Overview

URL1xbet.com.gh/
IP 83.147.204.21 (Iran)
ASN#202492 Silverhill Group Holding Ltd
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-28 09:42:45 UTC
StatusLoading report..
IDS alerts0
Blocklist alert105
urlquery alerts No alerts detected
Tags None

Domain Summary (18)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
v3.traincdn.com (39) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 15979 1751586 8.254.252.212
www.google-analytics.com (1) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 376 20685 142.250.74.174
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
fonts.googleapis.com (1) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 574 2906 142.250.74.10
ocsp.sectigo.com (5) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1700 4815 172.64.155.188
ocsp.digicert.com (4) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1364 2798 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5842 34.160.144.191
ocsp.pki.goog (6) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2058 4200 142.250.74.3
lite-1x86926289.top (105) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 65824 1606695 178.253.14.164
1xbet.com.gh (2) 250462 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 786 1054 83.147.204.21
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
img-getpocket.cdn.mozilla.net (9) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4911 96309 34.120.237.76
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 389 45429 142.250.74.168
radar.cedexis.com (1) 3035 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 376 19103 45.54.49.5
suphelper.com (1) 156440 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 371 1478 104.16.43.72
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6204 23.36.76.226
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.203.75.56
fonts.gstatic.com (4) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1957 60947 216.58.207.195

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 83.147.204.21
Date UQ / IDS / BL URL IP
2023-04-09 21:39:19 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-04-07 21:59:10 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-04-04 04:09:21 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-03-25 12:23:21 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-03-24 11:51:07 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21


Last 5 reports on ASN: Silverhill Group Holding Ltd
Date UQ / IDS / BL URL IP
2023-05-31 20:04:31 UTC 0 - 1 - 0 refpa.top/L?tag=d_786679m_1599c_&site=786679& (...) 83.147.204.15
2023-05-29 17:44:50 UTC 0 - 1 - 0 refpa.top/L?tag=d_786679m_1599c_&site=786679& (...) 83.147.204.15
2023-05-29 17:44:31 UTC 0 - 1 - 0 refpa.top/L 83.147.204.15
2023-05-29 14:29:24 UTC 0 - 1 - 0 1xlite-542770.top/ 178.253.36.14
2023-05-29 00:59:05 UTC 0 - 1 - 0 refpa.top/L 83.147.204.15


Last 5 reports on domain: 1xbet.com.gh
Date UQ / IDS / BL URL IP
2023-04-09 21:39:19 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-04-07 21:59:10 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-04-04 04:09:21 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-03-25 12:23:21 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21
2023-03-24 11:51:07 UTC 0 - 1 - 0 1xbet.com.gh/ 83.147.204.21


No other reports with similar screenshot

JavaScript

Executed Scripts (31)

Executed Evals (1)
#1 JavaScript::Eval (size: 6187) - SHA256: 4dd8419b0671f5ea7de4a4905b0dd0cbb8f7e0910e65a59a7c566eb480ed9629
function _0x1604(_0x16042d, _0x4e052b) {
    var _0x292f23 = _0xba14();
    return _0x1604 = function(_0xd340b, _0xb0a3a3) {
        _0xd340b = _0xd340b - (-0x4d8 + 0x43 * 0x29 + -0x4e2);
        var _0x49967c = _0x292f23[_0xd340b];
        return _0x49967c;
    }, _0x1604(_0x16042d, _0x4e052b);
}(function(_0x4cd0a9, _0x22c1d7) {
    var _0x41885b = {
            _0x5111d6: 0x21b,
            _0x23c55e: 0x208,
            _0xec035c: 0x20d,
            _0xdbf4f2: 0x205,
            _0x4b5757: 0x217,
            _0x563508: 0x212,
            _0x161f63: 0x21e,
            _0x52c388: 0x1e5,
            _0x46ad5f: 0x215,
            _0x457e0f: 0x20e,
            _0x394162: 0x206,
            _0x5b4f4f: 0x207
        },
        _0xee385e = {
            _0x5b9ca1: 0x320
        },
        _0x328cfc = _0x4cd0a9();

    function _0x305192(_0x16e503, _0x3a1b4c) {
        return _0x1604(_0x3a1b4c - -_0xee385e._0x5b9ca1, _0x16e503);
    }
    while (!![]) {
        try {
            var _0x34f32a = parseInt(_0x305192(-0x231, -_0x41885b._0x5111d6)) / (-0x841 + -0x262b + -0x2e6d * -0x1) + parseInt(_0x305192(-_0x41885b._0x23c55e, -_0x41885b._0xec035c)) / (-0x330 * -0x9 + 0x1 * 0x149 + -0x9fd * 0x3) * (-parseInt(_0x305192(-_0x41885b._0xdbf4f2, -_0x41885b._0x4b5757)) / (-0x714 + 0x20cd + -0x449 * 0x6)) + -parseInt(_0x305192(-_0x41885b._0x563508, -_0x41885b._0x161f63)) / (-0x12cf + 0x6 * 0xf + 0x1 * 0x1279) + -parseInt(_0x305192(-0x224, -_0x41885b._0x563508)) / (-0x4 * 0x905 + 0x95c * 0x2 + 0x1161) * (-parseInt(_0x305192(-0x215, -0x21f)) / (0xc33 + 0x2 * -0xb91 + 0xaf5)) + parseInt(_0x305192(-_0x41885b._0x52c388, -0x1f6)) / (0x3 * 0x47 + -0x23db + 0x9 * 0x3e5) * (parseInt(_0x305192(-_0x41885b._0x46ad5f, -_0x41885b._0x457e0f)) / (-0x1 * 0x22c8 + -0x1 * -0x6bb + -0x5b * -0x4f)) + -parseInt(_0x305192(-_0x41885b._0x394162, -0x20a)) / (-0x1 * 0x18e3 + 0x1774 + 0x178) + parseInt(_0x305192(-0x211, -_0x41885b._0x5b4f4f)) / (0x234b + -0x1 * -0x26c1 + 0x2501 * -0x2);
            if (_0x34f32a === _0x22c1d7) break;
            else _0x328cfc['push'](_0x328cfc['shift']());
        } catch (_0x450bb2) {
            _0x328cfc['push'](_0x328cfc['shift']());
        }
    }
}(_0xba14, 0x9af52 + 0x439d4 * 0x1 + -0x8ffcf), (function() {
    var _0xb676e2 = {
            _0x3aca2d: 0x346,
            _0x2c600d: 0x32f,
            _0x569662: 0x347,
            _0x2236f8: 0x35d,
            _0x3f315a: 0x33a,
            _0x3fb8ae: 0x354,
            _0x2dfe98: 0x352,
            _0x1e6ec8: 0x35b,
            _0x1fcf29: 0x34d,
            _0x3b3f98: 0x353,
            _0x174d52: 0x332,
            _0x56d9a9: 0x34c,
            _0x3c94ae: 0x339,
            _0x2a6611: 0x32f,
            _0x2cad40: 0x34f,
            _0x50233e: 0x331,
            _0x1b35e3: 0x341,
            _0x4ff8b0: 0x349,
            _0x18a696: 0x336,
            _0x2c76cc: 0x349,
            _0x4c09c4: 0x350,
            _0xd02bcd: 0x356,
            _0x383672: 0x370,
            _0x1e14a1: 0x32c,
            _0x37af76: 0x335,
            _0x92514: 0x355,
            _0x4fc967: 0x358,
            _0x290c30: 0x348,
            _0x6013f3: 0x34e
        },
        _0x4615f4 = {
            _0x2da544: 0x6d,
            _0x38db93: 0x78,
            _0xb8d3d7: 0x87,
            _0x44532b: 0x82,
            _0x31a08e: 0x7d,
            _0x339afe: 0x9c,
            _0x218228: 0x86,
            _0x48d89e: 0x7f,
            _0x430dcc: 0x5b,
            _0x45c077: 0x88
        },
        _0xa425e0 = {
            _0x3cb1a2: 0x22e
        },
        _0x4aa16c = {
            'tDkfq': function(_0x1675ae, _0x47450f) {
                return _0x1675ae + _0x47450f;
            },
            'WamgK': _0x3437e4(0x34b, 0x33f),
            'hDNbZ': _0x3437e4(_0xb676e2._0x3aca2d, _0xb676e2._0x2c600d),
            'HSlWg': _0x3437e4(0x334, _0xb676e2._0x569662),
            'aUOdy': function(_0x4e2f36, _0x106b81) {
                return _0x4e2f36 + _0x106b81;
            },
            'qhUmn': _0x3437e4(_0xb676e2._0x2236f8, 0x375),
            'QIRKm': _0x3437e4(0x342, 0x344),
            'DJMcL': _0x3437e4(_0xb676e2._0x3f315a, 0x350),
            'IzXyt': function(_0x108fdc, _0x4b23dd) {
                return _0x108fdc + _0x4b23dd;
            },
            'DAOvz': function(_0x30305c, _0x3068e7) {
                return _0x30305c + _0x3068e7;
            },
            'jwENP': _0x3437e4(0x33b, 0x333),
            'ovuhx': 'g',
            'mCAye': _0x3437e4(0x33d, _0xb676e2._0x3fb8ae),
            'GxPhh': '(((' + _0x3437e4(0x35a, _0xb676e2._0x2dfe98) + _0x3437e4(_0xb676e2._0x1e6ec8, _0xb676e2._0x1fcf29) + ')+$'
        },
        _0x21e0dd = (_0x3437e4(_0xb676e2._0x3b3f98, 0x345) + _0x3437e4(_0xb676e2._0x174d52, 0x31d) + _0x3437e4(_0xb676e2._0x56d9a9, 0x350) + _0x3437e4(_0xb676e2._0x3c94ae, _0xb676e2._0x2a6611) + _0x3437e4(_0xb676e2._0x2cad40, 0x357))['spl' + 'it']('|');

