.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:03 GMT
content-type: image/webp
content-length: 8544
cache-control: public, max-age=86400
etag: "e0928cb40b0b325f94273d6b00642f12"
expires: Sat, 08 Apr 2023 13:25:52 GMT
last-modified: Wed, 01 Feb 2023 12:57:21 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 32927
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/13119.webp
8.254.252.212 7.4 kB URL v3.traincdn.com/sfiles/logo_teams/13119.webp
IP 8.254.252.212:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d4743beaa1419d6b056e3d49d9e3e87
a4acb25b8944b520589132055997c81fcad3d0db
8b99f32bd3aeb2c89af95b58e4836f48c7ae59d56013c731e56ef1b3a996fed6
GET /sfiles/logo_teams/13119.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Apr 2023 21:59:03 GMT
content-type: image/webp
content-length: 7354
cache-control: public, max-age=86400
etag: "7d4743beaa1419d6b056e3d49d9e3e87"
expires: Sat, 08 Apr 2023 13:25:52 GMT
last-modified: Tue, 31 Jan 2023 13:26:30 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 32580
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/q/8520310f5e2cf51b335e265ae06c48e82d0697bd3
178.253.15.27 499 B URL lite-1x05933835.top/web-api/q/8520310f5e2cf51b335e265ae06c48e82d0697bd3
IP 178.253.15.27:0
Hash 06aefe725cbfaa5de57ec5aa133477dc
2cff764eb097f76b249bcecbba81ee71810962d6
179f1568f4b38098057baa64bccaf50aa078c1d0f4533d837ef12bf05e117950
POST /web-api/q/8520310f5e2cf51b335e265ae06c48e82d0697bd3 HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x05933835.top/en
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Content-Length: 32412
Origin: https://lite-1x05933835.top
Connection: keep-alive
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167; _ga_7JGWL9SV66=GS1.1.1680904740.1.0.1680904740.60.0.0; _ga=GA1.1.1599366573.1680904740
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:59:03 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=32, dt_285;dur=33
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
142.250.74.35 167 kB URL www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (697)
Size 167 kB (166600 bytes)
Hash fdfdaf63d56b4a9cd6641d79f7159fdc
18b413d8b6b9f3bec32026b7e9d9f4e5e366922f
f4dba3e15f08cf0686e6d89370ed42e8a5dafc38973501f0aa6baa9b93c720f3
GET /recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 16:05:47 GMT
expires: Tue, 02 Apr 2024 16:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Apr 2023 18:01:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 366796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t&co=aHR0cHM6Ly9saXRlLTF4MDU5MzM4MzUudG9wOjQ0Mw..&hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&theme=light&size=invisible&badge=inline&cb=fk44jw1cuyzw
142.250.74.132 27 kB URL www.google.com/recaptcha/api2/anchor?ar=1&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t&co=aHR0cHM6Ly9saXRlLTF4MDU5MzM4MzUudG9wOjQ0Mw..&hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&theme=light&size=invisible&badge=inline&cb=fk44jw1cuyzw
IP 142.250.74.132:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (41194)
Hash 7555b59e2187affd1ebbbb1bd7907e50
7bfcae761e0d223dbd2f03bbd481721cea263764
0b236b2f75bab90aaeeaeee85026f763e6595eeeed179c6e950601201d84a636
GET /recaptcha/api2/anchor?ar=1&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t&co=aHR0cHM6Ly9saXRlLTF4MDU5MzM4MzUudG9wOjQ0Mw..&hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&theme=light&size=invisible&badge=inline&cb=fk44jw1cuyzw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.google.com
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 07 Apr 2023 21:59:03 GMT
content-security-policy: script-src 'nonce-XSbRlXfAQCSqBXZAj7kJTg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 26865
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
142.250.74.35 25 kB URL www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
IP 142.250.74.35:0
File type ASCII text, with very long lines (56403), with no line terminators
Hash a42c6333a13e5376af95f46fd9c7b627
57a98e519a44915e39a0cb6f23812adfa6611e67
62bff9dd0379da44f9d7f739af671bb6b243c016b49c7146b431ae9e6b9cb41b
GET /recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 16:05:47 GMT
