luckyforbet.com/i/36757
302 Found 20 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /i/36757 HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 30 Jan 2023 20:12:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; expires=Tue, 31-Jan-2023 20:12:03 GMT; Max-Age=86400; path=/
TRK_TRU7=eJxjYGBgEuEQZC5NNBVUSEkzNEs2sDBMNjI1NjAzMzVJNEhNS7KwTLIwNzNMNLAQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcohwYQECQNb8YpIRFkAvIgMuqMEBkuVNSyzKTU%2BNLKgtS2RgBWyQlpg%3D%3D; expires=Tue, 31-Jan-2023 20:12:03 GMT; Max-Age=86400; path=/
trk_cpa_pixel=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d; expires=Fri, 31-Mar-2023 20:12:03 GMT; Max-Age=5184000; path=/
Location: http://luckyforbet.com/h/ll22Ht9PCBpRePN.eOfPQO4h5urxhQUEpMIgtFLxG3_szVKbyHhHoAWZB5N6e1wAribHazA2njIDrb7YiRMxz5DpZfG289HTXairhp1UIZ6uQ47f7cw6uAke4GEqsQtD1JuevH6x_iP8xLd4AIy2dyShsO4wfyMKWkk4nYiDf0rq4GJ8oRMHcf_rB_Riaj_fMMuIGu0ODE1raqozvO8fkqqCg0uuPZiN0iGVXwlbfSw1Ls6he20pym1brKxo6D6mWAotOjQqjiOkiaijw16XZN3MdNB4kmf1euVjd.sIxI8qq.qq
Content-Encoding: gzip
Vary: Accept-Encoding
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12186
Expires: Mon, 30 Jan 2023 23:35:09 GMT
Date: Mon, 30 Jan 2023 20:12:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3285
Expires: Mon, 30 Jan 2023 21:06:48 GMT
Date: Mon, 30 Jan 2023 20:12:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4807
Expires: Mon, 30 Jan 2023 21:32:10 GMT
Date: Mon, 30 Jan 2023 20:12:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 19:43:13 GMT
content-type: application/json
age: 1730
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hk3FKdnD3wCRJzgArwgrI23qbdbwEHpd02B1QgOhmCRv3W4kitBb27qsKtTolXsp3cqWUUsPN8g=
x-amz-request-id: NH9P17NQHMTVR1P7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 19:50:52 GMT
age: 1271
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
luckyforbet.com/h/ll22Ht9PCBpRePN.eOfPQO4h5urxhQUEpMIgtFLxG3_szVKbyHhHoAWZB5N6e1wAribHazA2njIDrb7YiRMxz5DpZfG289HTXairhp1UIZ6uQ47f7cw6uAke4GEqsQtD1JuevH6x_iP8xLd4AIy2dyShsO4wfyMKWkk4nYiDf0rq4GJ8oRMHcf_rB_Riaj_fMMuIGu0ODE1raqozvO8fkqqCg0uuPZiN0iGVXwlbfSw1Ls6he20pym1brKxo6D6mWAotOjQqjiOkiaijw16XZN3MdNB4kmf1euVjd.sIxI8qq.qq
200 OK 368 B URL HTTP/1.1 luckyforbet.com/h/ll22Ht9PCBpRePN.eOfPQO4h5urxhQUEpMIgtFLxG3_szVKbyHhHoAWZB5N6e1wAribHazA2njIDrb7YiRMxz5DpZfG289HTXairhp1UIZ6uQ47f7cw6uAke4GEqsQtD1JuevH6x_iP8xLd4AIy2dyShsO4wfyMKWkk4nYiDf0rq4GJ8oRMHcf_rB_Riaj_fMMuIGu0ODE1raqozvO8fkqqCg0uuPZiN0iGVXwlbfSw1Ls6he20pym1brKxo6D6mWAotOjQqjiOkiaijw16XZN3MdNB4kmf1euVjd.sIxI8qq.qq
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cefdab7f27cb20ab0c7cc95d7d78d007
0d9c6edeb792951fb3fcb3a72617a83bc4e50dcf
2ebe798b805f92e19d6d24e9723c175a4e14c666d615ae29ce0a20963cf9b921
GET /h/ll22Ht9PCBpRePN.eOfPQO4h5urxhQUEpMIgtFLxG3_szVKbyHhHoAWZB5N6e1wAribHazA2njIDrb7YiRMxz5DpZfG289HTXairhp1UIZ6uQ47f7cw6uAke4GEqsQtD1JuevH6x_iP8xLd4AIy2dyShsO4wfyMKWkk4nYiDf0rq4GJ8oRMHcf_rB_Riaj_fMMuIGu0ODE1raqozvO8fkqqCg0uuPZiN0iGVXwlbfSw1Ls6he20pym1brKxo6D6mWAotOjQqjiOkiaijw16XZN3MdNB4kmf1euVjd.sIxI8qq.qq HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; TRK_TRU7=eJxjYGBgEuEQZC5NNBVUSEkzNEs2sDBMNjI1NjAzMzVJNEhNS7KwTLIwNzNMNLAQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcohwYQECQNb8YpIRFkAvIgMuqMEBkuVNSyzKTU%2BNLKgtS2RgBWyQlpg%3D%3D; trk_cpa_pixel=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 20:12:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
Vary: Accept-Encoding
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:03 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
luckyforbet.com/favicon.ico
404 Not Found 33 B URL HTTP/1.1 luckyforbet.com/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 8874bf02e5b576488740e35ffac374d4
34818fe2fbf54312142e04cef4efb38f86cb4fc6
474e80e45aef5f25213fdfe4b976ec514f4a834eea0abfb65dd5b86e4b51e4d3
GET /favicon.ico HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyforbet.com/h/ll22Ht9PCBpRePN.eOfPQO4h5urxhQUEpMIgtFLxG3_szVKbyHhHoAWZB5N6e1wAribHazA2njIDrb7YiRMxz5DpZfG289HTXairhp1UIZ6uQ47f7cw6uAke4GEqsQtD1JuevH6x_iP8xLd4AIy2dyShsO4wfyMKWkk4nYiDf0rq4GJ8oRMHcf_rB_Riaj_fMMuIGu0ODE1raqozvO8fkqqCg0uuPZiN0iGVXwlbfSw1Ls6he20pym1brKxo6D6mWAotOjQqjiOkiaijw16XZN3MdNB4kmf1euVjd.sIxI8qq.qq
Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; TRK_TRU7=eJxjYGBgEuEQZC5NNBVUSEkzNEs2sDBMNjI1NjAzMzVJNEhNS7KwTLIwNzNMNLAQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcohwYQECQNb8YpIRFkAvIgMuqMEBkuVNSyzKTU%2BNLKgtS2RgBWyQlpg%3D%3D; trk_cpa_pixel=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 20:12:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
Vary: Accept-Encoding
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e13b1fcd325dd28ef968420cee178e5d
90db8db16e36d5c0a41a5ee6d2c3e1dfb9e461a1
5d30318ea92bc34c032bd0955bc7654369c33f8702ca9b9dc0f8f28589eee290
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D30318EA92BC34C032BD0955BC7654369C33F8702CA9B9DC0F8F28589EEE290"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14858
Expires: Tue, 31 Jan 2023 00:19:42 GMT
Date: Mon, 30 Jan 2023 20:12:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc76d284a2bbe3dd7498af9ec1c0bf2f
658702eb75ad0b4ed4e10549cbdc742c0eb9af43
4c1d64f4aefebf1cb73ba8f9de7261d65b2d9b845f5232aacfa4c34390d1de66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C1D64F4AEFEBF1CB73BA8F9DE7261D65B2D9B845F5232AACFA4C34390D1DE66"
Last-Modified: Mon, 30 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13245
Expires: Mon, 30 Jan 2023 23:52:49 GMT
Date: Mon, 30 Jan 2023 20:12:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 19:41:41 GMT
age: 1823
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10523
Expires: Mon, 30 Jan 2023 23:07:27 GMT
Date: Mon, 30 Jan 2023 20:12:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be2ae83be3a233ee5e26cb43ae8587af
8cf1600193c05da89ef75d882c58a5a67ba5454a
6c9257d5f216836fbd3e526ca0efadd8d53cb9a0ed21e7c8cbfde4fe9d440975
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C9257D5F216836FBD3E526CA0EFADD8D53CB9A0ED21E7C8CBFDE4FE9D440975"
Last-Modified: Sun, 29 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14167
Expires: Tue, 31 Jan 2023 00:08:11 GMT
Date: Mon, 30 Jan 2023 20:12:04 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: T6CokcdQWV/sxi4bNiH9Ww==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1vAiT9z4OvyqJL2djdvaytGPNmY=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap
200 OK 1.9 kB URL HTTP/2 fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap
IP
Hash f2400067aff6a858f5afb78f987d435b
5024acfb71eed0a3947a172f2c01883654f3fa2d
6fa831e70d9834e1601dafe227f6195769612185cf808bccc582ca9a6b3e7369
GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 30 Jan 2023 20:12:05 GMT
date: Mon, 30 Jan 2023 20:12:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6941
