1xlite-118654.top/polyfills.js
0 B URL 1xlite-118654.top/polyfills.js
IP
ASN #202492 Silverhill Group Holding Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /polyfills.js HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: text/javascript; charset=utf-8
content-length: 0
vary: user-agent
cache-control: public, max-age=2678400, s-maxage=2678400
etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/runtime-af2d90a8.js
200 OK 16 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/runtime-af2d90a8.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (48956), with no line terminators
Hash dec6c4d85e3a8c1f617200765ffe5676
fd7a8103709953f4829a1b99430b4704a50726fc
1930b000bc1a74b19233c01e743cfabc04141b54a3a4ee55cd53e1f4bf60589f
GET /_nuxt/desktop/default/runtime-af2d90a8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 15544
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-3cb8"
expires: Fri, 24 Nov 2023 13:24:37 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25261
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/app-533e20c4.js
46 kB URL v3.traincdn.com/_nuxt/desktop/default/commons/app-533e20c4.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65476)
Hash 02110ec1c7c6c5fa3b79ddeb88db6886
4d1853e2ab9c289b2c714a7290219b1c01c1d40d
716e4e55bcd69f23fe50a0123cb31ca61e1ddbd3990eff7efea869287517580b
GET /_nuxt/desktop/default/commons/app-533e20c4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 46094
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-b40e"
expires: Fri, 24 Nov 2023 13:25:02 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25261
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/ae107814.css
19 kB URL v3.traincdn.com/_nuxt/desktop/default/css/ae107814.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f8f4aee0502a90da636c7109c5bf8b49
c558ed5a2cd48e97169b8a61ed1ae23a5f5bddfe
7545b369de77a3f6e33dfe5eb316c7cd7dafb83583d43191acec9afc4c357b18
GET /_nuxt/desktop/default/css/ae107814.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: text/css
content-length: 18766
cache-control: max-age=86400
content-encoding: gzip
etag: "655f0f4e-494e"
expires: Fri, 24 Nov 2023 11:45:37 GMT
last-modified: Thu, 23 Nov 2023 08:37:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 31201
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/894dba7a.css
200 OK 76 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/894dba7a.css
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash bcc3bb62fcf98ee1ca114b7c4968336a
8bb999288e1316e43fda4414822be5d058aa703e
a1b1232369e229890e986a751ecc12345b43b680d190336a7c43264458c57b3d
GET /_nuxt/desktop/default/css/894dba7a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: text/css
content-length: 75689
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-127a9"
expires: Fri, 24 Nov 2023 13:25:02 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25261
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/version.json
200 OK 44 B URL GET HTTP/2 v3.traincdn.com/version.json
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash 227365677b704570604f8f2d9fce5a10
58ea0bb05adee2f9479ab93cf1a2c6aa9531b000
2b7267488f6c967cc2291d1e8c4a913ea2190793dafd1f5307bdd1e51c21f355
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "655f497d-2c"
expires: Thu, 23 Nov 2023 20:26:06 GMT
last-modified: Thu, 23 Nov 2023 12:45:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 33
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/app-bbbfef2a.js
302 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/app-bbbfef2a.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (61101)
Size 302 kB (301687 bytes)
Hash a17e9244ba814576234e693c21d332de
e0c17ab119517677d37509cde519fe8991428c74
07c3a9462429710114191ec57e1d14f1f8136224461b469b51bfabcaf6413e66
GET /_nuxt/desktop/default/vendors/app-bbbfef2a.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 301687
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-49a77"
expires: Fri, 24 Nov 2023 13:25:03 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25261
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/app-e9b216db.js
222 kB URL v3.traincdn.com/_nuxt/desktop/default/app-e9b216db.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64829), with no line terminators
Size 222 kB (221672 bytes)
Hash cef7f79649d7f756d4f1194dd19a51f9
5597be31d8552b2e2e4eb785a7076f5e553d0a35
66f181bd96edc453ecd31389d58416ac717176eec3b5feb389757eb6e19ac42f
GET /_nuxt/desktop/default/app-e9b216db.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 221672
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-361e8"
expires: Fri, 24 Nov 2023 13:27:46 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25260
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0\012- data
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: font/woff2
content-length: 63748
cache-control: max-age=86400
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 23 Nov 2023 20:58:52 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1606
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png
653 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png
IP
ASN #202492 Silverhill Group Holding Ltd
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:38 GMT
content-type: image/png
content-length: 653
last-modified: Tue, 25 Apr 2023 13:43:56 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.011
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.ThirdParty.Frame-82b9ca34.js
200 OK 8.7 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.ThirdParty.Frame-82b9ca34.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (26041), with no line terminators
Hash 359ef4d780275aac378a8e8cc26e725c
d9f47531ca450fb5f501a33baf3c92c461797306
23892c083b74058ce817d5b634a372c576c3d05ec1329da51e88597fb5cec593
GET /_nuxt/desktop/default/Page.ThirdParty.Frame-82b9ca34.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 8677
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-21e5"
expires: Fri, 24 Nov 2023 13:26:24 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25233
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/3f46fd67.css
2.4 kB URL v3.traincdn.com/_nuxt/desktop/default/css/3f46fd67.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (14254), with no line terminators
Hash 957d45dbea332c9bfa79cc72ad677dbd
1f0d50638aebc014e8c0f28d5044e9fc983dd895
d100918b16b666811970678cd5fb697f60ba09198dd2016645a784858405379e
GET /_nuxt/desktop/default/css/3f46fd67.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: text/css
content-length: 2411
cache-control: max-age=86400
content-encoding: gzip
etag: "655f0f4e-96b"
expires: Fri, 24 Nov 2023 11:46:11 GMT
last-modified: Thu, 23 Nov 2023 08:37:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 31175
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.v-tooltip-96914b13.js
22 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.v-tooltip-96914b13.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65476)
Hash a6a6cb97a7dfe9974c793cab3a04a9e7
5672b0607beb92baba68093946a00b15f0a4fba1
5c1e650fa80a2340ff0f6774190d5ae418f44a90be2cc33a69d4fb2c110b4974
GET /_nuxt/desktop/default/vendors/plugins.v-tooltip-96914b13.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 21908
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-5594"
expires: Fri, 24 Nov 2023 13:26:44 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25241
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/blocks-api/api/v1/block/light?referralParams=1
200 OK 69 B URL GET HTTP/2 1xlite-118654.top/blocks-api/api/v1/block/light?referralParams=1
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ab03868d622f82c706778dbcafb3c4b1
9c7a1bc7bc8da4fc19067c82d2862a9e997c76ba
46e5319d5d8fc85aac10fbc9fa5a516ee8c03d2584f304966676129794360686
GET /blocks-api/api/v1/block/light?referralParams=1 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
content-length: 69
x-request-guid: 917ff45ff4755686c6f87356340e4b22
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.009
X-Firefox-Spdy: h2
1xlite-118654.top/service-api/DbService/LongCache/GetSports?lng=en
200 OK 3.6 kB URL GET HTTP/2 1xlite-118654.top/service-api/DbService/LongCache/GetSports?lng=en
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10497), with no line terminators
Hash 71c3636c342f591e9ce9b9ee86148b21
a4249bb9f6b64fbd84cf1e87ddc174951322c12b
a7e5bc503492cc06d0c2956452ac0d9002dc37e38ed77262af574de5f8765f95
GET /service-api/DbService/LongCache/GetSports?lng=en HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 3581
cache-control: public,max-age=1800
content-encoding: br
vary: Accept-Encoding
x-time-ng: 0.010
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.039
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-notification-c5cc96f7.js
4.6 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-notification-c5cc96f7.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (12527), with no line terminators
Hash 42497a8fcaeb456ebf23ca38c62a667e
c8fb14afa14b005f68f41fc5d9019bcc3dc46981
ecc7b7b3e0a82b952f517127744b01311e915893d39a4ff7faebb3bdeb03914a
GET /_nuxt/desktop/default/vendors/plugins.vue-notification-c5cc96f7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 4556
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-11cc"
expires: Fri, 24 Nov 2023 13:25:52 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25241
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-js-modal-43390d8a.js
8.1 kB URL v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-js-modal-43390d8a.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (26717), with no line terminators
Hash 3296387277428ea0d36932123555aaa5
dc44d0c523ee28b660183a69087a715d8be32285
c56fc4845e85911b48657774fb1351971f9b05ea762596127430c90667141673
GET /_nuxt/desktop/default/vendors/plugins.vue-js-modal-43390d8a.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 8056
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-1f78"
expires: Fri, 24 Nov 2023 13:25:12 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25241
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/e1ad5afb.css
943 B URL v3.traincdn.com/_nuxt/desktop/default/css/e1ad5afb.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3303), with no line terminators
Hash cacc6d6ba45cf94ef4172d935ce1dc39
1ebd443b4446bb9d07e56deb39c88be4b67e0f16
dec9bcae0186bee94c16b3012dcc5379eb7ab98380875cedf2342baf66ba70e5
GET /_nuxt/desktop/default/css/e1ad5afb.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: text/css
content-length: 943
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-3af"
expires: Fri, 24 Nov 2023 15:13:18 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 18742
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/date-fns-locale-21-d6de59d6.js
200 OK 2.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/date-fns-locale-21-d6de59d6.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6960), with no line terminators
Hash 2a07fdd38837fcbc3ef79d008052d4bd
f43e197580e22b0d8831591d99359a8b16055577
c748ef0a415c2a42aafc2d8c2593d9889c7fa965e4c47b8597e5637d7d74f1f5
GET /_nuxt/desktop/default/date-fns-locale-21-d6de59d6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 2120
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-848"
expires: Fri, 24 Nov 2023 13:25:28 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25242
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/bff-api/config/all.json?lang=en
200 OK 31 kB URL GET HTTP/2 1xlite-118654.top/bff-api/config/all.json?lang=en
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 6174dbea30375b2f3a6af653da61f5a0
a708309dabe629214c3e09a8dcf52e69d32eb69a
29878c693cdb3e0fa2a1b5af177cc391b8798eede5a2a61a833b1b2b297f5d46
GET /bff-api/config/all.json?lang=en HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: bff;dur=2.49, dt_total;dur=23.941, wf-uht;dur=0.034
vary: Accept-Encoding
x-cache-expire: 534
x-cache-hit: 1
x-dt: 285
x-time-ng: 0.013
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/29ff8e35693b23d6fca06a6514cb28df.json
200 OK 668 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/29ff8e35693b23d6fca06a6514cb28df.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash b7b882bc87bd49ec0b19e15d62050091
7dd2f9242613b1d6453f8ea25f61f3c036c1c10a
ea3b4c0c004ddc47d397140cb405c5934682606f1e0faeecf9308bfa30cf924e
GET /genfiles/cms/1-285/desktop/media_asset/29ff8e35693b23d6fca06a6514cb28df.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
content-length: 668
last-modified: Tue, 23 May 2023 10:24:59 GMT
etag: "b7b882bc87bd49ec0b19e15d62050091"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/seo-module-api/api/v1/title?group_id=285&ref_id=1&url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&geo=no&language=en&ref[id]=1&project[id]=285&stream=slots&domain=1xlite-118654.top&timezone=3
150 B URL 1xlite-118654.top/seo-module-api/api/v1/title?group_id=285&ref_id=1&url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&geo=no&language=en&ref[id]=1&project[id]=285&stream=slots&domain=1xlite-118654.top&timezone=3
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash 2e64adecb6b94dbdb939d31c4374473b
6d5889d9beea9010ca0fb94c5d2cc3470e661b5b
97900eb6a465f3ddbd69ffc118ef96af5e9d9445b8098abd24d30cc848e71523
GET /seo-module-api/api/v1/title?group_id=285&ref_id=1&url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&geo=no&language=en&ref[id]=1&project[id]=285&stream=slots&domain=1xlite-118654.top&timezone=3 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
x-geoip2-country-code: ru
sub-request-id: ffd94297e10e43c79fa31cb8193141b8