    function _0x3437e4(_0xd53e01, _0x316b96) {
        return _0x1604(_0xd53e01 - _0xa425e0._0x3cb1a2, _0x316b96);
    }
    var _0x94aef1 = 0x379 * 0x5 + 0x26ab + -0x3808;
    while (!![]) {
        switch (_0x21e0dd[_0x94aef1++]) {
            case '0':
                var _0x72653d = _0xf4ec32(this, function() {
                    function _0x3e6463(_0x3b0fc6, _0x55d21d) {
                        return _0x3437e4(_0x3b0fc6 - -0x2cb, _0x55d21d);
                    }
                    return _0x72653d[_0x3e6463(_0x4615f4._0x2da544, _0x4615f4._0x38db93) + _0x3e6463(_0x4615f4._0xb8d3d7, _0x4615f4._0x44532b) + 'ng']()[_0x3e6463(0x82, 0x6b) + _0x3e6463(_0x4615f4._0x31a08e, 0x66)](_0x5a2dc6['QLM' + 'JA'])[_0x3e6463(_0x4615f4._0x2da544, 0x6f) + _0x3e6463(_0x4615f4._0xb8d3d7, _0x4615f4._0x339afe) + 'ng']()[_0x3e6463(_0x4615f4._0x218228, 0x8b) + _0x3e6463(0x85, _0x4615f4._0x48d89e) + _0x3e6463(0x6a, _0x4615f4._0x430dcc) + 'or'](_0x72653d)[_0x3e6463(_0x4615f4._0x44532b, 0x71) + _0x3e6463(0x7d, 0x8d)](_0x5a2dc6[_0x3e6463(0x93, _0x4615f4._0x45c077) + 'JA']);
                });
                continue;
            case '1':
                var _0x5995f0 = _0x4aa16c[_0x3437e4(_0xb676e2._0x50233e, 0x33f) + 'fq'](_0x4aa16c[_0x3437e4(0x357, 0x359) + 'gK'], _0x4aa16c[_0x3437e4(0x33e, 0x356) + 'bZ']) + _0x4aa16c['HSl' + 'Wg'];
                continue;
            case '2':
                var _0x51c06e = _0x4aa16c[_0x3437e4(0x359, _0xb676e2._0x1b35e3) + 'dy'](_0x4aa16c[_0x3437e4(0x331, _0xb676e2._0x4ff8b0) + 'fq'](_0x4aa16c[_0x3437e4(0x33f, 0x34c) + 'mn'], _0x4aa16c[_0x3437e4(_0xb676e2._0x18a696, 0x349) + 'Km']), _0x4aa16c[_0x3437e4(_0xb676e2._0x2c76cc, _0xb676e2._0x4c09c4) + 'cL']);
                continue;
            case '3':
                _0x72653d();
                continue;
            case '4':
                var _0x5ad5e9 = _0x4aa16c['IzX' + 'yt'](_0x4aa16c['DAO' + 'vz'](_0x4aa16c[_0x3437e4(_0xb676e2._0xd02bcd, 0x34f) + 'NP'], _0x4aa16c[_0x3437e4(0x35c, _0xb676e2._0x383672) + 'hx']), _0x4aa16c[_0x3437e4(0x343, _0xb676e2._0x1e14a1) + 'ye']);
                continue;
            case '5':
                var _0xf4ec32 = (function() {
                    var _0x264788 = !![];
                    return function(_0x2594d2, _0x43f576) {
                        var _0x4e7a26 = _0x264788 ? function() {
                            var _0x152aa8 = {
                                _0x544964: 0xe5
                            };

                            function _0x568019(_0x55c856, _0x3516da) {
                                return _0x1604(_0x55c856 - -_0x152aa8._0x544964, _0x3516da);
                            }
                            if (_0x43f576) {
                                var _0x34d35c = _0x43f576[_0x568019(0x32, 0x29) + 'ly'](_0x2594d2, arguments);
                                return _0x43f576 = null, _0x34d35c;
                            }
                        } : function() {};
                        return _0x264788 = ![], _0x4e7a26;
                    };
                }());
                continue;
            case '6':
                window[_0x3437e4(0x34a, _0xb676e2._0x37af76) + _0x3437e4(_0xb676e2._0x92514, _0xb676e2._0x4fc967) + _0x3437e4(0x354, 0x34e) + 'W'] = _0x4aa16c[_0x3437e4(0x331, _0xb676e2._0x290c30) + 'fq'](_0x5ad5e9 + _0x51c06e, _0x5995f0);
                continue;
            case '7':
                var _0x5a2dc6 = {
                    'QLMJA': _0x4aa16c[_0x3437e4(_0xb676e2._0x6013f3, _0xb676e2._0x3c94ae) + 'hh']
                };
                continue;
        }
        break;
    }
}()));

function _0xba14() {
    var _0x5ada6a = ['3|4', 'sea', 'GxP', '1|6', 'str', 'con', 'tri', '7|5', '_NE', 'URL', 'jwE', 'Wam', '665vQJQDA', 'aUO', '.+)', '+)+', 'ovu', 'f', 'QLM', '210CKTFpe', '1939524bEROWm', 'tDk', '|0|', '289011xDiPKd', '464563e5d050068728c3e89549dab84585f', 'uct', 'QIR', '1827213titjEU', 'toS', '|2|', 'd', '/', '52010LNKlIR', '/', 'hDN', 'qhU', '6616kiSsJQ', '2wLzVib', 'd', 'mCA', '3834711FvQXZz', 'app', 'e', '11102640AKKBRt', 'rch', 'DJM', 'FP_', '0'];
    _0xba14 = function() {
        return _0x5ada6a;
    };
    return _0xba14();
}

Executed Writes (0)


HTTP Transactions (191)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: 1xbet.com.gh
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             83.147.204.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:42:29 GMT
Content-Length: 162
Connection: close
Location: https://1xbet.com.gh/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9603
Expires: Mon, 28 Nov 2022 12:22:32 GMT
Date: Mon, 28 Nov 2022 09:42:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6034
Cache-Control: max-age=95358
Date: Mon, 28 Nov 2022 09:42:29 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 12:11:47 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8380
Expires: Mon, 28 Nov 2022 12:02:09 GMT
Date: Mon, 28 Nov 2022 09:42:29 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 09:19:32 GMT
cache-control: public,max-age=3600
age: 1377
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: eMM4MegFox72mVKiDOs2vgTGxsm/7Gi2QlchMQdZYQY06/i2oEM3mkibkEn7hxXXdN12mbDn2c4=
x-amz-request-id: WTWSCXZMWC80D23T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 09:42:00 GMT
age: 29
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:29 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C01E441B13E057E6D0352DFB4012A87EA777ACA6C13619AE3DEC8CA6940B37FF"
Last-Modified: Mon, 28 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21568
Expires: Mon, 28 Nov 2022 15:41:58 GMT
Date: Mon, 28 Nov 2022 09:42:30 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 09:11:12 GMT
cache-control: public,max-age=3600
age: 1878
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6308
Cache-Control: max-age=90570
Date: Mon, 28 Nov 2022 09:42:30 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:52:00 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F7E2680F00EAB605DF14D421305322DD4F79F2E5910FC55D8F8D700E6830829D"
Last-Modified: Sun, 27 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12589
Expires: Mon, 28 Nov 2022 13:12:19 GMT
Date: Mon, 28 Nov 2022 09:42:30 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UdItK7il1lVg958c9Vp2jg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.203.75.56
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wAzk0VV+PdC3I3dwDYS/UjenXN8=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6122
Expires: Mon, 28 Nov 2022 11:24:34 GMT
Date: Mon, 28 Nov 2022 09:42:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6122
Expires: Mon, 28 Nov 2022 11:24:34 GMT
Date: Mon, 28 Nov 2022 09:42:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6122
Expires: Mon, 28 Nov 2022 11:24:34 GMT
Date: Mon, 28 Nov 2022 09:42:32 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 42076
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11255
x-amzn-requestid: ce06e0cc-3874-4a3d-a6c5-5cc1cb342138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7w8EEOIAMF_6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99f-5ca652aa369ee1690b0d08cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0diXekmaxz0zbwy1wShePUxsvtC59YoEPcLJmS_ql6uKG0MtqbxbeQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:03:04 GMT
age: 41968
etag: "602e8ba5c6671ff947acfda757577ddc8ecec6ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11255
Md5:    6e240caa3153ea25c34d07185b47f8a5
Sha1:   602e8ba5c6671ff947acfda757577ddc8ecec6ec
Sha256: c2b37bf1ef003ceffaaf4612f2001b6f7998d5b95cd55b32c79fefcb24ccad7f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fxNulyOR88nEcjtrXm1dECsulI-MsAxm2Zl0Y83uMz23lGh18d-ZBA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:55 GMT
age: 42337
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15639
Md5:    0a4e0bb1e2748bdce6bbf685a910f0fc
Sha1:   5b97bfd787afcb912cdbef0f137f78a059082992
Sha256: a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:11:39 GMT
age: 5453
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8885
Md5:    3a1a4e00f1f15827cf651f373863c379
Sha1:   70c2a238f06ca7e56ef80c83738e081bf0de3330
Sha256: 3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KcI_BV4rZkM-2CmcFI5qkJLT-OOwYQnRNEPXrQJvlNA9A3Da0EzgEA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 42688
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12555
Md5:    f20d5c4b208740dd4c737b9d95c0e1d0
Sha1:   c843c5422499736a83a80c2b07475a8dbbb8860f
Sha256: f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 42066
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6376
Md5:    78b1389f425425d0450c94d900404dc4
Sha1:   53b12a8702f7c5b7cc697e2a24da824d9434be65
Sha256: 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 09:42:32 GMT
date: Mon, 28 Nov 2022 09:42:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2160
Md5:    eb929cb635515b60adc09bd0570df0ef
Sha1:   045ba79e263c623d799c48e6c65d6a981b4f64cb
Sha256: d837f8675302f107945e88f7b564d8e2f453bb544f040eb9e47b3f67de9df345
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=537031,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771227791dbd1c02-OSL

                                        
                                            GET /_nuxt/desktop/default/css/4859ddb3.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 84417
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-149c1"
expires: Tue, 29 Nov 2022 09:23:28 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1145
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   84417
Md5:    8221793c110e14a0e1cfbb52f1ef36db
Sha1:   7aafe0364ba395958f922f8fc6cb88729da341e5
Sha256: 99615c2de27fc399156c626254c3a4d94d2c2a9179ee4c157fe1ed14b19fe301
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=537031,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771227791e95b4eb-OSL

