189937.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: 189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 04 Oct 2022 13:47:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 04 Oct 2022 14:47:12 GMT
Location: https://189937.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g8mZNDzk5%2FJcH543x4x1plc70CYUCYXSOM4xgzWNe89K11wUks7I84%2BE52fKJr2E90I9oFC%2FLKEjtXwyCJpAr4zhMdQncrkd3%2FwRFKmjXcWji3gCxHztqJIr8CDL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754e5e3b4c9eb4ff-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 12:52:53 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HKxjuUlT5Qql5kNp02z8dKFNlTaDwpCgkIIhd9yVcwASBEpGjjg7Qg==
Age: 3259
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11909
Expires: Tue, 04 Oct 2022 17:05:41 GMT
Date: Tue, 04 Oct 2022 13:47:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74134730f642b6f6dfeca3ecc61a329e
668914cc93cceb123d199a45df13ad764704fa84
d681a4c2e20a6019c7e2d980cbfa77b34db9356899099296c3b8b4263ca5fb5f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D681A4C2E20A6019C7E2D980CBFA77B34DB9356899099296C3B8B4263CA5FB5F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13151
Expires: Tue, 04 Oct 2022 17:26:23 GMT
Date: Tue, 04 Oct 2022 13:47:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /VHokiXbn6diLdYNgp/i1Sx9ILEdAI+aQbb23nSdmkX4H9d+ybsWIuUy+v51kK315A/o5MSAvq0=
x-amz-request-id: B0RWCGNGN82K7STC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Oct 2022 12:54:16 GMT
age: 3176
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 13:47:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 04 Oct 2022 13:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 04 Oct 2022 14:17:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DZ0xDpCf7iH9yD0b6omiOHMHUt9oFYnwUqUxYqOr19v3xmAsmfsqMw==
Age: 1060
ocsp.digicert.com/
200 OK 471 B IP
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2880
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:47:13 GMT
Last-Modified: Tue, 04 Oct 2022 12:59:13 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0lB1VRzgYuJdSMQc7OuOfQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3hEdxV0VdPKgnPwXOConghMo7O0=
cdn.livechatinc.com/tracking.js
200 OK 26 kB URL HTTP/2 cdn.livechatinc.com/tracking.js
IP
ASN #20940 Akamai International B.V.
Hash 6d3a2ae40bc8b1a9d4db4491a8b8a2de
586a0476415b81afe725bbd9ab93052222f56a2b
68432d22583705e7515d896d46ac76e5962b6cdee4b2ffb24099e6abd54fc924
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 03 Oct 2022 08:52:45 GMT
x-amz-version-id: ShWf3uxOW76WIXrfmBNYEunJ4VXa8qrD
server: AmazonS3
content-encoding: br
etag: W/"76bb2b42910688967d67aa5519646e5d"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: rn7s_tBh0iAmVniiyguB1enwQ-YRMXK5bH3Zd6OV5vDOdHRsEY6Unw==
content-length: 25677
cache-control: max-age=28800
expires: Tue, 04 Oct 2022 21:47:13 GMT
date: Tue, 04 Oct 2022 13:47:13 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/get_dynamic_configuration?license_id=12162111&url=https%3A%2F%2Fwww.189937.com%2F&channel_type=code&jsonp=__km69y4aa6dk
200 OK 264 B URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_dynamic_configuration?license_id=12162111&url=https%3A%2F%2Fwww.189937.com%2F&channel_type=code&jsonp=__km69y4aa6dk
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with no line terminators
Hash 28e81146af62306e1665289fa3bc96f9
f91a3de5d53cc74e0f273e798cc43f89c5f3179c
b7d46eb07877d02ef17054590fc9a09297bf492e2f496c6b5164c4769b2a261a
GET /v3.3/customer/action/get_dynamic_configuration?license_id=12162111&url=https%3A%2F%2Fwww.189937.com%2F&channel_type=code&jsonp=__km69y4aa6dk HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-security-policy: frame-ancestors https://www.189937.com/;
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
x-frame-options: allow-from https://www.189937.com/
content-length: 264
date: Tue, 04 Oct 2022 13:47:14 GMT
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=12162111&version=918.2.2.2038.346.73.24.8.4.1.3.4&group_id=0&jsonp=__lc_static_config
200 OK 1.3 kB URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=12162111&version=918.2.2.2038.346.73.24.8.4.1.3.4&group_id=0&jsonp=__lc_static_config
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (3496), with no line terminators
Hash 8c4be9114e224e97505e14d2f650b66a
e84f13ceef9af87da338eb2051cc57c140b6de05
396bbbeeb2dd871fa86f12af04985e3b4033ebcc920ae1243965dc17f37f81b6
GET /v3.3/customer/action/get_configuration?license_id=12162111&version=918.2.2.2038.346.73.24.8.4.1.3.4&group_id=0&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 1345
cache-control: public, max-age=600
expires: Tue, 04 Oct 2022 13:57:14 GMT
date: Tue, 04 Oct 2022 13:47:14 GMT
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/get_localization?license_id=12162111&version=d4234139f0f2a5e50173b124f65938ca_b7e85c9d4635942fba7e63c7a90c60d0&language=vi&group_id=0&jsonp=__lc_localization
200 OK 4.8 kB URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_localization?license_id=12162111&version=d4234139f0f2a5e50173b124f65938ca_b7e85c9d4635942fba7e63c7a90c60d0&language=vi&group_id=0&jsonp=__lc_localization
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (11759), with no line terminators
Hash 4eb8ed8ef4fbce868b476020c4a9f681
0e419b2f4c37a5cfb198a0f9720a645897649ac8
ff3ae24604d63fd45a7b3ca16f529e7b2eded951959ddb82b136ffb087748445
GET /v3.3/customer/action/get_localization?license_id=12162111&version=d4234139f0f2a5e50173b124f65938ca_b7e85c9d4635942fba7e63c7a90c60d0&language=vi&group_id=0&jsonp=__lc_localization HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
cache-control: public, max-age=600
expires: Tue, 04 Oct 2022 13:57:14 GMT
date: Tue, 04 Oct 2022 13:47:14 GMT
content-length: 4768
X-Firefox-Spdy: h2
secure.livechatinc.com/customer/action/open_chat?license_id=12162111&group=0&embedded=1&widget_version=3&unique_groups=0
200 OK 2.0 kB URL HTTP/2 secure.livechatinc.com/customer/action/open_chat?license_id=12162111&group=0&embedded=1&widget_version=3&unique_groups=0
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4424), with no line terminators
Hash 312e534c06f06d0772876e23f93fcd4f
03d31b86e128c396ea00fa140f247527d41e2a76
30e59bad654134ed0c5f5c238c1d68c87dccd439173aa12c4e3d44aa4695fb54
GET /customer/action/open_chat?license_id=12162111&group=0&embedded=1&widget_version=3&unique_groups=0 HTTP/1.1
Host: secure.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-length: 1965
date: Tue, 04 Oct 2022 13:47:14 GMT
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/0.96a16c18.chunk.js
200 OK 75 kB URL HTTP/2 cdn.livechatinc.com/widget/static/js/0.96a16c18.chunk.js
IP
ASN #20940 Akamai International B.V.
Hash 2f32d879c8af5cb830d9c9ec30f6cb8b
e2df024356f58b8f68e327232e35d8d88005c861
d6b3f44ff161f1c569dfeae2a71799b57206f1ca1e26269ad97e4226c2c30183
GET /widget/static/js/0.96a16c18.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Sep 2022 12:23:44 GMT
etag: W/"6a835528d087d08b1f0fe0642cb6d223"
x-amz-version-id: D3auGCHl.1EBD8fIsGg0TVEJ4vGgzVLu
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: 2Z3Jj0ChNSBBVMOnJi6CzXCHxdv4j89b_Ig-RZcY8UGtT5nFkSAmPg==
content-length: 69542
cache-control: max-age=31536000
expires: Wed, 04 Oct 2023 13:47:14 GMT
date: Tue, 04 Oct 2022 13:47:14 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/iframe.c0e20b19.chunk.js
200 OK 124 kB URL HTTP/2 cdn.livechatinc.com/widget/static/js/iframe.c0e20b19.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (17342)
Size 124 kB (123905 bytes)
Hash f949c505ea44f024bfadda004c8ec71f
4b7c49670f5d2b6b3f05658c018462fd1cb9b41c
aef71075e7b95abf76f7c3dd3ce809e01e85dd19d4cd68e9fbdcf090c8ae3b7a
GET /widget/static/js/iframe.c0e20b19.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 03 Oct 2022 08:52:47 GMT
x-amz-version-id: GohRaIYEY2nS_OydaMNvxQZK5HNSmXaZ
server: AmazonS3
content-encoding: br
etag: W/"224cad1b849c4fea900ca51fbb1c6813"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: pqKLtYc6ezoogKkuZdozRnKG10DIoqRI02pqbLpTDUhMCDyUXBv4Zw==
content-length: 121325
cache-control: max-age=31536000
expires: Wed, 04 Oct 2023 13:47:14 GMT
date: Tue, 04 Oct 2022 13:47:14 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12372
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:47:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12372
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:47:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12372
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:47:15 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:47:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:53 GMT
age: 32662
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6779181f9c06975f2a662da743893939
585e7146fd24cdc2496b05baafea04091dc541e2
8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MiSh_FjAciKCaOakY2mM_EHBN1Z6GIDYIP8mwS4ikkrToQN3Ktsv2g==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:46 GMT
age: 57029
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8c08f8066cc732de8befd6ccd629a95
22aab05208a01ae5def4d63dc145085630f57bcb
f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p5nOqBojKO6S-c_DxIu8B3p-NK0pzRHkz0DOPeyv7PQt9h0x1jdtoQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:55:54 GMT
age: 57081
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:47:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c6882c60d7ca6f918c77104e3ad1d52
20ef861be49c652a938e0145e4ca3a60159367e2
861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 55076
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24a4a122273ef9f772852031eb13114a
c20f1fac9020eb4bd6c84583f73872979639b991
8e1ffbed5f156637ed2f22e81d03f6d85eff0c28237c1639ea5f977e92ee7b70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4151
x-amzn-requestid: f709a11e-cbea-4965-8502-94ddbd8768bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvSF3YIAMFdow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-29bfa31d51e8f60b38136dba;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7H1QKlOtoBoVz93G5lddxHSGiTjtMnHJCZX5FhwqhNPkspslaDoFQA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:57:01 GMT
age: 57014
etag: "c20f1fac9020eb4bd6c84583f73872979639b991"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54b3ef7aa50273b78b59c24511b0c1f9
e2ea2ef6805e391c497e62e101e76a0bdecfce64
296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tJwzKfs7HnQ7dVcINwnlzxTChXiEi4JPj8jrS8p5KhurRx_o3ZVOZQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:59 GMT
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
content-type: image/jpeg
age: 56176
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12684, version 1.0\012- data
Hash 0c235386bcf6af06f67e6c89fd19e434
10720574d4609322023984a761f32f9518c07bc4
c1c30918a861cb6a985ab55d54ad7e861682354197f164cb3b7194f20eed67ac
GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 21:03:15 GMT
expires: Tue, 03 Oct 2023 21:03:15 GMT
cache-control: public, max-age=31536000
age: 60240
last-modified: Mon, 09 May 2022 18:28:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Hash ab21c24efd75543e16e34807ebc6cdec
eb2562f9729079333fbcbbe94868695669dd3301
88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 21:03:13 GMT
expires: Tue, 03 Oct 2023 21:03:13 GMT
cache-control: public, max-age=31536000
age: 60242
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:47:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.livechatinc.com/customer/token
200 OK 138 B URL HTTP/2 accounts.livechatinc.com/customer/token
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text
Hash 3e03ea4c5dd1a0414df9e3998671fecc
7f56797543f88d4351f523fcd03a2eb116b2a375
ee986e3a4ea61cc61e1fbe7013d0ad26c60ba9dfc171c12c11f960d228e36b06
POST /customer/token HTTP/1.1
Host: accounts.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 190
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 138
date: Tue, 04 Oct 2022 13:47:15 GMT
set-cookie: __lc_cid=68c1ee7f-0657-41fb-5a8b-cf2dacac3727; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 04 Oct 2024 13:47:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=36b8f081d498c6c9478457cf74391b11a29102519c256eb10f4a600631d1cc5cbc76fb5d72ef180737cd7a88e7f9b592b0a9e752bad7b5b6bf979dc9bbb4; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 04 Oct 2024 13:47:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cid=68c1ee7f-0657-41fb-5a8b-cf2dacac3727; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 04 Oct 2024 13:47:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=36b8f081d498c6c9478457cf74391b11a29102519c256eb10f4a600631d1cc5cbc76fb5d72ef180737cd7a88e7f9b592b0a9e752bad7b5b6bf979dc9bbb4; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 04 Oct 2024 13:47:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__oauth_redirect_detector=counter=1&t=1664891265&tag=a60bb22598ca6d8d8a2391189e0429a6ab1a68ce; Path=/; Expires=Tue, 04 Oct 2022 13:47:45 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/rtm/ws?license_id=12162111