Expires: Mon, 30 Jan 2023 22:07:46 GMT
Date: Mon, 30 Jan 2023 20:12:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6941
Expires: Mon, 30 Jan 2023 22:07:46 GMT
Date: Mon, 30 Jan 2023 20:12:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 8bec493a-9c81-4cfd-b6e9-66f4f3d55cb7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOOJQEZSoAMFb1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf2a3b-5f0c9f3e4cac1ba26c802050;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 00:45:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PHd9IMeVMHy0TgXRqXyBCg6CZkOtT1WAOyq8zu8ERfIzoaB-7pLc2A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 15:48:30 GMT
age: 15815
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3EXFa0gb46AbdZ9ZznGiPTemGZ7zWh9WLs5Yr1zmfyh_jyKA6o7xoA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:19:57 GMT
age: 78729
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y6bDvcD7a3-A4DLC3cSdZT-yewV1kkFqcGr7AMuqvUeGA4A0pgF4wQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:27 GMT
age: 79959
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 05:47:49 GMT
age: 51857
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VHh2SQ21xoDoBnGvM2kRiposhXuCE-DdWW1bM35kEykjbHYmhsldVA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 80444
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:08:57 GMT
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
age: 79389
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6d208f0208216b211ab9fd5d0ca0d421
3a275011eae8857994aa7c4374762d8a6ef537ed
6af4673c8e8eddb935ab5218b3ddd3c8a405d716d6d6865fbf72a18f6be3ecce
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 20:12:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 15:03:03 GMT
Expires: Sun, 05 Feb 2023 15:03:02 GMT
Etag: "3a275011eae8857994aa7c4374762d8a6ef537ed"
Cache-Control: max-age=499255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791cdc4a49bfb4f7-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6d208f0208216b211ab9fd5d0ca0d421
3a275011eae8857994aa7c4374762d8a6ef537ed
6af4673c8e8eddb935ab5218b3ddd3c8a405d716d6d6865fbf72a18f6be3ecce
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 20:12:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 15:03:03 GMT
Expires: Sun, 05 Feb 2023 15:03:02 GMT
Etag: "3a275011eae8857994aa7c4374762d8a6ef537ed"
Cache-Control: max-age=499255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791cdc4a4e45b51b-OSL
v3.traincdn.com/_nuxt/desktop/default/css/6a85b59e.css
200 OK 10 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/6a85b59e.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ce94bd9b0889ac56733133c25b50c8ea
238890fd0866d06d4b4ead4f8ef827c3543174ec
0375959b2a0475919b83f57c96af09764796c6b7239a5a2693db8080ce8ac03a
GET /_nuxt/desktop/default/css/6a85b59e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 10491
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-28fb"
expires: Tue, 31 Jan 2023 08:43:54 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41296
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/runtime-a80dc1c6.modern.js
200 OK 13 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/runtime-a80dc1c6.modern.js
IP
File type ASCII text, with very long lines (40212), with no line terminators
Hash dc9763fb6b834b1bc301d3cf695f4cfd
14af6f07e7a5108dcb826ae44df5a6c3efb9484d
2ad2992bde27415d20b5b57b49072b3d79fb69802318b8a14242edb395c2efb9
GET /_nuxt/desktop/default/runtime-a80dc1c6.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 12832
cache-control: max-age=86400
content-encoding: gzip
etag: "63d7953e-3220"
expires: Tue, 31 Jan 2023 13:07:39 GMT
last-modified: Mon, 30 Jan 2023 10:00:30 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 25471
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/f32931cc.css
200 OK 2.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/f32931cc.css
IP
File type ASCII text, with very long lines (11087), with no line terminators
Hash a19d51224993049a35fcba45c35d2b49
73db8a6f663936e35d52f4ac1ffa48e23f937bf2
7dfe43d6a75933311aa8405f1ddd489bc4e2a2d61dd15d92420c4b3ee2d13d27
GET /_nuxt/desktop/default/css/f32931cc.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 2126
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-84e"
expires: Tue, 31 Jan 2023 08:43:53 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41294
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/447d11ab.css
200 OK 2.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/447d11ab.css
IP
File type ASCII text, with very long lines (15795), with no line terminators
Hash 5fb941d29b718359b71687ec6cf4314d
36be41877b2731605f6fb9652089bbc8c9c73449
e675a93c542158af424a306d63665fb7f277c8371baed751c230002b781ee6b8
GET /_nuxt/desktop/default/css/447d11ab.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 2190
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-88e"
expires: Tue, 31 Jan 2023 08:43:54 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41300
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay/Layout.Office/Page.Betting.Main/Page.BlockAppeal.BetsHistory/Page.Office.B/8e0d2974-1cc30e61.modern.js
200 OK 11 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay/Layout.Office/Page.Betting.Main/Page.BlockAppeal.BetsHistory/Page.Office.B/8e0d2974-1cc30e61.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (40356), with no line terminators
Hash d22a2c264f3a841a42b5509b33161677
900141f81889833ea6fdeae3eddd7a85f74eb20c
3434eb797bee150e8ac15d67e8fb0625b7e6e1ea74f67b98a6cd26011a6cea65
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay/Layout.Office/Page.Betting.Main/Page.BlockAppeal.BetsHistory/Page.Office.B/8e0d2974-1cc30e61.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 11437
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-2cad"
expires: Tue, 31 Jan 2023 16:15:42 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14184
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6d208f0208216b211ab9fd5d0ca0d421
3a275011eae8857994aa7c4374762d8a6ef537ed
6af4673c8e8eddb935ab5218b3ddd3c8a405d716d6d6865fbf72a18f6be3ecce
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 20:12:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 15:03:03 GMT
Expires: Sun, 05 Feb 2023 15:03:02 GMT
Etag: "3a275011eae8857994aa7c4374762d8a6ef537ed"
Cache-Control: max-age=499255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791cdc4a48260b61-OSL
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-e2e925c8.modern.js
200 OK 6.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-e2e925c8.modern.js
IP
File type ASCII text, with very long lines (26699), with no line terminators
Hash 4ac7999f03dc9c4a49fd78f5a0c5fff2
718c85930f624171ecee1506cb8d2dfec9bf1c6a