                                        
                                            GET /version.json HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/json
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "63832023-2c"
expires: Mon, 28 Nov 2022 09:43:20 GMT
last-modified: Sun, 27 Nov 2022 08:30:27 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 13
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   44
Md5:    72331dc68cc4aec9403a486e263714fd
Sha1:   d8821982075adaadce50f07910d58bcce40c5129
Sha256: 462dcdf9735f2c52810899a254158e8a16310f4fbef49b89599897fc7cdc155d
                                        
                                            GET /_nuxt/desktop/default/css/8c439d72.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 48550
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-bda6"
expires: Tue, 29 Nov 2022 08:28:58 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4415
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   48550
Md5:    a27695c9e60200b1b238e53e6557a5c9
Sha1:   708c0397ec05e7b094be17a1d0de9a9f24738735
Sha256: 32c4f044dd2527b0ce923ea22aa3175dd85bd16a730bb20dac2cc010d5da124a
                                        
                                            GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Mon, 28 Nov 2022 09:39:04 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 329
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Size:   698
Md5:    baf96800254904a05eee2ff49c94a801
Sha1:   847efb3449a8d7857f004192310aa2164a71d530
Sha256: 0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
                                        
                                            GET /_nuxt/desktop/default/e61e3b02.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 677529
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-a5699"
expires: Tue, 29 Nov 2022 09:23:44 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1129
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65479)
Size:   677529
Md5:    d6947a76bacd122b69702b623756e22c
Sha1:   1a81418a2ba3765163e5a6c242c6b58c192ae986
Sha256: 8d1b75e2e2883f5fa47d18815358ac537694b336d5756c2947a06ec6955f822c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=537031,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771227791c22b4f3-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=537031,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77122779087cb511-OSL

                                        
                                            GET /_nuxt/desktop/default/bfe114b7.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 6584
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-19b8"
expires: Tue, 29 Nov 2022 09:23:44 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1129
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17172), with no line terminators
Size:   6584
Md5:    87c290ffe0e41241de11502c343aad36
Sha1:   7f4372f5406863c3e20bc7e24e9e9d057f45e633
Sha256: 2dd90f31d5f1ebe65a33c4c243bac2aed49310f0c39edf3b23c23a159a28c6de
                                        
                                            GET /_nuxt/desktop/default/dbc9b8ac.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:33 GMT
content-length: 107977
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-1a5c9"
expires: Tue, 29 Nov 2022 09:23:44 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1130
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65479)
Size:   107977
Md5:    f32d199f401d720de69222d6a78de80c
Sha1:   56887648690731b7a482af5cc8032e6211deb468
Sha256: 6755c9e99f300e71b47d53f5f1c61ad50eab15002313487d73ea49cf2b794057
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 396505
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 416101
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 398924
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /_nuxt/desktop/default/c5d2e384.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:34 GMT
content-length: 595357
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-9159d"
expires: Tue, 29 Nov 2022 08:44:57 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3457
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   595357
Md5:    07552b480615033664d89b4d20c82cb4
Sha1:   ce96ddd334710d2d0e6c4b4395325e7d5b319d25
Sha256: 36bd4dfbc7e56bf6062b6a400e685b2147f1da930f2cfe086c8a2e24a488c9b3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:34 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=537031,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771227790c20b4f3-OSL

                                        
                                            GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1669628554305 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:34 GMT
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   145
Md5:    55385fdddab661013ad8f678cd75ac88
Sha1:   bd36ac4197e34b4d5022498bc319e6f51dff2329
Sha256: d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /pwa HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x86926289.top/us
Connection: keep-alive
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:35 GMT
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=78
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   15
Md5:    0e4766fd1b2ba2e236fd9364587f99ab
Sha1:   eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
Sha256: 4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/svg-sprites/qatar-fce482452f0624ce31de0cfe3caf302b.svg HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:35 GMT
vary: Accept-Encoding
last-modified: Sun, 27 Nov 2022 08:22:21 GMT
etag: W/"63831e3d-4873"
expires: Mon, 28 Nov 2022 16:58:25 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (18547), with no line terminators
Size:   8432
Md5:    9811c04298498d9a3bbf6cb7021e0222
Sha1:   8a98b9084452d16291fe585faaba2d431b60ca07
Sha256: 37c9b432ba9bb3101e7ee8e269f43ce8c0c09dcc36366aa8272b9a33e6110b12

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/cae45d90.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:35 GMT
content-length: 1366
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-556"
expires: Tue, 29 Nov 2022 09:24:42 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1073
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3958), with no line terminators
Size:   1366
Md5:    4b2e4d85efd1542463b9497eecfa7db5
Sha1:   cd6d6d40947c9faaab5473a59bf6ffbba3b2c326
Sha256: d6883f177b8a99a783d287757ad830c87d7612723fc0651701198093232679c7
                                        
                                            GET /version.json?timestamp=1669628554534 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:35 GMT
content-length: 44
last-modified: Sun, 27 Nov 2022 08:30:27 GMT
vary: Accept-Encoding
etag: "63832023-2c"
content-encoding: gzip
expires: Mon, 28 Nov 2022 09:43:35 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   44
Md5:    72331dc68cc4aec9403a486e263714fd
Sha1:   d8821982075adaadce50f07910d58bcce40c5129
Sha256: 462dcdf9735f2c52810899a254158e8a16310f4fbef49b89599897fc7cdc155d

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /gtag/js?id=UA-178408567-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 09:42:35 GMT
expires: Mon, 28 Nov 2022 09:42:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44712
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   44712
Md5:    0d9e7c14e78b9414e90a47f0628b24e4
Sha1:   0bd466cceb3cf6e9fb72a745a07a9b7f8c7b4888
Sha256: 88042f022d523d4fa2e93e17f57d0a4e1e47187651dd30bf57b5eae0789d6589
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /1593429750/radar.js HTTP/1.1 
Host: radar.cedexis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.54.49.5
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:42:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:33 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0d9-af5c"
Expires: Mon, 12 Dec 2022 09:42:35 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1782)
Size:   18746
Md5:    2acb3c3179b2646943d1a8f5166743cc
Sha1:   56aa31a4027fec3dd8cc78114c6b0f3604716c14
Sha256: 0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
                                        
                                            GET /_nuxt/desktop/default/13a26202.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:36 GMT
content-length: 987
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-3db"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1073
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2337), with no line terminators
Size:   987
Md5:    d84e6412762158c14d57b4a0fca0874a
Sha1:   a03baa5dae90fe52f7e778ab7965af83e43f8148
Sha256: 3638be79e0f6dc31a7dcfa1e10b480a60b1e92aa60e8f3deca04e0ce41e292cc
                                        
                                            GET /_nuxt/svg-sprites/sports-0d806c0c85a236c624a6b0d8dcf23594.svg HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:35 GMT
vary: Accept-Encoding
last-modified: Sun, 27 Nov 2022 08:22:21 GMT
etag: W/"63831e3d-52ce3"
expires: Mon, 28 Nov 2022 22:47:49 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   149777
Md5:    6da68497eb8a310aea2f6600ff018215
Sha1:   fac05699ba38c86c56f534f908b847a9c7f7bb65
Sha256: 1078287f91d034f98410909910ef985719116baa10a084ae8f18b9aff6d07961

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/145f33e064200b002f5cee5d65d90417.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png, image/jpeg
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:36 GMT
content-length: 10860
x-amz-id-2: BBLziilOha65HnjHLBNLxBI42OQdvvpISlg9Q5ZAsA7uLpLxkzHBPyA4li8hRVJprjYYyuhCWAo=
x-amz-request-id: TYD4QHY19ZWQKY9H
last-modified: Mon, 06 Jan 2020 20:42:11 GMT
etag: "a9b5dad5f706925cc42aad6f3d863464"
x-amz-version-id: Rcqw7S.G9vLxZ3pb3btkUNe.peBrk8oh
expires: Tue, 29 Nov 2022 09:42:36 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   10860
Md5:    a9b5dad5f706925cc42aad6f3d863464
Sha1:   f632f9822522656713c41f4febd6eaabc8efe4bc
Sha256: b6b8f755f26549587f99e33a96112c4d19c02d394ba06ccd4f6f518b8c4c9449

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/svg-sprites/country-5ae080c0900f8ab990025425a54e475d.svg HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:35 GMT
vary: Accept-Encoding
last-modified: Sun, 27 Nov 2022 08:22:21 GMT
etag: W/"63831e3d-26132"
expires: Mon, 28 Nov 2022 21:11:03 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   56302
Md5:    71e18bd8326e8c1e77888f98a64379e9
Sha1:   551a162444340b4eac456665da866029f0691cc5
Sha256: 6a6a7b6fdddf6812b8ce9d62f98fb11431463cd5902be4a9d809fde31f52ed02

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8294.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:36 GMT
content-length: 14452
x-amz-id-2: cFj08M0rcaGxriuAjFW7utooFh3XgojOYh5I5W1Pj3/YtvLWkApEQPesSnRc2kB8r7rvPTnvxD0=
x-amz-request-id: ZMH8ZG2CBXKQB383
last-modified: Tue, 13 Aug 2019 15:11:54 GMT
etag: "4678a53059a69a8377a62299a46c8424"
x-amz-version-id: uhbl_aGuf2vstuM1i3xk2WOMFNN21DwU
expires: Tue, 29 Nov 2022 09:42:36 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   14452
Md5:    4678a53059a69a8377a62299a46c8424
Sha1:   ca243551bc4d1383e4f06823ad08bd60b6aecb8e
Sha256: b781ddf404d3851c35ccd3f10ba824f07e6ca36ccb67f7030c561c9737e398b6