101 Switching Protocols 0 B URL HTTP/1.1 api.livechatinc.com/v3.3/customer/rtm/ws?license_id=12162111
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3.3/customer/rtm/ws?license_id=12162111 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://secure.livechatinc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: I/+dQuCa+odDiHf4lrHiVQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
sec-websocket-accept: t0prmHRHFfZ9BlJapwOpO+ma/dk=
Access-Control-Allow-Origin: https://secure.livechatinc.com
legacy: 2023-06-30
Access-Control-Allow-Credentials: true
Date: Tue, 04 Oct 2022 13:47:15 GMT
Upgrade: websocket
Connection: Upgrade
csi.20icipp.com/img/static/desktop/home-footer-curve.png
200 OK 12 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/home-footer-curve.png
IP
Hash a25ee8d88b7d8e4078bce1dfa45e85ba
5da43d4516f837f5fd6e90e1c838b9be3c88827b
64c15af68c045bf4186614ee577c8a31510084dbe59da6293cadf133ca1f5f11
GET /img/static/desktop/home-footer-curve.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:16 GMT
content-type: image/png
content-length: 8804
last-modified: Thu, 16 Dec 2021 04:49:30 GMT
etag: "61bac55a-2264"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2005
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LriwOgQBpDYJ7xWFVPPGr14fPmlkF4NbjWWgvEzvH6C9rpzK6KDMH4CZC5hNlRf2Z7KKoQ5vTHcLOUfPs4aNoM10Ke1byioTt%2BSTDuC7EbJfYeuwf17GL4sKCHy6mtQ7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e571b990b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/brand/tt/logo.png
200 OK 24 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/brand/tt/logo.png
IP
Hash 7dff8628e01a9df4bef8f7b513e488e3
f7e25317db306e743b62c21364a9d0c6b80fd6f7
6651c8caae6ce38a188cf0820903cb2ca5a4446a931a7e4543c365a44cd54b90
GET /img/static/desktop/brand/tt/logo.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/png
content-length: 18312
last-modified: Mon, 12 Sep 2022 07:06:15 GMT
etag: "631eda67-4788"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9WzOIhy%2F5jy7Ud%2F1QZF647hnE4mP5quXsi3F1SHy3oxceQPMijJ%2BtPufQ3nDPw1lsMqF5v0Aibd0Fnz04qWW1OYRuJCk%2BU5amOYMAT5vLSYDwSVQdFIcVV%2FWcFQruhUpaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e571b9c0b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/floatingads?lang=en-US
200 OK 7.2 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/floatingads?lang=en-US
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5209), with no line terminators
Hash f2ad64ae579b7445e3b6376ff86ac351
9cf364a7de27842bdc270f701a9e49e4abb57cec
84a36976f48ef16d59f71b78cffe2497ed82a6a87669be509657964cd30dba7a
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/floatingads?lang=en-US HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9l4v8heAdtWLDicrQRXT5qsDm%2BxUQy4bliRoHvCCotcI1jxxyJTkDMkAcRp2aXpf7eKvwsDdHuniXrDq%2BkPVqM1kXF1ahbqq0KR44r4tdJPeKDUE5scVXYISAA0vpgS8Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e5eb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/announcements?anntype=1
200 OK 4.4 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/announcements?anntype=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7b22daa69fa00f563719959fd94976d2
a8499fe5631cbc22938e6b7e0279da1e9e68996d
11f400b34e10eb5556c88b4a58a13c8567e9d34634f5ac7e5ea819b4e34c1d82
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/announcements?anntype=1 HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gFQmsFr9QMMea519%2FTR9KxfdrG5l%2FVR743tiLAVS2yghh1ay0CxfoN%2BI8nz%2B3d%2FBWu9jQ7QLdXoRPQnHfg7g80CfBlLFTuCwsVmQ7VN9YyxkMvPa6DtGVzAcD2jHUD3AVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e571e50b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/dashboard/displaySetting?currency=VND2&locale=en-US&platform=2
200 OK 29 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/dashboard/displaySetting?currency=VND2&locale=en-US&platform=2
IP
File type Unicode text, UTF-8 text, with very long lines (43757), with no line terminators
Hash c3580099e407d761115b7fc1ab6e0448
e56a43e6ea5314ba8217749688d5efe630760237
d467930142a51c4367097fbf450899e4c4e5d54508384c4d5e3105a55eef581a
GET /tt-ecp/api/v1/dashboard/displaySetting?currency=VND2&locale=en-US&platform=2 HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N46M7NbQXql4wAlAMxUPRFeYM13zsM5XiK4MRAqw2K2z%2FDta88kH%2Fkeyi9eSMc3YfPewy6mvIlP452McswZqOoKpsxLuzwDE2AHZk5ZSZQTafTLLo2MRR5SWlrVAH5uZTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e55b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/event/event_roulette.png
200 OK 71 kB URL HTTP/2 csi.20icipp.com/img/static/event/event_roulette.png
IP
Hash 6e3cacff74b2c0b624e2992270f4a8fc
8fe79e22da6761ecce14c1d86cd95c0778b586b4
0f887b4bc6266938fda4a85cc5da2056c839b8a5d9ec31b46029ae92454e9755
GET /img/static/event/event_roulette.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/png
content-length: 66007
last-modified: Thu, 16 Dec 2021 04:49:33 GMT
etag: "61bac55d-101d7"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1568
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iKKpiGIz54QzFkrZv3FtpqGZ1PDSvQamAYrYyA6go5cEzwugkiTblP8%2Bvj5twtt8uk%2BZc8yzPx1r%2FZZqRWxej7mYM1vDJVAsAvoiJVlpPPbC%2BX1RQ8d8XFReFs58vdc4EA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5bd8420b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/shortcut/d27d9607-9fc8-407f-b1b9-7dfd5191c0ca.jpg
200 OK 23 kB URL HTTP/2 csi.20icipp.com/img/tt/shortcut/d27d9607-9fc8-407f-b1b9-7dfd5191c0ca.jpg
IP
Hash ec2313037a7f94a02873364f71b80c50
f4540f9ccd22c561350caa73948959db1548fc71
a77ad1665dbc15bd3819a3560bef91e3e6ef27efac51562764794e5dab994cff
GET /img/tt/shortcut/d27d9607-9fc8-407f-b1b9-7dfd5191c0ca.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/jpeg
content-length: 22779
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "632df3a9-58fb"
last-modified: Fri, 23 Sep 2022 17:58:01 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JW%2BtDKcI7FJES%2FsdO51%2FFe7smZDmWszCGOp9kIbkT8meSVw6LNTvyQAqxjGwTEBDHakvEAO6LzIzr3v1%2F3uodjkmclkcQ8pprDg2Xk6Shh3szCS0I%2BzbRC0ZstcMLXaqIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5a6ee00b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/shortcut/0b1520f2-0e72-49b0-b45f-b929bfefec05.jpg
200 OK 26 kB URL HTTP/2 csi.20icipp.com/img/tt/shortcut/0b1520f2-0e72-49b0-b45f-b929bfefec05.jpg
IP
Hash 378f51f10d689deccac3123588652676
1a16a44f43bc709624bbaae5f5bbeb53fa5a5e3d
ee8a556a36e90d1c6b29324aca8937ec0b902334029e7dd48d9c4ebcd19578a0
GET /img/tt/shortcut/0b1520f2-0e72-49b0-b45f-b929bfefec05.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/jpeg
content-length: 21270
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "62babce4-5316"
last-modified: Tue, 28 Jun 2022 08:33:40 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C8hpBKzts%2BG2ig9PP4jrYJYM12LV7Y56yzmWwwvSPCaoWeTOW7bJiHNCmZm%2FO63617UXwtXFnSHCCLJNgmkvkdjfGuE8Qn%2BFC9y3%2Bz%2Foo5UILaSRx2bj9F%2BMgfZVkcrKFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5a6eeb0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/shortcut/c513d750-372e-4a88-8f52-dfbedc9fde82.jpg
200 OK 27 kB URL HTTP/2 csi.20icipp.com/img/tt/shortcut/c513d750-372e-4a88-8f52-dfbedc9fde82.jpg
IP
Hash 519c237200962e2072e69d2910710baf
c2da6f42922d9a6ea574215c478148876ee9e88c
bba795f1cc021aeff3d8e13a613bde4a2fa912337c8a05ba28469bc98244d3c3
GET /img/tt/shortcut/c513d750-372e-4a88-8f52-dfbedc9fde82.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/jpeg
content-length: 21270
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "62babaee-5316"
last-modified: Tue, 28 Jun 2022 08:25:18 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XxAjk3GvmhpJWfT82jz5uT9opOw9VOqvcI3qpWcGVQw3gMvKqVS3jfS0U7bAJWma3Wzj8SM9imEZgK20%2BNYS2Pbck6eWWTtkINvBZKzBlwix%2FKvcZmhffbkvpOkUw0YGkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5a6ee90b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/shortcut/da6da370-23b8-4450-8ee9-e9c5e06b962b.jpg
200 OK 73 kB URL HTTP/2 csi.20icipp.com/img/tt/shortcut/da6da370-23b8-4450-8ee9-e9c5e06b962b.jpg
IP
Hash cea6670a184146ccdb9036f0dfa15e58
e5b6bdaf4c697a79c99a5c761c1d77349c8ea801
04c027fd6c8c0e600da7b50e8aa859218e5c37175ca719703045a8a3ae433708
GET /img/tt/shortcut/da6da370-23b8-4450-8ee9-e9c5e06b962b.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/jpeg
content-length: 21200
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "62babcef-52d0"
last-modified: Tue, 28 Jun 2022 08:33:51 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=88FacEHwj%2BpqGMFomv5IaDCa7dMDRYgUM4vqCkL6Jq5mUKhtalfWbShQdMZfPBj75OTz%2F%2FJvZNhtLc377eK6C9RGJftCHq%2FrS0SvgDjqCnSsP44zcJyXpJXoVnvsy1qtmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5a6eed0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/shortcut/330b6429-92e6-46e6-ae31-8408028e31f5.jpg
200 OK 32 kB URL HTTP/2 csi.20icipp.com/img/tt/shortcut/330b6429-92e6-46e6-ae31-8408028e31f5.jpg
IP
Hash 5298cc5c468bf79ad8c004f3c0230d40
f0d1ca717a023d39520729de4b67c7f9c39c318f
755d96e85e33154752a96d5dc5a12c7492e530c5f97db8e5f559191fa79c0ac9
GET /img/tt/shortcut/330b6429-92e6-46e6-ae31-8408028e31f5.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/jpeg
content-length: 21270
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "62babcfd-5316"
last-modified: Tue, 28 Jun 2022 08:34:05 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BCiEkbzLNEmJSRS2poN%2B02F2C9%2FTUtas5dzDeStF%2BcGb7LW9Oq58aawmTg6I9grPfG%2BZDKxEdQlDlBE%2FDwUdeyX%2FgyZzrj%2FVuGUL4K5UoV2YFXOsWJpp%2Bfk9V2LKOqX8Qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5a7ef10b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/gamesettings/maintenance
200 OK 23 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/gamesettings/maintenance
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (14929), with no line terminators
Hash 2f5f90abe30637241e71e2f5545eab2c
902d8748cb533ff33b4349123b6b616c48477aa1
de6cb1ac21e0b88655e399bcedafdbde7fd629523858a8a7deab1aa7bda089f9
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/gamesettings/maintenance HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BDm0rh%2BGiqqOIwhE7JncSfcqSlxXkvaoSFdXLx9kaIK9%2FzARJfhtpfHzEB7UlNoOZYK%2FHMnBdpAITxeVIZzZ3joOjVFfs5bn1pWbxUBKC1Y5hf4bnWUntT1ttYktOC2Rvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e5fb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/shortcut/b0dc85d8-4778-49e5-8ca4-d0503fef093e.jpg
200 OK 21 kB URL HTTP/2 csi.20icipp.com/img/tt/shortcut/b0dc85d8-4778-49e5-8ca4-d0503fef093e.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2022:06:27 20:57:47], progressive, precision 8, 60x60, components 3\012- data
Hash f9bc7f447b4f93b1fb34282ab5830886
4ea0d7635d8a5d965cef81ab2bedc82335768fdc
a93f7a06cdbd8575c17f600d798dd062ef0e5c3021e94750acd887172cf5c613
GET /img/tt/shortcut/b0dc85d8-4778-49e5-8ca4-d0503fef093e.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: image/jpeg
content-length: 21270
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "633ae02b-5316"
last-modified: Mon, 03 Oct 2022 13:14:19 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1luuck8hLDT36M5XAE1K1qP3j%2BHpvukgiBxGFnXUEWNaDLI5j0%2FvvwnH11UcES%2B%2Bv1axZQt%2FKXc7E3dX6DJV77Ucy8YMJSTtmMn6RTF0Klibrm16fwWQSL1f1oCQr0ZHOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5a7ef40b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/ads?language=1&platform=2
200 OK 17 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/ads?language=1&platform=2
IP
File type ASCII text, with very long lines (37710)
Hash 46310a6b809f062b2db7f79dd9593f46
7e9d611c3de25c8084a840c0c0a66a15529d7934
dbf2a7e0f06dd774b3a9262a2eac059f0bc065cec2b9751ab42d389cb81be709
GET /tt-ecp/api/v1/ads?language=1&platform=2 HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RYCQQAi%2FmICWFPbWLXVOJzaTXQiv1glcT%2FU8Ff3551HE7S11g%2BKZlS6Mf4zG94AIwgA6GMeNo%2BbiUUm6KmGpjRnqXttFbX0aB%2FQ%2FZMagR5%2BwOddQ1WYm1C4bqeBW1OeLMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e571e4eb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/login/setting
200 OK 5.4 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/login/setting
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2693), with no line terminators