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
content-length: 150
cache-control: max-age=1200, must-revalidate, public
x-request-id: 6723426a1b675fb39d524ed00d5fb09f
x-request-guid: b56991cecf4b02a1a902da1fd06eb854
x-content-digest: enae87f110345168d1bacf0baf0d50e1d6
age: 0
x-time-ng: 0.027, 0.027
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=23.990869522095, wf-uht;dur=0.035
X-Firefox-Spdy: h2
1xlite-118654.top/version.json?timestamp=1700771142107
200 OK 44 B URL GET HTTP/2 1xlite-118654.top/version.json?timestamp=1700771142107
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
Hash 227365677b704570604f8f2d9fce5a10
58ea0bb05adee2f9479ab93cf1a2c6aa9531b000
2b7267488f6c967cc2291d1e8c4a913ea2190793dafd1f5307bdd1e51c21f355
GET /version.json?timestamp=1700771142107 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
content-length: 44
last-modified: Thu, 23 Nov 2023 12:45:49 GMT
vary: Accept-Encoding
etag: "655f497d-2c"
content-encoding: gzip
expires: Thu, 23 Nov 2023 20:26:39 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.011
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/session-api/sessions/user
200 OK 16 B URL GET HTTP/2 1xlite-118654.top/session-api/sessions/user
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 646b2e82b65602d35f7aa6283c387e3a
b163a70c5df8e4b0861a23a04f8a6f78393747f4
b68bf12405ee2cb5b76764df21dbc2df0953ddff4072ddc5281d1aab05e8c4ab
GET /session-api/sessions/user HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
content-length: 16
cache-control: no-cache, private
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=0.98299980163574, wf-uht;dur=0.014
X-Firefox-Spdy: h2
1xlite-118654.top/seo-module-api/api/public/v1/analytics-counters?url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&projectId=285
72 B URL 1xlite-118654.top/seo-module-api/api/public/v1/analytics-counters?url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&projectId=285
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash 2cbc145b099d1dee719c026f951da9b9
3598152670a45ef1a7cd28ba18d3c4a5ea1aed4c
49a0bdc20fefd4d0ad24228a690129a88fcaedb423f59162dd917f63e1eb71bb
GET /seo-module-api/api/public/v1/analytics-counters?url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&projectId=285 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
content-length: 72
cache-control: max-age=1200, must-revalidate, public
x-request-id: 8c38e59483f011e772a650740e5d5045
x-request-guid: 856bf27a6d970b9f576f5ea5ab4dd013
x-content-digest: ence9703551e00917684b735143455d1e7
age: 0
x-time-ng: 0.013, 0.013
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=11.041879653931, wf-uht;dur=0.025
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DC-e9000097.js
200 OK 999 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DC-e9000097.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2336), with no line terminators
Hash 4cf01fc414d5d415f371cf12bf0e3ee7
6c4792c962e44b04eae5c92c8ef9ff852630a6c6
9175a57e9f675f232d29e6332f762cc2b23ec1a0f8478da59ae679cf6f5e6568
GET /_nuxt/desktop/default/DC-e9000097.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 999
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-3e7"
expires: Fri, 24 Nov 2023 13:25:13 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25241
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Betting.Core-22e454a9.js
1.6 kB URL v3.traincdn.com/_nuxt/desktop/default/Betting.Core-22e454a9.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2422), with no line terminators
Hash 5ad2663f0a849b1c9a9541b4bdba37fc
1ea264162a9ab1e95a2a8c511707cefd8c726ce8
7cc31aad674df39d918fc802f439a73f6c9c9de1ad0398f89cb6d5fab2e30646
GET /_nuxt/desktop/default/Betting.Core-22e454a9.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 1559
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-617"
expires: Fri, 24 Nov 2023 13:25:07 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25241
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_9a32bf8a94a93b927c81a5cf4a1a572f.json
200 OK 28 kB URL GET HTTP/2 v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_9a32bf8a94a93b927c81a5cf4a1a572f.json
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65106), with no line terminators
Hash 7aa7e54fca083c4b24200acb1e654882
24052bef744703ea5e6b0932bba29cf03cb42b7c
90bee9086014b87323aab394fcdd8254c8df84706d6c070a4eace5514fe73a73
GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_9a32bf8a94a93b927c81a5cf4a1a572f.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 28453
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"7aa7e54fca083c4b24200acb1e654882"
expires: Thu, 23 Nov 2023 20:34:03 GMT
last-modified: Thu, 23 Nov 2023 18:07:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 3119
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_9f61b547f4b2ab348b257fa60a97f6ae.json
5.2 kB URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_9f61b547f4b2ab348b257fa60a97f6ae.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (16312), with no line terminators
Hash 3fef8deed9730925cda4f331f66f3304
830dfaf204e754daac57faba7c0845ed0ebbbf45
6c4bcac6b64c1331b24f3ce3b6419fbef99a250d5ceba92f8b1416015fc1dc99
GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_9f61b547f4b2ab348b257fa60a97f6ae.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 5153
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"3fef8deed9730925cda4f331f66f3304"
expires: Thu, 23 Nov 2023 20:35:01 GMT
last-modified: Thu, 23 Nov 2023 14:07:32 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.001
age: 3038
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_d53483ba3d429fd0946978081f0427b9.json
7.4 kB URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_d53483ba3d429fd0946978081f0427b9.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (20736), with no line terminators
Hash f72ef621ec8c5ff61130a5fa5e365351
e7921fa3a826cb7d3c6c01e38d03e9d5fd4f8f4c
733f6e56cd9524e69a0dc873b84d8b5edc9b9c043981ee6f326cac4165354a72
GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_d53483ba3d429fd0946978081f0427b9.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 7367
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"f72ef621ec8c5ff61130a5fa5e365351"
expires: Thu, 23 Nov 2023 20:45:35 GMT
last-modified: Tue, 14 Nov 2023 14:07:32 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 2525
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 3.4 kB URL POST HTTP/2 1xlite-118654.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1d43a95d96e2a442a36403ac5f134936
293352c0d561d5fd51251b3d62bec2dbe51d16a3
6a93025f4f3d52ea6a7099d981cadf809fa981a3e2da9b3dc5dcfc4c41c42662
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Content-Type: application/json
X-Lang: en
X-Uuid: 01b3ce5b-c6e2-4ba1-bb1d-1d7c5dd95c9e
Content-Length: 80
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json
vary: Accept-Encoding
content-encoding: br
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json
765 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (765), with no line terminators
Hash 00f980f23f1b4c1ccee99ed49e0a8feb
4cb07094de9bffff1bf81d94446280b91013b660
bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea
GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 765
cache-control: public, max-age=3600, s-maxage=3600
etag: "00f980f23f1b4c1ccee99ed49e0a8feb"
expires: Thu, 23 Nov 2023 20:41:25 GMT
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 2654
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_mini_games_sette_e_mezzo/en/dictionary_51822a607cdc0a43274fdf9a110109ca.json
848 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_mini_games_sette_e_mezzo/en/dictionary_51822a607cdc0a43274fdf9a110109ca.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2136), with no line terminators
Hash a9066da7680529420b1b76f2b3c070fa
8fa33b97c9a7942ab813e04fc63442d9dae30e03
3b773296a63a190a625184da73ad0e204923171e8287d2a2f4d3b8ad06712c70
GET /genfiles/web-app-v2/dictionary2/v3_mini_games_sette_e_mezzo/en/dictionary_51822a607cdc0a43274fdf9a110109ca.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 848
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"a9066da7680529420b1b76f2b3c070fa"
expires: Thu, 23 Nov 2023 21:14:06 GMT
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.001
age: 706
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_popup/en/dictionary_a1d5e444c0c0cae1eaf0852728271254.json
510 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_popup/en/dictionary_a1d5e444c0c0cae1eaf0852728271254.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (510), with no line terminators
Hash 235b5236784b8504cef86959a4e37212
20034e60677765944121b1bdec2be827908e9913
21f06a964301fad75fbda732535bb417dddfdf8848803c25426a7e46dcc06017
GET /genfiles/web-app-v2/dictionary2/v3_popup/en/dictionary_a1d5e444c0c0cae1eaf0852728271254.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 510
cache-control: public, max-age=3600, s-maxage=3600
etag: "235b5236784b8504cef86959a4e37212"
expires: Thu, 23 Nov 2023 20:54:31 GMT
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 2028
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_286193e718d182787f1e93f5be5ba14a.json
995 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_286193e718d182787f1e93f5be5ba14a.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3277), with no line terminators
Hash a49911839628e0008ca0471c2eaf59ed
00467a2e5f37005b0236781a372402bebccd43fc
43a9c7daef5f031c3b8744b239c84c337f61bae5d40692afb52521cbb9fbeb27
GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_286193e718d182787f1e93f5be5ba14a.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 995
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"a49911839628e0008ca0471c2eaf59ed"
expires: Thu, 23 Nov 2023 21:24:38 GMT
last-modified: Wed, 11 Oct 2023 12:52:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.003
age: 78
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_slots_page/en/dictionary_b0bf8ceab4f75229da6caa626b952d5c.json
4.5 kB URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_slots_page/en/dictionary_b0bf8ceab4f75229da6caa626b952d5c.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (11998), with no line terminators
Hash 3e256fe47276cacb484a850d13a8e455
1d76e2d42e83c59768f1cd6583bdc369a4190310
b30f8ce76d49b4f404e7a715cdd94b22918a27aa39fdee15478a04e021864d46
GET /genfiles/web-app-v2/dictionary2/v3_slots_page/en/dictionary_b0bf8ceab4f75229da6caa626b952d5c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 4516
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"3e256fe47276cacb484a850d13a8e455"
expires: Thu, 23 Nov 2023 21:11:45 GMT
last-modified: Thu, 23 Nov 2023 18:07:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 3483
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_marketing_modules/en/dictionary_5a1d8238c34c817d16a0c0f1c566d7e7.json
686 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_marketing_modules/en/dictionary_5a1d8238c34c817d16a0c0f1c566d7e7.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (686), with no line terminators
Hash 9c9187561185c7392788781664ae50f2
13e0ae48e3fa8af5f1b31244aba67bd7df4cce3f
6a3bf16f12fe6d6390ad747663d56829b0210202361abe9725566a00a31ad825
GET /genfiles/web-app-v2/dictionary2/v3_marketing_modules/en/dictionary_5a1d8238c34c817d16a0c0f1c566d7e7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 686
cache-control: public, max-age=3600, s-maxage=3600
etag: "9c9187561185c7392788781664ae50f2"
expires: Thu, 23 Nov 2023 21:02:23 GMT
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1399
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_identification/en/dictionary_af9c872c6918210310d9d2db98d21fa5.json
200 OK 2.6 kB URL GET HTTP/2 v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_identification/en/dictionary_af9c872c6918210310d9d2db98d21fa5.json
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (8222), with no line terminators
Hash 251e7d8641c21db24b7072463ddf0c13
98e461313937789259eba60f01462576e9087bc4
bbb7e602f22a25c468a5aab89d69e718857c6d4c95cf360f72a3b377bee12581
GET /genfiles/web-app-v2/dictionary2/v3_identification/en/dictionary_af9c872c6918210310d9d2db98d21fa5.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 2620
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"251e7d8641c21db24b7072463ddf0c13"
expires: Thu, 23 Nov 2023 21:22:58 GMT
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.001
age: 161
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_widget_consultant/en/dictionary_6b31b5b853a08b2d20e8ce741cbb5eec.json
200 OK 233 B URL GET HTTP/2 v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_widget_consultant/en/dictionary_6b31b5b853a08b2d20e8ce741cbb5eec.json
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 2e8b26a6a0969ee8eaf64ef060ad48f7
f470af35d7c6fe1dea0407564daa7b2dc64b9664
003dc3ddb82e25dd323d0423c542e1711d10fde568595fa6c255a30ab056a91a
GET /genfiles/web-app-v2/dictionary2/v3_widget_consultant/en/dictionary_6b31b5b853a08b2d20e8ce741cbb5eec.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 233
cache-control: public, max-age=3600, s-maxage=3600
etag: "2e8b26a6a0969ee8eaf64ef060ad48f7"
expires: Thu, 23 Nov 2023 20:33:40 GMT
last-modified: Thu, 09 Nov 2023 19:50:36 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
age: 3294
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_office/en/dictionary_b967d0e40fe3dab8bad261e252f981c3.json
200 OK 21 kB URL GET HTTP/2 v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_office/en/dictionary_b967d0e40fe3dab8bad261e252f981c3.json