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8286.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:36 GMT
content-length: 9344
x-amz-id-2: /5Zgxs0XrLMxz3doWpHGmgpsAQ0UDA0QLS9wit5v5ghqKqUQ5bGYVZ+Xn5axKuudCgP/zLKN3Ys=
x-amz-request-id: ZMH8RAX649Y7JN1N
last-modified: Tue, 13 Aug 2019 15:11:54 GMT
etag: "7aea903e59a84eeac6c2078df595a960"
x-amz-version-id: GevSWX_QdkZSQswxqvVaXnFOPMp8F.iz
expires: Tue, 29 Nov 2022 09:42:36 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9344
Md5:    7aea903e59a84eeac6c2078df595a960
Sha1:   f75d298ed263b3fb853c66b27cbf375d09fbed83
Sha256: 1bfde491c80c976c54cee870ad6ff560a4a9f5e631fdb347835c9c6c6df0e130

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/6b986b9b46cd2002de5ba859e6d16684.PNG HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 40976
x-amz-id-2: BfDlMHtLqZMua7Yalm+fh36UqNt51GZ5Sq70QpARo0c2oCoMNMAFpPXK6LpM8AuOGZ8tbskD4XA=
x-amz-request-id: KMEC7513TCZT1TD4
last-modified: Thu, 04 Feb 2021 08:33:37 GMT
etag: "55ee5735cb19bc8d6f811226e1c5ae41"
x-amz-version-id: WYN.7UAPdA7SPntrINv3LGa240wa4BCl
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   40976
Md5:    55ee5735cb19bc8d6f811226e1c5ae41
Sha1:   3944ebfc3e9688706327a4cfec6179982f0a6026
Sha256: 2894a6bd85cf5f839915c3da95447b45019edc1708ed2d796fc79a9bca2e9e9d

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/4843b5b02b86fc2c03daf12e4f177b42.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 14989
x-amz-id-2: ynCaLk1hao6OO8v1Xgyp12GpwPtb/439HKz/mfjgDMGbe6iLSjfAsUCoJ6t1LNXPBsg35MNsXCo=
x-amz-request-id: TYD9KBYQRXQX8ZMK
last-modified: Fri, 05 Mar 2021 08:33:31 GMT
etag: "da89854aebc6e5c71192cdf31da5545b"
x-amz-version-id: 4yW6MUzg20NMjfhj.DZn_Iy2u8e1HuEl
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   14989
Md5:    da89854aebc6e5c71192cdf31da5545b
Sha1:   c6b14b550fd242d5133b28dc8149f15a93be497a
Sha256: 43488079e924f457b651974df7c87dc8db61964ccd9f10cd1dc00b1055fc30be

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/api/converslon/load HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:35 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=18, dt_285;dur=19
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   14914
Md5:    fec54be07066f36e7262b62870c65024
Sha1:   6a3e3d4004a25143984d8d531619c87f0ed906c3
Sha256: 69bf5d91f89a77a8c073f38b7c5d59cedca99bf29c62adb9d477870aa5d578a1

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/db8ee7384c29d465fed670a9523d2bf4.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 14871
x-amz-id-2: oZc27zPdFrVyhkbQObwo7IwGZcAHnqUr9TRwNE0TMzI+phSEvHspxkbjnnartGadnyrkNx7oAzs=
x-amz-request-id: 4YW95T4HE3E5CVBD
last-modified: Tue, 23 Aug 2022 09:43:17 GMT
etag: "29ced32b341b64ee267ed79eb109148b"
x-amz-version-id: gJU6qcLoHjRfqPQSQ8KWpyUmmecpFzDY
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   14871
Md5:    29ced32b341b64ee267ed79eb109148b
Sha1:   811c85a5d57676f09268795fb6f90368bf3e4456
Sha256: 9d619b40d91b511841ee127c97c4350a395860b3412acccb3a4b518c20f29295

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo-champ/d97749ad3a0b012298c3a61718de3fc3.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 7066
x-amz-id-2: Hp/D4Kxikgxl15TppP7zQZmNEp3QTx5fO2GxBJej3pZColpFTHpIFBIam6O5/0W9qjylQK+iL9M=
x-amz-request-id: 4G40DRRJYQGW07P5
last-modified: Thu, 12 May 2022 06:05:43 GMT
etag: "61c8eb49a94de59c583ffe67f15b33e6"
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Size:   7066
Md5:    61c8eb49a94de59c583ffe67f15b33e6
Sha1:   49d995a28948a0ee565dfa264409fcab82a1b335
Sha256: adf6655280581e1a618617a6d84697aa26608e90cafb1ef857008d2a40fe0ba1

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/204793.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 24272
x-amz-id-2: 3tOlNQelyyj920NuSJAhgXKPmpy0ID5qeCrASAoD+RpzbkifA6auC2brLF5aH98Lky5kE+IDZCs=
x-amz-request-id: WK2HR8SPK6HDV17B
last-modified: Tue, 13 Aug 2019 14:58:07 GMT
etag: "e9a722e91654ac00860b9d7ee6fd7b48"
x-amz-version-id: r4vuLzzRENU8tmt8kuat7u6EOXIc7Lzk
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   24272
Md5:    e9a722e91654ac00860b9d7ee6fd7b48
Sha1:   07835731c1549478dc8eb1c372cd4a43354ab943
Sha256: b7d54c833411c326354557013f8e8789a74e8f2c50e2f1d6a094f102e39b5e2c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/cd476734f121860fb5966bf57cbcbca5.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 19357
x-amz-id-2: Py1nQ9gHvsQVXsBkiPkdUdEl2ZbRDcEw4gSukhj3c/WRDuBoS4VY5IgQmdt4jNpgE9MstxqeGoo=
x-amz-request-id: WK2TKK5GPJ199EBD
last-modified: Thu, 20 Jan 2022 06:17:43 GMT
etag: "f39eb30509dd3e1425ac08eebd1a65a4"
x-amz-version-id: npHERaj.DumuVe.aR1XOM06qqjEfZENo
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   19357
Md5:    f39eb30509dd3e1425ac08eebd1a65a4
Sha1:   d5423741915da50762e9b847411248005641cc73
Sha256: ecf2066afd3e49afb51ffc4d8897a23c0207f627ea638f833c9fe48380d6ca3c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/194957.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 17134
x-amz-id-2: NNRCQCwOh2PdB49gQ8doa9Fu+cD2aDx++ZbFjtDo7cKrpdAFVMdX5pc/13csi/FnhaGLLQ75vR8=
x-amz-request-id: FGC809BD3JQPA3B1
last-modified: Tue, 13 Aug 2019 14:57:20 GMT
etag: "d87fb9c6eddba057ff985004074f7469"
x-amz-version-id: GEHjEuDMiLvPifS8JQ2Je9OhZSJAdRYN
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size:   17134
Md5:    d87fb9c6eddba057ff985004074f7469
Sha1:   c27fb55b5e78a8883d4f53f34c30109474a9801d
Sha256: f9855b78f688f211b7b7b9ce9b687d50e9ec14520620fe4cea1149e91f545636

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/b26d5f1cd4372ac573b2f29566497165.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 27729
x-amz-id-2: 7+gU/LgYsJCJgnoFG//qR0cH3WVVlG0OM1ECTvy8IPNV9PogUql5bWKSzr6iz668R2I+yVE+CyE=
x-amz-request-id: FGC8TBTSMF1993T7
last-modified: Wed, 14 Apr 2021 09:59:56 GMT
etag: "40494a85d2812a92cd8819b90ec6412e"
x-amz-version-id: 2OvPerzgGr3ASfqZpuG16Rr.gb_79XwG
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size:   27729
Md5:    40494a85d2812a92cd8819b90ec6412e
Sha1:   c66dacc1e479619c701be8b096d966c27da75e66
Sha256: c5c3aebc9e1164b2dc8fa99506b7ebd6c6a30f6962599913141e58d4508c4268

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/b82c7bdde6eaa6a14a426f5edcee9759.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 21896
x-amz-id-2: D+k8JHMl0fU4lmEpPrdioqlsygm5uE1tU0EYKpOKy58ZhASFzT+GCJ07/jz5UaQ0tHXZg205K84=
x-amz-request-id: 2C3WWXPFAQM8ZXX2
last-modified: Thu, 15 Apr 2021 12:39:14 GMT
etag: "000b52d7c09dc37c3e84b40e34a38858"
x-amz-version-id: a3FJAkFwkivmeqVMZMDU8iY7s1u2JpSE
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   21896
Md5:    000b52d7c09dc37c3e84b40e34a38858
Sha1:   88ffb95867821231e8512cc0def647af9282087f
Sha256: 5988403e6ec568efd64adb9ac6fd63821d8dc5e3ffbe019202ded9612df65ba9

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/17609.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 18860
x-amz-id-2: cWtutntHzzWqX9iLSeVevboILH9D3rpm1vkoxB8HrRqLXGeaA+KCTUWeR4Y5Sn04K8OKYj7yDUg=
x-amz-request-id: 2C3JNYB3AZG6AMM4
last-modified: Tue, 13 Aug 2019 14:55:59 GMT
etag: "4ea0fb8ffe1a43c16717c327737dac1b"
x-amz-version-id: qg7K0T9GVRuUdk1SD1xwbJZeWKKX3jOF
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size:   18860
Md5:    4ea0fb8ffe1a43c16717c327737dac1b
Sha1:   e48c954bad5a7b2dcc1d5c4519e85cfd704adb4f
Sha256: ead510fe46e09b9b569b556e2028e13fa1d1a03df06b67e7f9c52ef576140d7e

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/248381.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 23346
x-amz-id-2: lDKPGGmMPQtYFM22gosqyy+r0CyFJ3sjBtWFyg9ZkxfvBQWyLzLjlrutH5JTmO1DIbIskqAJ1a0=
x-amz-request-id: N89V51WGW0C49K1N
last-modified: Tue, 13 Aug 2019 15:00:54 GMT
etag: "3d4e2521d25734586b52b1cf2fbebafc"
x-amz-version-id: Xr3aUIImzs9Bb5g5PUmLPWr0H49e_HEr
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   23346
Md5:    3d4e2521d25734586b52b1cf2fbebafc
Sha1:   f9bcb6359181ad5e4433d34f50d8c6a3b51bcc9c
Sha256: bbda3ef55673c39179036c92a38e6cfcc1c3909aa84251eb47c3699082c65e85