463fe1797b86675b7d6f398ccb4a1c6eaa309683e961a5cb8747e333a631cee0
GET /_nuxt/desktop/default/vendors/Page.Betting.Main-e2e925c8.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 6545
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f43-1991"
expires: Tue, 31 Jan 2023 16:17:09 GMT
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14099
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
200 OK 698 B URL HTTP/2 v3.traincdn.com/genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Hash baf96800254904a05eee2ff49c94a801
847efb3449a8d7857f004192310aa2164a71d530
0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: image/svg+xml
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Tue, 31 Jan 2023 03:09:15 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 61371
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/f2c03efd-29251e2a.modern.js
200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/f2c03efd-29251e2a.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (44633), with no line terminators
Hash c85d1b6a8b57cd942416a2c31b01a491
b47d9b2b75c68f4e0d9cebfaa73c388bea367042
54510db177703705867090bb35f501ea0fe02b51efcbc9e0803f9df88a84535e
GET /_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/f2c03efd-29251e2a.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 12480
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-30c0"
expires: Tue, 31 Jan 2023 16:15:44 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14182
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-773ef87d.modern.js
200 OK 75 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-773ef87d.modern.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (65402), with no line terminators
Hash 77efbace08fbfb8ae371151ef2a5ecae
185927391f6669e3e7ac1d3baf1f13dc7dae2479
a215a8f701d16f8e27d00ff2eb0b683b09adb3cc6f99cbfb24b678880624ece1
GET /_nuxt/desktop/default/Page.Betting.Main-773ef87d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 74709
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-123d5"
expires: Tue, 31 Jan 2023 16:15:46 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14180
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Game.Proje/eb0fc106-84a68117.modern.js
200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Game.Proje/eb0fc106-84a68117.modern.js
IP
File type ASCII text, with very long lines (8713), with no line terminators
Hash 8a3d5760e7f4072beff4b4c5ac9774ac
82ce34a8c3388303cccb52037ab77b18e9f0f920
52bb424d95e259f74e882bf995cb2d176312c1b3565dd7bbdb069316dfd2c799
GET /_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Game.Proje/eb0fc106-84a68117.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 2525
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-9dd"
expires: Tue, 31 Jan 2023 16:15:46 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14181
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/version.json
200 OK 44 B URL HTTP/2 v3.traincdn.com/version.json
IP
Hash ab3a83e93384ead7369a37ac2c9a3500
7865d8fbb86850bb45491a4c1c13ac1d7a1ac48b
1907f0a9352812064d5fe93a3df8015d0800f84ab0d78c9dcf662ac364ccbe7e
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-071412.top
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "63d7a05e-2c"
expires: Mon, 30 Jan 2023 20:13:05 GMT
last-modified: Mon, 30 Jan 2023 10:47:58 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6d208f0208216b211ab9fd5d0ca0d421
3a275011eae8857994aa7c4374762d8a6ef537ed
6af4673c8e8eddb935ab5218b3ddd3c8a405d716d6d6865fbf72a18f6be3ecce
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 20:12:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 15:03:03 GMT
Expires: Sun, 05 Feb 2023 15:03:02 GMT
Etag: "3a275011eae8857994aa7c4374762d8a6ef537ed"
Cache-Control: max-age=499255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791cdc4a4839b4f1-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6d208f0208216b211ab9fd5d0ca0d421
3a275011eae8857994aa7c4374762d8a6ef537ed
6af4673c8e8eddb935ab5218b3ddd3c8a405d716d6d6865fbf72a18f6be3ecce
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 20:12:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 15:03:03 GMT
Expires: Sun, 05 Feb 2023 15:03:02 GMT
Etag: "3a275011eae8857994aa7c4374762d8a6ef537ed"
Cache-Control: max-age=499255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791cdc4a4f3cb50b-OSL
v3.traincdn.com/_nuxt/desktop/default/css/bf967876.css
200 OK 40 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/bf967876.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8940a7faf6707649e59c0d0baa0bfc06
e6a2890b241a5f4b0aed6ee5f884770aeaedd552
743ef9c3033e2dc8d1a23f21989627bf8fedf70cc8fd54ba537dc8a45b2b907c
GET /_nuxt/desktop/default/css/bf967876.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 39797
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f43-9b75"
expires: Tue, 31 Jan 2023 13:41:08 GMT
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 23459
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/?tag=d_52424m_38951c_%5b%5dMS%5b%5dnull%5b%5dnull%5b%5dgeneral%5b%5d_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
302 Found 121 kB URL HTTP/2 1xlite-071412.top/?tag=d_52424m_38951c_%5b%5dMS%5b%5dnull%5b%5dnull%5b%5dgeneral%5b%5d_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
IP
File type gzip compressed data, from Unix\012- data
Size 121 kB (121042 bytes)
Hash 04dd95b0974c80656386bb5bf0f327c9
04510843a4bf496b14998621cfda0ec297899214
91b1a3266c8eac6461e8bc639a67bd1e5a18702c9bb93ca95001d3deeb958a3b
Analyzer Verdict Alert quad9 Sinkholed
GET /?tag=d_52424m_38951c_%5b%5dMS%5b%5dnull%5b%5dnull%5b%5dgeneral%5b%5d_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 30 Jan 2023 20:12:04 GMT
location: /en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
reason-v3: empty_lang
server-timing: total;dur=0;desc="Nuxt Server Time", dt_285;dur=2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: platform_type=desktop; Path=/; Expires=Thu, 02 Feb 2023 20:12:04 GMT
auid=sv0PC2PYJJQd4HNsAy5cAg==; path=/; secure; httponly; samesite=lax
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-071412.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:13:04 GMT
expires: Fri, 26 Jan 2024 03:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 406742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-071412.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 12:46:12 GMT
expires: Mon, 29 Jan 2024 12:46:12 GMT
cache-control: public, max-age=31536000
age: 113154
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-071412.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 14:07:32 GMT
expires: Thu, 25 Jan 2024 14:07:32 GMT
cache-control: public, max-age=31536000
age: 453874
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1xlite-071412.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