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65262), with no line terminators
Hash b7f41dcb40af7f2d1934ff2db4fa6f17
78f11f9ff2f86949927e830ea5802a72e3254e6a
511559e4502c03930381c0908ed7cb7846f8c08da4ff80f19d55dc92eac191ea
GET /genfiles/web-app-v2/dictionary2/v3_office/en/dictionary_b967d0e40fe3dab8bad261e252f981c3.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 21394
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"b7f41dcb40af7f2d1934ff2db4fa6f17"
expires: Thu, 23 Nov 2023 20:46:04 GMT
last-modified: Thu, 16 Nov 2023 11:08:15 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 2375
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_identification_modal/en/dictionary_846640561e5617f67894c729f91df31c.json
308 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_identification_modal/en/dictionary_846640561e5617f67894c729f91df31c.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (308), with no line terminators
Hash 83a3a9b8f3e8f567eaaa6402022d4f42
eb2beaa1807e33df0545f55af524a94c322d9e1e
1260e326a8325b909920f03e906312ae3c2bf884285e0d32b868bc184c993543
GET /genfiles/web-app-v2/dictionary2/v3_identification_modal/en/dictionary_846640561e5617f67894c729f91df31c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
content-length: 308
cache-control: public, max-age=3600, s-maxage=3600
etag: "83a3a9b8f3e8f567eaaa6402022d4f42"
expires: Thu, 23 Nov 2023 20:58:58 GMT
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.001
age: 1634
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1/mobile/shortcuts/icon-512x512.png
5.2 kB URL 1xlite-118654.top/genfiles/cms/1/mobile/shortcuts/icon-512x512.png
IP
ASN #202492 Silverhill Group Holding Ltd
File type PNG image data, 514 x 514, 8-bit colormap, non-interlaced\012- data
Hash b9a636eef54b2844b571fe7de49184a7
bf653690790ced40eb3189da075a275d951d1607
001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743
GET /genfiles/cms/1/mobile/shortcuts/icon-512x512.png HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:40 GMT
content-type: image/png
content-length: 5202
last-modified: Thu, 16 Nov 2023 13:34:54 GMT
etag: "b9a636eef54b2844b571fe7de49184a7"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.015
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_9f4563a242a53b45b2daae475c153ba1.json
200 OK 4.5 kB URL GET HTTP/2 v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_9f4563a242a53b45b2daae475c153ba1.json
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (11184), with no line terminators
Hash a1b0aa5e9d5ea2e335bfe4c5a450e83c
e0a5cc0516e19d553bf9025aeda546b07b78fa0d
8bd5f76cad3ae6bb9a70b8349e23b130f8f817312f3cbbb49caf17863f9385eb
GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_9f4563a242a53b45b2daae475c153ba1.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:40 GMT
content-type: application/json; charset=utf-8
content-length: 4537
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"a1b0aa5e9d5ea2e335bfe4c5a450e83c"
expires: Thu, 23 Nov 2023 21:22:24 GMT
last-modified: Wed, 22 Nov 2023 16:07:39 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 424
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_180844ad5e78f8bd82884958ff190728.json
510 B URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_180844ad5e78f8bd82884958ff190728.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (510), with no line terminators
Hash af07659df3d691b66271c9e40d519a99
e62cf713c713f62d1a1e634087c84625c53bfff6
dd9d80e781bc5930af598b30be8e613e2552520afcabc3c3f901217d85f0ae6e
GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_180844ad5e78f8bd82884958ff190728.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:40 GMT
content-type: application/json; charset=utf-8
content-length: 510
cache-control: public, max-age=3600, s-maxage=3600
etag: "af07659df3d691b66271c9e40d519a99"
expires: Thu, 23 Nov 2023 20:30:51 GMT
last-modified: Thu, 02 Nov 2023 08:06:58 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.003
age: 3295
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/0860038b839bd804139c79510c7b2461.json
482 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/0860038b839bd804139c79510c7b2461.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 722c8cfe4ff27e63e37553e990d1e6fc
9c4108ebe5bc89af68fbb9e95df48e94eb44865f
8a9bb934328c423a4c803673bfcc1bcf1aed719bdd20e2b5a9fbc4bad988e72b
GET /genfiles/cms/1-285/desktop/media_asset/0860038b839bd804139c79510c7b2461.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 482
last-modified: Wed, 11 Oct 2023 15:09:54 GMT
etag: "722c8cfe4ff27e63e37553e990d1e6fc"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.008
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/372c95508eb57e0c7f0817815def40e2.json
655 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/372c95508eb57e0c7f0817815def40e2.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 78be6a83c735d4a2b0cdb3980a2b9686
1b77c89802f915c005a66174ad7c7749b1b89e15
5413d0bb00a27401b315b3531c0ca181ef9ff7a606895501eab0acb040735d9e
GET /genfiles/cms/1-285/desktop/media_asset/372c95508eb57e0c7f0817815def40e2.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 655
last-modified: Tue, 12 Sep 2023 08:52:34 GMT
etag: "78be6a83c735d4a2b0cdb3980a2b9686"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.008
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/e06c9d6a2655d78a28144abe88798172.json
499 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/e06c9d6a2655d78a28144abe88798172.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash e3d17d66f9e675ca9273e04470203275
e676da597ad577652921e9af98e79b986ec158ae
5c26acb3823aedc062268da24385061135d42171888bb5f5a0a8f63ba09c67d2
GET /genfiles/cms/1-285/desktop/media_asset/e06c9d6a2655d78a28144abe88798172.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 499
last-modified: Mon, 05 Jun 2023 14:13:26 GMT
etag: "e3d17d66f9e675ca9273e04470203275"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/bd0cfa10966f2d8720b2c5663287c9e0.json
958 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/bd0cfa10966f2d8720b2c5663287c9e0.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 24ec1c171afe6836881e2fba1ed559a0
588a08d22de446d484f8f51402994f37ff2527c2
a0c14f5476683e6eb7381c1820c0e914c02911ab9d24170e61548e661017f96f
GET /genfiles/cms/1-285/desktop/media_asset/bd0cfa10966f2d8720b2c5663287c9e0.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 958
last-modified: Tue, 18 Apr 2023 10:33:32 GMT
etag: "24ec1c171afe6836881e2fba1ed559a0"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/8eab32260ceb4db75ff6a5493f032dd1.json
200 OK 164 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/8eab32260ceb4db75ff6a5493f032dd1.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 23f1561a3018f4113d37a06ac1c980e0
e257831879373c262e51c0101a43bebba3d14405
8d01c62a528ba1274a677588a38590122a03e6d43701c265ad3fd4ff1133e0eb
GET /genfiles/cms/1-285/desktop/media_asset/8eab32260ceb4db75ff6a5493f032dd1.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 164
last-modified: Wed, 26 Jul 2023 11:31:52 GMT
etag: "23f1561a3018f4113d37a06ac1c980e0"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.008
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/2a47f0a9f650f9153131a19cd8b0c976.json
171 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/2a47f0a9f650f9153131a19cd8b0c976.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 0c11e9a817e806056c3e4fb21f2576de
73f6c4a3d057b9120f2b523da91252870cf40d3b
07b66bbff483ee7002e2285e4d8fd33dbb8569119d3e38fcf623f846b33e8c22
GET /genfiles/cms/1-285/desktop/media_asset/2a47f0a9f650f9153131a19cd8b0c976.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 171
last-modified: Wed, 02 Aug 2023 16:49:02 GMT
etag: "0c11e9a817e806056c3e4fb21f2576de"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/1633ac2535bbc186629d8b5529d48890.json
200 OK 569 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/1633ac2535bbc186629d8b5529d48890.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 1da410159cdd5d534178f19d293dc0e0
a65a26d676082850f88bf4a43bb9cd251b9841fe
e53086d4b4b8718b8086ae5ccc13cd713556384bfb380412f1d8e003963615e9
GET /genfiles/cms/1-285/desktop/media_asset/1633ac2535bbc186629d8b5529d48890.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 569
last-modified: Wed, 02 Aug 2023 18:19:28 GMT
etag: "1da410159cdd5d534178f19d293dc0e0"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.015
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/aa1008aeed92b528cae74cfbb9e28ae5.json
170 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/aa1008aeed92b528cae74cfbb9e28ae5.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 44190be14fa1d804fcd1ce7a92baddb7
96acf8f8845be0e5d005ff237f98fafa824e91d8
37edcfbf2adb609c4b20701db465f868fb9f3767c3c82ea2146bf1d97733d183
GET /genfiles/cms/1-285/desktop/media_asset/aa1008aeed92b528cae74cfbb9e28ae5.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 170
last-modified: Wed, 02 Aug 2023 17:36:49 GMT
etag: "44190be14fa1d804fcd1ce7a92baddb7"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/73ca1af67e7f842114b510958deb349c.json
410 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/73ca1af67e7f842114b510958deb349c.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 8c10213a7a824ea7d0c281e60157f4bd
7f9cb14aa6b1faa461ba28b25b6b5231864cca3e
0d876007c13578287e220139bf887da1282306457953ce5d2eb946689daf9781
GET /genfiles/cms/1-285/desktop/media_asset/73ca1af67e7f842114b510958deb349c.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 410
last-modified: Thu, 03 Aug 2023 06:57:23 GMT
etag: "8c10213a7a824ea7d0c281e60157f4bd"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/d18d4bd64de607ae929822987385bee2.json
649 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/d18d4bd64de607ae929822987385bee2.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash d85d72be985fa187441c2c90bcb6d9af
3e939b92b8a04727f5739c32e1698648b1939a59
1cb5ca8b6bcfd2d9d1142ed9fa594730789c746367233c6be0f86c6128e018c6
GET /genfiles/cms/1-285/desktop/media_asset/d18d4bd64de607ae929822987385bee2.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 649
last-modified: Mon, 20 Nov 2023 14:08:54 GMT
etag: "d85d72be985fa187441c2c90bcb6d9af"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.029
accept-ranges: bytes
X-Firefox-Spdy: h2
affpa.top/L?tag=d_2714013m_97c_&site=2714013&ad=97&r=slots?products=849
303 See Other 696 B URL User Request GET HTTP/2 affpa.top/L?tag=d_2714013m_97c_&site=2714013&ad=97&r=slots?products=849
IP
ASN #202492 Silverhill Group Holding Ltd
Certificate IssuerLet's Encrypt
Subjectaffpa.top
Fingerprint4C:5F:0E:76:A8:6B:C1:3D:23:6C:17:A1:4B:D3:9D:61:6D:05:DE:89
ValidityMon, 20 Nov 2023 05:19:11 GMT - Sun, 18 Feb 2024 05:19:10 GMT
File type JSON data\012- , ASCII text
Hash a5f165ef4bb35467fdb45d65dc4cf37f
bb4cc18581ec52bd9c2c5879e0ac29e684e5220c
a2aa7f0332e2af7f2c1e4d434899ef6b4574dd3f719dac152028756b42a47cda
GET /L?tag=d_2714013m_97c_&site=2714013&ad=97&r=slots?products=849 HTTP/1.1
Host: affpa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
server: nginx
date: Thu, 23 Nov 2023 20:25:37 GMT
cache-control: private
location: https://1xlite-118654.top:443/en/slots?products=849&tag=d_2714013m_97c_
x-aspnetmvc-version: 5.0
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.011
X-Firefox-Spdy: h2
1xlite-118654.top/checker/redirect/stat/run/
298 B URL 1xlite-118654.top/checker/redirect/stat/run/
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash e5f2f299792282cd3445fa8323c255b5
0c82b8f0324621f6418c5d51101953173e13e17b
7b58c5b90a7a74070a7fba2f61c4041191752ec9b394d5dbc6ebe7394e39a14a
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:39 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-time-ng: 0.002
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/8fe9b6b95593be29dd08d9eaba9cee4b.json
200 OK 967 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/8fe9b6b95593be29dd08d9eaba9cee4b.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash fd105ad17dc146e4f6e48ce5e3d7270b
d7bab781ac4081ac6c8a27c5a45548f7ca4d2560
7eec3c6bb897c5e88fc8515366bfd46505c5d53ba8e448c59c1395ea8a74bb2b
GET /genfiles/cms/1-285/desktop/media_asset/8fe9b6b95593be29dd08d9eaba9cee4b.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 967
last-modified: Mon, 30 Oct 2023 14:52:18 GMT
etag: "fd105ad17dc146e4f6e48ce5e3d7270b"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.008
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/21693cb8e300994c5e11861095082440.json
718 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/21693cb8e300994c5e11861095082440.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash b3f49765f8391c5fa72014c71f6c80a2
ca7d0bbf9982462654f4bcebb16990f492070217
3602e0757e12119f95edde68c94ea7ec8891bcf493b12fe0bad54e9220c596f2
GET /genfiles/cms/1-285/desktop/media_asset/21693cb8e300994c5e11861095082440.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 718
last-modified: Tue, 31 Oct 2023 09:19:23 GMT
etag: "b3f49765f8391c5fa72014c71f6c80a2"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/9ba535914db3ddc8eb4cd9c33970f985.json
247 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/9ba535914db3ddc8eb4cd9c33970f985.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 79ed9f5ec44ed7e9046a1f856c311fe6
07ba52cb4b6a17d25b51a7043e0efcfdee4d142e
1762a2918f104e460c0a14e51f0827de5ba34d3258f791e00e175fc6f215f804
GET /genfiles/cms/1-285/desktop/media_asset/9ba535914db3ddc8eb4cd9c33970f985.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 247
last-modified: Wed, 02 Aug 2023 12:48:41 GMT