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/aae311e0645a3b2d31adf584a64fd392.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 14518
x-amz-id-2: 9BxfNBubFtZa0nZEdV6dDS9iyHzi8eAbhhvf0jOfRvjx1TrAJ2i6LgFhqSLo40KpZGDYeGk7cRc=
x-amz-request-id: N89K3MW4FYE8XCXK
last-modified: Thu, 27 Oct 2022 07:19:55 GMT
etag: "3b98392fcea16eec602a6dc3b7dbb28e"
x-amz-version-id: SXTtAzkjFUo2nXFrxlqYtNJKZV_D4H11
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size:   14518
Md5:    3b98392fcea16eec602a6dc3b7dbb28e
Sha1:   08d00a34ba38991be58391b5af12816d0a459e6b
Sha256: 4ea88cfff4dfab03b50833fe9c2cea7aac745082c726aa0f3543d950c3d4c639

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo-champ/f40069d870eccfd5ad8f282f23b27b28.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 6645
x-amz-id-2: O5swAaunodyt4hDGIhwgWAuJCgcbjBaaUwIJlONd5taks73eL48aXqWd2RUJLio94FmIF+MnRDc=
x-amz-request-id: ND6HW3F6BX3V6C59
last-modified: Wed, 23 Nov 2022 13:15:57 GMT
etag: "5ba360de3065310fa82499a14bd5e4ba"
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Size:   6645
Md5:    5ba360de3065310fa82499a14bd5e4ba
Sha1:   f676860c48b8a708bae37be91a0fb1d279cfea11
Sha256: 8590ccdacf4d29e6c26c2d87013403613e30b49ada53de36a2767acf2be2b870

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/109265.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 9542
x-amz-id-2: S3/HDs5jKk8h5+085cl1MDsdJ3wI21GeyjtnmAoAwCjJen6XQSeraZ2xRQVfh8eqqOoa6D3gY/M=
x-amz-request-id: CJXMV9APPMZNYAN9
last-modified: Tue, 13 Aug 2019 14:51:32 GMT
etag: "cc28e785229b4ef1c52063ed0c137c4a"
x-amz-version-id: 4mMo.3FYFLuwnmZcjXaqfYsN_QOI6P6Y
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9542
Md5:    cc28e785229b4ef1c52063ed0c137c4a
Sha1:   5d3f41565423978372841b91207956e507d57ad2
Sha256: 71e1e7321cbef7a6e8b343a295946f14df3b42614ee5d29a551854d9c973144d

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/66493.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 9867
x-amz-id-2: bmy05lC0+kjJXdIeqVOOPe2/G6Ua060Dn3UF8r2TkmT+S00MSNC40HKuvdbVcDi8BGn75vlbfb0=
x-amz-request-id: CJXT1NTXB85TCKAK
last-modified: Tue, 13 Aug 2019 15:10:02 GMT
etag: "bf67202e03b392e82ccf9e4c6318119c"
x-amz-version-id: t3k0X8yPcP5fZ6WFA9hmrj506btvlCdT
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9867
Md5:    bf67202e03b392e82ccf9e4c6318119c
Sha1:   139b8412d74dae00cddc7d9b94ccbb1127585b82
Sha256: cc19dc801441029ac74c064378b359b5f2b8c73d5e724150e9e40be7ed568292

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/e96717bee64284421e7bb06a9fd80229.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 22039
x-amz-id-2: ljoDAa8qm67ahL+SLL+UXCjLNzE0CtXXvTC4jTOdUXDk/U0RzwtwXunE/YJbWgVltTs+vxFyJzg=
x-amz-request-id: SQGNRAD7KBHY4XST
last-modified: Sun, 18 Sep 2022 12:50:14 GMT
etag: "277b7ca94f2eced7435236bf9534acc1"
x-amz-version-id: DifTHmQtnRL6UbBLzjgErfVXQcMtVUhN
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size:   22039
Md5:    277b7ca94f2eced7435236bf9534acc1
Sha1:   50d3e5e19bab2bb8a73a536d657f5e7827e8ffac
Sha256: b7f77ee4f1232acde82978915928186d97de6224c09928668b214f332fa22b25

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/1102699.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 13885
x-amz-id-2: zDInPHiOqMwvj20rYB6BLPJs9MI9o7W3Y3vZ2YSA3OE1UClFk6l1Wab03Kkj4dPmQ7/0FnpPh0I=
x-amz-request-id: SQGMDTTD044NXXVC
last-modified: Tue, 13 Aug 2019 14:51:38 GMT
etag: "2babba6664f4144aa18481f33802ff1f"
x-amz-version-id: OoxUi0KI5NvfSUxAX0Mhsr7l40ATjzhX
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   13885
Md5:    2babba6664f4144aa18481f33802ff1f
Sha1:   25810b4669507147da8385c683793148b1c02615
Sha256: 5777efde3f0201c04e52accf2419cdad0a5411affd93889bf25cf9ce6e1e353f

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo-champ/c223517fcf9c5dab03747c3e0d78c581.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 19917
x-amz-id-2: /cEtoFKs9O7c7hiOOYTNkYCddpLI/XDk7MekcDHxkuD90kFC7qoRQPG81I1UpjHEdYvfYg2sTLc=
x-amz-request-id: CJXVXEVQ9QTWJMZB
last-modified: Tue, 03 May 2022 12:14:47 GMT
etag: "97b2806ac7b36e55677f0160e9874173"
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Size:   19917
Md5:    97b2806ac7b36e55677f0160e9874173
Sha1:   7ff9b27d1b07f84e5f3c76bffc3b75d67edd326a
Sha256: a43e120f28ed038c7a5325de2021da2ba5262dfe89973475e99538e6badeedfa

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/12725.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 10317
x-amz-id-2: Vk4KQNtjbb1hWJ/kMkVy7obnlVOa7yLAvTYiNHjmdfPL+edz5I/D8MuClJnJVSAYI7alsMNr3Hg=
x-amz-request-id: CJXJE2X34SGPDFN1
last-modified: Tue, 13 Aug 2019 14:52:41 GMT
etag: "22be105820795339b6895b3be7970b81"
x-amz-version-id: q5G4cwFn2C6J5bHOmlv3BNU2nSdobIKl
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   10317
Md5:    22be105820795339b6895b3be7970b81
Sha1:   1d73ba6ac1e1f800362199b2967b681c02c275f6
Sha256: d62a9081bd6ae0ef5a3862973f644d06e1ff6a51d319808ebb9d7c502bdf4bb6

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/12611.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 15389
x-amz-id-2: 7rrPxEZC3YF+7FsZZloHb79rl3VJGXNM/oi7+ibrdUv+c2qQfy2POOFGEDxlm2hQiGNR+XqWC5U=
x-amz-request-id: CJXJ79DMQ3J13Y31
last-modified: Tue, 13 Aug 2019 14:52:37 GMT
etag: "d2b784bd4bc8d90af31b195fd79435b1"
x-amz-version-id: XIumJRq7mqmzRBSYu1qoLWaBoT.5st_N
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   15389
Md5:    d2b784bd4bc8d90af31b195fd79435b1
Sha1:   a1525318ef3852d3005cb12758813274d76558fa
Sha256: fe6eb70bcfcde225eb8b466888d871c1459d8178daf03681eb41276177a12edd

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/12673.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 9867
x-amz-id-2: 3hq7lhdHQlu2xDbfb4GEJNFpRI0wt/yXthhw5CrPd26s1vP+2lt71VaZ1MWLirAEYKoXnoeXNjs=
x-amz-request-id: CJXP9HQSWWPF1HZH
last-modified: Tue, 13 Aug 2019 14:52:39 GMT
etag: "bf67202e03b392e82ccf9e4c6318119c"
x-amz-version-id: MCPr9iDGt.b8P8XGXSgPafXm03lbpKnh
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9867
Md5:    bf67202e03b392e82ccf9e4c6318119c
Sha1:   139b8412d74dae00cddc7d9b94ccbb1127585b82
Sha256: cc19dc801441029ac74c064378b359b5f2b8c73d5e724150e9e40be7ed568292

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/12717.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 9907
x-amz-id-2: MVfKHUl9gGKJnIzREGE2C2MMxr0wL+hM6w97vFvcYy+T5AJDg8XfO0rM2BkwXtVMLhUBUQ1FDG8=
x-amz-request-id: CJXQT4SW7W7B38WN
last-modified: Tue, 13 Aug 2019 14:52:41 GMT
etag: "83c0c87ba4a36ccc924cb9b1ef39fbe8"
x-amz-version-id: unVF27z6YkdM9Ho.dDDhYKrgR4P4PIq2
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9907
Md5:    83c0c87ba4a36ccc924cb9b1ef39fbe8
Sha1:   b5fb0d2fadabf5e5b5b527530c92d0dcd905094b
Sha256: d479b362332a308577a464c9dd0520a4fb7c06ae86e045dbb0cc4cac84e78e48

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/dde3733bfaa4da13ac79715b8ff79eaa.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png, image/jpeg
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 12343
x-amz-id-2: 3FQ612Nosn6A+wKGZF/DCBbRig4lNAdea67eNuiHyt4qRoX9l99BsMdE9T62CGVrWwPhYYlsHuo=
x-amz-request-id: CJXXNAKCNEMB9PKB
last-modified: Mon, 13 Apr 2020 04:50:29 GMT
etag: "c02bfb06e3b2379dc2e1049b80add7a6"
x-amz-version-id: UaTVn0EA__Wqhyj0vGDyca3FqTTLHaVw
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   12343
Md5:    c02bfb06e3b2379dc2e1049b80add7a6
Sha1:   38d91b2be9ebc0506cf37cb15623c4ba2f4505c2
Sha256: c4812d394fa75466e90f29d4e63dc7e5defe69903a81e0237b543bbe457ecb68