200 OK 352 B URL HTTP/2 1xlite-071412.top/genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dff72d4146e35a8262e6845d13a8df0
a291af970d3955b35c314e85712ceea3aca25d54
a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: image/png
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
expires: Fri, 27 Jan 2023 23:45:49 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
v3.traincdn.com/_nuxt/desktop/default/app-7065404e.modern.js
200 OK 187 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/app-7065404e.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 187 kB (187064 bytes)
Hash 42d245bb7e4c8d3c6eba1d33b316043a
336e865ce5303c017e94890b6ef7ecb313b6c891
cc3af76069956af421216620a0e76451edadb031594bbbe2aa2fa2f390e74af7
GET /_nuxt/desktop/default/app-7065404e.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 187064
cache-control: max-age=86400
content-encoding: gzip
etag: "63d7953d-2dab8"
expires: Tue, 31 Jan 2023 13:07:40 GMT
last-modified: Mon, 30 Jan 2023 10:00:29 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 25472
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/app-25b0d209.modern.js
200 OK 86 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/app-25b0d209.modern.js
IP
File type ASCII text, with very long lines (65476)
Hash d111957f54d047770e9eb82e5411c32e
6064ecd11dc7d236d7e8aeb45e71e7d78fb559f1
ea6084b3a9c6b1f3295c745776ff733cd6c8cf1a0e47cc048cfe1764872b7577
GET /_nuxt/desktop/default/commons/app-25b0d209.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 86150
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-15086"
expires: Tue, 31 Jan 2023 16:15:50 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14181
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/app-0a7f18f1.modern.js
200 OK 4.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/app-0a7f18f1.modern.js
IP
File type ASCII text, with very long lines (12527), with no line terminators
Hash 44fcb95abdc227a75191b77b3abef54a
4af66b7ddd84b2a4fb6fe0d4d448f53b720fa3d1
0b3f039b3df031a44910811729dccaa407c2765affe3b3915a52de284beafaeb
GET /_nuxt/desktop/default/vendors/app-0a7f18f1.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 218088
cache-control: max-age=86400
content-encoding: gzip
etag: "63d7953e-353e8"
expires: Tue, 31 Jan 2023 13:07:39 GMT
last-modified: Mon, 30 Jan 2023 10:00:30 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 25471
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-57978af9.modern.js
200 OK 22 kB URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-57978af9.modern.js
IP
File type ASCII text, with very long lines (65476)
Hash d1f437b3e24fc5c3b5c0d4b7375b3071
f97e182159e0eeea9d60c50b902aa7a99cbe3ce1
da76c84d91778caa278bd99c115925798f620c993ea0f2d9ebfbe6817c414589
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/vendors/plugins.v-tooltip-57978af9.modern.js HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 21853
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
vary: Accept-Encoding
etag: "63d79f43-555d"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:06 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/css/f32931cc.css
200 OK 2.1 kB URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/css/f32931cc.css
IP
File type ASCII text, with very long lines (11087), with no line terminators
Hash ba2692780360c97da3d54795ee19af3b
b072d5e5acdf44d71990ed2780efefdc6a00987a
3d42eb97af0944a060c49363ae397803d93572d30707a92228b7d563ffcf0f2a
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/css/f32931cc.css HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 2126
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
vary: Accept-Encoding
etag: "63d79f42-84e"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:06 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/css/447d11ab.css
200 OK 2.2 kB URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/css/447d11ab.css
IP
File type ASCII text, with very long lines (15795), with no line terminators
Hash 848643f84c7a9e77f72b9929767007b1
4f3949efc6fce8c57e4aaa8aed9193d8cc883e24
0c10e5e0ad620404d09ce098c4c1562caab95326dc5560b0a2b2d94d4688c9ae
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/css/447d11ab.css HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 2190
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
vary: Accept-Encoding
etag: "63d79f42-88e"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:06 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/css/6a85b59e.css
200 OK 10 kB URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/css/6a85b59e.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0c59659b12f15d06ae30abca32234285
121521c5b679da690c6d3bc9a89b54f3e7c75af5
e4e28599f827c20661ca1baa2cd0d888574ceee7ea894f54ff47afb373c15ecf
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/css/6a85b59e.css HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: text/css
content-length: 10491
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
vary: Accept-Encoding
etag: "63d79f42-28fb"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:06 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675109540562
200 OK 145 B URL HTTP/2 1xlite-071412.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675109540562
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1675109540562 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
expires: Tue, 31 Jan 2023 20:12:07 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/pwa
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4766fd1b2ba2e236fd9364587f99ab
eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b
Analyzer Verdict Alert quad9 Sinkholed
GET /pwa HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=1
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/css/f9d99aa7.css
200 OK 943 B URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/css/f9d99aa7.css
IP
File type ASCII text, with very long lines (3303), with no line terminators
Hash c8814e2b14b9b8a9316b055f63e396e1
64c157e6647fa007ee52203b65217215cad25d5f
9a67b2e18901d9efc1e5a0a215542688c931f5bc2b8c90a1da733b6d9db9d2d6
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/css/f9d99aa7.css HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: text/css
content-length: 943
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
vary: Accept-Encoding
etag: "63d79f43-3af"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:07 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/plugins.vue-js-modal-4aa1340f.modern.js
200 OK 7.5 kB URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/plugins.vue-js-modal-4aa1340f.modern.js
IP
File type HTML document, ASCII text, with very long lines (25593), with no line terminators