Hash 4910c77cdef62522a4e47c9ea880fdf2
c6cc410d25cb95b444518d7fd7ffbee326d2e6c7
54742183328c1e294b8a6917f145e7a598af50fe04cd7f9fb1974519fd534a0a
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/login/setting HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ukdVYsz83wn1lPs4CY3WaUMZWQa8U5bam1ZPWjwZ8NoHxIZbydkvB1cflcvIg63Lppb8WKsl4PMt2WPW5qYXK%2B2NbYqVPKffIBL5M%2F%2FyBkpSYKcgFVuejnYitv3Pbuplg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e571e47b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/hotmatch_bg.png
200 OK 180 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/hotmatch_bg.png
IP
Size 180 kB (179505 bytes)
Hash 58630d2435c19d343323bc42049edd98
bdb46f23ee9fce25db38f3fd0ac780cb8ead2815
e5316a1e9fe193fa899e7a77b20bb81505ca9c8a7260e4782e40d5d55c7076db
GET /img/static/desktop/temp/home/ec22/hotmatch_bg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 12798
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-31fe"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aeR8Tk19g7geBjOF3HgtYVOQwpj3ieYXiXfCWLtrOEeULKQES1DA2vBdZ9WwZBj8ISM29JlGjmou2Sl%2BKf7IWxjvwU7tcj24t%2F1lLEsTSw12Dd%2B80%2B7qiv2QkztfHHFdLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5b1f7f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/ae888/banner-main.jpg
200 OK 100 kB URL HTTP/2 csi.20icipp.com/img/static/ae888/banner-main.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1024x352, components 3\012- data
Size 100 kB (100351 bytes)
Hash 5a7457cde43ebeb7e2a4679d94d75258
4c1481a00c6f5d2d0cfb918f71596b0157f491b4
f33ae166029be32f7aa238c0fdf76e65c78c0b5d72a7acac34ae49748cc5b6f9
GET /img/static/ae888/banner-main.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/jpeg
content-length: 100351
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "61bac558-187ff"
last-modified: Thu, 16 Dec 2021 04:49:28 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9Bhl6e7Gaxs4iPzx55fPC6ZQyb4p%2BaWoYwVwxepe35lM9COP0a7OYX%2BZn7Ccf1R0%2B2M7iqIbTYwDdTpAYLh99CMHAcWp2q%2Fs7uzYf1zhTwvKU71WEt50fLMCoVv5RVZzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5b1f7c0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/icon_kuaijie.png
200 OK 6.6 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/icon_kuaijie.png
IP
File type PNG image data, 160 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash b1fe3aebfecf5ec07aefff050e246eb0
a3e9fb8a81404ae6fb1fdf8e1cd8a572f791483f
2edb0ee51336ac08d2a3c664d17ffbcafe43bfe9e0b90fe4845c9b11f9a1cdeb
GET /img/static/desktop/temp/home/ec22/icon_kuaijie.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 6556
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-199c"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z0kMOuX3eyifuQT%2BpGcC%2Ft7JlhD6Bbdvi7VMTorWH8dFWkhUVh5GIlbTgO2fg8hvpXtVaJyUdHOHsp29Rse%2FhWueana7osjPInNaHNHnUWZim2ZwE%2FESGpoDnkdr%2Bs%2BIaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5b2f8a0b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/settings/activeshortcuts
200 OK 30 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/settings/activeshortcuts
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 622c5deffc8df282dc4db62bed353c2f
27b1da2e0f9b7f7713832d3a6e8bf33beb38a011
2e45873a1bf30f261831cce07ead301431579ffd2e476629901d0f9f57f5ac4b
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/settings/activeshortcuts HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eQ3mCotJiHPpiZQADwfilH18Yp%2B8iMnJZ%2BGh%2FzgOc5%2BZvCsGwKZTQrbRf%2FIcZnNhTi3AoViRyhdlNewoXXyYY21I%2FARxvAmP2CEhUcS0bq0wnCewLvVwqXLuCUQzMbrL7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e571e51b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/floatingads/d3a96c99-4d02-4da8-9310-fcdf030aeec1.jpg
200 OK 38 kB URL HTTP/2 csi.20icipp.com/img/tt/floatingads/d3a96c99-4d02-4da8-9310-fcdf030aeec1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x500, components 3\012- data
Hash f90c9fb1aaaca2967e9b28f9d4967f19
798995f2be0544fca2f9700b2a1e667dc0eb6eca
3604a405b853b6dffb618a4ec5ab6d2427c6bef606f903d13db348ebe3a0cb77
GET /img/tt/floatingads/d3a96c99-4d02-4da8-9310-fcdf030aeec1.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/jpeg
content-length: 37527
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "631f02a9-9297"
last-modified: Mon, 12 Sep 2022 09:58:01 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ub8vtzLfnpNNW1Z9lzXps1CRPl8OK8%2BG3yyUUA0lY7Eq3XgG7U4GYmcHAihdDtkLL4nzNzEV35ix3ONfFtykd2lt1pNQLd%2BzZ245KL0y4bxAjYMHPVsark3yuP6v91glPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5b9ffc0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/tt/floatingads/d06e7069-205c-4c37-b2c2-7bc6515563fa.jpg
200 OK 162 kB URL HTTP/2 csi.20icipp.com/img/tt/floatingads/d06e7069-205c-4c37-b2c2-7bc6515563fa.jpg
IP
Size 162 kB (162467 bytes)
Hash 5a9fdf95eed162e8fc6798939c6dfd1a
1a34af0b2921053fcd24f0e8282db365d9bb6057
5dfefe60a579ab1401ae847eafc1d971cc7dbac8adb7b327bddd79d3b7545359
GET /img/tt/floatingads/d06e7069-205c-4c37-b2c2-7bc6515563fa.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/jpeg
content-length: 146009
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "6336fab4-23a59"
last-modified: Fri, 30 Sep 2022 14:18:28 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CsdHReZbyFbHTlG87eyg45Jvf138V%2Fk9XVXgX9uro%2Fr6zc5ZF46JwT7uSSTwnmG6oL9cxkkXaF31iNb0je9xbFSyy%2FvEesHNl7A1BgMVTPnEx6WGIhxi00iiRtOqguNDUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5b980f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/event/event_rank.png
200 OK 28 kB URL HTTP/2 csi.20icipp.com/img/static/event/event_rank.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash f166eb33bbd1fe319d39541bef979dac
c32297a808eece569b67dc8a945c8c8fe203b278
d9ffa941505101a850c302e25823d32ce53244400bcdb79d89b39e1435e827a1
GET /img/static/event/event_rank.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 28001
last-modified: Thu, 16 Dec 2021 04:49:33 GMT
etag: "61bac55d-6d61"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ubt3MmrQMh6%2BuijHm8J%2BTOtmbE6v99MOfSIbt5FtGv5Cf7OHf6NtivDngDENolti%2FIFptNkUtLq%2BK0e7cG6pFt01%2BMHavAyzWsbeBUqYQiAD6lBbGstM1ccNzHLLwOoTPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5bd8430b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/hotmatch.png
200 OK 1.4 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/hotmatch.png
IP
File type PNG image data, 666 x 79, 8-bit colormap, non-interlaced\012- data
Hash bb60932758d42463b67e2e15d97817d8
bae7be7713aff4e3c17fdf397c226cc6f4266dbe
a4d8bc2a1e450c97c4aff025f665c6a4e7dbbb18ef15a3a234635e13b3da16ea
GET /img/static/desktop/temp/home/ec22/hotmatch.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 1431
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-597"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rS6TLOOqJxB7QijZZEjLNiU3YFcXK%2FvYc16Rzwjz1%2Fb3XIRFNAxDsDfNbb1BKxTdrGr1lrW%2FviE8mQZ4FG%2F4UUe7HfjB0U2h0fxU%2BXfvYcBa9UsRKjN%2FSps5wCKtApCYqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e5e5ad50b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-sexybcrt.png
200 OK 138 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-sexybcrt.png
IP
Size 138 kB (138066 bytes)
Hash 7a5972405942cdd1e8099205fd6d7d3a
fb414ced7a9241b85972e0ef5641c7e6984dffd3
12200b745886d836975143a13e272ec3486ebe08853408d044e1ce6150b52378
GET /img/static/desktop/sub-menu/sub-live-sexybcrt.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 24466
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-5f92"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EjRoMU5qpqvqBLFYSmpU2wSD%2FToLcJzBRtzdglWvMortUrnoj2fK9bjgUgWLLgjlOq2h0WOygkHtRww5LdojNq3diQSQBSd9wziXM6lL2%2Fq9YlTIfnxwuIhwtSeg0K1WaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e628f1e0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-ae_seven.png
200 OK 23 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-ae_seven.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 1bfe0ee6b04ab6dcef2d497bf9e52323
dc3de4fd114d7318997860e524a518755f9a4faf
216fa5d4b0102d85ae2b0ab6ca6f525d71d57d449dae00f87ac4be70a21e9906
GET /img/static/desktop/sub-menu/sub-live-ae_seven.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 22685
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-589d"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AN2CoU4m5OXUfhMLgO8tzXe5n%2FdE5ESp83pxvevhzgEhG2ww%2BkVlmVIgHdeW%2F%2FyGOFQxr3JC5XG1nmkJTkD%2B21l9P9wLuPgLhmbekrzJsrLawQ%2B%2BM4JItYf%2BGRwoyzMrOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e629f370b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-dg.png
200 OK 24 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-dg.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 754db772c36013143a8bff8974ccbb1f
eacfafd7e56026a7ddce5390b97063374b893257
469e85dd69b0e847ebc8399e9590a6d47810f30d2a2688b1f021d35248b34dc6
GET /img/static/desktop/sub-menu/sub-live-dg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 23743
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-5cbf"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nG0ROr0RgbaNKXnr%2FqOeBB0ypogki6TnuUV%2BH4p16yPYPCcCCEGceL8tIv9d2SpkqJPy2meEYcikhY170z24FDdLvvEnYcLuVdTrDEXMhFBdDwwjBng6CeTLzD%2FHbpAHtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e629f440b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-sa.png
200 OK 26 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-sa.png
IP
Hash 70f44dbf0c8dcf243e9b0e87c1c67f30
734f138619643b4ad7728c808d9a827ae7156f67
c200c7f94f4fb48e63196e2a08c88ad17afcea90fc5ccacf343fd78696b1380b
GET /img/static/desktop/sub-menu/sub-live-sa.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 25015
last-modified: Fri, 29 Jul 2022 02:53:20 GMT
etag: "62e34ba0-61b7"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Un35EUz4D6dhcUF9np%2FstYe5x%2FuAH5rSgoELWIFItZpiYYwjyJ%2BDHnXZvP%2BGbSHF3TKAIu4GFTiQYAQfh5hi2qbFvGDvIZvh%2B9OEjh8bnqX2YvNFZypSZ6cva9%2BP2AiuLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e629f3e0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-ag.png
200 OK 25 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-ag.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 78d6c56ab3726e8f64550b436994364e
82e235e89fc58c8fde93c7999e730aff29ddc2eb
b8b6161ddc7525558901d67abe70bcf77429443aeb6603eb8db4e1283d42f653
GET /img/static/desktop/sub-menu/sub-live-ag.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 25418
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-634a"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qTEnzNAIvUXFUhUYcBJT67MLfY1OKQBQgufDfQLSK%2BNKMaBqmDff%2BVGIZVhHyZalwQ6jt4N3pocBqMfJKIMIG9jc78xk47VFwHOC95Bqa%2BBjc3DgTFjIVBXgIf5Um1mElA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62af480b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-wm.png
200 OK 24 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-wm.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 30f93550078409a89c0efe49bdfcd1fd
cedfd41615ac8700559eefb7669fea25ca4815c2
90c3a4960e3047c2010db8ebdb8c31b422436267ddafd5c298625efe4e14bbf8
GET /img/static/desktop/sub-menu/sub-live-wm.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 23912
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-5d68"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nBmlWMPNowvPe84D47QoHUSzDg1nvdTF%2BlusznwVd3QdBTD82vCTocnl9%2FZC14GiNy%2FBpmlnpz6%2Boqq1vWUWTFmiOkFNQssm4LRUdhNaY9GHugtHugl1UsOYqGy871zp4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62af4a0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-mg.png
200 OK 24 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-mg.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash cc5a2d2bb5189e05efc8623d224414ca
1bcec4a30b0c501a14d6c7461ce5d4c0d9781590
23e8dcb727287521fb497068e4331af6010879d1927584be8351f2d3544276f2
GET /img/static/desktop/sub-menu/sub-live-mg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 23898
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-5d5a"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mX%2Bu3IpOnWXppMNnV3gx5qe23Do8oKunJbhQPhrvaGiOCZlQEeZ6JRZMArDW08xylZEAcbMS6tHCehS8TRvW%2FdSHdKAs5qhZXpWTISmprZTWbJm1PP9piwRQRJiMNi9CJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62af4e0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-live-bbin.png
200 OK 22 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-live-bbin.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 768010c008f58914c82d67f5905685c9
43a0e7165019b32be66f94bab16aef3d87223bc4
2321bc11d44bf170caa975217cf7dadfc17c779e238ff87de45b756a43c9f8ad
GET /img/static/desktop/sub-menu/sub-live-bbin.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 22213