etag: "79ed9f5ec44ed7e9046a1f856c311fe6"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/deee851bab70137a6ff846c91be5a425.json
200 OK 184 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/deee851bab70137a6ff846c91be5a425.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 36777c63209967831ddd2926e229b69b
7a59de3bd5fd0406a1becbd4fc6bdb49a996a0fa
c2087429233dc14f1ad96cf9b7d1f4ecf0f32fabab7fc37999644a488d10dbc2
GET /genfiles/cms/1-285/desktop/media_asset/deee851bab70137a6ff846c91be5a425.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 184
last-modified: Thu, 09 Nov 2023 06:22:56 GMT
etag: "36777c63209967831ddd2926e229b69b"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b0276b0a7ae86d0dc87c292efc4ad16c.json
884 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b0276b0a7ae86d0dc87c292efc4ad16c.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash c2eb16bc46aea587d16e3eb8bff889ad
ed5e1e8dfaf6a7f9d067aed73191d522d71f6510
37c40a123ec6f4f9ebd9f26e2ccb1df2cfbfb98cee84ec03bb6153e6351590b9
GET /genfiles/cms/1-285/desktop/media_asset/b0276b0a7ae86d0dc87c292efc4ad16c.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 884
last-modified: Thu, 31 Aug 2023 12:36:01 GMT
etag: "c2eb16bc46aea587d16e3eb8bff889ad"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/5f86f730993ab058626a88d5185acc38.json
483 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/5f86f730993ab058626a88d5185acc38.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 5a57502d543a1230b792c61a4440a931
1c688b91745205ad2b700ef519ed4a151eabfc58
ac271723ebd826bf4cb8dddb6d94d7e87135874226366aa781558fd7d028b179
GET /genfiles/cms/1-285/desktop/media_asset/5f86f730993ab058626a88d5185acc38.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 483
last-modified: Wed, 08 Nov 2023 12:52:32 GMT
etag: "5a57502d543a1230b792c61a4440a931"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.021
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/696ba30571c057401a6b534f43fa2bc8.json
2.5 kB URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/696ba30571c057401a6b534f43fa2bc8.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 92a7b0aa5b946ff4f0225a847e452e3b
b2695a0a75bfbb11c661f7b312302e0bc6c0d081
fe844df2954a40ea73c2c1a6015d51d29eaf2dd73a2fc74da27b8ef666b283fb
GET /genfiles/cms/1-285/desktop/media_asset/696ba30571c057401a6b534f43fa2bc8.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Fri, 18 Aug 2023 09:24:05 GMT
etag: W/"92a7b0aa5b946ff4f0225a847e452e3b"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/7c43e6fa10d0665cf556d13ff2a1906d.svg
698 B URL v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/7c43e6fa10d0665cf556d13ff2a1906d.svg
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash 7cca3986f7a5c4c164144ff11df71073
b22531fb1cb3ab6325986f299e0de1690a2a2724
2cb7283447d210aa27e07657e00beefe6731f9771a9445be4e44e96dfe88c232
GET /genfiles/cms/1-285/desktop/media_asset/7c43e6fa10d0665cf556d13ff2a1906d.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Thu, 23 Nov 2023 20:39:46 GMT
last-modified: Tue, 02 May 2023 10:06:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 2756
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sys-icons/1.0.202/285/common.svg
64 kB URL v3.traincdn.com/sys-icons/1.0.202/285/common.svg
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash a043505a8f35f0063feabd4e78147905
f6faa9339d0cf1f7adaa5afa981049f517501fda
7316271f37cc8c6e5d1f59bdb577744b22489ebea74f642d133c391472505e4a
GET /sys-icons/1.0.202/285/common.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: image/svg+xml
content-length: 63922
content-encoding: gzip
etag: W/"a043505a8f35f0063feabd4e78147905"
last-modified: Fri, 17 Nov 2023 10:00:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700215233.602088241
x-time-ng: 0.001
age: 551364
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sys-icons/1.0.202/285/logos.svg
15 kB URL v3.traincdn.com/sys-icons/1.0.202/285/logos.svg
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (34054), with no line terminators
Hash fa9bb56d0333e51a2e20e890b1578077
4d13dd10fe635fcef3b4da010d46e7485211badc
25bafe20c85395893b739e4cec203afee2018ca4874baf2e4ebb21a668ed9a26
GET /sys-icons/1.0.202/285/logos.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: image/svg+xml
content-length: 14765
content-encoding: gzip
etag: W/"fa9bb56d0333e51a2e20e890b1578077"
last-modified: Fri, 17 Nov 2023 10:00:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700215233.602088241
x-time-ng: 0.002
age: 551295
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2
65 kB URL v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 64732, version 1.0\012- data
Hash 3ac5d40d1b3966fc5eb09ecca74d9cbf
a69f32357765dd321519889aeacba5e9ca893bb0
3310766b8f58538d07abded74a2babe1acbe1a3ee820d5b8c8265da666f4fb0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: font/woff2
content-length: 64732
cache-control: max-age=86400
etag: "3ac5d40d1b3966fc5eb09ecca74d9cbf"
expires: Thu, 23 Nov 2023 20:44:45 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.003
age: 2458
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0\012- data
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: font/woff2
content-length: 63920
cache-control: max-age=86400
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 23 Nov 2023 20:53:10 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1951
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/af2e2c975cf016bc339c96b6992e1e47.json
880 B URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/af2e2c975cf016bc339c96b6992e1e47.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash b0a50f5239a6ca38097f89684eae43e4
9610ba54f85b3199d09ccbaf5c3439cff43bf28a
5f96d5a91935d8a7f975d433db80afb8a995edc61ad2d8cbb0161b80dc7aec56
GET /genfiles/cms/1-285/desktop/media_asset/af2e2c975cf016bc339c96b6992e1e47.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Fri, 12 May 2023 15:17:16 GMT
etag: W/"b0a50f5239a6ca38097f89684eae43e4"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/a16991b5.css
200 OK 1.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/a16991b5.css
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6955), with no line terminators
Hash cffc42698826b6dba0709d55d070c665
c96adc4c6e5c8c8011e3307daa52941ae89bf7cb
dcdd23b29663b53d947e09243e785dc36f5d5a9478d5ce640081660fea7ffa29
GET /_nuxt/desktop/default/css/a16991b5.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: text/css
content-length: 1461
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-5b5"
expires: Fri, 24 Nov 2023 13:31:46 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 24849
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.media-4ed1c0dd.js
200 OK 4.7 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.media-4ed1c0dd.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (16432), with no line terminators
Hash 7794de815a4c69cc60e4f0f4b9b7b55e
e451493e7a4c99e8a785f60998f0dc3a05fd6491
8e039d4589f3b8693be943dc67e31c56dc2142362f320037fc0f2c0057c6b454
GET /_nuxt/desktop/default/betting.media-4ed1c0dd.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 4657
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-1231"
expires: Fri, 24 Nov 2023 13:24:59 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25242
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/44842eb421aa5c1442fe7b7bb1b74ada.json
18 kB URL 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/44842eb421aa5c1442fe7b7bb1b74ada.json
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text
Hash 7d9a4e78115fd37cd8c13744652d88fd
7e54aedba90e5b0e5e83260e10ede352c5af51eb
12e8247b4c575bf1a0a35b0d15199a2f375a2fb0ee8a18b5a38f9f7d9aaaf1e8
GET /genfiles/cms/1-285/desktop/media_asset/44842eb421aa5c1442fe7b7bb1b74ada.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 14 Nov 2023 10:53:14 GMT
etag: W/"7d9a4e78115fd37cd8c13744652d88fd"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/a01e05cae2f5087d31e3dd580b8c1ce3.json
200 OK 2.8 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/a01e05cae2f5087d31e3dd580b8c1ce3.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 5f6393bd6febc268d33cb235c7eec194
819eb4409582bcea038e527fd5859dde2d13e0e7
9ae42c0a8d88add1a2d54faab5d819c619cb2a2a1eec7595fe1029a91449efb0
GET /genfiles/cms/1-285/desktop/media_asset/a01e05cae2f5087d31e3dd580b8c1ce3.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 14 Nov 2023 06:21:55 GMT
etag: W/"5f6393bd6febc268d33cb235c7eec194"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
X-Firefox-Spdy: h2
1xlite-118654.top/session-api/sessions/user
200 OK 16 B URL GET HTTP/2 1xlite-118654.top/session-api/sessions/user
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 646b2e82b65602d35f7aa6283c387e3a
b163a70c5df8e4b0861a23a04f8a6f78393747f4
b68bf12405ee2cb5b76764df21dbc2df0953ddff4072ddc5281d1aab05e8c4ab
GET /session-api/sessions/user HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 16
cache-control: no-cache, private
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=1.323938369751, wf-uht;dur=0.012
X-Firefox-Spdy: h2
1xlite-118654.top/bff-api/event-logo/suitable.json?lang=en
200 OK 35 B URL GET HTTP/2 1xlite-118654.top/bff-api/event-logo/suitable.json?lang=en
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash aac324d41195f32bfe54e54d93278c5f
fef4c6f9c7fcc2a1affe2f33dba6a12592d92bcd
701fbb0767c5e6a29fd1b14383e92eb68a20fa5d120d4f0badf5b9a1bb276547
GET /bff-api/event-logo/suitable.json?lang=en HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 35
cache-control: no-cache, private
server-timing: bff;dur=7.47, dt_total;dur=25.554, wf-uht;dur=0.035
x-dt: 285
x-time-ng: 0.017
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.30-d58bd9c6.js
1.2 kB URL v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.30-d58bd9c6.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (2335), with no line terminators
Hash 17079059ce51426a9035cb1aea16cece
fabcf08325c38e0ab709711f9208af6b9e232b1a
53e5afaf57ec7baacdb1b21c72a7cf3f8b964e3fb28d80f0082a0396e3d9a800
GET /_nuxt/desktop/default/ioc.dependencies.30-d58bd9c6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 1157
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-485"
expires: Fri, 24 Nov 2023 13:25:14 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25242
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/frontend-api/seo/seoText?group_id=285&ref_id=1&url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&geo=no&language=en&ref[id]=1&project[id]=285&stream=slots&domain=1xlite-118654.top&timezone=0&fallback=true
62 B URL 1xlite-118654.top/frontend-api/seo/seoText?group_id=285&ref_id=1&url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&geo=no&language=en&ref[id]=1&project[id]=285&stream=slots&domain=1xlite-118654.top&timezone=0&fallback=true
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash 430be1d20313676ad063dfde829f36aa
7b27c5aac055ac94ecc8d61b830166856d6b9d64
1ad55013fa735c39be27459336fa8c28ffe4dc8965e2be23d491d39f22849483
GET /frontend-api/seo/seoText?group_id=285&ref_id=1&url=https:%2F%2F1xlite-118654.top%2Fen%2Fslots&geo=no&language=en&ref[id]=1&project[id]=285&stream=slots&domain=1xlite-118654.top&timezone=0&fallback=true HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
x-geoip2-country-code: ru
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json; charset=utf-8
content-length: 62
access-control-allow-origin: *
etag: W/"3e-eyfFqsBVrJTsyNYbgwFmhW1rnWQ"
server-timing: requestTime; dur=33.278073; desc="req_t", renderTime; dur=33.290397; desc="rend_t", total; dur=33.591729; desc="Total Response Time", wf-uht;dur=0.043
x-time-ng: 0.034
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
200 OK 1.9 kB URL GET HTTP/2 1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type gzip compressed data, from Unix\012- data
Hash 0f00a0d5c99f53533e5156efa49c4a5f
0333ac6084e442cbb868b5fba18cb12b272a1488
085383bcc58d0cbd67f56b2b1366029e4ed97dbbe247367fafcdc1f9a7b97ba0
GET /microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_ HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
server-timing: total;dur=0;desc="Nuxt Server Time", dt_total;dur=2.273, wf-uht;dur=0.016
vary: Accept-Encoding
x-dt: 285
x-frame-options: SAMEORIGIN
x-time-ng: 0.002, 0.004
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/version.json
200 OK 44 B URL GET HTTP/2 v3.traincdn.com/version.json
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash 227365677b704570604f8f2d9fce5a10
58ea0bb05adee2f9479ab93cf1a2c6aa9531b000
2b7267488f6c967cc2291d1e8c4a913ea2190793dafd1f5307bdd1e51c21f355
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "655f497d-2c"
expires: Thu, 23 Nov 2023 20:26:06 GMT
last-modified: Thu, 23 Nov 2023 12:45:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 37
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/runtime-009b6f93.js
200 OK 2.8 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/runtime-009b6f93.js
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3488)
Hash f713392d4f8de9452eabfd13a1dfc71f
e57fded14f38b4b9d01a2616f39c6e63d9950488
a4cf8fb8fba7521bae42af1b1e57e114b6c6da6e98e48b2d047ea500bdab4336
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/runtime-009b6f93.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 2769
content-encoding: gzip
etag: W/"f713392d4f8de9452eabfd13a1dfc71f"
last-modified: Mon, 20 Nov 2023 11:22:33 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700479311.223098391
x-time-ng: 0.002,0.003
age: 289305
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/commons/app-99b26e28.js