Hash 8c9f740da4bd6dd64248c2c5607157ef
f640e99beeb429f94257095aa04e6f26194ea1be
07bd8522b6f6ee163e2416e79f769d22a420874de7a049263fd3ce31bf507b98
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/plugins.vue-js-modal-4aa1340f.modern.js HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 7505
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
vary: Accept-Encoding
etag: "63d79f43-1d51"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:07 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/desktop/default/date-fns-locale-21-8f364136.modern.js
200 OK 2.7 kB URL HTTP/2 1xlite-071412.top/_nuxt/desktop/default/date-fns-locale-21-8f364136.modern.js
IP
File type ASCII text, with very long lines (9012), with no line terminators
Hash d250827722be904e26a41986b7d1d502
96a77661e0136406823fdfb815d0f7b547e6f4d9
0b2296a1dfa4bc72b817c45bf9d3798edcb37953fe0c27745e362e96e594d878
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/desktop/default/date-fns-locale-21-8f364136.modern.js HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 2652
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
vary: Accept-Encoding
etag: "63d79f42-a5c"
content-encoding: gzip
expires: Mon, 30 Jan 2023 21:12:07 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DC-2014d636.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DC-2014d636.modern.js
IP
File type ASCII text, with very long lines (2509), with no line terminators
Hash 6dc923ae3607a521ef3c98dd910ce134
c77fa89629534d0f661ac1f5c5a5c3832aa816d9
79fc061cb0c22d0d7df208560dcc8f7bf42b2cf108380d20516549da2aeb5805
GET /_nuxt/desktop/default/DC-2014d636.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 1082
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-43a"
expires: Tue, 31 Jan 2023 16:15:54 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14180
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-178408567-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP
File type ASCII text, with very long lines (1759)
Hash 4e8280cb30442f1dd2f34615cdb2a787
cb16af03384a4011f2d292025153258c25cde1a7
c760ab9799642c11da8fb8be36e008966e74a8e93d82a6865b87c4917e890983
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 20:12:07 GMT
expires: Mon, 30 Jan 2023 20:12:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45055
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1xlite-071412.top/version.json?timestamp=1675109540823
200 OK 44 B URL HTTP/2 1xlite-071412.top/version.json?timestamp=1675109540823
IP
Hash ab3a83e93384ead7369a37ac2c9a3500
7865d8fbb86850bb45491a4c1c13ac1d7a1ac48b
1907f0a9352812064d5fe93a3df8015d0800f84ab0d78c9dcf662ac364ccbe7e
Analyzer Verdict Alert quad9 Sinkholed
GET /version.json?timestamp=1675109540823 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/json
content-length: 44
last-modified: Mon, 30 Jan 2023 10:47:58 GMT
vary: Accept-Encoding
etag: "63d7a05e-2c"
content-encoding: gzip
expires: Mon, 30 Jan 2023 20:13:07 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
radar.cedexis.com/1593429750/radar.js
200 OK 19 kB URL HTTP/1.1 radar.cedexis.com/1593429750/radar.js
IP
ASN #63911 NetActuate, Inc
File type ASCII text, with very long lines (1782)
Hash 2acb3c3179b2646943d1a8f5166743cc
56aa31a4027fec3dd8cc78114c6b0f3604716c14
0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 20:12:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:35 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0db-af5c"
Expires: Mon, 13 Feb 2023 20:12:07 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
1xlite-071412.top/_nuxt/Desktop/Default/svg-sprites/common-2000120.svg
200 OK 44 kB URL HTTP/2 1xlite-071412.top/_nuxt/Desktop/Default/svg-sprites/common-2000120.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash cec8e2f797e0f33519534444125d4cfb
52e5b80225198750b71c82f9ea4dc20a58fd0a1f
75a868a0537f745565d0a3aec4dc76dfde3a820af07f797c4ce6967c6d9ef433
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/common-2000120.svg HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
etag: W/"63d79f43-1af48"
expires: Tue, 31 Jan 2023 19:55:36 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3542.png
200 OK 17 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/3542.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d13663d082436604cf74d0f04de334c
139dcb1106e4f5d30a820722151ea8c5333b5bc3
b98fbd9540615ba6e9852d6710a0236d402a783427464e1b6fbddc667c82125b
GET /sfiles/logo_teams/3542.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 17147
etag: "4d13663d082436604cf74d0f04de334c"
last-modified: Tue, 13 Aug 2019 15:04:59 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4444344
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/83b500ce2fbb122814f7973d7e41c7a2.png
200 OK 9.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/83b500ce2fbb122814f7973d7e41c7a2.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ee8d7d77d372190f336e34f509047454
357b167c084ae23d20758303ac03e31a09001f48
af4b00f9dca50e87cda3d123870306e7b5a49e41ee78878913588c580972fcbd
GET /sfiles/logo_teams/83b500ce2fbb122814f7973d7e41c7a2.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 9124
etag: "ee8d7d77d372190f336e34f509047454"
last-modified: Mon, 20 Jul 2020 21:22:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5707235
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3488.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/3488.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2d8f1289246627583edd18ab6f409e47
00b8cd65e503158a9246b718222a259eaa0267d2
8102d15f631d817da05e9767e384cb29ee44d79f9582742b51966c4b88a8fb3b
GET /sfiles/logo_teams/3488.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10981
etag: "2d8f1289246627583edd18ab6f409e47"
last-modified: Tue, 13 Aug 2019 15:04:53 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5538753
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3458.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/3458.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f74928a2cf36cb00781ef1eb11bc632a
931a6842237a3469250febb195f9bde7a830a1f6
017b4a90865b5771daada24659699fe94ca539e3e86c1d8720ca26dc87b5aa50
GET /sfiles/logo_teams/3458.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 11216
etag: "f74928a2cf36cb00781ef1eb11bc632a"
last-modified: Tue, 13 Aug 2019 15:04:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5538752
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/bf89e94559a0648688bd96d8a47bb2be.png
200 OK 4.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/bf89e94559a0648688bd96d8a47bb2be.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d57a45443222e0ce8c6db11b8f3d95f9
7efdcfeeb9da14631d140c7f1350fc4c95180cdb
d9c0c4dd6214927bacda0facec925d1ecce979750210d33adb1ed7d8c0ce6c6c