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-56c5"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=86qWQISRNjMgZ7hXw91rAeB7FaXj%2BjgL%2Bfw9GcetzMGPjkSVaYlBeQd2dM5hCvPJPOuAADY7WuIdaAFICC5b%2BLlmv8Ojmuty3irRecpSQN5avyam0B41RZuP8xi3%2FpDPYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62bf520b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-cmdbet.png
200 OK 36 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-cmdbet.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 998a9e09b30e1dd4320505b72c1b97d0
9dfd6adf7e3d69994b668524be343f9384d23d17
020f31a8ef716af2073dab7d4d38699461c1c403900e89dfccebffcfb0902519
GET /img/static/desktop/sub-menu/sub-sports-cmdbet.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 35750
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-8ba6"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bn6bLzjFUyVbm9PNIzADsa78DYeQF%2BXCeMiGcRqOWLqT0OZtxcGZCpUZnNTYgV%2BjJhGe0Ponf4KN6n96Avt9JOQ1D9lzjU5cAelKfg1U8gW0hk5qTdfuhn0YZEzza9WHbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62bf580b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-ugaming.png
200 OK 38 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-ugaming.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 65605136144c7458561ab0304a709f95
222b266721f59eb625409894fc07c901a04feb3a
4691e6cfeca35f195e51695d4f62c907cd51d9969300910e9f2ffa8fe997f918
GET /img/static/desktop/sub-menu/sub-sports-ugaming.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 37810
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-93b2"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lRopQqPUdaMYLBwETieU62JD7Qaf%2BdeOPpLwkAT1qIY8pSq9TcjtZqAeBDyg%2F4V71HbIMS6kcKHtle%2FNTByp3TMWVBTodFo%2BTqTda4Ho5XHfttvKSEGEIWVTdmR%2FSLq23w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62cf5f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-saba.png
200 OK 39 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-saba.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash cf561c58bf26d48ec2586524f8234d69
07306e9307701fd9ceb0b8a2bcdb07da87951067
d8576f0e2c410ec07dc9cb255e99d5d66dba644d9ac57e0f4abfa217615ab5e0
GET /img/static/desktop/sub-menu/sub-sports-saba.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 38757
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-9765"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wMFWOdyAHhjpIowAI1jbJiBbpYnkA9m7z8tU3D8OKkfOR%2Fd07dR6zioMp17k1F2FZTA8iSPH9KluaTbylsSGPt%2F5KThf2MMDhE%2Fi5kYoqT8FRSmvkxRe%2FZMoXPtN9bQp0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62cf680b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-sbobet.png
200 OK 36 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-sports-sbobet.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 9b9843d55d093f303b8e36bd699e934e
1cdd20237da0b16b6b3547a7ec151e80deb125b4
7d6365265125269f843c6c3824805a5e87fc2e12a3725025a37ed06373b78de1
GET /img/static/desktop/sub-menu/sub-sports-sbobet.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 35836
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-8bfc"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bj9xAvRkeWS1535PbBADbHG1JjMgA1ZOF24KNPFWSt9bcSivUQHD3SiVLXTjt9TM%2Fo9szXhluzCzz3YN3EHk5t0GnHu1xVhM7qqQIdIGNhVcBukV8TEVu%2Fki%2BO2PGGr7jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62cf710b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-ae_play.png
200 OK 44 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-ae_play.png
IP
File type PNG image data, 300 x 400, 8-bit colormap, non-interlaced\012- data
Hash c4dc2e014881faa381003f1aa1578e10
044755cb85f1c2da60beccec3ee97ec76f926a8d
bf71f930a3fa8c056ae4576c1a1a4027b40f5f5c9e878351725f51e9f04b665a
GET /img/static/desktop/sub-menu/sub-egame-ae_play.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 44001
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-abe1"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e56B1vDWup%2FvcMNQDCGZGA1mZPkHg3Rzml95VrThRyJSYq0BLyffXl6oFwxtGzJMN%2BfBEEBChAzQSPMpTnPsV01N84Ahw6mP1SR3pmMKaBn%2BTl1cqTjq1YXgtbafue6pFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62cf730b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/games/allGameList?limit=10000&offset=0&platform=2&sort=ASC&sortcolumn=producttypeid
200 OK 153 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/games/allGameList?limit=10000&offset=0&platform=2&sort=ASC&sortcolumn=producttypeid
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (60726), with no line terminators
Size 153 kB (152642 bytes)
Hash 45e45cd1fde8d795a17ac6b6a38ff207
c9bd2347ff6827c0af748906361e1b618c41ebe7
6836d23743fc29aa7eaf9ab62571f6d7738faa10f51f0f03430abf2467e0e29e
GET /tt-ecp/api/v1/games/allGameList?limit=10000&offset=0&platform=2&sort=ASC&sortcolumn=producttypeid HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Fwn1CNy0IuDwFb0PI2MMari5VSGnJVyox1d27yyaFX0gXjTnkMOH9ytngcS4OBnDNLelsKXrZpV4GOdQeXUiBPKJZdZwPU5L%2BYN2hntOSHHoSWi02S0aTibXbXgvghFhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e5db509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-cq9.png
200 OK 43 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-cq9.png
IP
File type PNG image data, 300 x 400, 8-bit colormap, non-interlaced\012- data
Hash 878c28c70f1ac0d8531177265f0562a7
cf1c5be6063b71dc800ebfd8cdfc8b65160a0696
b9a6b2224283fa784605103bdf17f59447dea93ee0108de3358dfcc884b9ae6e
GET /img/static/desktop/sub-menu/sub-egame-cq9.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 43167
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-a89f"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mwtlPS%2B1%2BMm0GYU3p4paqekgeTsOkwlmXe8RE6f9Shvkvw8XFvE0Xa952ha3XjN4KfQmKQ7Rt8k4wstSL8s0LB%2BXBifV5Lq3G71zK9x1zLu8ohQ2Z7P6Vu2tpAqWwhoYWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62df7a0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-jdb.png
200 OK 47 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-jdb.png
IP
File type PNG image data, 300 x 400, 8-bit colormap, non-interlaced\012- data
Hash cca4544281026176c7e256b1cf94b1eb
3d6d6c41bf8356d48b5bf5a3cbd77f3458f030f4
8925bfe7429f49dc6fc729045554d6d97bab7ba6d2b8d0fe1ba3e70039e2e506
GET /img/static/desktop/sub-menu/sub-egame-jdb.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 46876
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-b71c"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sDMT0czhsGnYIJOuGax7IlV6UVKxbnqqbDYOkI%2FLNZYVZGoYQHTd4BcEAFxmvbx%2BwcKZEvmohgizOssRnVgPA04jBp7eISl8p0fqsR8pKaQssN%2FS7ZEgrREpmBlgDGCJoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62df7f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-pg.png
200 OK 36 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-pg.png
IP
File type PNG image data, 300 x 400, 8-bit colormap, non-interlaced\012- data
Hash 239f7ffa4a00489afe55ecb7ba16a4a6
9f92cd310d59e0e06cfe66f458ed22be55c8d878
b7b146948aa816e61362dea6f9a393044e4fefe3526c8ead075cc2a164a530ed
GET /img/static/desktop/sub-menu/sub-egame-pg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 36443
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-8e5b"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d31WHTOEJHAAt%2B5ZXk07d9bZsZ3VmpjxTIJ0dz7gnNl%2BAA7lzZ9Rbbz379GxmFgL3Wzg64i0TlEUPSOal50bHTiDyqNZ4Y0nYtI5W09k7Iq2fhYx%2BTmzy7oVTOPD0%2BqbSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62df860b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-mg.png
200 OK 35 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-mg.png
IP
File type PNG image data, 300 x 400, 8-bit colormap, non-interlaced\012- data
Hash 0c466727c1e91d2989dbced881ec6836
591947ae4f2894ca2f18249750f69416aa316ecb
f324e1e6f91ca9c7c8e47fd368d958d87be6e2d58334f179637955cb44d101f5
GET /img/static/desktop/sub-menu/sub-egame-mg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 34826
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-880a"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rx%2F3KeI1NxEc91bpyWriSHc1YvLsMh%2FhbMOl7qQAVhouwpFPfowz%2Fy5ZAbhBBFL%2FE3u3o%2BomKp74zsnb9Tu21y22tOcZZUqUG0BSilORqy2emnaB1yV59kWOXtkW77r2mA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e62ef940b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/staticpagesettings/Info/orders
200 OK 50 kB URL HTTP/2 api.189937.com/tt-ecp/api/v1/staticpagesettings/Info/orders
IP
File type ASCII text, with very long lines (41561), with no line terminators
Hash 09b73ba02888b23f14ad0d480700d269
8711ca189b86d08a916b32e37240f4301d6aa7c5
1934acdf4a778e1a6771df70ff95fb73cd474d9215e1259a3ab85f7b59f91453
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/staticpagesettings/Info/orders HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8wzSkVKCsjoq5vcqL23Jsjs3kBa6mlohQvdxeyi7sYSOGHNnbMmzMaKE%2F2QSp6BzlM%2BKN6vxNDzxDDqkFPBV61QldpEwADHDzGNX%2FruQSbPsOEDaOEkMZvS9avXgvJ1M1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e52b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-ae_play.png
200 OK 38 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-ae_play.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 8d076ee352cebd5e5e9f398850fc77b6
22530a87fd32684ccc21b6f7b40934b10bc65113
0a6a2c5dbc68fd34388652ba7376589f3f408c9365aef8cf29c808c49f6d8e3e
GET /img/static/desktop/sub-menu/sub-chess-ae_play.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 38016
last-modified: Tue, 17 May 2022 07:23:27 GMT
etag: "62834d6f-9480"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yc7m0qAiHod1p7C92Rytv7GTvAP%2BnGP0goprBDu8pV0pHceAv5lKG1pvrNU73drGtUKrF2qryflwL14rpPG4FkbSdahBOlrux0Bi2eW43ffvgAmNnGdbcEX%2BjA6Z6JgZ9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e630fbc0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-pp.png
200 OK 40 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-egame-pp.png
IP
File type PNG image data, 300 x 399, 8-bit colormap, non-interlaced\012- data
Hash aee45434dc8dead9c9131c0d562969a3
9825c536bd796dd0ce0b7b65a47995b7ff86fe10
35959bb1b2bca3e113dc486c2dc7afc58252d1aeb1e1f5341adc0d87dbc2af13
GET /img/static/desktop/sub-menu/sub-egame-pp.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 39678
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-9afe"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TgrnlaWs2%2FsUxEedFk1a5o6kHcE85FFeVlqZGyYneQC4lUaWDlFLa%2BWk5P3Z0gmSS1wfvJNzJchXwaA3guRwnUOx7eH6QsfXamC5ccLPW5K9xNT2puVKIYi8V6vS49Y%2BXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e630fb90b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-kingmaker.png
200 OK 39 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-kingmaker.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 474b84e1abecad7d17daa185f3881ce1
f16cc17f544362c3df4411a60e11451da7b7beff
57a6ea3ac9224880dc7dcabbc6b365b44c523269b713d75bb5b6bc3dd12203e3
GET /img/static/desktop/sub-menu/sub-chess-kingmaker.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 38660
last-modified: Mon, 20 Jun 2022 07:34:57 GMT
etag: "62b02321-9704"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aZDDL3nVaF9nJzbotgWWdRnYDC8WDizPsmbSgX%2F43Q9RJdkiWWmc9jKLrGS6jA5BZPdUHAENNewd3PVqRgdwjIoiskSZdszArOjdWkPXEhJoH%2B9HHHAzCr6aMwQUq7kdhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e631fd00b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-lc.png
200 OK 36 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-lc.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash abf854c0903b56a349c965cc3bc09971
d3cb8c837c3ff0d45e7d25f1e8463b0a58ed469e
2a462c55191feae9b9b013d5ee75ab515524c74150f7b8f46690d8fd4e1a2cf4
GET /img/static/desktop/sub-menu/sub-chess-lc.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 36155
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-8d3b"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jqzrd4Zrfu%2BFhLuYnvGMy6s50dK4C8RaBY8w%2Fb1aFjmu0T%2BQQRDdc4J%2FPZDtYLQgtdTdhdTi3XYnf%2FfUz015q0BHucxfDNAhwVBwFVD63mo67%2B%2FqZxhfjrZkz6faL30Nkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e631fd10b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-mg.png
200 OK 32 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-chess-mg.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 8c4703a4cf4690fc92239cbc10fa2740
6d854ee75e718473451a389fae9e81e770f7e97e
55de05bd1d419df8fd3436025b8bfa2d93ad9d463e4c08293f7ef3b11b6ed74e
GET /img/static/desktop/sub-menu/sub-chess-mg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 32113