70 kB URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/commons/app-99b26e28.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (24029)
Hash 47d49efcb392dd9adea9175d3175c028
faf9de91309ac3ae9fea53cad0d89e873345792a
f9d81a5e871f051c7c60f4394d47c2e027cff624253d09240e3c7ccc50facb1a
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/commons/app-99b26e28.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 69945
content-encoding: gzip
etag: W/"47d49efcb392dd9adea9175d3175c028"
last-modified: Fri, 17 Nov 2023 06:58:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700204242.711740323
x-time-ng: 0.003,0.004
age: 564179
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/b8b1c681.css
200 OK 102 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/b8b1c681.css
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 102 kB (102513 bytes)
Hash faf83d6887a8788e206b16e51fe27538
75135079b0b394c45db4ff591db092cb2f305865
bc6d12ffcd4684f86537f6aeaf1540632e1a52272cc26224b2fed10c274cb2c0
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/b8b1c681.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css; charset=utf-8
content-length: 102513
content-encoding: gzip
etag: W/"faf83d6887a8788e206b16e51fe27538"
last-modified: Mon, 20 Nov 2023 11:22:33 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700479311.227098441
x-time-ng: 0.002,0.003
age: 289305
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/d692148e.css
200 OK 5.8 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/d692148e.css
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (40484)
Hash 15c4d7e01dfc28d20aab4e3c7f69bfa8
37717ef75f03e56b7b47d84ad09ed720975a4735
921926ef27f73a8f57a03df0b80d09365ddaf65e81913895c7c55502caf4c93e
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/d692148e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css
content-length: 5803
content-encoding: gzip
etag: W/"64dddc4d-9e25"
last-modified: Thu, 17 Aug 2023 08:37:33 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000,0.002
age: 8507434
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/vendors/app-a8b181d4.js
127 kB URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/vendors/app-a8b181d4.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (51823)
Size 127 kB (126713 bytes)
Hash d6fd71c47e8be55e5012aab0148dbc57
9c1a134e26c7d6fe552cba955c9eb053d0af7515
be69cf7596d33b78c26e2418f9efcc0db535c3c16619823e4eea2cc72338205e
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/vendors/app-a8b181d4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 126713
cache-control: max-age=86400
content-encoding: gzip
etag: W/"d6fd71c47e8be55e5012aab0148dbc57"
expires: Fri, 24 Nov 2023 09:51:27 GMT
last-modified: Wed, 22 Nov 2023 09:21:20 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700644841.47883792
x-time-ng: 0.002,0.004
age: 38139
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/app-6823c722.js
64 kB URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/app-6823c722.js
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (20813)
Hash 36a5c5dab0a8f36e4e2c0d600e2b9e74
862405b910f0bbf3a618409b85772f3a0413c071
9c9220226eeade379f9d2c49c5ad66295d83d9caa6d6bbf59a38933a018924d2
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/app-6823c722.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 64246
cache-control: max-age=86400
content-encoding: gzip
etag: W/"36a5c5dab0a8f36e4e2c0d600e2b9e74"
expires: Fri, 24 Nov 2023 09:52:51 GMT
last-modified: Wed, 22 Nov 2023 09:21:20 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700644841.45883777
x-time-ng: 0.002,0.005
age: 38138
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png
653 B URL v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: image/png
content-length: 653
cache-control: public, max-age=86400
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Thu, 23 Nov 2023 20:46:39 GMT
last-modified: Tue, 25 Apr 2023 13:43:56 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 2350
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/c3ed3a93cb7a9e52497977fd82e0cb04.json
200 OK 20 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/c3ed3a93cb7a9e52497977fd82e0cb04.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 6f30fa5b241b7112117d936a0539f638
002cd5a62e56fb4a11c46cae2c7cf1353fc78783
beae4d3574566d9e0bc9f75d8934884db04a4b70501cffd98ccc0e406c140c8f
GET /genfiles/cms/1-285/desktop/media_asset/c3ed3a93cb7a9e52497977fd82e0cb04.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Thu, 03 Aug 2023 15:55:33 GMT
etag: W/"6f30fa5b241b7112117d936a0539f638"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.011
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b2d7ecac733a7c3d022772cffbc7c98d.json
200 OK 112 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b2d7ecac733a7c3d022772cffbc7c98d.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Size 112 kB (111569 bytes)
Hash 12caa96fbbf944db794e2b66c30f9374
ad5c9bafd48ff67095801beb03c04cc5a00a168b
d3daa4c1d4c301355df68ab3429685b4446eed46b1df3f76e67b511c7c75dc2a
GET /genfiles/cms/1-285/desktop/media_asset/b2d7ecac733a7c3d022772cffbc7c98d.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 22 Aug 2023 14:14:16 GMT
etag: W/"12caa96fbbf944db794e2b66c30f9374"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/29070c61.css
856 B URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/29070c61.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3418)
Hash e8218465efe8849c6318d9b5b99fdd45
34e53edb2818f1951983c938cef6a91a09703f16
5377d052aafe7b1c6557ac2d841b1e954d9beac1bce136d83d7a3cb435134be2
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/29070c61.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css; charset=utf-8
content-length: 856
content-encoding: gzip
etag: W/"e8218465efe8849c6318d9b5b99fdd45"
last-modified: Tue, 24 Oct 2023 09:55:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-expiration: expiry-date="Thu, 24 Oct 2024 00:00:00 GMT", rule-id="365 Days expiration(1)"
x-amz-meta-mtime: 1698141292.044056184
x-rgw-object-type: Normal
x-time-ng: 0.003,0.007
age: 2627690
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/vendors/Page.Casino-35f33af8.js
200 OK 59 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/vendors/Page.Casino-35f33af8.js
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (54892)
Hash b4e077947990186932b830bd266ac791
883e0c0bd4c5f9251af892ad6c1385ea2dea7516
348a53b839856f688375f118b133b1a34cf50853d6441388da17afa11b7e0c68
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/vendors/Page.Casino-35f33af8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 58706
content-encoding: gzip
etag: W/"b4e077947990186932b830bd266ac791"
last-modified: Fri, 17 Nov 2023 06:58:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700204242.723740302
x-time-ng: 0.002,0.004
age: 564144
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/Page.Bingo/Page.Casino/Page.CasinoBrand/Page.FishingHunting/Page.OtherGames/Page.Poker/Page.ScratchC/06544f60-639f475d.js
200 OK 10 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/Page.Bingo/Page.Casino/Page.CasinoBrand/Page.FishingHunting/Page.OtherGames/Page.Poker/Page.ScratchC/06544f60-639f475d.js
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (14340)
Hash 6de3d2df1ce7c0268f12cfe9c351761d
1d231f5503e4be508746e801413c8b3814d63e05
9e1c91adf3c807e7fac24b3e0583128bb1b2a1890163d77f1d3213cf12e5ba4b
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/Page.Bingo/Page.Casino/Page.CasinoBrand/Page.FishingHunting/Page.OtherGames/Page.Poker/Page.ScratchC/06544f60-639f475d.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 10369
content-encoding: gzip
etag: W/"6de3d2df1ce7c0268f12cfe9c351761d"
last-modified: Fri, 17 Nov 2023 06:58:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700204242.711740323
x-time-ng: 0.002,0.004
age: 564143
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/c10d1c9a.css
2.5 kB URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/c10d1c9a.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (16259)
Hash 968a72be2c51e3298d1342b95f744351
d2e35d66c95a0cde46cd1050a41e3e7ea2c797f4
c42b9fb8c15c730e40c5907c86099555c4d3c40faf5b064b55f1312c0b95752f
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/c10d1c9a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css
content-length: 2485
content-encoding: gzip
etag: W/"64edad9f-3f84"
last-modified: Tue, 29 Aug 2023 08:34:39 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000,0.001
age: 7469098
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/Page.Casino/modal.slots.CasinoGameSelectionModal-b0518886.js
200 OK 5.7 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/Page.Casino/modal.slots.CasinoGameSelectionModal-b0518886.js
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (5748)
Hash 3efff4c7f44dba292caf40c25d436295
a0c2924c4e08374dab20145d6aac3d4fe31ad7c2
0df1a857c073909571f24cadd7175dca82f2ed2adffb68db38c84498613dea09
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/Page.Casino/modal.slots.CasinoGameSelectionModal-b0518886.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/javascript; charset=utf-8
content-length: 5723
content-encoding: gzip
etag: W/"3efff4c7f44dba292caf40c25d436295"
last-modified: Fri, 17 Nov 2023 06:58:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700204242.703740338
x-time-ng: 0.002,0.004
age: 564143
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/29166cd1.css
5.2 kB URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/29166cd1.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (35979)
Hash de9ed8239040ec6b19eedfc03f2e4517
2590e40c19240405e5307f3244e19b7f72660fea
2fed0f8cd25dbf056507f336fb1f806de56e8e459ab73777821d4bda2db2af84
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/29166cd1.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css
content-length: 5239
content-encoding: gzip
etag: W/"650427cb-8c8c"
last-modified: Fri, 15 Sep 2023 09:45:47 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000,0.002
age: 5998563
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/cf595d91800a9e704eae8f8144ec3698.json
200 OK 22 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/cf595d91800a9e704eae8f8144ec3698.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 0bb12b4ad161abb85aa8fd50a78c1a59
d1f78a510d8e38639838b89e1bbdf08a5eb9ba3f
18f4f2d4b5c865422f5ea2c0c51aed72f46fe1c5b62b44ada0db3e2ce1e4dfb9
GET /genfiles/cms/1-285/desktop/media_asset/cf595d91800a9e704eae8f8144ec3698.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Wed, 08 Nov 2023 10:38:43 GMT
etag: W/"0bb12b4ad161abb85aa8fd50a78c1a59"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0\012- data
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: font/woff2
content-length: 63748
cache-control: max-age=86400
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 23 Nov 2023 20:58:52 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1610
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/de632e74.css
919 B URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/de632e74.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3259)
Hash 0b4253a9066ff819a01437b61f0df40b
ef68467cb3a6813810bed7301e91914d5740c48e
5a85d7ff6e08cabf40681c993878be9312e36fe4e0c1b22342d436b68c32ccf8
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/de632e74.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css
content-length: 919
content-encoding: gzip
etag: W/"64c22727-cbc"
last-modified: Thu, 27 Jul 2023 08:13:27 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000,0.001
age: 10323913
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/webpack-fb94d2f19425a3e3.js
11 kB URL widget.suphelper.top/_next/static/chunks/webpack-fb94d2f19425a3e3.js
IP
File type ASCII text, with very long lines (13249)
Hash c8c4e4149c3db1729ec6839af2b142e3
7915350a718d343841676c19d76a040de7c2b736
94dd1beafb5e7cb861ff303f6072db4fe9d8da3f3b6f816d6312ea198db3c339
GET /_next/static/chunks/webpack-fb94d2f19425a3e3.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"ed0-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 145731
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eabb712e-OSL
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/site-admin/colors/13f2420925687a194e4c38472ae71214.css
5.8 kB URL v3.traincdn.com/genfiles/site-admin/colors/13f2420925687a194e4c38472ae71214.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (30387), with no line terminators
Hash 08c7a9af81c4fc598d3b9e9249114613
0190bd2a6df79bb66d72666a21100f3cec63ce80
2200c9c9ce9ff0711cf932caa19c373d93960001ecca188c40e0ee21230eb848
GET /genfiles/site-admin/colors/13f2420925687a194e4c38472ae71214.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: text/css
content-length: 5819
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"08c7a9af81c4fc598d3b9e9249114613"
expires: Thu, 23 Nov 2023 21:12:48 GMT
last-modified: Wed, 22 Nov 2023 13:32:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 774
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_de9b8734df59500ef615f8f6e3166265.json
3.3 kB URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_de9b8734df59500ef615f8f6e3166265.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (8119), with no line terminators
Hash 560c609dae48ab4743fb70700fb9740e
43f906a5e4cd1ff110c4389cc312612ada150138
e51f76e430acea15ed6b19139b972be939cbcc58ef74392404a8441cf651ffc0
GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_de9b8734df59500ef615f8f6e3166265.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json; charset=utf-8
content-length: 3341