GET /sfiles/logo_teams/bf89e94559a0648688bd96d8a47bb2be.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 4605
etag: "d57a45443222e0ce8c6db11b8f3d95f9"
last-modified: Mon, 21 Nov 2022 07:01:51 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3823158
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1980.png
200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/1980.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4e6490d8600afed41948945b4a2239bb
584add34ce411cf400886d7ae46733c26302f190
19396ae34a63b37b3c74901e3074d477bfb69be1e6931937645de0f1d6a8bd4f
GET /sfiles/logo_teams/1980.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10500
etag: "4e6490d8600afed41948945b4a2239bb"
last-modified: Tue, 13 Aug 2019 14:57:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5714102
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/23169.png
200 OK 5.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/23169.png
IP
File type PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced\012- data
Hash 0d9db2c2bc6485e2ed134988cd27043b
b30879f5ca7616ddcad86e0e2e6dd3d07daf276b
55bb7033a73ab957b0b46922c808c252a88caba6001363c5851052979ced4d1f
GET /sfiles/logo_teams/23169.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 5089
etag: "0d9db2c2bc6485e2ed134988cd27043b"
last-modified: Tue, 13 Aug 2019 14:59:54 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3821829
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/25359.png
200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/25359.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 988068dfc19f920971814c79270bb41a
e93c8c56c0932598f38641e407a88452f5dc1c8d
e37303c6e6f83471047d2ed34f4d40859f1e9a8302f3492554fb2a6629dad690
GET /sfiles/logo_teams/25359.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 12219
etag: "988068dfc19f920971814c79270bb41a"
last-modified: Tue, 13 Aug 2019 15:01:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4004394
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/17983.png
200 OK 24 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/17983.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c23a3cef2c0823422d9115d97a7de692
1323657b889e333e570bd9db1527898bee0a8706
f4490546f9e87583727e7977b36ec50c70e080a228cb143f16aef322485530bf
GET /sfiles/logo_teams/17983.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 23875
cache-control: public, max-age=86400
etag: "c23a3cef2c0823422d9115d97a7de692"
expires: Tue, 31 Jan 2023 17:24:12 GMT
last-modified: Tue, 17 Jan 2023 13:30:19 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 10082
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/b70827ce79151df642c314e5b392f307.png
200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/b70827ce79151df642c314e5b392f307.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 63a1792050e9f467d77686b55001170c
6e800d838c1910fc4c6c391a9b5c59c9d216e658
45bdaf339afe7346efb40b95a56443f301e6025b731a155ee01fe3e3fc53838d
GET /sfiles/logo_teams/b70827ce79151df642c314e5b392f307.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 16200
cache-control: public, max-age=86400
etag: "63a1792050e9f467d77686b55001170c"
expires: Tue, 31 Jan 2023 04:50:52 GMT
last-modified: Tue, 17 Jan 2023 13:33:47 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 59503
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/196755.png
200 OK 24 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/196755.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 7c142ee016c78a60f77eebf2cd5a700f
aa5d19a7452cbf417b263215751f7392ca2d5867
0d6e26be1bb27c310ed82124adc1f72334690d836b875774ebe659ad04f49de3
GET /sfiles/logo_teams/196755.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 23879
cache-control: public, max-age=86400
etag: "7c142ee016c78a60f77eebf2cd5a700f"
expires: Tue, 31 Jan 2023 03:51:13 GMT
last-modified: Tue, 17 Jan 2023 11:43:28 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 59508
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/a7a86507fbdbc78258877c132107cf7e.png
200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/a7a86507fbdbc78258877c132107cf7e.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2ed3227fb28585228cf1aef11dd98428
b513441a69d34cb19fd3d1e810bc962c570020b8
55e2f5ce6c9bdda90344945967a0162978acde9a9cd56fc2315543db0c21725a
GET /sfiles/logo_teams/a7a86507fbdbc78258877c132107cf7e.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 14482
cache-control: public, max-age=86400
etag: "2ed3227fb28585228cf1aef11dd98428"
expires: Tue, 31 Jan 2023 03:51:13 GMT
last-modified: Tue, 17 Jan 2023 10:47:30 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 59508
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2422.png
200 OK 7.2 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2422.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 767880d7a1d31da213e58340f3d92985
dc668a0a1740bfb000393e9fc77f67fb5607d7df
4a243c210eea1111b204ee2afc3e7049d6dc3772e7c96eef09ad554600995270
GET /sfiles/logo_teams/2422.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 7200
cache-control: public, max-age=86400
etag: "767880d7a1d31da213e58340f3d92985"
expires: Tue, 31 Jan 2023 14:58:14 GMT
last-modified: Tue, 13 Aug 2019 15:00:32 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 18844
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2354.png
200 OK 8.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2354.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8fb45d6520a30a3c0077757b347bf108
ee7508b2a6cbce0da7feb89035bbb949f21223b2
2dfe476ea36336b241f918411bcec2b3b8f348fe44c774ccaa4a2eb9afb42bcf
GET /sfiles/logo_teams/2354.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 8382
cache-control: public, max-age=86400
etag: "8fb45d6520a30a3c0077757b347bf108"
expires: Tue, 31 Jan 2023 18:39:01 GMT
last-modified: Tue, 13 Aug 2019 15:00:07 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5596
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2f2aa6aca782f90cea9f307a1e4b2540.png
200 OK 8.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2f2aa6aca782f90cea9f307a1e4b2540.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5a229c112ad4c01e616c2873af3d0ab4
905d4ea01dd2d9ec8386e180e228385ab6d2a273
30553b0a950006c5dd5da0e55861c1d75c7d5de98e6059f749274c121baee902
GET /sfiles/logo_teams/2f2aa6aca782f90cea9f307a1e4b2540.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 8030
etag: "5a229c112ad4c01e616c2873af3d0ab4"
last-modified: Sat, 24 Sep 2022 09:48:46 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3818284
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/459b28644daf1ca93015b9d9da055ff3.png
200 OK 32 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/459b28644daf1ca93015b9d9da055ff3.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c7aaa4120f9808b37321644ede9cfd4c