expires: Tue, 02 Apr 2024 16:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Apr 2023 18:01:18 GMT
content-type: text/css
vary: Accept-Encoding
age: 366796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
142.250.74.35 167 kB URL www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (697)
Size 167 kB (166600 bytes)
Hash fdfdaf63d56b4a9cd6641d79f7159fdc
18b413d8b6b9f3bec32026b7e9d9f4e5e366922f
f4dba3e15f08cf0686e6d89370ed42e8a5dafc38973501f0aa6baa9b93c720f3
GET /recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 16:05:47 GMT
expires: Tue, 02 Apr 2024 16:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Apr 2023 18:01:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 366796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227 15 kB URL fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Apr 2023 11:09:06 GMT
expires: Fri, 05 Apr 2024 11:09:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 125397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:31:03 GMT
expires: Wed, 03 Apr 2024 10:31:03 GMT
cache-control: public, max-age=31536000
age: 300480
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/webworker.js?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw
142.250.74.132 112 B URL www.google.com/recaptcha/api2/webworker.js?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw
IP 142.250.74.132:0
File type ASCII text, with no line terminators
Hash 8771b78bf8540cb0f0abd565803ec778
47cd6a15b47404961c8d0f5a1e11fe2125b46c1c
ea56675b25b1314bc82952ca08e0590788909f502ff612b300cf54cc2eea54ad
GET /recaptcha/api2/webworker.js?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.google.com
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t&co=aHR0cHM6Ly9saXRlLTF4MDU5MzM4MzUudG9wOjQ0Mw..&hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&theme=light&size=invisible&badge=inline&cb=fk44jw1cuyzw
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Fri, 07 Apr 2023 21:59:03 GMT
date: Fri, 07 Apr 2023 21:59:03 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/javascript; charset=UTF-8
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 112
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35 2.2 kB URL www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:0
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:12 GMT
expires: Fri, 14 Apr 2023 18:05:12 GMT
cache-control: public, max-age=604800
age: 14031
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
142.250.74.35 167 kB URL www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (697)
Size 167 kB (166600 bytes)
Hash fdfdaf63d56b4a9cd6641d79f7159fdc
18b413d8b6b9f3bec32026b7e9d9f4e5e366922f
f4dba3e15f08cf0686e6d89370ed42e8a5dafc38973501f0aa6baa9b93c720f3
GET /recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 16:05:47 GMT
expires: Tue, 02 Apr 2024 16:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Apr 2023 18:01:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 366796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/bframe?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
142.250.74.132 1.1 kB URL www.google.com/recaptcha/api2/bframe?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
IP 142.250.74.132:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da114903973bfbd900e14f2747d1cba0
f6b90d81c1bc51b7af6a75e8d6afb5fd02f153d9
702ded325bdc1bdd7eb06fa6238476ed3adfd2112a8d16586e3ded2516b9708d
GET /recaptcha/api2/bframe?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.google.com
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 07 Apr 2023 21:59:04 GMT
content-security-policy: script-src 'nonce-cyxSikfZw8P3uZZzgEhrnQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1114
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
142.250.74.35 25 kB URL www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
IP 142.250.74.35:0
File type ASCII text, with very long lines (56403), with no line terminators
Hash a42c6333a13e5376af95f46fd9c7b627
57a98e519a44915e39a0cb6f23812adfa6611e67
62bff9dd0379da44f9d7f739af671bb6b243c016b49c7146b431ae9e6b9cb41b
GET /recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 16:05:47 GMT
expires: Tue, 02 Apr 2024 16:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Apr 2023 18:01:18 GMT