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"560c609dae48ab4743fb70700fb9740e"
expires: Thu, 23 Nov 2023 20:34:50 GMT
last-modified: Fri, 17 Nov 2023 14:27:16 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 3052
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/29d8e4f8/_middlewareManifest.js
200 OK 28 kB URL GET HTTP/2 widget.suphelper.top/_next/static/29d8e4f8/_middlewareManifest.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint8C:3F:3B:0F:A9:9C:8A:75:A1:F5:C8:4C:5D:F0:6E:F5:D3:2A:12:98
ValiditySun, 01 Oct 2023 08:49:15 GMT - Sat, 30 Dec 2023 08:49:14 GMT
File type Unicode text, UTF-8 text, with very long lines (65106), with no line terminators
Hash c4b5f0b7fd9e90413f0b44a37b4d899f
c472da70ada4249fea900df38f59c1f17e588f67
66fce59de95e32832f1adff3ebbc0371610178f95581cd88b68ebdf8f6f1fe19
GET /_next/static/29d8e4f8/_middlewareManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"5c-18bb2adf0eb"
vary: Accept-Encoding
cf-cache-status: HIT
age: 1261095
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498fad6712e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_slots_page/en/dictionary_b0bf8ceab4f75229da6caa626b952d5c.json
4.5 kB URL v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_slots_page/en/dictionary_b0bf8ceab4f75229da6caa626b952d5c.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (11998), with no line terminators
Hash 3e256fe47276cacb484a850d13a8e455
1d76e2d42e83c59768f1cd6583bdc369a4190310
b30f8ce76d49b4f404e7a715cdd94b22918a27aa39fdee15478a04e021864d46
GET /genfiles/web-app-v2/dictionary2/v3_slots_page/en/dictionary_b0bf8ceab4f75229da6caa626b952d5c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json; charset=utf-8
content-length: 4516
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"3e256fe47276cacb484a850d13a8e455"
expires: Thu, 23 Nov 2023 21:11:45 GMT
last-modified: Thu, 23 Nov 2023 18:07:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.002
age: 3486
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/5455ae8687a4bc0898ace2eb5fe6a0cc.json
642 B URL v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/5455ae8687a4bc0898ace2eb5fe6a0cc.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash b540e77ef04414dd4cb7e62987f82cf1
70ee9d3d058c7e86c618ccc7b1a8f122074adc6a
c65284c257cd2e1bef5ff3ece7fc985af008745b122a559e4adcb0604a3c27f5
GET /genfiles/cms/1-285/desktop/media_asset/5455ae8687a4bc0898ace2eb5fe6a0cc.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json
content-length: 642
cache-control: public, max-age=3600, s-maxage=3600
content-encoding: gzip
etag: W/"b540e77ef04414dd4cb7e62987f82cf1"
expires: Thu, 23 Nov 2023 20:53:25 GMT
last-modified: Thu, 31 Aug 2023 13:41:22 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1937
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b0276b0a7ae86d0dc87c292efc4ad16c.json
884 B URL v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b0276b0a7ae86d0dc87c292efc4ad16c.json
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash c2eb16bc46aea587d16e3eb8bff889ad
ed5e1e8dfaf6a7f9d067aed73191d522d71f6510
37c40a123ec6f4f9ebd9f26e2ccb1df2cfbfb98cee84ec03bb6153e6351590b9
GET /genfiles/cms/1-285/desktop/media_asset/b0276b0a7ae86d0dc87c292efc4ad16c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json
content-length: 884
cache-control: public, max-age=3600, s-maxage=3600
etag: "c2eb16bc46aea587d16e3eb8bff889ad"
expires: Thu, 23 Nov 2023 21:21:55 GMT
last-modified: Thu, 31 Aug 2023 12:36:01 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 227
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b364acb547241b1e58ee898c1bceff78.json
200 OK 2.0 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b364acb547241b1e58ee898c1bceff78.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 2f8e39414a8ae028df7034fce1aa084c
4a5ca5e42df804bf69e410fca3641bacd4e68508
a372a23e48c81292b0aad4d0b081098c89f7740d75aee64d53c21ea0f204e40b
GET /genfiles/cms/1-285/desktop/media_asset/b364acb547241b1e58ee898c1bceff78.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Mon, 29 May 2023 13:41:49 GMT
etag: W/"2f8e39414a8ae028df7034fce1aa084c"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.008
X-Firefox-Spdy: h2
widget.suphelper.top/sounds/new-message.mp3
30 kB URL widget.suphelper.top/sounds/new-message.mp3
IP
File type MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo\012- data
Hash ef9af24dc7dbd24ffd99c832e1300351
f78744a5013038446c468de14f205f2d52373fd6
5049d7fe87a7327a291441181d1a328a15f46a21081b970502c540406011c9b9
GET /sounds/new-message.mp3 HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: audio/mpeg
content-length: 29952
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=14400
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"7500-18bb2adf067"
cf-cache-status: HIT
age: 2136
expires: Fri, 24 Nov 2023 00:25:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ac249c2f50712e-OSL
X-Firefox-Spdy: h2
1xlite-118654.top/web-api/tpmodels/options/1?optionsKeys=products,subcategories,banners
5.4 kB URL 1xlite-118654.top/web-api/tpmodels/options/1?optionsKeys=products,subcategories,banners
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text, with very long lines (32920), with no line terminators
Hash a509ecb9c98516b5a0caac4fd5e2d0cf
9961badf66cc700a9ecfa5d1081c091c375270fd
b9a28e8903f1eaced57294fa11453d53f04072e89148967fc3787d59d7e2fed2
GET /web-api/tpmodels/options/1?optionsKeys=products,subcategories,banners HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280; sh.session.id=54d79e98-8a2e-4129-9968-12ebf8bda02f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=95, dt_total;dur=119.239, wf-uht;dur=0.143
set-cookie: is_rtl=1; expires=Fri, 22-Nov-2024 20:25:43 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Thu, 30-Nov-2023 20:25:43 GMT; Max-Age=604800; path=/
v3fr=1; expires=Sun, 26-Nov-2023 20:25:43 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.112
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/81.9c6562bba5669b47.js
492 kB URL widget.suphelper.top/_next/static/chunks/81.9c6562bba5669b47.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 492 kB (491965 bytes)
Hash 08c36a7b2cd1bf439d74c0a1bc835b71
49c1bb547bfa28e9ba2a2f8780035ba863a9be51
c9e584367ea72d5a7c3e4e07455dea2d0a92795b3028d3768e2199893da73d63
GET /_next/static/chunks/81.9c6562bba5669b47.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"8f42-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 143884
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac249b9e3c712e-OSL
X-Firefox-Spdy: h2
v3.traincdn.com/sys-icons/1.0.207/285/common.svg
64 kB URL v3.traincdn.com/sys-icons/1.0.207/285/common.svg
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash a043505a8f35f0063feabd4e78147905
f6faa9339d0cf1f7adaa5afa981049f517501fda
7316271f37cc8c6e5d1f59bdb577744b22489ebea74f642d133c391472505e4a
GET /sys-icons/1.0.207/285/common.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: image/svg+xml
content-length: 63921
cache-control: max-age=86400
content-encoding: gzip
etag: W/"a043505a8f35f0063feabd4e78147905"
expires: Fri, 24 Nov 2023 09:52:48 GMT
last-modified: Mon, 20 Nov 2023 11:15:16 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700478914.643826552
x-time-ng: 0.002
age: 38120
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/29d8e4f8/_buildManifest.js
200 OK 64 kB URL GET HTTP/2 widget.suphelper.top/_next/static/29d8e4f8/_buildManifest.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint8C:3F:3B:0F:A9:9C:8A:75:A1:F5:C8:4C:5D:F0:6E:F5:D3:2A:12:98
ValiditySun, 01 Oct 2023 08:49:15 GMT - Sat, 30 Dec 2023 08:49:14 GMT
File type gzip compressed data, from Unix\012- data
Hash 40be3254bee3f00d65293e784a04f904
d28e05bec61db7feedc5bed3ce0f17d0b0a761ea
f0354fe6e3a01f84cbfd90b08ff8f6ea25fc88b0bfe59b0df56589095019d754
GET /_next/static/29d8e4f8/_buildManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"1ad-18bb2adf0eb"
vary: Accept-Encoding
cf-cache-status: HIT
age: 152388
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eacf712e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/designed_banners/1/image/59cb453874b324aeefd47a412b2a259e.jpg
200 OK 308 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/designed_banners/1/image/59cb453874b324aeefd47a412b2a259e.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1888x400, components 3\012- data
Size 308 kB (307742 bytes)
Hash d18010e985c3b239d6877bff952da440
b34b745498862a147e977424cb13e005348d66cc
f806a63607875d04c4d94417641f9559b105a5b7a60c04b5a469bc86a3e769f4
GET /genfiles/cms/designed_banners/1/image/59cb453874b324aeefd47a412b2a259e.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: image/jpeg
content-length: 307742
cache-control: public, max-age=3600, s-maxage=3600
etag: "d18010e985c3b239d6877bff952da440"
expires: Thu, 23 Nov 2023 21:08:26 GMT
last-modified: Fri, 17 Nov 2023 13:05:22 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
age: 1037
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/0c294a17-47e02e0897fc1e03.js
275 kB URL widget.suphelper.top/_next/static/chunks/0c294a17-47e02e0897fc1e03.js
IP
File type gzip compressed data, from Unix\012- data
Size 275 kB (274685 bytes)
Hash 62de8d0a44aede4794db6513642e577b
4f1aea865e3d0b36b46bab541554f9f44e7a5822
1de49f6a54fb251cb44cb0df9a97b6a59ab874e673223d17efd8ad31bd02dede
GET /_next/static/chunks/0c294a17-47e02e0897fc1e03.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 12:45:49 GMT
etag: W/"266f-18b9011853a"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 1841819
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eacb712e-OSL
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/designed_banners/1/image/ba37b330c8692d2ccccdd877f366444c.jpg
297 kB URL v3.traincdn.com/genfiles/cms/designed_banners/1/image/ba37b330c8692d2ccccdd877f366444c.jpg
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1888x400, components 3\012- data
Size 297 kB (297255 bytes)
Hash 81573bb3642f3ec9bd7d8369da745601
e69aec4f700ed3ffebd39a7ee80def5924906669
fb669b633e6246d5da3bd613061b9e7f9bc66747e59a61f434deb391322af78e
GET /genfiles/cms/designed_banners/1/image/ba37b330c8692d2ccccdd877f366444c.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: image/jpeg
content-length: 297255
cache-control: public, max-age=3600, s-maxage=3600
etag: "81573bb3642f3ec9bd7d8369da745601"
expires: Thu, 23 Nov 2023 21:02:47 GMT
last-modified: Wed, 22 Nov 2023 10:37:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.003
age: 1483
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/pages/_app-d9f24c795423bce0.js
460 kB URL widget.suphelper.top/_next/static/chunks/pages/_app-d9f24c795423bce0.js
IP
File type gzip compressed data, from Unix\012- data
Size 460 kB (459873 bytes)
Hash 79a7da2e8402f6b805cf37cdec024622
43306c4aecc73857d5685666e455226537f3f47f
ede62183d94af2cccc7d835c77ff198f19fdddbcee393c8645cdb3d5f22966cd
GET /_next/static/chunks/pages/_app-d9f24c795423bce0.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"f74a6-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 59942
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eac4712e-OSL
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1877
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1878
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset_sub/ad76015605ac32ada44a01e7e666cd07.webp
8.5 kB URL v3.traincdn.com/genfiles/cms/desktop/media_asset_sub/ad76015605ac32ada44a01e7e666cd07.webp
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 266x154, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7bdc63871b6cf0374b37a782701950ee
91185c8209156ad9ebe5726a5c011d2a2c3c29ad
37250b83e9531110ff6eed1df94d777e09eea4be4ad9298f4dd22c25307c3c0a
GET /genfiles/cms/desktop/media_asset_sub/ad76015605ac32ada44a01e7e666cd07.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/webp
content-length: 8522
cache-control: public, max-age=3600, s-maxage=3600
etag: "7bdc63871b6cf0374b37a782701950ee"
expires: Thu, 23 Nov 2023 21:25:44 GMT
last-modified: Tue, 16 May 2023 04:52:31 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.133
age: 381
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1878
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1878
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/main-fa1d3b21fd97b583.js
64 kB URL widget.suphelper.top/_next/static/chunks/main-fa1d3b21fd97b583.js
IP
File type gzip compressed data, from Unix\012- data
Hash 9f4bedcc0d1c0d171d9d21af7c6c6c1d
e5551c8a94ce543f3020945fb9e58f4946fece1d
3d029f56d8804e23e527be5aa25b2874a7ca527cdc15bcbe020cbbaf85102f2b
GET /_next/static/chunks/main-fa1d3b21fd97b583.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"1a544-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 54609
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eabf712e-OSL
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1878
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/slots/games/849/img64842.jpeg
200 OK 49 kB URL GET HTTP/2 v3.traincdn.com/genfiles/slots/games/849/img64842.jpeg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 301x180, components 3\012- data
Hash e51d5439e88b6e9ac13946930460b050
352ac27cc8de46291ef4d86dc9b21f14c5a8290a
1a711f620fad85c3de5e064e60ac07a958e986e644d9f836892aac912bfa4ef5
GET /genfiles/slots/games/849/img64842.jpeg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/png
content-length: 48836
cache-control: public, max-age=86400
etag: "e51d5439e88b6e9ac13946930460b050"
expires: Thu, 23 Nov 2023 20:29:21 GMT
last-modified: Mon, 10 Apr 2023 19:12:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 3390