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/12399.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 9000
x-amz-id-2: biqqmAqj34jlGNX87T/yK+Gz7vHJR1BgPe6XK7xfnj2KV7QCPWmwUflrrLo8kcmywOISOQFU/3s=
x-amz-request-id: SQGXNAVW1PEKMYXW
last-modified: Tue, 13 Aug 2019 14:52:30 GMT
etag: "32339104eef9c139456876aac5db4ac0"
x-amz-version-id: jKLxDzPpZOj9dvlg.OWCuKZUnKx8UH0K
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9000
Md5:    32339104eef9c139456876aac5db4ac0
Sha1:   b32e3d8bd884b6b4950ea18673b97f9f79a5d911
Sha256: b6087efad30afd309880977f0bcd98db6b6253e57ea247f985fd646d8de3162b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8138df1a48103759480c088328c311d0.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png, image/jpeg
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 12975
x-amz-id-2: 5w6qhThj6q9s1H7i9EhxEweSOLSKp19rXX0zHwTr+5Tz5U0lvpTyVp9AT0GN3V5nWpBw/sDy/d4=
x-amz-request-id: SQGWF443F3X9Q8V3
last-modified: Tue, 07 Apr 2020 11:34:04 GMT
etag: "7d1306ba7578d80256cc8731775b3793"
x-amz-version-id: 3.5NCrKinmvPmbgOsVTdmSv24.qYQGb8
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   12975
Md5:    7d1306ba7578d80256cc8731775b3793
Sha1:   71eea647539586491b20df16fdfca64ecfadacfc
Sha256: edf2b0aad4c4d08ac9aae0e25492f374b094eed22ab32aa0bf388d8f70e5aaad

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/12773.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 10658
x-amz-id-2: 250vXp6KyfUhhOBdZXsZOO+MFAlOCXGSLWFtKu7exXMURL+4ix6zY+toP45/PXCGQ7LuuPX6fK4=
x-amz-request-id: SQGP9M525PBGYRTZ
last-modified: Tue, 13 Aug 2019 14:52:42 GMT
etag: "53f2adb70f1469dfc435c11fda04ed35"
x-amz-version-id: 0T2VY4.Y0edivKdiUWMt1rjCtuVXbZu0
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   10658
Md5:    53f2adb70f1469dfc435c11fda04ed35
Sha1:   9fa9cefec6529ce9b727195748dac881eb64dcd4
Sha256: 357d77b60909ca798a03a7dec1283788f36b114f67ec990a39fa7bd63c56e540

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/defaultlogo.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 2713
x-amz-id-2: QucOf36/OUxae/iO5QiK6twQJzlq87EEVCqNy0jgQXYzvvJmSTY3T/52P9V6Gjp7bm5e5jGSKcs=
x-amz-request-id: SQGJPPPTYVKV0VWW
last-modified: Tue, 13 Aug 2019 15:13:43 GMT
etag: "72c91e676105dc1628e8a636554bfcfd"
x-amz-version-id: ygHOXyYx_9gTcW50FeqErA8BsSDNEhuz
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 55 x 54, 8-bit/color RGBA, non-interlaced\012- data
Size:   2713
Md5:    72c91e676105dc1628e8a636554bfcfd
Sha1:   c0162ae779e4000be14b99e96981ff309a41b0ee
Sha256: d10053f91feb4cd1a54f46fdcb8eb5193e4396a09e6341458edcf2f38ada718b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/1534941.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 14032
x-amz-id-2: ApB/AF4Mx38Laiaf8iFyFKRn3isPs4YIv8/t2Zb9DeehZbEQz8298G5feookqCXhnKfRmn7H47Q=
x-amz-request-id: SQGG46VC28SWMHPT
last-modified: Tue, 13 Aug 2019 14:54:24 GMT
etag: "022b48206fce7e8605554cd522342b56"
x-amz-version-id: srEB3jTXomduaDbcWqQbJsRZb7AZ1r5j
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   14032
Md5:    022b48206fce7e8605554cd522342b56
Sha1:   9cd144b6f28d9fe5a199551e2aa398305573c1f7
Sha256: 6280d60a41eb60b47216f863b5e22553ec8664554f5218464fe100b719760307

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/ca907a285c97d566427bcb602d1ec244.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 16788
x-amz-id-2: QcSuIJW/wrDlVLH6Uix5pVwt5/gkI7vX9NHfNbsXqM0S855piFFPXCta2EW9sq1EqaYGpswFYI0=
x-amz-request-id: SQGSRWWCXJTQ27VA
last-modified: Thu, 29 Jul 2021 00:30:25 GMT
etag: "19f7650db104deabb7c338f7cd0ab343"
x-amz-version-id: RWB0pWNWGtGJ3HtRN2veuZ_8KqDm9O4H
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   16788
Md5:    19f7650db104deabb7c338f7cd0ab343
Sha1:   6a301cafc0d7990b9fc381b733c4b1dcc91a5258
Sha256: e8f5a1d2c3db0395380684a9e52261587530709b4dfe76b9acabb548996240f4

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8280.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 5722
x-amz-id-2: 4y126FT09P+6k0Jx+12VfpxmsY79/7z16CIx4a16XaHm1s50QWh2s9q2NUnpcHcejGQmiUutcpo=
x-amz-request-id: SQGJYD1F8QWKRTPC
last-modified: Tue, 13 Aug 2019 15:11:53 GMT
etag: "0b77d2a00dd810c7ac2fedeef044d85c"
x-amz-version-id: YqoSIVmPdqhPenqTmxh5VMyTkKB3G40I
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   5722
Md5:    0b77d2a00dd810c7ac2fedeef044d85c
Sha1:   7a189cd97defd83bbfa27e162846a843b6cc104c
Sha256: cfcddf2cdf8c130ab3f5954261880c1cab780ca0bd89a0028b7953f7036faf58

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/bfbc012e5e02c687134e3b35c72db789.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 10929
x-amz-id-2: iP9nRP0Vcutp6hyxKCbUbxtDeBGtVxE39Ugl3+guxQ+KqymB40vUATMVQ3wyzC4hW/TIdBQm/Z8=
x-amz-request-id: SQGT4TH274GED3D6
last-modified: Thu, 15 Sep 2022 00:24:15 GMT
etag: "f78008b4dba5fbdd76c5864e391922fd"
x-amz-version-id: 0omQT9dZD9f3Dgm3IM.3tCKb6EPOTnPy
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   10929
Md5:    f78008b4dba5fbdd76c5864e391922fd
Sha1:   9ed88f6c1463c27568daaf89f00093817204c32c
Sha256: 2968c64bf110ab7798374620aeca0c69c5879ae06b27bed6487481be603d2a06

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/4fb2910ef6d4f8ad984f2aa4bc28b610.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 4453
x-amz-id-2: 6Qnrr6digBGeUY8ZKNb8yu8h2VvCbPjhWSGFfnHFg8fBw397L+KeAqO4ItDpeGqxPgNAZApZN2s=
x-amz-request-id: SQGTE7HMGWRMNNPZ
last-modified: Fri, 20 Nov 2020 07:12:06 GMT
etag: "f988271bc96127f9b3d88e497a36f659"
x-amz-version-id: sXXI9fYJFn9.uV43OD2m4Tlu3BCVNrey
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   4453
Md5:    f988271bc96127f9b3d88e497a36f659
Sha1:   e8b95eeb19f378cdb46404cb1f1487d049f7cda0
Sha256: 4b92c8a1d55693ebe407159d479ac304a937148297688f5e1fb1a0fcf0a30f11

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8302.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 10239
x-amz-id-2: yrCToOupH78bInrQPnLjCSPbMwkBrJKT49xiUrdxNoHxgxque4NGKgX5yovBaBhMV3IjeTVg8rg=
x-amz-request-id: SQGV52EXBJAG84H6
last-modified: Tue, 13 Aug 2019 15:11:55 GMT
etag: "c412e4a3472b3b4ff141cbb5a4d4e00d"
x-amz-version-id: bhWp9Kpdqccpz1uciGyzRinTYJCrgIYg
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   10239
Md5:    c412e4a3472b3b4ff141cbb5a4d4e00d
Sha1:   6f30fa997f13a7c530731dceb713fa694691a571
Sha256: b11f77e3bce7a0f11d9912713e5e47acaa40d7b736990418c0627bbd5913e49f

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8278.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 6876
x-amz-id-2: gVhRfQBJXjLzJBFZP3fH3gOABcCRBI/9dchZrjkuw6rIQX0hToBBuK3PbiPoYiQV/i+irkwba6U=
x-amz-request-id: SQGKV95W9XX6M8YA
last-modified: Tue, 13 Aug 2019 15:11:53 GMT
etag: "1c3472f60bbb99289443419661bf908a"
x-amz-version-id: nrNsUvH37gUF42hDgHUc5jUJgkhIngp2
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6876
Md5:    1c3472f60bbb99289443419661bf908a
Sha1:   fde844b3d34047f05a2dbb32377be6f59deef281
Sha256: 5dd57574232a94a49573b3ee133990f9e18a5b24a9ff0e52971a247414af7aee

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/8252.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 15002
x-amz-id-2: Us61+XRqd72P2Jasbhr+KmZeIFfXSauWVCS4roSY3nVFeu0GHJCMesPkW2/L7cLsWhj6Xxpe1bw=
x-amz-request-id: SQGREAXHJVNDJ00P
last-modified: Tue, 13 Aug 2019 15:11:52 GMT
etag: "c79ed33b441366357cbb7b86c76138ae"
x-amz-version-id: 93aXrCOiVkDKK2iFOOGDe8OEypsPSmTV
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   15002
Md5:    c79ed33b441366357cbb7b86c76138ae
Sha1:   4b425b21bb818a7ba60e147d946a77adeca58f9e
Sha256: 91803084d9ded61349eed417af107f25946ff82cd51eb8d8418a364c133df133