content-type: text/css
vary: Accept-Encoding
age: 366797
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
142.250.74.35 167 kB URL www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (697)
Size 167 kB (166600 bytes)
Hash fdfdaf63d56b4a9cd6641d79f7159fdc
18b413d8b6b9f3bec32026b7e9d9f4e5e366922f
f4dba3e15f08cf0686e6d89370ed42e8a5dafc38973501f0aa6baa9b93c720f3
GET /recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 16:05:47 GMT
expires: Tue, 02 Apr 2024 16:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Apr 2023 18:01:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 366797
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/reload?k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
142.250.74.132 24 kB URL www.google.com/recaptcha/api2/reload?k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
IP 142.250.74.132:0
File type ASCII text, with very long lines (40104)
Hash 64a0d4223bd2f92a5ed046081548766c
f2ddf3e1cb8536988cacea62886a48f03ba93b59
5c12b6bf5e82a3beaec9c2023be8c6511def310854241a6e0b78f03b29ef566c
POST /recaptcha/api2/reload?k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 6277
Origin: https://www.google.com
Alt-Used: www.google.com
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Fri, 07 Apr 2023 21:59:04 GMT
expires: Fri, 07 Apr 2023 21:59:04 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 24395
server: GSE
set-cookie: _GRECAPTCHA=09AJzkepQKQ1x5ZJthAGdMea26L8yA2GO5MhAXJbZUMp9b6jHejS0xdkOg6bJh19NzqZkFMZ3Uv8fB1AXYYADwvVs;Path=/recaptcha;Expires=Wed, 04-Oct-2023 21:59:04 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227 15 kB URL fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Apr 2023 11:09:06 GMT
expires: Fri, 05 Apr 2024 11:09:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 125398
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
216.58.207.227 15 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0\012- data
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Apr 2023 11:09:08 GMT
expires: Fri, 05 Apr 2024 11:09:08 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
age: 125396
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:31:03 GMT
expires: Wed, 03 Apr 2024 10:31:03 GMT
cache-control: public, max-age=31536000
age: 300481
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/payload?p=06AKH6MRGwY7GPC3t9sCofNTwtjLR0iNOSDlT0ZfId8vHbh__gIUVQzF0-yfkmccajuwOxb0UyxjRxQIC0dhW7ISHLEUClWVgqJrjKqMP4jax7uka9uR5pXTV0oiLCfZXRijNKxZ3nO-CJH8-JQjdo4DPl4-7mAflTQ7-_GqaCb_53EApzEzWwMiz7VDukuRd5gS-xo3RJcYKs&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
142.250.74.132 36 kB URL www.google.com/recaptcha/api2/payload?p=06AKH6MRGwY7GPC3t9sCofNTwtjLR0iNOSDlT0ZfId8vHbh__gIUVQzF0-yfkmccajuwOxb0UyxjRxQIC0dhW7ISHLEUClWVgqJrjKqMP4jax7uka9uR5pXTV0oiLCfZXRijNKxZ3nO-CJH8-JQjdo4DPl4-7mAflTQ7-_GqaCb_53EApzEzWwMiz7VDukuRd5gS-xo3RJcYKs&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
IP 142.250.74.132:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash a84e7e2370f820097fed5fa210986e30
76da918087300fdb4466c8ba26266514bc76bcd6
f4415c2c33025713d2909a51bb0a2ac0bf9af34c18850c4ca4d9f64856b08b8a
GET /recaptcha/api2/payload?p=06AKH6MRGwY7GPC3t9sCofNTwtjLR0iNOSDlT0ZfId8vHbh__gIUVQzF0-yfkmccajuwOxb0UyxjRxQIC0dhW7ISHLEUClWVgqJrjKqMP4jax7uka9uR5pXTV0oiLCfZXRijNKxZ3nO-CJH8-JQjdo4DPl4-7mAflTQ7-_GqaCb_53EApzEzWwMiz7VDukuRd5gS-xo3RJcYKs&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.google.com
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=6MY32oPwFCn9SUKWt8czDsDw&k=6LcHxwcUAAAAAIUazEuUGlfmc7IyjkUDFXwtd70t
Cookie: _GRECAPTCHA=09AJzkepQKQ1x5ZJthAGdMea26L8yA2GO5MhAXJbZUMp9b6jHejS0xdkOg6bJh19NzqZkFMZ3Uv8fB1AXYYADwvVs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Fri, 07 Apr 2023 21:59:04 GMT
date: Fri, 07 Apr 2023 21:59:04 GMT
cache-control: private, max-age=30
content-type: image/jpeg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 35475
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/refresh_2x.png
142.250.74.35 600 B URL www.gstatic.com/recaptcha/api2/refresh_2x.png
IP 142.250.74.35:0
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:12 GMT
expires: Fri, 14 Apr 2023 18:05:12 GMT