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1878
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x154, components 3\012- data
Hash 5ec11edbb80b4bb8cb3929d977f727bb
50374b883317f22fb1f6f83ede732b009ff4aa13
0f71ca60ac9a0bebbe9a327c0ea9e9a8c4b68d2c1640ddd4e5517884b1444600
GET /genfiles/cms/desktop/media_asset/481e12b0aa83413646b97cdac98377ae.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:44 GMT
content-type: image/jpg
content-length: 33204
cache-control: max-age=86400
etag: "5ec11edbb80b4bb8cb3929d977f727bb"
expires: Thu, 23 Nov 2023 21:22:09 GMT
last-modified: Tue, 11 Apr 2023 22:46:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1878
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sys-icons/1.0.202/285/thirdParty.svg
48 kB URL v3.traincdn.com/sys-icons/1.0.202/285/thirdParty.svg
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 614fe603c483bec3870db81c1c3bec6c
b205e1c269dd74c01bb38aa489d411fb441b2103
256b8a0d933a6c754d8f98e2720bb9cd2450e9c05831990f7e1f4332483b1fef
GET /sys-icons/1.0.202/285/thirdParty.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:45 GMT
content-type: image/svg+xml
content-length: 47642
content-encoding: gzip
etag: W/"614fe603c483bec3870db81c1c3bec6c"
last-modified: Fri, 17 Nov 2023 10:00:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700215233.61008825
x-time-ng: 0.003
age: 549718
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-6b455051.js
200 OK 26 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-6b455051.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 41aecb47bcafae275bea7a6d0300d37d
fc9c4d852989adaec572dc6417b03238b4e8747b
7fae73591274ca915b475dfd0688d49808fc39bd7215513b2a2a8a77aca83cfc
GET /_nuxt/desktop/default/vendors/conversion-6b455051.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 25770
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-64aa"
expires: Fri, 24 Nov 2023 13:25:34 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25232
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0\012- data
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:50 GMT
content-type: font/woff2
content-length: 63748
cache-control: max-age=86400
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 23 Nov 2023 20:58:52 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1618
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2
65 kB URL v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 64732, version 1.0\012- data
Hash 3ac5d40d1b3966fc5eb09ecca74d9cbf
a69f32357765dd321519889aeacba5e9ca893bb0
3310766b8f58538d07abded74a2babe1acbe1a3ee820d5b8c8265da666f4fb0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:50 GMT
content-type: font/woff2
content-length: 64732
cache-control: max-age=86400
etag: "3ac5d40d1b3966fc5eb09ecca74d9cbf"
expires: Thu, 23 Nov 2023 20:44:45 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.003
age: 2467
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/623-df7322d476582728.js
172 kB URL widget.suphelper.top/_next/static/chunks/623-df7322d476582728.js
IP
File type gzip compressed data, from Unix\012- data
Size 172 kB (172392 bytes)
Hash ca3f6b19b6d7d123cd9e83aa3b5a5605
5e2d85497d265def826655c752d948be0280b0ab
f028ceda7ccfe45271c55dd203b4697656ccd1f1a869c3f64d0e6b49cccb0897
GET /_next/static/chunks/623-df7322d476582728.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 12:45:49 GMT
etag: W/"5af82-18b9011853a"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 1409986
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eacc712e-OSL
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0\012- data
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:50 GMT
content-type: font/woff2
content-length: 63748
cache-control: max-age=86400
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 23 Nov 2023 20:58:52 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1618
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/f1b7e458.css
1.1 kB URL v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/f1b7e458.css
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (5395)
Hash 16186f64809a5a01f1e1844dc4d5d112
6888dfe08018fa79ff8e5c289a8163fdc967e045
4635d1f62c41f17daa1e4538e4eb924ff30c2cd1f918d2510e7c60e5036f737c
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/css/f1b7e458.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:51 GMT
content-type: text/css
content-length: 1139
content-encoding: gzip
etag: W/"64dddc4d-1514"
last-modified: Thu, 17 Aug 2023 08:37:33 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000,0.001
age: 8507278
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/modal.WelcomeBonusModal-0358df0d.js
200 OK 1.7 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/desktop/default/modal.WelcomeBonusModal-0358df0d.js
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2730)
Hash 159b5827a60a97692a50ee7ff6ab444c
97daec4656a9d591b01c6d3673ad005fcfea3338
b8d0dc070beb47a8e181b1242f17c5010869bbd89e14e018c093c45475faa0b6
GET /microfrontend/third-party-modules/third-party-modules-static/desktop/default/modal.WelcomeBonusModal-0358df0d.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:51 GMT
content-type: text/javascript; charset=utf-8
content-length: 1697
content-encoding: gzip
etag: W/"159b5827a60a97692a50ee7ff6ab444c"
last-modified: Fri, 17 Nov 2023 06:58:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-amz-meta-mtime: 1700204242.723740302
x-time-ng: 0.001,0.003
age: 564119
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-BoldItalic.woff2
69 kB URL v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-BoldItalic.woff2
IP
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 69248, version 1.0\012- data
Hash c1401bc7dd997cfd20fc1e0907e604d7
fdf235a30de7f853f471fb77a91896a81d4f5cff
09f5c3ad00fe7529f4feb15e89d17b53102bc8c01ca4f77212cf18f2af9a4fc5
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-BoldItalic.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:51 GMT
content-type: font/woff2
content-length: 69248
cache-control: max-age=86400
etag: "c1401bc7dd997cfd20fc1e0907e604d7"
expires: Thu, 23 Nov 2023 20:44:16 GMT
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.001
age: 2498
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1/desktop/fonts/RobotoCondensed/RobotoCondensed-Bold.woff2
200 OK 63 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/RobotoCondensed/RobotoCondensed-Bold.woff2
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63340, version 1.0\012- data
Hash 191a3812f30795c570a912c208cb2989
a7248755496153580b708a37f84e02ef3b62d81a
a5a8f9c78dd8fa46747f2af0b70b956d57341c4662eba1e6ff26de5fcc0f8709
GET /genfiles/cms/1/desktop/fonts/RobotoCondensed/RobotoCondensed-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:51 GMT
content-type: font/woff2
content-length: 63340
cache-control: max-age=86400
etag: "191a3812f30795c570a912c208cb2989"
expires: Thu, 23 Nov 2023 20:26:42 GMT
last-modified: Wed, 14 Jun 2023 09:48:48 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.002
age: 3549
accept-ranges: bytes
X-Firefox-Spdy: h2
widget.suphelper.top/injector.js
200 OK 73 kB URL GET HTTP/2 widget.suphelper.top/injector.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint8C:3F:3B:0F:A9:9C:8A:75:A1:F5:C8:4C:5D:F0:6E:F5:D3:2A:12:98
ValiditySun, 01 Oct 2023 08:49:15 GMT - Sat, 30 Dec 2023 08:49:14 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2c4461e65886f70d098194fd48647de2
3446181a20e84c771e61ac9fb9eaf0664c046cc0
5b0cada4346c6158fc5ee0ef7aa0d733a86c42c90d660bd96cbd32e5617dea88
GET /injector.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=14400
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"32bb9-18bb2adf05b"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 7
expires: Fri, 24 Nov 2023 00:25:42 GMT
server: cloudflare
cf-ray: 82ac2495ee6d712e-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66
94 kB URL www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66
IP
File type Unicode text, UTF-8 text, with very long lines (10691)
Hash fa84baf5bb582d51d325b7b6459a498f
ad3cb7031c9c6aec26f30a487402256117a70203
a7e6a011d7bc3bbda22b23322fd100f47d45cf439617d8fc3dd7ba518fcdd48f
GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Nov 2023 20:25:52 GMT
expires: Thu, 23 Nov 2023 20:25:52 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94433
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
radar.cedexis.com/1/23802/radar.js
302 Moved Temporarily 154 B URL GET HTTP/1.1 radar.cedexis.com/1/23802/radar.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintC7:F6:9F:14:BA:D6:F0:96:22:D1:BD:25:43:8B:10:66:C3:B4:7C:56
ValidityWed, 26 Apr 2023 00:00:00 GMT - Thu, 25 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /1/23802/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 23 Nov 2023 20:25:52 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: /1621860284/stub.js
Expires: Thu, 23 Nov 2023 20:35:52 GMT
Cache-Control: max-age=600
Vary: User-Agent,DNT
radar.cedexis.com/1621860284/stub.js
271 B URL radar.cedexis.com/1621860284/stub.js
IP
ASN #63911 NetActuate, Inc
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintC7:F6:9F:14:BA:D6:F0:96:22:D1:BD:25:43:8B:10:66:C3:B4:7C:56
ValidityWed, 26 Apr 2023 00:00:00 GMT - Thu, 25 Apr 2024 23:59:59 GMT
Hash cec7270f03f717f8feca31e994d894d6
470eb82c7e87dccb465562030ed6db7c1e2dd78c
40fceb327b96d3557153ea9feb76e426f85b52dda8fd6444e96134bc4ff5f594
GET /1621860284/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Nov 2023 20:25:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 24 May 2021 13:00:44 GMT
Vary: Accept-Encoding
ETag: W/"60aba37c-186"
Expires: Thu, 07 Dec 2023 20:25:52 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
v3.traincdn.com/genfiles/cms/desktop/media_asset_sub/1ec334f4b7d3360414037a02cf124367.webp
74 kB URL GET v3.traincdn.com/genfiles/cms/desktop/media_asset_sub/1ec334f4b7d3360414037a02cf124367.webp
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1095x490, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 82245220e532da7445f7d601724c2c3c
88a40e1cdda07e98e1dd7da5ebfa3ae563cf52e4
c780ff2c231b00d2cc9706c335851d2ded740effda828a5cf277e8a8ef7cd29a
GET /genfiles/cms/desktop/media_asset_sub/1ec334f4b7d3360414037a02cf124367.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:52 GMT
content-type: image/webp
content-length: 74332
cache-control: public, max-age=3600, s-maxage=3600
etag: "82245220e532da7445f7d601724c2c3c"
expires: Thu, 23 Nov 2023 21:12:21 GMT
last-modified: Mon, 26 Jun 2023 12:30:16 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 2266
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/web-api/q/0e9f561e0i061025aa3fa04b0b47dc197c125f52ccfb089b8ff9
478 B URL 1xlite-118654.top/web-api/q/0e9f561e0i061025aa3fa04b0b47dc197c125f52ccfb089b8ff9
IP
ASN #202492 Silverhill Group Holding Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /web-api/q/0e9f561e0i061025aa3fa04b0b47dc197c125f52ccfb089b8ff9 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Content-Length: 32436
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280; sh.session.id=54d79e98-8a2e-4129-9968-12ebf8bda02f; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:51 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=24, dt_total;dur=25.843, wf-uht;dur=0.054
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.026
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b005f35fb4395f7ba7edcdba686c3227.json
200 OK 584 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b005f35fb4395f7ba7edcdba686c3227.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash d25f7ec022ffaf59dd404f5c08a9692b
77ca34c5e8573835ad4c6812ae8d92a857428913
4985a057c90e56e315180c994969d1fdd7550bba4cd444a84c245bb60779117f
GET /genfiles/cms/1-285/desktop/media_asset/b005f35fb4395f7ba7edcdba686c3227.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Thu, 02 Nov 2023 09:59:52 GMT
etag: W/"d25f7ec022ffaf59dd404f5c08a9692b"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.009
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3b81v897130004&_p=1700771154613&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1343982294.1700771155&ul=en-us&sr=1280x1024&_s=1&sid=1700771154&sct=1&seg=0&dl=https%3A%2F%2F1xlite-118654.top%2Fen%2Fslots%3Fproducts%3D849%26tag%3Dd_2714013m_97c_&dt=1xBet%20online%20slots%20%E2%87%92%20Play%20online%20slots%20with%20bonuses%20%E2%80%94%20Slots%20%E1%90%89%201xlite-118654.top&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=15257
0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3b81v897130004&_p=1700771154613&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1343982294.1700771155&ul=en-us&sr=1280x1024&_s=1&sid=1700771154&sct=1&seg=0&dl=https%3A%2F%2F1xlite-118654.top%2Fen%2Fslots%3Fproducts%3D849%26tag%3Dd_2714013m_97c_&dt=1xBet%20online%20slots%20%E2%87%92%20Play%20online%20slots%20with%20bonuses%20%E2%80%94%20Slots%20%E1%90%89%201xlite-118654.top&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=15257
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je3b81v897130004&_p=1700771154613&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1343982294.1700771155&ul=en-us&sr=1280x1024&_s=1&sid=1700771154&sct=1&seg=0&dl=https%3A%2F%2F1xlite-118654.top%2Fen%2Fslots%3Fproducts%3D849%26tag%3Dd_2714013m_97c_&dt=1xBet%20online%20slots%20%E2%87%92%20Play%20online%20slots%20with%20bonuses%20%E2%80%94%20Slots%20%E1%90%89%201xlite-118654.top&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=15257 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-118654.top