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/7ec1ca4a6d26b7d916221af5fb44aca2.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 3913
x-amz-id-2: AkKTM8X4WWtXAXAA7pYYwInEISlV2NtKqyPya0KAEwgytqLkh8NMwzGg0lNamAMdUp3qmHB/Xjk=
x-amz-request-id: SQGR9RJN8R5BR0E7
last-modified: Tue, 13 Aug 2019 15:11:37 GMT
etag: "7ec1ca4a6d26b7d916221af5fb44aca2"
x-amz-version-id: obj6PGNVQlqY22Egf8V6PkihNbDAu8G6
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   3913
Md5:    7ec1ca4a6d26b7d916221af5fb44aca2
Sha1:   316a6abfc3d7098614bac48eaa1716f326e3d403
Sha256: 1c2ffb956e4811a676c4d3cfbdea537850ff76108780029f5eaf4eac0df8e4d3

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/logo_teams/cae52e19a12daf03beb54b87a7ae6bcb.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1920
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png, image/jpeg, image/tiff
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 8669
x-amz-id-2: kfR/8l7+OutCu6t53CWh2N7jd4tw/EVs8vFFluSx49VhaX5tmRgHy6al+nIetKryRS1ohAkX+0w=
x-amz-request-id: SQGRAHK7MGYTDDZV
last-modified: Mon, 02 Sep 2019 17:43:59 GMT
etag: "cae52e19a12daf03beb54b87a7ae6bcb"
x-amz-version-id: Mgn4AAWkpTvxQZ07vVXoZbCcp.7gF8xO
expires: Tue, 29 Nov 2022 09:42:37 GMT
cache-control: max-age=86400, public,max-age=120,s-maxage=600
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   8669
Md5:    cae52e19a12daf03beb54b87a7ae6bcb
Sha1:   685c316cf3a263fbfa710274abe82187df1b4277
Sha256: 3413f503cd5e8d06adeae4a8f9e2ed244483bf19f3c249802c455662fa602a39

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/css/9b8abd5c.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 1111
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-457"
expires: Tue, 29 Nov 2022 08:29:07 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4411
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6523), with no line terminators
Size:   1111
Md5:    cdbaaf5fff8558c5e407fbe0eb89c030
Sha1:   ffdd0676eb846e7d04c451855a0643b4715f9677
Sha256: 55d1fa8ea0567abe461f6b5b19c8339060d55e3ec15689dd3e2c57eea9f30f68
                                        
                                            GET /_nuxt/desktop/default/css/bd52bd99.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 869
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-365"
expires: Tue, 29 Nov 2022 08:29:07 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4410
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3419), with no line terminators
Size:   869
Md5:    ed4b507424b3352f5886c2d02cf2911d
Sha1:   97fdc82a948d4aa35ae84bada1ff91e21df85616
Sha256: a354b012c9894642831ce1cdddc8729a3046ff5868c7dc9d02063bedae8a5c98
                                        
                                            GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-1c6"
expires: Tue, 29 Nov 2022 08:29:05 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4412
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1429), with no line terminators
Size:   454
Md5:    b2da62cdf5bfbc147bb731185c4b5a89
Sha1:   24329f11210b0d22af527e98744878de232a37c6
Sha256: 29821b1f08fc5da843711c4abd38629bbcb92ffc3d9cb023ac7eba9446e78488
                                        
                                            GET /_nuxt/desktop/default/10be24b4.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 16797
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-419d"
expires: Mon, 28 Nov 2022 12:13:34 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 77352
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (41008), with NEL line terminators
Size:   16797
Md5:    410280e25f04f1d8d73a517606dd36ab
Sha1:   260502a08e32e6012e6cb7dc021c5742c7c76a47
Sha256: e3f9cddd15929cee3de52da6870e9db0d6e5b35d65ddce79ea39bd892be4b972
                                        
                                            GET /_nuxt/desktop/default/css/7ac812ef.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 1232
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-4d0"
expires: Tue, 29 Nov 2022 08:29:07 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4412
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5224), with no line terminators
Size:   1232
Md5:    17a9c8e957647c829734c3a213e1f98d
Sha1:   8d7e27f3ebb3d33ded8adbe405d669ec3b1898fa
Sha256: 4b1948b2ae0e414ac2cdce776c25569c93cdd7c6d9c7a730a20ffc159bde5f5b
                                        
                                            GET /_nuxt/desktop/default/css/36c9343a.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 912
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-390"
expires: Tue, 29 Nov 2022 08:29:25 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4403
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3693), with no line terminators
Size:   912
Md5:    5c1f98ae0c4e325b878a181af6405c4b
Sha1:   ca4e1207330603ce7c9fb99bf1ee9028cfc9e694
Sha256: 19fa9eea89607ed841d57aa63c9d8fb7193384741daad7af9007fc1dd17ee618
                                        
                                            GET /_nuxt/desktop/default/css/cefdc903.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 508
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-1fc"
expires: Tue, 29 Nov 2022 08:29:14 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4403
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1570), with no line terminators
Size:   508
Md5:    a3f44b9cf6eae00155a5b6dada606eb7
Sha1:   daf2d58d178feaf05c559465c176e94cbb50050a
Sha256: b50cd24c608b0e6118b1d261cae104201fd71d2467a86ff1acd69f3c120d90f5
                                        
                                            GET /_nuxt/desktop/default/d48666e0.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 1823
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-71f"
expires: Mon, 28 Nov 2022 12:13:52 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 77326
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4909), with no line terminators
Size:   1823
Md5:    b28279d4d3a1e4a85fd5dfac0c233689
Sha1:   2eacbb1e598d0ef5bedd0ae060da26e4e6634411
Sha256: 097c110b1f013b236dbad88e7903a058ac6fe7aeaa2742e9f08871aed4ea8e90
                                        
                                            GET /_nuxt/desktop/default/css/b0e615fc.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 1999
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-7cf"
expires: Tue, 29 Nov 2022 08:29:07 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4411
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18717), with no line terminators
Size:   1999
Md5:    21ed04951cc4c08f5ff7112147816b14
Sha1:   c5a2d55ee42d1858fab461bcec83f4c8dd2757f9
Sha256: 45a25eb0863cdecf6de3c58b1c7f6944a4071aaa7bfbf1a8ea94b209de917f80
                                        
                                            GET /_nuxt/desktop/default/css/d6f1e358.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 1005
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-3ed"
expires: Tue, 29 Nov 2022 08:29:07 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4410
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4394), with no line terminators
Size:   1005
Md5:    b88380c09a5e84ca73b95438ca2675bb
Sha1:   f4aa1bba2c35d56d26af9eb17c95c6a2b18c9a5c
Sha256: 6831fdb0f7ed6c60f9681b868ade39481f0d495bcfeef941d6ea01571eefae7f
                                        
                                            GET /_nuxt/desktop/default/6162a2cf.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 5353
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-14e9"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1087
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19032), with no line terminators
Size:   5353
Md5:    970ab0c7a03ad1698ae1c0cd63d1ed7e
Sha1:   8767720db8f172bd341617a4b89d6879f14584de
Sha256: 0f65d96c161b504ccfa7b0f44ed157e99189790d397e5ee9bf4900b66ed0140a
                                        
                                            GET /_nuxt/desktop/default/13205003.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 6912
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-1b00"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1087
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23236), with no line terminators
Size:   6912
Md5:    3e429093f06c5fce1350ac2c83270812
Sha1:   a9f94d492692067c359b9ea0c0b76326f74464f8
Sha256: b50762b050d205928b99b6f60c393d2d948afb5e7ceddf1d325076b963ae0369
                                        
                                            GET /_nuxt/desktop/default/af1c8223.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 875
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-36b"
expires: Mon, 28 Nov 2022 12:14:50 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 77268
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3228), with no line terminators
Size:   875
Md5:    200c4cdec3af9c120be4a05adf38c736
Sha1:   ff196fbe19a9caf3600ed564ebf7a7e1537961b5
Sha256: 78c8cfe18b52c24c3f474a841b4d02d4af6b360e421be56e48968b888510c3c3
                                        
                                            GET /_nuxt/desktop/default/d0f666c8.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 8792
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-2258"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1091
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (37193), with no line terminators
Size:   8792
Md5:    7d57ccdb82df124f6b5cdf22fa235ffc
Sha1:   145e60904996682b651a5dee64e617bffd319378
Sha256: e1672c00953261b4c09a97e385e15ef98c85e1f4980fa9466a5a1f8bea799978
                                        
                                            GET /_nuxt/desktop/default/css/0acd77c8.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 3779
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-ec3"
expires: Tue, 29 Nov 2022 08:29:06 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4411
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21440), with no line terminators
Size:   3779
Md5:    c7534076f00cb11868867ff1af55fc0f
Sha1:   a290c282b5e18c219503078f1fddae57e8063554
Sha256: c913faf9823918ae8bfacde8cae79664ca8465312c6fd007b10555e7b5ef21fa
                                        
                                            GET /_nuxt/desktop/default/3fbabc56.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 322
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-142"
expires: Mon, 28 Nov 2022 12:14:28 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 77323
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (412), with no line terminators
Size:   322
Md5:    22d4aaf443dd1bf604a2c7c32309143f
Sha1:   d9119fde80c905f45a559dd3c8466f7924c07bb7
Sha256: d52b9c46da9db489a61b77cf4e2c203fb1fe2491f7b073a000f00a97a97e87e5
                                        
                                            GET /_nuxt/desktop/default/8c5799f6.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 11840
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-2e40"
expires: Tue, 29 Nov 2022 09:24:44 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1074
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45072), with no line terminators
Size:   11840
Md5:    7b6d828504139fcecd9f79587efcce72
Sha1:   bc8063f5395a8f9941aef4e8049d8a88f337a2da
Sha256: 1f5419135884ad2ccb0527565e539cafdf67d4e4d92aa293782761ce3112f4df
                                        
                                            GET /_nuxt/desktop/default/css/2c231180.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 1205
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-4b5"
expires: Tue, 29 Nov 2022 08:29:14 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4411
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4693), with no line terminators
Size:   1205
Md5:    42050842d8611900257d256b1e7184be
Sha1:   6245cdbffec696e58303f811d4aa287814721101
Sha256: ac16b90a45222493ad4c68b1061166e738048b7d86967f7d5f66b1074b9b649a
                                        