67a0ef178f3277e24fded8dea9988d2ea452334a
20ec8f93bbef3ba661657091b9690a1ef5cc242ab609870782d901a419a3c139
GET /sfiles/logo_teams/459b28644daf1ca93015b9d9da055ff3.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 32502
etag: "c7aaa4120f9808b37321644ede9cfd4c"
last-modified: Tue, 14 Jan 2020 20:34:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3811096
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f2026a1a70c15604afa81c12d4e388dc.png
200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f2026a1a70c15604afa81c12d4e388dc.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 810e401fe92630111b05a43016335825
4a8348c74de4abc3857f4ce2f9c17d4c782a9d00
8545020008a8cc03f1cd6621ecec90417b0aa9eff172e59497502f731b8aee9c
GET /sfiles/logo_teams/f2026a1a70c15604afa81c12d4e388dc.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10179
etag: "810e401fe92630111b05a43016335825"
last-modified: Mon, 18 Jul 2022 07:35:58 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3671746
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/649a2bd3f86e91be57a1a85371dcdd0b.png
200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/649a2bd3f86e91be57a1a85371dcdd0b.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 649a2bd3f86e91be57a1a85371dcdd0b
6afd7d7e06a3132ab13875ad490c3a4091da283c
24765be6b4773bdd5a9b8f063ee26e9e64d572b725def50fda5279a50c52060e
GET /sfiles/logo_teams/649a2bd3f86e91be57a1a85371dcdd0b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 11615
etag: "649a2bd3f86e91be57a1a85371dcdd0b"
last-modified: Tue, 13 Aug 2019 15:09:50 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3671746
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4228.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/4228.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 176e8eeb655d8abe0e7f6919bbdecf87
59f99acd060aa84623acf8566be8e16a1127f8d5
d4612b15e18482a31e41fbbcfd9205e35c09ea3af8243a8df8551094f7542307
GET /sfiles/logo_teams/4228.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10906
etag: "176e8eeb655d8abe0e7f6919bbdecf87"
last-modified: Tue, 13 Aug 2019 15:06:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3391757
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4226.png
200 OK 2.2 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/4226.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash d8f6aac316b09850bd6ca5ead35a2604
f8ecad219053eaad136a413d2cb3eef840e1dee7
6a5e09a826f4a2727541d080769adcea77767b0af0362261157b781c3c3888f2
GET /sfiles/logo_teams/4226.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 2243
etag: "d8f6aac316b09850bd6ca5ead35a2604"
last-modified: Tue, 13 Aug 2019 15:06:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3662372
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2032.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2032.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ec3fb280f94c2769a705f67f5c42e31
a9aaa47d4caa3eebc9d05621634b0bd62c044fd1
e0aa38660dfafcd86d0b353b1d83de5c53675002e13a45aa256370f740d7dde4
GET /sfiles/logo_teams/2032.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 12860
etag: "0ec3fb280f94c2769a705f67f5c42e31"
last-modified: Tue, 13 Aug 2019 14:58:01 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3985856
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/06a93b1ec64360deb82afee493b226b1.png
200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/06a93b1ec64360deb82afee493b226b1.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 61ca74abdc7f61e3b04eb01793a5cb0e
e77654400223ef92146447af850d1fdcec0bf32a
9721f41003d4c6bf04ccd9bb625c6790ef80d80259c3753960e8e85728aa4fc7
GET /sfiles/logo_teams/06a93b1ec64360deb82afee493b226b1.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 19175
etag: "61ca74abdc7f61e3b04eb01793a5cb0e"
last-modified: Tue, 13 Sep 2022 18:34:30 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3839081
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/246a944858d7a07393dd4f6739f94bf9.png
200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo-champ/246a944858d7a07393dd4f6739f94bf9.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 9daf8b58d38593afa8f0d1956f5f8b3d
c9a27c3c80c611a3e51964ae104db70602f2c608
d7e4042b1e80a2c83c4d71eaba92918821b514511356eb608bd6e2af8e0d61ff
GET /sfiles/logo-champ/246a944858d7a07393dd4f6739f94bf9.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 18874
etag: "9daf8b58d38593afa8f0d1956f5f8b3d"
last-modified: Thu, 26 Aug 2021 08:40:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3984529
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8490.png
200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8490.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f44eeaef899d7f8001df03a99a2bbfe3
d4f249ad0f3f07a54ce3dc8cd807e77d097d51a5
0b563ad8597735e76b78395fc20e9ad4a921799ac7ef31f2c3a28e991d0e12d0
GET /sfiles/logo_teams/8490.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 6925
etag: "f44eeaef899d7f8001df03a99a2bbfe3"
last-modified: Tue, 13 Aug 2019 15:12:04 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3996625
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8504.png
200 OK 6.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8504.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b79a7709a0c75557e7542d00812e99a
e4b732c43f6aea175c04ba9d5d4d3423019edbcf
33f4c7998e7b144c74846740e441057aff6621e68c2a01ed4fa9310da59fc9ca
GET /sfiles/logo_teams/8504.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 6323
etag: "3b79a7709a0c75557e7542d00812e99a"
last-modified: Tue, 13 Aug 2019 15:12:04 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3996625
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 9adffbc80a8d207de772719c1fd5c56d
15040286d90d2f6aa7781b2e21ba860aa88752e9
a9e1ff151cd68dd773872cd25c8497850247cedee9bd91f3c172fe5415bd1f82
GET /sfiles/logo-champ/9adffbc80a8d207de772719c1fd5c56d.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10864
etag: "9adffbc80a8d207de772719c1fd5c56d"
last-modified: Mon, 07 Oct 2019 07:09:56 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3984526
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6856.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6856.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 377c503c846f39d6e05c51bf4cdfb9cd
f1b4af24e28ad851ba9bde04a7105debf10516e6
2c041dbd479b43017a1b8473fc72f03c86538b99ad75719d45c0eda1a56b867a
GET /sfiles/logo_teams/6856.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10680
etag: "377c503c846f39d6e05c51bf4cdfb9cd"
last-modified: Tue, 13 Aug 2019 15:10:21 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3915457
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6876.png