date: Thu, 23 Nov 2023 20:25:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/ef34944c28aa3f892589e2b88eda81af.json
200 OK 252 B URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/ef34944c28aa3f892589e2b88eda81af.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type ASCII text, with no line terminators
Hash ac5276c5ccfdb12e9945be786ba43f99
f16531562630c999648413d21d6666d78a3d2a3e
97b2f99019627e9a11a9be457075e71adf178dcc1f9de57411864ec9012041a1
GET /genfiles/cms/1-285/desktop/media_asset/ef34944c28aa3f892589e2b88eda81af.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
content-length: 252
last-modified: Fri, 08 Sep 2023 07:33:51 GMT
etag: "92c62473a8c3ca07502fb3545c3da382"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/cbebbcba9d376c69c768cfd1de2973e8.json
200 OK 1.4 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/cbebbcba9d376c69c768cfd1de2973e8.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type ASCII text, with very long lines (1520), with no line terminators
Hash 758fbcd5143c8c9734134d6a31a91907
f73d46c0657307d0ee30c2e172bafed6435b677b
5412176cce646b671234147a1da8a8907ce1a9e0dc8a748536da9b2ef87eba3e
GET /genfiles/cms/1-285/desktop/media_asset/cbebbcba9d376c69c768cfd1de2973e8.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Thu, 03 Aug 2023 12:27:51 GMT
etag: W/"840cfce321cff6ef3a6969da8314b04a"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.008
X-Firefox-Spdy: h2
v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/polyfills.js
200 OK 46 kB URL GET HTTP/2 v3.traincdn.com/microfrontend/third-party-modules/third-party-modules-static/polyfills.js
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (29373)
Hash 4021e166a50e976319a2cdff41b100f1
0dc87ed8a91c030c66a9481f5e2cee46690f1836
462f5ed962da9e048d69b5d29011206ed0d97f89ab6b05faccf9f42121296bd9
GET /microfrontend/third-party-modules/third-party-modules-static/polyfills.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 19176
content-encoding: gzip
etag: W/"64c22724-b2d5"
last-modified: Thu, 27 Jul 2023 08:13:24 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000,0.003
age: 10318166
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/web-api/tpmodels/games/1?subcategoryId=17&limit=16&offset=0
200 OK 3.9 kB URL GET HTTP/2 1xlite-118654.top/web-api/tpmodels/games/1?subcategoryId=17&limit=16&offset=0
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4325), with no line terminators
Hash f29222b231c9a6fc407bbd83a1d16264
12ec0ede887917a4f5937af2d4048b43c3ae64ad
157f8ec8cd32ea2973b9485a86e7ca654b5a2cd3d897848e318f14fd25ca4a3c
GET /web-api/tpmodels/games/1?subcategoryId=17&limit=16&offset=0 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280; sh.session.id=54d79e98-8a2e-4129-9968-12ebf8bda02f; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=96, dt_total;dur=115.943, wf-uht;dur=0.181
set-cookie: is_rtl=1; expires=Fri, 22-Nov-2024 20:25:43 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.109
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
widget.suphelper.top/_next/static/chunks/pages/index-df53b81c5c29ae7b.js
200 OK 103 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/pages/index-df53b81c5c29ae7b.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint8C:3F:3B:0F:A9:9C:8A:75:A1:F5:C8:4C:5D:F0:6E:F5:D3:2A:12:98
ValiditySun, 01 Oct 2023 08:49:15 GMT - Sat, 30 Dec 2023 08:49:14 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103092 bytes)
Hash 6bd50eb7febc53613a14ead6eb4f7132
9e1479d4aac575554a909db97df7b7bc0559de85
431a87764fc42e8005b0c23f813657c26b398050b5306828906514d11b2c1cef
GET /_next/static/chunks/pages/index-df53b81c5c29ae7b.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"192b4-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 152388
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498eacd712e-OSL
X-Firefox-Spdy: h2
1xlite-118654.top/web-api/tpmodels/games/1?subcategoryId=996&limit=16&offset=0
200 OK 27 B URL GET HTTP/2 1xlite-118654.top/web-api/tpmodels/games/1?subcategoryId=996&limit=16&offset=0
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 58f2065369b3b817c494a7510cf3af35
94b670e642cecc7a3a50cb66875da3642e99b172
3cf5c90882ea64ca54519e85a75b8e96ad5788f7f6b507f179eae26d167ffb4f
GET /web-api/tpmodels/games/1?subcategoryId=996&limit=16&offset=0 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280; sh.session.id=54d79e98-8a2e-4129-9968-12ebf8bda02f; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=71, dt_total;dur=143.905, wf-uht;dur=0.176
set-cookie: is_rtl=1; expires=Fri, 22-Nov-2024 20:25:43 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.116
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-7ebf5cf7.js
200 OK 58 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-7ebf5cf7.js
IP
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/desktop/default/vendors/betting.media-7ebf5cf7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 17608
cache-control: max-age=86400
content-encoding: gzip
etag: "655f4869-44c8"
expires: Fri, 24 Nov 2023 13:25:41 GMT
last-modified: Thu, 23 Nov 2023 12:41:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
age: 25242
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b588fb81207704b9bc3e220b71966696.json
200 OK 36 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/b588fb81207704b9bc3e220b71966696.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type JSON data\012- , ASCII text
Hash 82be680bc6bd32b65cef0e3bda368678
5f5ac335405d9c792b43b6aee8d5ab64ac42e5ba
12800d3ad8e368dc1541e334f8f6f669549da16f62b4dae2ebb9929bd88322c7
GET /genfiles/cms/1-285/desktop/media_asset/b588fb81207704b9bc3e220b71966696.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Mon, 30 Oct 2023 14:20:28 GMT
etag: W/"82be680bc6bd32b65cef0e3bda368678"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.014
X-Firefox-Spdy: h2
1xlite-118654.top/web-api/api/v3/bonuses/first-deposit
200 OK 161 B URL GET HTTP/2 1xlite-118654.top/web-api/api/v3/bonuses/first-deposit
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash cf5613a9a38c9b73a243ce1be564c9b5
fead50fc7e444cfe518a00aa23062eaf1b7074c3
2f88a24d355c6b1a9b12c18245d9a14adf5c6735cc5c985b9143467fa8a31c35
GET /web-api/api/v3/bonuses/first-deposit HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=44, dt_total;dur=54.317, wf-uht;dur=0.067
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.048
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/a6652d11e3e95e0cdf8524d869bafd23.json
200 OK 1.0 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/a6652d11e3e95e0cdf8524d869bafd23.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type ASCII text, with very long lines (1109), with no line terminators
Hash 52517c1906845103e3bb96ed9295f491
436ec6dd30e4c9e459d202817189896aa06b74d1
39e5f17ded9fd42a623cfa4be6ed30d529bd4f82f81bd4c3fc7ea6ca9e9e9bf3
GET /genfiles/cms/1-285/desktop/media_asset/a6652d11e3e95e0cdf8524d869bafd23.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Mon, 26 Jun 2023 15:22:46 GMT
etag: W/"87d2d12e8e9ed3098c0117d17b5be3a0"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/designed_banners/1/image/d1ccdbda0ae0d00f8066965fc18ea50e.jpg
200 OK 180 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/designed_banners/1/image/d1ccdbda0ae0d00f8066965fc18ea50e.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1888x400, components 3\012- data
Size 180 kB (179761 bytes)
Hash 28dc74e56394fbc8f4da2f609d07b22c
23626be893d34b0a522cb277f15136ad0e8553cc
c76e27864b0f2add6693079ad7f3f24c76be7551641c9ad7621b572c440a620e
GET /genfiles/cms/designed_banners/1/image/d1ccdbda0ae0d00f8066965fc18ea50e.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: image/jpeg
content-length: 179761
cache-control: public, max-age=3600, s-maxage=3600
etag: "28dc74e56394fbc8f4da2f609d07b22c"
expires: Thu, 23 Nov 2023 21:11:42 GMT
last-modified: Wed, 22 Nov 2023 10:41:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.003
age: 942
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/88567e2cd214b69a9459980fd0615be6.json
200 OK 7.5 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/88567e2cd214b69a9459980fd0615be6.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type ASCII text, with very long lines (8254), with no line terminators
Hash 93b776a3d616d418cfae416c29ca7288
332d40057b5200899d19dbcc9b2fb61675f02880
5069622a71b1322444b696dde8097fce25a4c85c800598bbd1783ce8d247066a
GET /genfiles/cms/1-285/desktop/media_asset/88567e2cd214b69a9459980fd0615be6.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 14 Nov 2023 05:45:01 GMT
etag: W/"687a1245f5f8a8f2edf037378495b89a"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.016
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a6652d11e3e95e0cdf8524d869bafd23.json
200 OK 1.0 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a6652d11e3e95e0cdf8524d869bafd23.json
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1109), with no line terminators
Hash 52517c1906845103e3bb96ed9295f491
436ec6dd30e4c9e459d202817189896aa06b74d1
39e5f17ded9fd42a623cfa4be6ed30d529bd4f82f81bd4c3fc7ea6ca9e9e9bf3
GET /genfiles/cms/1-285/desktop/media_asset/a6652d11e3e95e0cdf8524d869bafd23.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-118654.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/json
content-length: 365
cache-control: max-age=86400
content-encoding: gzip
etag: W/"87d2d12e8e9ed3098c0117d17b5be3a0"
expires: Thu, 23 Nov 2023 20:57:27 GMT
last-modified: Mon, 26 Jun 2023 15:22:46 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
server-timing: wf-uht;dur=0.028
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
x-time-ng: 0.000
age: 1726
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/desktop/media_asset/06c971dab23c891a97d5f05e87d5c9df.jpg
0 B URL GET v3.traincdn.com/genfiles/cms/desktop/media_asset/06c971dab23c891a97d5f05e87d5c9df.jpg
IP
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/cms/desktop/media_asset/06c971dab23c891a97d5f05e87d5c9df.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
widget.suphelper.top/_next/static/29d8e4f8/_ssgManifest.js
200 OK 77 B URL GET HTTP/2 widget.suphelper.top/_next/static/29d8e4f8/_ssgManifest.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint8C:3F:3B:0F:A9:9C:8A:75:A1:F5:C8:4C:5D:F0:6E:F5:D3:2A:12:98
ValiditySun, 01 Oct 2023 08:49:15 GMT - Sat, 30 Dec 2023 08:49:14 GMT
File type ASCII text, with no line terminators
Hash b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
GET /_next/static/29d8e4f8/_ssgManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 20:25:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"4d-18bb2adf0eb"
vary: Accept-Encoding
cf-cache-status: HIT
age: 1261095
expires: Fri, 22 Nov 2024 20:25:42 GMT
server: cloudflare
cf-ray: 82ac2498ead1712e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/4e64c9f3799bcd85df475dae757f0591.json
200 OK 3.0 kB URL GET HTTP/2 1xlite-118654.top/genfiles/cms/1-285/desktop/media_asset/4e64c9f3799bcd85df475dae757f0591.json
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type ASCII text, with very long lines (3286), with no line terminators
Hash 5b3dfa9b63b4595f2f04dc2ea8f98372
e987634ae922b2e8fa073bb0e526eb674ca55025
177248858193a36b1161c0f7c51062d08614ce20d2b2796a299316a41383d26b
GET /genfiles/cms/1-285/desktop/media_asset/4e64c9f3799bcd85df475dae757f0591.json HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-118654.top/en/slots?products=849&tag=d_2714013m_97c_
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; postback_watcher=; che_g=8a914d57-f113-3f61-509a-b41e238cf027
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:41 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Fri, 10 Nov 2023 12:38:27 GMT
etag: W/"0c5be47def5936a8a3dd62648e4aaa55"
content-encoding: br
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
1xlite-118654.top/web-api/tpmodels/games/1?subcategoryId=25&limit=16&offset=0
200 OK 4.1 kB URL GET HTTP/2 1xlite-118654.top/web-api/tpmodels/games/1?subcategoryId=25&limit=16&offset=0
IP
ASN #202492 Silverhill Group Holding Ltd
Requested by https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Certificate IssuerLet's Encrypt
Subject1xlite-118654.top
Fingerprint34:94:99:00:84:A9:6A:DE:A4:C1:C5:AB:F4:A3:7E:D2:3A:8A:1E:AC
ValidityFri, 22 Sep 2023 10:44:11 GMT - Thu, 21 Dec 2023 10:44:10 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4601), with no line terminators
Hash 1fc0ca0fdc9eb1b45a32476998c17b8d
157be15d250321f044dfe0cbaae449d9e2801aa7
c94f6cadc0169d162457ccc516bdad278d75fb0691bfdf9d005f8da9be769654
GET /web-api/tpmodels/games/1?subcategoryId=25&limit=16&offset=0 HTTP/1.1
Host: 1xlite-118654.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://1xlite-118654.top/microfrontend/third-party-modules/slots?products=849&tag=d_2714013m_97c_
Cookie: platform_type=desktop; auid=sv0Z5mVftUJJ7yGrAwnGAg==; lng=en; SESSION=f740cc603a1cbefb145ffc0508028b5d; cookies_agree_type=3; tzo=0; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2714013m_97c_%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2714013m_97c_; che_g=8a914d57-f113-3f61-509a-b41e238cf027; window_width=1280; sh.session.id=54d79e98-8a2e-4129-9968-12ebf8bda02f; is_rtl=1; fast_coupon=true; v3fr=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 20:25:43 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=133, dt_total;dur=141.158, wf-uht;dur=0.167
set-cookie: is_rtl=1; expires=Fri, 22-Nov-2024 20:25:43 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.138
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
83.147.205.153
142.250.74.168
0.0.0.0
0.0.0.0