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-7d71"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nIH7pe5ze3Uqdn9MSE8yLOqd4yE5P0nXtlGk9vZ1iY0NHj6AhIAQoCLrL3rJ%2BZmDSUPlaFQxhDUBS3TzOpmlNYNmAHcliWa%2FWLSoXqx3shlh4AEDpfIeHxvshg8mNlIqEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e631fd60b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-mpg-cq9.png
200 OK 29 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-mpg-cq9.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 8b191bb7363288ec2b9ac67c4fbb688a
db63be83f4d48fe22efcf15d3b09a36d29e4d2bc
1f8481ce43de9130441291f9fbdd50619b36abca531720ac9a97727548030a64
GET /img/static/desktop/sub-menu/sub-mpg-cq9.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 29408
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-72e0"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ETat43qo%2FnvJr9c%2B5fwQYiKV%2BhxZ5GzBu9ptkrO5Xj4Hinnu7%2FgEAUK0PtHZs6rpVLPJopmCz0miXxP59PYbblNlZZmnR2bw1aPdo%2F%2FxtBw7V2Sn5bVcVjsCGPOBCpQZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e632fe60b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-mpg-jdb.png
200 OK 41 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-mpg-jdb.png
IP
File type PNG image data, 315 x 354, 8-bit colormap, non-interlaced\012- data
Hash 3759a0fcd8251bd0e0d369707fa6b9c7
07e4e077b336826e8b724c5923b264b47d042fc2
3631d5460d399bd92abfc2e8c12c14598404bdaf315ebb9339fa2ca68f70d4b0
GET /img/static/desktop/sub-menu/sub-mpg-jdb.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 41066
last-modified: Thu, 16 Dec 2021 04:49:31 GMT
etag: "61bac55b-a06a"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oq4Kv2eGvE5ZHphDZVifynY9PnKCRqbCOSaJf9aihOKe3ggvX%2FxNNRwfM1AwOpBxjom7paAqOhO95%2FLTuDrgpcLMOLx2E5yhXjQOw72MtSO62w4wGUHZqmjFm%2BUo4kqj3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e632fed0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-ae_lotto.png
200 OK 37 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-ae_lotto.png
IP
Hash c859548343fbfb9ce4a696146a125ac1
b33a93714372465dfc6eb2d0361caf1afb5c3f77
9eb7e91322be7c8420b88adf9b6d05bde863ad8dd15e69cc46a2fdf6612e9e0f
GET /img/static/desktop/sub-menu/sub-lottery-ae_lotto.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 30634
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-77aa"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XuDvzrxNO0O6DLmPqoT7PrJXKS50AolMElR%2FRAU%2B5ONtyurpSoCQuyFqt5rwWPhV0lAQDb%2FKsa%2Bz18V%2BTPIsyShkiTePc9W3KleAO6XbsEuDQ9I2cMnbAnsyVenHJeSvvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e633fef0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-gw.png
200 OK 32 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-gw.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash d1fd1772028ce9d38121a3078c061bd4
16c4028524c2e7e5715b94f961037a32bba9239a
4b00fb736fa8295fd758c2dccdd81758cdaea0fcd51d533900a59cae5ec8f632
GET /img/static/desktop/sub-menu/sub-lottery-gw.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 32344
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-7e58"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vqV8YZJMQ4N%2Fs2p5VyHOImGRrBxnrHXIffyXS0B8ruYITLjmeVE5WyCFfFGhUuHwwQMYbQqAaTTDNoxJxlY2DQng1qejMSQAFxnuJMtOyBqwS5LPZLaG5EIC7NhhuysH4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e633ff30b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-saba.png
200 OK 31 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-saba.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash ec00e1e095da65d9ac6c806b2b0d082a
a8c5146aa09cc16f8ca982b6bb98455bece18b96
1958ca5cd30bf1a92949fb35dc06e82c03fcebc9aa6ea4c3ba8451145cdf8049
GET /img/static/desktop/sub-menu/sub-lottery-saba.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 30822
last-modified: Tue, 23 Aug 2022 06:37:02 GMT
etag: "6304758e-7866"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xrh5f1Fs8akr7wY3Sq%2BuD3TX8tXDTO60oF8cvkKIh9VQoCof89moJy9KGEJqaB7m1nZmc%2F4muZJ27omy6vSwHk%2FjOr0lX4%2BwQsRbk4yxorjdlGFMVQ%2FBrcoKLhXUHhZfYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e634fff0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-esports-ae_es2.png
200 OK 36 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-esports-ae_es2.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash e22ffc80678c9dccff579cc76e6df5cd
2896628cb2d6dd45d6130088ba0f06c69f1a2c46
8b6ecceba0bd780bbe3df420be20760fd95010732273d7d670b177d29a2b19d6
GET /img/static/desktop/sub-menu/sub-esports-ae_es2.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 36183
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-8d57"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i46N97BgSK4fy6TDjUIpLfCxbtXUeLPIRP0yD%2FxJPOhn0n1vfj8CU%2Blmnn2Jzd%2FwN1eLp8YhyK4QdMy44tO3l0TcWMyg7FyMl8SMsOnQkHIkHgIUx%2FBRAsEYhu%2FwtSFJxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e6348040b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-esports-tf.png
200 OK 45 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-esports-tf.png
IP
Hash a47e06e56a1bb4f2505d55c93798f441
c1498c4774c261e3df41edbfed6567b068c2a068
9fd4b0d41a852e9d76e5d7cd787c527dba222b5aabc0217922f4605d5fe8f443
GET /img/static/desktop/sub-menu/sub-esports-tf.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 37489
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-9271"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xeasCj%2B54sTfYEOlljS%2BD6QtwNAc6Yax7kdRYdj6BL0hu0jTBOyOn2hMGrBo%2FPnx7c8zeQbWrczml3GDygwQbcsz17uvNHn1bkGwz2rBvssLnf2XjqlQYjHAwbkLV8%2Ff%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63480b0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-esports-saba.png
200 OK 33 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-esports-saba.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash a4d07c14906fb20445f40c1a6b13bbbc
f34bd536119dab3324fadb4495737a9a588a068a
39cf8224a5e360d3eb0bb894c94193a327dc3d702fc9048c3f1f62734784086d
GET /img/static/desktop/sub-menu/sub-esports-saba.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 32964
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-80c4"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xpDh%2F5RGqmOQu7XXPqYZEBa4C2Yd38LhJ%2F0EHxnAv4SolDLompMfCvbnvnPSblLFQWtuxWFvV3Wv7x8XRyjyHERFZaYnpkSoKKRe6%2FNqkip3V7K3%2BUD1sKzYrPxLVJ%2BXNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63580c0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-animal-sv.png
200 OK 42 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-animal-sv.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash abc99693ad4cf5d05e88714e94402e36
0019832dd91ae4d631c5e72d9e28a0e7ba15c5e6
7d101eb6cddcf0295f0aa1bc7167205194fa1929a669a7d2854a109e94ec5e24
GET /img/static/desktop/sub-menu/sub-animal-sv.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 42054
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-a446"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8GBZcIOmE3dSEnlfDqTewKmCCXGqouRJhjSA4%2BlBN5%2FOjdZHPG69K6LfDoaoSr4W8G3V1IJW229AEoJ%2FpdTWRLdlyb6atPOsaumnCiRr%2BbbL%2BfTFDGMR2o8HqXA7RSz4Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e6358130b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/jackpot-bn.png
200 OK 20 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/jackpot-bn.png
IP
File type PNG image data, 396 x 78, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a49b334b9be5a2a347cd89d0af719f9
b635322fa562ce43cedcbaaae1a5dcc607843c73
545f418271886b06363660dd9e8332f28f5553bce6000d826ebefeb69d4859d3
GET /img/static/desktop/temp/home/ec22/jackpot-bn.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:18 GMT
content-type: image/png
content-length: 20458
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-4fea"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1683
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aeNzm41%2ByOelZSaphxijjsk7PFUO644Z0GTiTO5OILrYsO8RInX5%2F9vxz0JSMjfHhISjEr%2BB5FbqRbTrvIE%2FemHC03qFK%2FrA%2BEJTknmPof8prSBohsE3%2BIgzoLtSaQtUPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e6398420b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu-bg.png
200 OK 19 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu-bg.png
IP
File type PNG image data, 300 x 300, 4-bit colormap, non-interlaced\012- data
Hash a1086ff70294cdf527580e13c8923975
8e37714d58d81fa4765c4b553371aabf538197e6
c363e17d1c224804097c8f5b2210ee405d750c387c1c72e87082d4b7d8065159
GET /img/static/desktop/sub-menu-bg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 19012
last-modified: Thu, 16 Dec 2021 04:49:31 GMT
etag: "61bac55b-4a44"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KTBoNT2V2v62BBHvygrm3YI92%2BwNM0k31xYVfxTUJ9Z4tVd7uF6Ikry1jBeF2HTVT811kCIDsMR04jHnV9pjFXX64%2FFHGlNxN0YwoKLhV0iG%2Fq%2FDMY%2BtAVy5wX994ulgeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c89c0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/games_money.png
200 OK 3.6 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/games_money.png
IP
File type PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Hash c7930cc01b490d8f53a5da36d16e8f32
589d3859bef8aa242f31d219fb326f4e2843daf4
9886a54f907a2a838103f0630b0785c428f3e7043b968ebea9c89ea8e06b3026
GET /img/static/desktop/temp/home/ec22/games_money.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 3614
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-e1e"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1684
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mCniXbfPw8iSxGrNu5dZQAnjsFEgsz%2B5Pbx%2FxTD4UwejClCcgqhf%2BlNajL%2B024m4UlzmUDlV3rTCNyFCVsu11Cds0ZWvrZjmZacLpp1y%2F8xImHLVstBiAyA%2Fds8znsK%2FVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63e8b80b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/bg-winner.png
200 OK 25 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/bg-winner.png
IP
File type PNG image data, 570 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 6fd57cc21fe1bc92c4603a85621b1612
705888fb174f625916b0d082b124ba930d818cb5
2cbb21b8939791c6e068a809cab7c4059ff111533c6ae20ed4bcae838a158ebc
GET /img/static/desktop/temp/home/ec22/bg-winner.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 25392
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-6330"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1684
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rlKSWv9kLph3qWS%2FXJH7w3gt4pcqCctkKgfCBlfnnW6jHcKec4WC9SPbNIMNgKEL9E9uJDBSATHwuzZwVPVwsMkS8NwSgip7ahPJWNAc%2FQYGUqlZ0DrfvxiLhcNiVCPj0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8b20b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/star.png
200 OK 86 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/star.png
IP
File type PNG image data, 561 x 722, 8-bit colormap, non-interlaced\012- data
Hash ff64cc808806cfebc3fff5f1628103ab
fdbfe058cdb20989f7e7aab6553021b273ce710a
3038260a601ccdd8713c05690b9ea8361995a0f2a919e3695e4e8615b7561779
GET /img/static/desktop/temp/home/ec22/star.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 86235
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-150db"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1684
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2FgDP3B56TFpTqprCqlQhbRz9PrHcawwri%2BH3Hz8AB2uAGeh9QdIAW9%2BEuk6YtLP8IX1thZWfW6%2BviNPviPlsHSL1CVFLON4N1AxSaK0swTSZXYdTjpt9EvK7ic7ha%2BpEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63e8b60b51-OSL
X-Firefox-Spdy: h2
media0.giphy.com/media/PjnIrD0cBVUBbJfZ93/giphy.gif
200 OK 3.2 MB URL HTTP/2 media0.giphy.com/media/PjnIrD0cBVUBbJfZ93/giphy.gif
IP
File type GIF image data, version 89a, 480 x 270\012- data
Size 3.2 MB (3242487 bytes)
Hash c7ac742ce0cb612e314b78d6a43877dd
7a7061930b2adbf5aea659a599098815406f808c
65f9b9d086b15bccfe2b4514960b4800779b28c99544841a50000d1acb0db714
GET /media/PjnIrD0cBVUBbJfZ93/giphy.gif HTTP/1.1
Host: media0.giphy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 25 Aug 2022 06:29:40 GMT
etag: "c7ac742ce0cb612e314b78d6a43877dd"
content-type: image/gif
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:47:19 GMT
age: 3482213
x-served-by: cache-iad-kcgs7200037-IAD, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1664891239.044215,VS0,VE1
strict-transport-security: max-age=15465600
cache-control: max-age=86400
content-length: 3242487
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/dg.png
200 OK 43 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/dg.png
IP
File type PNG image data, 434 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e4d451b7b786e822f69a990bcab5e52
9da884d73fbf892858f5e77c0ce5822ebd7df57e
00e1b0bb1370a795c028bd275374cc8b75460a952d0cd77eff7b957cff5733a7
GET /img/static/gplogo/h-dark/dg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 43124
last-modified: Wed, 22 Jun 2022 06:45:20 GMT