cache-control: public, max-age=604800
age: 14032
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/audio_2x.png
142.250.74.35 530 B URL www.gstatic.com/recaptcha/api2/audio_2x.png
IP 142.250.74.35:0
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:12 GMT
expires: Fri, 14 Apr 2023 18:05:12 GMT
cache-control: public, max-age=604800
age: 14032
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
142.250.74.35 665 B URL www.gstatic.com/recaptcha/api2/info_2x.png
IP 142.250.74.35:0
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.gstatic.com
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:12 GMT
expires: Fri, 14 Apr 2023 18:05:12 GMT
cache-control: public, max-age=604800
age: 14032
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lite-1x05933835.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
178.253.15.27 2.6 kB URL lite-1x05933835.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP 178.253.15.27:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10190), with no line terminators
Hash 0af92eb85dbf8a723a75744aefaffee4
91f15889c1dd19e80b4eb46452f2ee11308f0c39
113858851cbdf4134c3222d46d014f389a9b1d28c5c57f5236135ae7f4311355
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167; _ga_7JGWL9SV66=GS1.1.1680904740.1.0.1680904740.60.0.0; _ga=GA1.1.1599366573.1680904740; sh.session=2b7c3193-0962-4644-bc09-ce23e819f674
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:59:04 GMT
content-type: application/json; charset=utf-8
content-length: 2563
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x05933835.top/web-api/registration
178.253.15.27200 OK 2.3 kB URL POST HTTP/2 lite-1x05933835.top/web-api/registration
IP 178.253.15.27:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerLet's Encrypt
Subjectlite-1x05933835.top
FingerprintF3:70:B6:71:E5:E0:54:4F:42:50:F7:A7:AA:B5:53:86:F1:AC:84:97
ValidityTue, 04 Apr 2023 11:59:15 GMT - Mon, 03 Jul 2023 11:59:14 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (2460), with no line terminators
Hash 735876048af5592629730458f9d3d3f8
1eff2da46be798e4006448a655ec540482fbbbde
764992067cff725c3b4e2e9714af642eb5d51c3438e1f85fb18f31643f8f9921
POST /web-api/registration HTTP/1.1
Host: lite-1x05933835.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Content-Type: application/json
Content-Length: 17
Origin: https://lite-1x05933835.top
Connection: keep-alive
Referer: https://lite-1x05933835.top/en
Cookie: platform_type=desktop; SESSION=552abf9acfb889e4edcbb16aeafa80d8; auid=sv0PG2QwkhozxDDSA2IbAg==; lng=en; tzo=2; window_width=1152; che_g=e3e682cc-0fa3-3d7e-8f9b-ce16b271dc87; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680922513; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: application/json; charset=utf-8
content-encoding: gzip
server-timing: dt_285;dur=81
set-cookie: is_rtl=1; expires=Sat, 06-Apr-2024 21:59:00 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
suphelper.com/widget/?build=1678449095031&lang=en&langInited=true&opener=full
104.16.42.72200 OK 11 kB URL GET HTTP/3 suphelper.com/widget/?build=1678449095031&lang=en&langInited=true&opener=full
IP 104.16.42.72:443
Requested by https://lite-1x05933835.top/en
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint27:46:C4:A9:EA:6C:BA:37:6C:AB:D6:AE:F1:2C:0B:41:F5:63:43:99
ValidityWed, 11 May 2022 00:00:00 GMT - Thu, 11 May 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5138)
Hash 254dd7fea768169e07222769b98c70fd
5c57e2b57ebffa047d485145d3e02aea87c630e7
5c77f0dc09fb52ba6b7c4f9e09f65155b0952119c2293da55e4db7228f58011f
GET /widget/?build=1678449095031&lang=en&langInited=true&opener=full HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: suphelper.com
Connection: keep-alive
Referer: https://lite-1x05933835.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 07 Apr 2023 21:59:00 GMT
content-type: text/html; charset=utf-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-4bd610f9-813d-40d2-9e28-529e953aadb5' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=2592000
etag: W/"2ca9-XFfitX6/+gR9SFFF0+Aq6ofGMOc"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2454924
server: cloudflare
cf-ray: 7b4589061a062e0b-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400