                                            GET /_nuxt/desktop/default/b3c7b0e4.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 4091
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-ffb"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1087
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18732), with no line terminators
Size:   4091
Md5:    e8175d5da0f599ca319e09a37c585768
Sha1:   5c5df8715c9f09181fc78a3bb05b67a8291ac256
Sha256: 6cf53c05e4a798c260bcf768c634ca69b51bfe2a7b1de26dfb942cd6eeb87bba
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 06:19:49 GMT
expires: Fri, 24 Nov 2023 06:19:49 GMT
cache-control: public, max-age=31536000
age: 357768
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Size:   9628
Md5:    d9ac47c7e500fb7083b8d595eaf6fe12
Sha1:   112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
Sha256: 495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
                                        
                                            GET /_nuxt/desktop/default/400db9d4.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 13796
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-35e4"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1092
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size:   13796
Md5:    0981120156e07b7d14b0aac644f12758
Sha1:   17698a7e5b04d36274738c427fb125ae7877d43f
Sha256: 7ded1a69fa541c32606a0022dd37b388782fbae90bdad955d42d0939f5a52b42
                                        
                                            GET /_nuxt/desktop/default/cadf80fc.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:37 GMT
content-length: 7926
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-1ef6"
expires: Tue, 29 Nov 2022 09:28:14 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 863
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32108), with no line terminators
Size:   7926
Md5:    3634e977a0b41a4407c7d937127179f6
Sha1:   3ce55603a7c2e4b13aad9ab3cbcd33848d00d5cd
Sha256: 8011b4e8856344a9b1eb075647c765b9bc523f83ab5cc3bc8e763079e283ab4e
                                        
                                            GET /service-api/LiveFeed/GetTopGamesStatZip?lng=us HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 1754
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (5127), with no line terminators
Size:   1754
Md5:    384b1f8f5bf34783726df5fd8a5da111
Sha1:   f49eb81f8ec7eb46efd0e6b3eecf93f9a48b4c09
Sha256: d622419a59dbe5c97a9206570f4597ff9d693a6a22774122c8d63fdc7b654de2

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/96ba7873.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 1430
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-596"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1090
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3463), with no line terminators
Size:   1430
Md5:    5de992eced3fddc163afd6358d1f0a47
Sha1:   594be8444b2f2d15f0552f6527fd8a8a60ecce2b
Sha256: cdc1505eba8da3194a65c0223c02c328d046d6df9cdc7ac13d5ac83614b211aa
                                        
                                            GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=us HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 704
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1290), with no line terminators
Size:   704
Md5:    f84921114aef68f37a2679049fc53cd5
Sha1:   d79ccb872b38ddaaaead444f915ba1c6d57590f5
Sha256: 10702987844c9eafe2b96681b6b2d3bd172e81cf59f1d7ae64b99ef14c49dfd1

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /domain-api/api/v1/domains/lite-1x86926289.top HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/vnd.api+json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 86
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   86
Md5:    6cfdac3a8d33b2508c9406e2ab1f3b5c
Sha1:   e3ac8dd93bdb3e0740eaaf7c20ce1ed4832bd8ed
Sha256: af551b631c9a3990820bad4fee5ddc2e7ce66907c2e798347b77ba2a4935f02a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /service-api/LiveFeed/Get1x2_VZip?champs=1938952&count=100&lng=us&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 88
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   88
Md5:    cb41a88ff43bbf14302fe7266a35d76d
Sha1:   4c0c7d1c22c7a6c4c661df8966d9154536fa4313
Sha256: 2de5c51dc3d129eb5567c2f67ea3afb49535ea570887202c1ab058570fec4270

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=us HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 588
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1469), with no line terminators
Size:   588
Md5:    fba012f1d5eb29080d4585bc0e42b945
Sha1:   05ed45425be18ea9726dde6e755367999d3665c3
Sha256: 2329e5d4c99c1dfbc4b6f8e5fdd357aadcd2868726dd0790eb59875baffbca92

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /web-api/user/secure HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 59
server-timing: dt_285;dur=48
set-cookie: is_rtl=1; expires=Tue, 28-Nov-2023 09:42:38 GMT; Max-Age=31536000; path=/; HttpOnly tzo=3; expires=Tue, 28-Nov-2023 09:42:38 GMT; Max-Age=31536000; path=/ disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly fast_coupon=true; expires=Mon, 05-Dec-2022 09:42:38 GMT; Max-Age=604800; path=/ v3fr=1; expires=Thu, 01-Dec-2022 09:42:38 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax _glhf=1669646334; expires=Mon, 28-Nov-2022 10:42:38 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   59
Md5:    8687594df08a2624cb096728137b6547
Sha1:   9af1cab0d04a95d25d15466b944ee3678fee3a99
Sha256: 1a34ec6f98fa6f5698885dae2e11420d868aae8a400af559dce3ff1c253c176d

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /service-api/LiveFeed/WebGetTopChampsZip?lng=us&gr=285&country=137 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 88
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   88
Md5:    cb41a88ff43bbf14302fe7266a35d76d
Sha1:   4c0c7d1c22c7a6c4c661df8966d9154536fa4313
Sha256: 2de5c51dc3d129eb5567c2f67ea3afb49535ea570887202c1ab058570fec4270

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=us&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 8448
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (36847), with no line terminators
Size:   8448
Md5:    2d4f4248226ee7c3863aa9b0b271ab81
Sha1:   b24e4ecf2f5f66ba356a8ba7edce6794da0bd4f5
Sha256: c195260893c6fcbc9ce96f576b10adf67227bece7c90bf43ff6aff9a85f56a7e

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /service-api/LineFeed/Get1x2_VZip?champs=1938952&count=100&lng=us&tz=3&mode=4&country=137&virtualSports=true HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 9585
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (62916), with no line terminators
Size:   9585
Md5:    08bec101c655ab0a16ac01192239abd6
Sha1:   c56fd90c24e3e3f4bf26e621af2d485db9283f03
Sha256: 5b9cbaa470aceb16e44140ab97c453e931204ecfdebc16112f658cb78f3ec63c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=us&tz=3&mode=4&country=137&virtualSports=true HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 8596
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (43905), with no line terminators
Size:   8596
Md5:    56eb1383d310d5425dfa1635f170e464
Sha1:   9f23dfee826c89e99ba4fadd0301a329960bac8e
Sha256: ca5cd2e7c11c0ace5136605bfbab639a964e3dddcca1926935ec7ee05f3dbc5c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/c3fc1a2d.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 27035
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-699b"
expires: Tue, 29 Nov 2022 09:24:43 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1081
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size:   27035
Md5:    dabcffea30236b87442ad0fd66b19fb8
Sha1:   073a42074a28751dfadf2f405358d67b3c171306
Sha256: ffc9f8df400b7227eb76505b281d2fa81b44c3459b439315d6b943d1cd7b4599
                                        
                                            GET /_nuxt/desktop/default/f66dc1dc.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 6437
cache-control: max-age=86400
content-encoding: gzip
etag: "63831de4-1925"
expires: Tue, 29 Nov 2022 09:24:44 GMT
last-modified: Sun, 27 Nov 2022 08:20:52 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1075
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18551), with no line terminators
Size:   6437
Md5:    b80bdf5b11452bbf92dc664c8d0650d9
Sha1:   2dd9a80f3e8948401e9a0812e7c46c9f234046e7
Sha256: f8a468bace4ebc0d402a2f4aab96202f6524c2164faa47fc0a26eac1335dcc63
                                        
                                            GET /checker/redirect/stat/run/ HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us
Cookie: platform_type=desktop; SESSION=ce429662c43eb0170ee084bfa07f1e28; auid=sv0OpGOEgoe0NF9hAxk8Ag==; lng=us; window_width=1280; is_rtl=1; tzo=3; fast_coupon=true; v3fr=1; _glhf=1669646334; che_g=aa76d2f6-726e-aac7-6777-050b35122a4e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   49
Md5:    b7a9075de81cdb1a9fa74fa71b5126dd
Sha1:   9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
Sha256: 86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sfiles/games-images/ico-logo/white/desk/169.svg HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 72004
cache-control: max-age=86400
content-encoding: gzip
etag: W/"f6505dc3eba72dc86dd6f5d3ad3783e6"
expires: Mon, 28 Nov 2022 14:21:34 GMT
last-modified: Wed, 16 Nov 2022 15:19:41 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-meta-origin-date-iso8601: 2022-11-16T14:16:25.000Z
age: 69680
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (34355)
Size:   72004
Md5:    652a248846360cfc753157ac135e3833
Sha1:   546906b1e3df5ce7a3adefd3fcc937e20be9c3d2
Sha256: 10ccd9e4e374dbd44ba53c31bc581f964075da48cb728a07256e13839d8cc5b5
                                        
                                            GET /genfiles/cms/betstemplates/bets_model_map_short_us.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 533
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"12e318b6709e2d8e098ad6ebd03cb528"
expires: Mon, 28 Nov 2022 09:42:30 GMT
last-modified: Fri, 25 Nov 2022 10:58:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 128
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1159), with no line terminators
Size:   533
Md5:    9a8d7306951be377bd1eba977638a63f
Sha1:   8fa29dc9b2b97412c500a8ecb3a19345844ccd1e
Sha256: e310196f47b1dfe2e3d19be8b17f4df9fabd11ec3dca234002a0b0646cddb5d1
                                        
                                            GET /genfiles/cms/betstemplates/bets_model_short_us_0.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.254.252.212
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Mon, 28 Nov 2022 09:42:38 GMT
content-length: 3456
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"b707d91b97881a24d3622b36b6d6f1e2"
expires: Mon, 28 Nov 2022 09:38:00 GMT
last-modified: Fri, 25 Nov 2022 10:58:11 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 399
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12621), with no line terminators
Size:   3456
Md5:    70549a52167360ba4bb89c287f5f5264
Sha1:   af3e3c426fa8f70d472b9ea30d939d82c3ccf63f
Sha256: b6da84b0e9f5eee980ba2e50cbe4f4a38499ba35738d4b8cf514d097d8eb7c60
                                        
                                            GET /genfiles/cms/betstemplates/bets_model_full_us_0.js HTTP/1.1 
Host: v3.traincdn.com