etag: "62b2ba80-a874"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ti9W68iHzGNrMD3RyD%2FGWlixm7qWZBMJLZhvqe9%2FOr74W%2BFdlaEmO%2FDTeRSq4Wep0M8K1nXUyeWp1U6cf7pDPal8JCYJ6qGkuQbd8s8Ayrg4%2B5qYsmgSNs4gEKNbL3eFEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b86f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/cmdbet.png
200 OK 19 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/cmdbet.png
IP
File type PNG image data, 340 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 8948cfd9ea47d72640c69289e5b6653a
b749bfc1536802a7729c21d95182bf53c6e84813
22c20481be54e176edb6874f7a10c848376aac6a78b2a4eaa3a97697b9ea0fd3
GET /img/static/gplogo/h-dark/cmdbet.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 18927
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-49ef"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xZf4JXNNS4AGnGbsUf8foDtLvB8hEFcbBjHrWVz7S1kimGyeRTpEUsiPrSlyGy2ZBT5CVPwT%2Fi4dQvyWRQ%2B%2BggnJR4SbP0Gde3s1P%2FgS%2BW%2Ff3CXNiotR%2FSnAMDyD73G3Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a86a0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/kingmaker.png
200 OK 31 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/kingmaker.png
IP
File type PNG image data, 417 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash d8e880a32a9843f29cfa7857e18ef3db
c659d11ac11463f1ef8a1b906cc46215eca5ddb6
3dfdeb860c2bd75e4494bac95ddcd2e48faade104d138958924db94133ceb82c
GET /img/static/gplogo/h-dark/kingmaker.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 31191
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-79d7"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EguM1rCNqLXomKYOsgjYA2SrceI2Ax%2B06IEis6M7aQqFqP0tVMol7ptqfLpXmqHFw%2Bruyii4x%2BGzYP3wtHOIiGRxNURKnVkaZGWBnxCj9Swy%2Bdr6%2Byn0uJZhzZDg26%2Bq6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b8770b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/sexybcrt.png
200 OK 49 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/sexybcrt.png
IP
File type PNG image data, 300 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash baca437e884488d8727b9c9ffe36ca25
8cbe699e6dea79066eaf9d3be2b388a42a21ea5f
4056bc602aae9e4cd78356f1abb4e29a952ba161376a0219f73621c93fe9e692
GET /img/static/gplogo/h-dark/sexybcrt.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 48596
last-modified: Tue, 21 Jun 2022 08:06:06 GMT
etag: "62b17bee-bdd4"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=es3mlXJbUexL0v4SLj4fvgNq0%2BYKb7w6pfDt5Na5a8ZlFik084JHU2rHZQhfV%2BgmhtTlXw%2BoZEJMITiF7G%2FuWyuFTq6QPVtcDS5%2BiBWu%2FJWLYUtYYiIr0FH5AgL24RGh5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8890b51-OSL
X-Firefox-Spdy: h2
cmbi.licimg.com/TeamImg/T_105.png
200 OK 10 kB URL HTTP/2 cmbi.licimg.com/TeamImg/T_105.png
IP
File type PNG image data, 150 x 150, 8-bit colormap, non-interlaced\012- data
Hash 242e84cdf0a5175f6d2d203e2e7034cc
e1d3a99e3f5d28bd66b7dff8df58d60106c888ff
d00642e08c20409cd47a248a21f40aead6924206edbd828b93e52742b8d54de6
GET /TeamImg/T_105.png HTTP/1.1
Host: cmbi.licimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 10096
cache-control: max-age=259200
last-modified: Thu, 17 Feb 2022 10:16:48 GMT
etag: "028e378e723d81:0"
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-headers: *
access-control-allow-credentials: false
access-control-max-age: 259200
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e651ed3b51b-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/coin.png
200 OK 3.1 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/coin.png
IP
File type PNG image data, 70 x 78, 8-bit colormap, non-interlaced\012- data
Hash b6a60fc12eff46593667ccf70ce0f697
8fa78388261dad8c2901d6d1944777eb4aed9dcb
b1a6cb69a3ff2db9146483eb906bad903c881545471b43e23d75bc5ca508e187
GET /img/static/desktop/temp/home/ec22/coin.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 3066
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-bfa"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N1GubCw%2B4w5xU5H5s4tGVUlHjwPoG5LkHmmdopEZSgYGdj9%2B%2FX6aVZznnFKZ3hgOG2W79ioYMy5D%2BVAaTXaXgEPvLO65jC37h68rxwKrgTdTUdQnZJYz8gBxKo0ZxdsKMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8a10b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame_double.png
200 OK 18 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame_double.png
IP
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 86e4c0b056c9271574c8b72c8c5a979f
fcd1324cc30e47880f0c9a3ffef23535ff070ddc
0545dd7030fe8d7d4339a0379b760092cc085b35e302ba29c0947ad55f79cc22
GET /img/static/desktop/temp/home/ec22/quickbox_egame_double.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 17763
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-4563"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jt8UAxuA7%2FLuMnsHWl9AAyc%2Fv1fGHkMfR7zk1C2s1osuWpTVR3w4W6Whf5S3zVvRYp%2Ft2xhJybEGf8GePOtvcYAYsflu5QtN19BF3mWubKO4P%2BflATlCfe2z6epT0k1f1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8a60b51-OSL
X-Firefox-Spdy: h2
cmbi.licimg.com/TeamImg/T_129.png
200 OK 8.6 kB URL HTTP/2 cmbi.licimg.com/TeamImg/T_129.png
IP
Hash f8b00f43608e8e08e4b427d0c407c5f5
8c2c9f6646f80d41fa31bdd9410ce4c07c6b10fa
389e73a17cafe3dfcd824aff7f935ed99661474c8260ec6bde60cc9de473976c
GET /TeamImg/T_129.png HTTP/1.1
Host: cmbi.licimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 4418
cache-control: max-age=259200
last-modified: Thu, 17 Feb 2022 10:16:48 GMT
etag: "028e378e723d81:0"
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-headers: *
access-control-allow-credentials: false
access-control-max-age: 259200
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e652ee7b51b-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-gpi.png
200 OK 32 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/sub-menu/sub-lottery-gpi.png
IP
File type PNG image data, 300 x 350, 8-bit colormap, non-interlaced\012- data
Hash 9fe1ea62935dfdef278bea62549f270f
33ff72f15df4e1f4d8c2549db7b91dfa3bb68331
384e5fd9cc2bc494bc803efa4f6a4c9fb795b585857a068fd3276052e08a0d0a
GET /img/static/desktop/sub-menu/sub-lottery-gpi.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 31602
last-modified: Tue, 17 May 2022 07:35:35 GMT
etag: "62835047-7b72"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JGMJ4%2FiUr8GjrY2lTv1Yfuh%2BRNyV0gORL05i7CwLuGOo5FJZb1N1Y7rBgtfc7VIx%2BKao3B70WKkFal7BMPAyHXB5YCOjjl6acGX2dW86b0pYD8SvspbuKYfaQU%2BEkmM5hQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e634ffb0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ae_lotto.png
200 OK 32 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ae_lotto.png
IP
File type PNG image data, 285 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash b93d3e51024affbbb81aa2813d11244d
eb0ac6838f17ad0d174f2ec9c80f4f91ef917cee
67276e81f9aecb007be21e47d884f0f963725276a1c4c4c40f22414c8fcc3fd6
GET /img/static/gplogo/h-dark/ae_lotto.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 31735
last-modified: Tue, 21 Jun 2022 08:06:06 GMT
etag: "62b17bee-7bf7"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IOtRzMPwdcVN%2BzbD2%2BC58%2BhS4uOQKiXOc%2BX%2F55mfq61BAOYTfjdSunM1Nemv364TV70y8XrDL7fIgskBZb4WucBOY4rVVTpRf9ZdwGgsdNVQl5aezbQ6AcGaz0nrSKqmYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e6398500b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ag.png
200 OK 19 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ag.png
IP
File type PNG image data, 340 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash c82c3b733ce6875b666626f4fbc8b81d
7242d9921a4e065ebc7565dbed578937339ce097
ab198a5294e90a9f53285ac68b0c3795004f0f77b1147c0c086fd07cf1aa42cb
GET /img/static/gplogo/h-dark/ag.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 19401
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-4bc9"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=372%2F0bef6Kl0%2FK%2Bdj7imAeLAa5a6gy27wXnk%2BiedCq%2FUA%2FrB1ay8nzbjsS5B1bmGzyJgw%2Bv0VrBa308aVJRmcfIzXivfTus%2BQa6fid7ZaVqlw1%2F2hHfL2h6aSfOZjhSksA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a8590b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ae_es2.png
200 OK 38 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ae_es2.png
IP
File type PNG image data, 351 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 12009ac54c7be9edab54ddf9d09de8b7
bc9a318d1c64c16e18312e3b94f6dc5852c2b0ca
8788ef21ae4f14cd4eabbed54386430c509ed3a7ff207f6b2008e8ea179d0b0b
GET /img/static/gplogo/h-dark/ae_es2.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 37984
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-9460"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EE3ZM8649iMbxLVkc%2FIK3UB%2FKGcZze%2FNWmZzbzjmzD7uBejPvl1lQNoioQi5QfskWOYG%2By6%2FUSozoEugChwidyTV6aGu%2FD0JSJ9K32yffRkO76C7cyZQ0%2BI2WMkie0HIBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63984e0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ameba.png
200 OK 10 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ameba.png
IP
File type PNG image data, 408 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash eb883d9862c6e6f57caef8f8187aa3e8
25f61111da76cc08afe0b445279c4473979a3040
f81c1bf4e5c5552290ccfe3b3bfc114bba12f04da75535f9627b4bb4b68e7e5d
GET /img/static/gplogo/h-dark/ameba.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 10547
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-2933"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PwUgLPD8SVg1DEQVyWTtjjNJlRAmY%2BQ5JheKUwvDXnnCqbav1iJ3%2BIRZElW6KfOf%2FV02Jn931cU5iYSoFOJHn6pomiqAnZNJ8LRnVe4YYd6tYmQdzFm9%2BlFuxjGFxXVdOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a85a0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/cq9.png
200 OK 21 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/cq9.png
IP
File type PNG image data, 269 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 1031f81b2faa94ef0374da5fcfe65eb3
ee7958fe63d3180b366616d2f2b5c3dada7627a2
1bc7ca1a7d7c719abfaa1a668ef749b5e8c320c47ff4c4f716a29e62fce476e3
GET /img/static/gplogo/h-dark/cq9.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 20604
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-507c"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uD2xvLs1vSXqobK3Xdo%2BUeYgvRMspnxj9KM9wjqXh7sp2SlLla5Sa9q1QBGjj4YQqRV30j9wxtukrGcSTWmbnz0LYMeNuQNAS7wq96LuPJY%2BA3VARbp0hRs0PCmbQWQ%2FWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a86b0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ae_gaming.png
200 OK 44 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ae_gaming.png
IP
File type PNG image data, 342 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash b013c667b749030e1c132456240d5ea9
12caf7d911e0799bc38fe4d0c7ed4fafdae69f77
44c1084abf3157bde9fc5850a98edfd4c02a5823bdb36017d65ce0656e7d3e0b
GET /img/static/gplogo/h-dark/ae_gaming.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 44333
last-modified: Tue, 21 Jun 2022 08:06:06 GMT
etag: "62b17bee-ad2d"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2FQ72mbRCcfQlQgUOsp6395g3Cl8245Vx%2B41eoLa8KuM%2FyUmXQO0%2FyBk3dQvFBytsop4z1P%2BH2kCcptlzmEJ6ksmw4KpIwQAEoMCmxYNBUGr10%2Fn0DJ9%2FZPTyc%2BY%2BwF%2FUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63984f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/gw.png
200 OK 30 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/gw.png
IP
Hash e38ae12c0072dec1fef3e44f56e5748d
1aba5a8166571c4597afbdbc06bbdffaf027863b
b98dd6a8d7062a0177d93d43542c5e1d6f9baf3f618baf582e20ce1a3f038b03
GET /img/static/gplogo/h-dark/gw.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 25080
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-61f8"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G6PozNo%2FfxdpxCpJ6BWiNjXECY7lrbEVsonlZt9ox7zycOAT3wX7zPG1%2FUXYKx5FmeSGOzpYa1FgSEsrcB%2FFIsu4J2ecr2jWYFL2kXKmf1CPgiwtL%2Fyi0kmvPqMp1%2BrMPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b8720b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ae_play.png
200 OK 39 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ae_play.png
IP
File type PNG image data, 307 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 6250e3b089cbc41552cc5481f85094de
821a4f5c563652fdb8449b265aeae9daa39ac8b7
fe969770bfb81c2b49422b55eeca2b589725603b9cf796b39516480b7afd2250
GET /img/static/gplogo/h-dark/ae_play.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 39432
last-modified: Tue, 21 Jun 2022 08:06:06 GMT
etag: "62b17bee-9a08"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AYXOyjCVTXOeGQ93LCfgaMvNIK0o0TJut91gAGuV2LVtPPPbAUGh3deQEoJ1Jb%2B3Cx1AdLKXIX%2FU1yWc9kw3ZuKM5Le4juIF7P8XmZnCtP4lJLXcUJtaI8K74W1LcAbhFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a8570b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/bbin.png
200 OK 21 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/bbin.png
IP
File type PNG image data, 282 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash e761360ce63c302924215be7fa772298
faff15640c9cc757849ba79cf9ddb40ce38a6daf
53b8dbb356cc7d63c076467d391ee118ec8327c913349fce319a914ee5f7fe02
GET /img/static/gplogo/h-dark/bbin.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 20927
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-51bf"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IlUFTRmmcGsC5uJLd47fSMG2H1BMu76sphiNjF0Y6jSylz5bbgs3oIbzgWdH0U7QKM0ly8q8V6%2FVbN%2F2V2GkTWqbwxzG5jIU9XYB%2BKXzzVN12zVkho%2FsmiHlksCppX0CoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a85b0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ae_seven.png
200 OK 49 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ae_seven.png
IP
File type PNG image data, 326 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 79b48a93271de2e3d795436338d8b09f
85f00a5d93ff35b8dfcb8e9798cfc8fd46d83777
d880a5d390acb41a61f5299d18f3638d8cb3bc4ee2530a9f9d12a3e7abc71860
GET /img/static/gplogo/h-dark/ae_seven.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 49185
last-modified: Tue, 21 Jun 2022 08:06:06 GMT
etag: "62b17bee-c021"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zsB%2Fv%2BRS04gfMYQ1Fc6jB10ldswsUatfp8%2BK2pRXyj4DRB8Z2RyCz22Sp1LGgnSSYGBcYQD4PbxeLClMaNAL%2FTMsOuTux5ttqmj1UI%2FKIBKWclCYeJkSgacyLYffOYiobA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63a8580b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/sa.png
200 OK 12 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/sa.png
IP
File type PNG image data, 346 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b56dd3f8d9618ab0c5237fd8306935b
7036688a0cc08f4b49a28c49916e224e927afa8c
2bd46ab228195b37255a4a31735aefba0058f5de328ebbce48586b1c8b264827
GET /img/static/gplogo/h-dark/sa.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 11868
last-modified: Tue, 21 Jun 2022 08:06:06 GMT
etag: "62b17bee-2e5c"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MQZ%2FWuZKyk7HfVYYTsFKa7zCatwegDX0QTkk4%2Bwjj3THtWkYCWwyWs7RLyOOGp1rKkth5GdETsLr9Bsu0s5F1QYfHTdL1ANrhigTsSNH4LPcFep3pzhx6pdMMsh50ftMoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b87e0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/jdb.png
200 OK 11 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/jdb.png
IP
File type PNG image data, 217 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ecb926e49f9ae1bbfbd8a13e2a13ade
38fe5822d144011eb3ea96d8fdce8c39fea540a4
4b5b3b175cc73a514310d7c080d33727c433f4b6eddff26e48b2afb107a018ce
GET /img/static/gplogo/h-dark/jdb.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 11422
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-2c9e"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YnhTwvdftzr42SUbn2d8KxCggXpSfRfVvbq3ruSykaWnQ7vQcUTH1vW4dj5tTMiVGqbCi7v5nCeoiaL3pHeS%2FiOtIgf9Gnf0uqbB19XlopjjWOceaLFcXHAofxE4QShtvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b8760b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/pg.png
200 OK 25 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/pg.png
IP
File type PNG image data, 376 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash a0380ee2ca96bde060d158c88de28aab
75cd667d4071b58c524a1882e615d9c007ba8b0d
6b0d7fe63fe086604ff08d80934d77c74e0436d8b29c213ac66158ca76f942d9
GET /img/static/gplogo/h-dark/pg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 25268
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-62b4"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bt%2BS1V8CqwdITS7EmYRC0Pw720%2BanApp7R5aYWkKMsEqHLZskWRh780yC80tgUl3cV6kJ%2BXQPr7J3FDBcBqFij4KETTMAPN2Rp8pFjJzBoJOwQctvt9Swv95LZR7MQBs%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b87b0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/gpi.png
200 OK 19 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/gpi.png
IP
File type PNG image data, 447 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash df236565a070ab20f19c5bf24549902a
bcad4256d1dec0a85fba83c633a9a34da00e4c4d
59f504b6f95e54f32e93706f6f47baa85747bdbf887a62fb099a661f496cf40f
GET /img/static/gplogo/h-dark/gpi.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 18759
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-4947"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FF3U8eXO4EsPK5NL4Zjp09BtxdIhJdE%2FM8pi0FwePmStapnUKrsdVBsRuj3sffMsBABHR4cNPJI53TnRIku9miIQVFGru72IRL3n36nINg%2BEW8wcyvUqBtuG9UMgdAs89g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b8710b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/tf.png
200 OK 28 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/tf.png
IP
File type PNG image data, 278 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b3fe539bdf9a443b5bbf91351195eaf
0feeb16559853dae22321057b9bdfa403a55bc44
e1a2625fb0f42e75062982b2fbc54ea3f003be644abc4e4d92b3f2612c1e991f
GET /img/static/gplogo/h-dark/tf.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 27564
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-6bac"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VxJrA5xru8KCyE%2FhEt9F3%2BaY69OcS55BhQm3FytnKTi%2B0gxMUHTz4Exm5h96VVH2oxQlvxdGsiIxh9b2I9V6kpwi9L3mJ8mWmiqN%2F2k2qzCdoSI0wX%2BVjPx1dZbMKRriRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8950b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/lc.png
200 OK 85 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/lc.png
IP
File type PNG image data, 286 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ca22d2d9fddd8c6ec460310b1f8ac16
d29bdcc4ba0233ce83efd8b0ab5ce508ae5b5894
7fdc1e7e1e49bbda2954051fcb81cb1f0f9d78ed46e5890b867944f503b4d812
GET /img/static/gplogo/h-dark/lc.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 85180
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-14cbc"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q43D5OTssJ1ykt51PB2zdef3XPn3C1rfclIl2vb468wsycxvTKrCEH7rgH32VDcADpmUdqisDwmpIus0Apv1uNmCfXB9S08o6I01MvyhveUBjjX5f2SCcA6hifzPQqpB4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b8790b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/pp.png
200 OK 23 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/pp.png
IP
File type PNG image data, 379 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash e5000adceb10ead2a5fae72d3bb492f4
c616cc24f4c4d33d43114fcc42524c92741235af
d2f7dad0a4b4dad5f49ccde3e1b770f6dd77e2fac1c4bc50af432b8dbf0305cc
GET /img/static/gplogo/h-dark/pp.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 22968
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-59b8"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1aCGvehg%2Bz7HIVVrZAKrkXQI%2FiKewWYMduAm2%2FSRw4AHE8dsGnYNXLoSWc2S9R8MBLVwwg2tG19170A%2FFMxpPXlhbjWEmNvFvNQUiwDn%2FEIewd53LlVD47CWyOkPPtSXvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b87c0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/sbobet.png
200 OK 11 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/sbobet.png
IP
File type PNG image data, 349 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash ecdfacc9dfa6effdf798a55e8e918319
fc954aee6fbdaecdae0a802156234c63c6838f51
c4e8e1336c95d75d96c452b3b557d3e3d167c842efb813b9daa4f0bb7277f28d
GET /img/static/gplogo/h-dark/sbobet.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 10710
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-29d6"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pkBNa2e%2Bb7hwBoVTiWfRbttpBAENCdYrR5k8MvMVsVnBc0Pgq%2BdDLnTrENPhdY9GKSMe9RtwSgU9OQlqOf2fCxFgVlmOQeE1BbZB0vvl3ht%2BxRBuc89fM%2FeiIsQe%2FWWWyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8880b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/saba.png
200 OK 14 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/saba.png
IP
File type PNG image data, 303 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash f360d8c52563b1c90084b0eb63fc1d6f
18b6d34040383a43df760e12f3c33be1666d758b
e8c63c70ae36100c05250ac4adb582df414d995b3e344475d6c4f8bdc342abbd
GET /img/static/gplogo/h-dark/saba.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 13843
last-modified: Thu, 01 Sep 2022 03:45:25 GMT
etag: "63102ad5-3613"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TTg9eLUX3c6jr7lM%2BvGM93G3ghSuuE8h5CO0WHGe5GuTc5KLXD5ONZHpsXJa1Sez3%2BbpvJ18rQYKZZSt5xeHgL7M%2FDylfrJ4xI54gFvHO4GZx5nL6wuedDGNNQXSC48vmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8860b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/mg.png
200 OK 37 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/mg.png
IP
File type PNG image data, 522 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 456c5bbc75b5e7e9f459cba61179934a
087378ef5d9357e879b194d445e308efab15c23a
6a92b5406a0d9ceb0b57db51cca0e6e5878db4155c5d5b413179181d373bdf04
GET /img/static/gplogo/h-dark/mg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 37015
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-9097"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TR0wQqBwtoJJ5cx7lJXnLNRT8Lv7Gv%2Fpj7GDrrzJ3kb58n%2FwJ4q5BGaLT0QpfJSaiifZpwmuS%2BGjUMXc14J42lRS2gqtTcH0Q1KKwo5%2Ba0xqSuEMLogFc8OW%2FIgM8HruYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63b87a0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/wm.png
200 OK 28 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/wm.png
IP
File type PNG image data, 388 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 352128c68069300455beda7bb3f90ce8
4423768ef6342d5013076213440428be036d7d03
43256cb9432d7989a7a04744d535dc2124303cb7554a0651465bc5f1af1fe04d
GET /img/static/gplogo/h-dark/wm.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 27578
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-6bba"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qEDRyxtRhxSRO4MxpazMNeFmdT%2FWgsOF1xu5WrSYjA8FuG6kdlPwowwfAAkwgaY%2Bb33tQ9HL3W6rM%2B0bt1nAB7mvTUqLzSvriaEDEclDVA9rmRuOEjpVTbd1JXuHO6hsZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8970b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/ugaming.png
200 OK 38 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/ugaming.png
IP
File type PNG image data, 315 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash b46ed5bf2b03bc3b8a23437957cb67a2
5da542d8f88784bf1ca11211dd994f4cacd8a9f6
508fc8dbb147a819546b83301f4b1beffe52b62906faaaf54c9ffadc714d0a6c
GET /img/static/gplogo/h-dark/ugaming.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 38035
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-9493"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cm%2B5utg6g6tZ3nppqeDWUmipO%2FbZ32248hfy5opDqfC04ffjARu5Ymf1oCSuwSyh71V8kthg1qOg2FvkNLVOVHqs3R%2BpwMuYIAd8lghMMTXb1tQMZOCMUgJKw6piKCEkbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8960b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/gplogo/h-dark/sv.png
200 OK 41 kB URL HTTP/2 csi.20icipp.com/img/static/gplogo/h-dark/sv.png
IP
File type PNG image data, 343 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash dc8978fb159628dcbeaaeee993f6a01c
b12850daf5716103cc05e7d6ddcc462364a792d7
7dd5033ee3a192095fd7852cacf4efe11b08638e14bf4270c0400a1ed46ec830
GET /img/static/gplogo/h-dark/sv.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 41237
last-modified: Mon, 20 Jun 2022 06:27:03 GMT
etag: "62b01337-a115"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x%2BzyyaFGeUFq4K81HqnYgeK%2F%2FcM9F7WKekP%2BHNT3DxHOfNE%2FfqXjJRPdCnmG%2F5lflqN10CAyMdCZFal4RjclQ379y7NoB6UDVngkC4TV6NqVGsPoLgtAe8GCpR%2FvZkZx2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c8940b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_mpg_bubble.png
200 OK 2.3 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_mpg_bubble.png
IP
File type PNG image data, 40 x 102, 8-bit colormap, non-interlaced\012- data
Hash 6c3074be44a1cbbf8e96c7e0fc4b4b2d
4eae691917c3300a7291a5021d9d83e949f6b69a
61e9c8f267d1a7837967375c86c1ccb68fc730725e65201cd804975ee1111d03
GET /img/static/desktop/temp/home/ec22/quickbox_mpg_bubble.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 2258
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-8d2"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=liWwhw9FITYqn2SfXXRjeu0W%2FpCtLJny7MG3o91CiIPpHsQgokyQWcNzO4hJ83IRhjdADDEYna5PVmb6wAloZbnJZJezo2PnVa%2BEDC1N3VK%2B5cdmEtBregRqwdZqu%2Btv6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c89f0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_mpg.png
200 OK 85 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_mpg.png
IP
File type PNG image data, 700 x 700, 8-bit colormap, non-interlaced\012- data
Hash 20e5e3c3ba8a6f3b205a93eda055301c
cb13502a9ae6aeeca8071b56dbca256444fe92a0
d888239c25c85ce1a84237d98c527155fb2183ca87cf8f0d8a9f5fe13f97ff62
GET /img/static/desktop/temp/home/ec22/quickbox_mpg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 85345
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-14d61"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bciqipraraxtleiG6TkNDeSQ0KjpmOwfmId8rmhIDVTphshGW33N61UXauZbCj4czQDpOeS2sLhLCwls4YyZ1y08f3SW5YaHqPSF%2BSMZ%2FCj%2BGZAzhebshuG8mA58e%2BW8Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63c89d0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_lottery_ball.png
200 OK 12 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_lottery_ball.png
IP
File type PNG image data, 350 x 350, 8-bit colormap, non-interlaced\012- data
Hash 9b5714cf27affb6c633628c7f7f8b291
dcca21231c9ebfae57baf0f0acde55bf80a5f62e
e77ba4036d1c793a701e01f0f1271bbbc51cfb6e911a63c00845304aeb8117d2
GET /img/static/desktop/temp/home/ec22/quickbox_lottery_ball.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 11536
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-2d10"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xBs1vF9Jri6Kw8V4NbmDjl0XF81r%2F11IKax8Fzb52pp0WhFDf2HyZX2CxfWzFxnVY%2Bwj4KM96tu%2B%2BP8poJkartnwOKxRNwbrEJy4QITE9AVITWLTHJ934B7pis1Ih0Kh8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8ac0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame_skill.png
200 OK 19 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame_skill.png
IP
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash feac87de9a5aa1a689d636654c186e8e
3fff780c37f33c1149b9fdb18ebe384e4513381f
3cf8cf695dc11ab72b2d26e6490bd43ed0265c6b7283c32250a75a628fd38c3c
GET /img/static/desktop/temp/home/ec22/quickbox_egame_skill.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 18832
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-4990"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4vYQXUx3wIxi4rpJolT9W6knbnCMnhWmEbMYpdzXqQnJ1C7FyETKdkb2KPC2SHBvC2m23GbMjvjJqbbr2wPYP6ny7f1qAhmuFMT%2F0hV8N%2BJwhpwAbI%2BUUei37bvVIWwf3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8a90b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame.png
200 OK 205 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame.png
IP
File type PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced\012- data
Size 205 kB (205155 bytes)
Hash bb3285e4dc398a1deb5f2c2a05db4e03
4da18bc8b902c9e63dcaa520cb583a1224c79088
02ba3c634f469bf27e405b27e863dfc3b8c564f78fdc8c84c6877c24444abb05
GET /img/static/desktop/temp/home/ec22/quickbox_egame.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 205155
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-32163"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PObVEUuHbEKSAFzJX%2FfWJ5fGPncnolg3a68zEW8Az4OQeiDdgTLbi%2Fu1YUTj%2FRSxMGCoEj5Y%2FA9c4kXEOINLRV4TLkOWB7HtnT64BIquDFGE058jZc8vSgrw1YNaJ5WDaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8a50b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_lottery.jpg
200 OK 130 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_lottery.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1178x1305, components 3\012- data
Size 130 kB (130314 bytes)
Hash 7944773d0c8f4cc0db7ba2072b51c9df
874ed270277441c961f6042fe7a486e8a2db1ac6
3b8df436ed12688af05f507a7b708cb59ab46926c6180b24dcbed320ea99318a
GET /img/static/desktop/temp/home/ec22/quickbox_lottery.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/jpeg
content-length: 130314
access-control-allow-origin: *
cache-control: public
cf-bgj: h2pri
etag: "61bac55c-1fd0a"
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=082%2Fxt0JyBUDze%2FLgsWSN4DSi0u91py1MMlO1APP8ULpwbwCpLmApk%2BwcjC99IG%2F1atS4cS65LQmHwro8tKrminGjN2NSqHC8XTW0UzUKS8mzZPme3crDsh4%2Bf92UniMbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8ad0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame_hubg.png
200 OK 12 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/quickbox_egame_hubg.png
IP
File type PNG image data, 545 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash c751728d73ec52737dbc7b89ca76c3df
d799f542f971108b2d40808688d12a015f5e65f7
9cb822be31f850e3e75c24e6b77daf44b8d6430d935029bcfd8e81feb54790ab
GET /img/static/desktop/temp/home/ec22/quickbox_egame_hubg.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 12204
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-2fac"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpF6vHA7qGJ1C7P2Op1HaGvxh08CaWH%2B9qf9RN4fFpSe7jLZjY7n9jQCuPeVHBgYie6FhWnoY9Txw1KLOZR1So3qyRxpXNTgDR7nXqqmvlSrklzs4gv1RmBq6b%2BuyhUJ%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e658abf0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_live.png
200 OK 33 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_live.png
IP
File type PNG image data, 270 x 270, 8-bit colormap, non-interlaced\012- data
Hash cadec16a28051699c4ca3295c0504a0f
78d41d815827acdba33aa07a29eab54c4015eb1a
67bf34da7c9fab939788a7419d4d65d143bff90c67c0e2f11bf6a3f137c370b7
GET /img/static/desktop/temp/home/ec22/squickbox_live.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 32671
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-7f9f"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uHm39vZUaoQ4QQnF8j%2BC%2FKcwNxFD5icyOgy3nbMeVfgE97nZmM%2BuOYcwO9gzv%2BrLmltwbc4HUFqVN2gDbV8f3oh7zbovOrrp2ApeXG80cyXHfOhxqC3HLHgngRjVolC1nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8ae0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_sports.png
200 OK 41 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_sports.png
IP
File type PNG image data, 270 x 270, 8-bit colormap, non-interlaced\012- data
Hash d9d7d8016a1d94ac72141fdacf390a8d
83596b78f0a820a1a78d789f468873d9016b3046
91437ccf86a395ecf01b9ab4439d79400634d3d7dc8b3c4c8aac2307125bf64c
GET /img/static/desktop/temp/home/ec22/squickbox_sports.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 40941
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-9fed"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YpVTLer7A7CmBgD%2FGMIy3%2Bo6Jx4ZObDgeZmMvZ9TwzL6MXD0QF%2BMzE3kyoWd688eD8Z9QT4gSEaWz2BTKvdIx%2FQIBf8KnFdIzSTGzLZBZOtf8SEEJQlW%2FchmTPD2cuQ3bQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8af0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_chess.jpg
200 OK 66 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_chess.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 406x405, components 3\012- data
Hash 02c8be69c79b690451616607878df315
42b668a8c94908db79f94d273c62134aa09e9e5d
944ab14e754b8bb65af763385094c08c7bf9d2ac3838cb6e6f4e7dc58b4c2951
GET /img/static/desktop/temp/home/ec22/squickbox_chess.jpg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/jpeg
content-length: 66374
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-10346"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iOqg0814SqDUGumo7lHPKAXIGUXbcnF%2BSmTVIN8H3ppdyK6Ee%2FolS8xsn%2F94aCYNi5Uy4%2FAHQ8k7EdnSvSdUXHPYuralUWi5gOWiqQH3bPmvHG5n7RR1m6L71KAhSSo4fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63e8ba0b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_horse.png
200 OK 28 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_horse.png
IP
File type PNG image data, 270 x 270, 8-bit colormap, non-interlaced\012- data
Hash 28d44f42dafada541dfb000179415a6d
c911ec296bc1ce8750f459b744a11b8e8dd18205
902addd0cd8f6c9e09ab980ad12e6fb553af954e0c626980e4783415c8e874a2
GET /img/static/desktop/temp/home/ec22/squickbox_horse.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 27751
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-6c67"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=APUdudgzL8NbmVPfjqXbKAJBsGVN4YEi7%2Fu%2B3jSajbOTJW7mpmly3zmn%2FlKN5EODHHwaPv8CO3EHjlCHMp3xZeHdb6KstvPLK1cLkeYx%2FNFgih5mCF0%2B8Ga1UeZy2bNHXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63e8c20b51-OSL
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_esports.png
200 OK 167 kB URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/squickbox_esports.png
IP
File type PNG image data, 270 x 270, 8-bit/color RGBA, non-interlaced\012- data
Size 167 kB (166609 bytes)
Hash 00dda431e7e6c4ae18a04b840850743e
7a0fe070dedbebd1704b4a93801497e0568bd222
421488c82861a2e55156c72d86444464b711b436073cc02a7fbf7a40e053dd67
GET /img/static/desktop/temp/home/ec22/squickbox_esports.png HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/png
content-length: 166609
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: "61bac55c-28ad1"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rR99s13iwbRLEEQ00wE0Ma%2FGJNXMCjqYX%2FCTbxd36UY4neJFpgb8RzXKSKzWvYrNwiQ8TkmrBidAzCgwrG7EiZMTFh5TFWW%2Bg5C68pZBffv6PGSKZY2DUXD3r1gX1PJSYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63e8bd0b51-OSL
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/announcements?anntype=2
200 OK 0 B URL HTTP/2 api.189937.com/tt-ecp/api/v1/announcements?anntype=2
IP
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/announcements?anntype=2 HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pY2IFwjd8yrttF%2F5RjvrQfzA%2FCVQAksxzFdTMhuFnbeogi%2BMxklweZxElkwzIKsxUhMxEV8rg64wIezDeaycVtDlD2bBxQGm7C%2BF2Gw7SRlEmqthja1SQggvSciGEh0j8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e571e4fb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csi.20icipp.com/img/static/desktop/temp/home/ec22/icon_champions.svg
200 OK 0 B URL HTTP/2 csi.20icipp.com/img/static/desktop/temp/home/ec22/icon_champions.svg
IP
GET /img/static/desktop/temp/home/ec22/icon_champions.svg HTTP/1.1
Host: csi.20icipp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.189937.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:19 GMT
content-type: image/svg+xml
last-modified: Thu, 16 Dec 2021 04:49:32 GMT
etag: W/"61bac55c-7f4f"
cache-control: public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7xGs19JhkABPzYWTYP6U564AHAW%2FIXJvUbBSFZ9iX8GSnR3%2FkO3QsglYAmJAXHzQSDp%2BFdZ9eH5gEAt4R2OoFk%2FwchU2bEd%2BWdreqAJwMOgSAZkT12XTAwXBubEvd79F7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e63d8b30b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/staticpagesettings/SignUp/orders
200 OK 0 B URL HTTP/2 api.189937.com/tt-ecp/api/v1/staticpagesettings/SignUp/orders
IP
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/staticpagesettings/SignUp/orders HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mt8yk0iXgjeZ3Tm0XoIxhZM%2Bv2tOfjLjil61oZmSszw8pgUdIT1n9MNlswFwrJUhM3Rpw6j1B7N4U%2BE1wJqzCc6eEvncH2JVNejDAPifnRe5LcCkWIItdPKbNI7M%2FINb0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e53b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans:400,700&subset=latin-ext&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans:400,700&subset=latin-ext&display=swap
IP
GET /css?family=Noto+Sans:400,700&subset=latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:47:14 GMT
date: Tue, 04 Oct 2022 13:47:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
189937.com/
301 Moved Permanently 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: 189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Tue, 04 Oct 2022 13:47:12 GMT
location: https://www.189937.com
cache-control: max-age=3600
expires: Tue, 04 Oct 2022 14:47:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8QX9its%2FbBIIYEX3ZeN3R4nQ3Kzy45hxK6h2Pafc0RLtnqK3be4hnqEGOKljex6lfHKP2b6SREEDS4w%2BRycIesbq6SlcDHjPwQOzLmisb%2BPbRZ%2FJ5FyroxVd7m98"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5e3d0fef0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.189937.com/tt-ecp/api/v1/register/setting
200 OK 0 B URL HTTP/2 api.189937.com/tt-ecp/api/v1/register/setting
IP
Analyzer Verdict Alert fortinet Phishing
GET /tt-ecp/api/v1/register/setting HTTP/1.1
Host: api.189937.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.189937.com/
Origin: https://www.189937.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:47:17 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PATCH, PUT, HEAD
access-control-allow-headers: Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-Vendor-ID, X-Vendor-Key, X-Forwarded-For, X-token-renew, X-Live-Site, X-Live-Agent
access-control-expose-headers: X-token-renew
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MlKJvgG2RneyGSK1eBpilStzqmwb%2Fk6YL7DjqD6leMu%2FDRmGoACcqHCMmvUWENfTobVy3RHMBxvXn73rDqwxicpsL9ifrNplHjjpAJpMmiayf6%2FM5u1QkDQQAm8xVkE8BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754e5e572e56b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.154.52
23.36.79.17
151.101.86.2
104.21.4.152
93.184.220.29