200 OK 7.8 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6876.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 328c31f23b877b9b3bf2c0ea96b35463
ce400774e00d9315d5badd80314e0cb53e999a63
0dce4839b907810dabf408d10671463dd91d4de92334dcad3eda4c13aec16f41
GET /sfiles/logo_teams/6876.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 7792
etag: "328c31f23b877b9b3bf2c0ea96b35463"
last-modified: Tue, 13 Aug 2019 15:10:23 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3915457
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/cf8c0f97a08d3fc281ae90089fce367b.png
200 OK 9.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/cf8c0f97a08d3fc281ae90089fce367b.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c60205cbd7ee3d40dd126bce45de7e4b
f863d368fa552a7f0556668f422686e03b05b19d
1b14d1629222b533e76e28112c8b3a809523993f106777dd71ee8f9b6ffe2e44
GET /sfiles/logo_teams/cf8c0f97a08d3fc281ae90089fce367b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 9402
etag: "c60205cbd7ee3d40dd126bce45de7e4b"
last-modified: Sat, 04 Apr 2020 05:08:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3915457
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6894.png
200 OK 9.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6894.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f0230acd33dc3f2ad1c87b908616d660
fa005bd346de5bf504f2ae641db365276eee70cb
eb4a2d1d1c105e712dd29ad95b471413ff6d0b0477817d4b4ec774ce4aa6c734
GET /sfiles/logo_teams/6894.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 9715
etag: "f0230acd33dc3f2ad1c87b908616d660"
last-modified: Tue, 13 Aug 2019 15:10:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3824269
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6882.png
200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6882.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f77013ae77b815d7657c112c51dde031
c17e33fcfe8b742b65de87e26df7c49664fa9aee
bd5e5c5654a0618800601e757c01a7926bb002fffdd4df6fe010939ae879b8ee
GET /sfiles/logo_teams/6882.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 16103
etag: "f77013ae77b815d7657c112c51dde031"
last-modified: Tue, 13 Aug 2019 15:10:23 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3912342
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/Desktop/Default/svg-sprites/country-2000120.svg
200 OK 55 kB URL HTTP/2 1xlite-071412.top/_nuxt/Desktop/Default/svg-sprites/country-2000120.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 80267a697f29d9671dd46503fb087348
b9d6aec61fb4bfaea026c1a2319a34033737acc8
545aabd3b3e553dcacb7b080250daae4643496fce033e77108d1cb225b101880
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/country-2000120.svg HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
etag: W/"63d79f43-26280"
expires: Tue, 31 Jan 2023 20:11:12 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6884.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6884.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 79cc940770627c4646eea75225e00d94
344dbd33ec8ebb69e8979d196924b91c4942f55a
5acb9d5c290d6b2d816840ea47f8f8a61b0ec45d01fac2dc992fc2f76ecf86e5
GET /sfiles/logo_teams/6884.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 10927
etag: "79cc940770627c4646eea75225e00d94"
last-modified: Tue, 13 Aug 2019 15:10:23 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3912342
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6890.png
200 OK 9.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6890.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c8c1957f034e6bf08de9472bc9a0d7f
3000928d8d6efa5711ec9b472f25888fbc0584eb
eaa3fd67bca5d827c745a79a0026f94b83a1c2cc8d8ce1502a4318e96021f411
GET /sfiles/logo_teams/6890.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:08 GMT
content-type: image/png
content-length: 9905
etag: "9c8c1957f034e6bf08de9472bc9a0d7f"
last-modified: Tue, 13 Aug 2019 15:10:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3915457
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6906.png
200 OK 8.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6906.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 920ebe7b4ebf58bfdbdea39461c456d7
d02b10b43f8b38a22a7d7d8c6122871115ea9194
7eb23e17f14e81efaecfc10e6e3ea57fc4de32ab4bf6cbc52231b104b8da6d2d
GET /sfiles/logo_teams/6906.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 8692
etag: "920ebe7b4ebf58bfdbdea39461c456d7"
last-modified: Tue, 13 Aug 2019 15:10:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3824532
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6872.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6872.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 185e10fbaadadaea795229138e0bfdb9
eb4c2acf185bd86600a489975268639cee848003
2ab58b16556412abc2b7b748c2220a20f165caedc319d9c49ce6dcddd8138559
GET /sfiles/logo_teams/6872.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 12995
cache-control: public, max-age=86400
etag: "185e10fbaadadaea795229138e0bfdb9"
expires: Mon, 30 Jan 2023 21:58:10 GMT
last-modified: Thu, 19 Jan 2023 14:27:34 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 80041
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6900.png
200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6900.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ee083ae525cfe5b27ef66189306a13e0
f0236b568b70fe43ca360fc21cfd553a89692684
eb496d5e7135a09dcd3d0443082ff51c00f6eb31df45522d7e0c8070b7a2c42e
GET /sfiles/logo_teams/6900.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 14213
etag: "ee083ae525cfe5b27ef66189306a13e0"
last-modified: Tue, 13 Aug 2019 15:10:25 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3912126
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/be3dbfb428546c98d390c33af33005fc.png
200 OK 31 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/be3dbfb428546c98d390c33af33005fc.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 014e77b1f6e5868ecddf9279c891c89d
86abfd4b77a88b18dbeddee0b17474ba6dc2058d
2e350864254da817875741bab81c09a7a6666deaac6d3e3efc2097e2c640b044
GET /sfiles/logo_teams/be3dbfb428546c98d390c33af33005fc.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 30698
etag: "014e77b1f6e5868ecddf9279c891c89d"
last-modified: Mon, 06 Jan 2020 22:11:58 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3912343
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6898.png
200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6898.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash d0380a5c0e35d1701cbfdb15703e0bb7
f29a7a4436f5a0546bfdbe095b7b447dc253f879
6362bc3e96672692f4ac476a14442c21f5fe12c4765845affc4cd586caafd54d
GET /sfiles/logo_teams/6898.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 11744
etag: "d0380a5c0e35d1701cbfdb15703e0bb7"
last-modified: Tue, 13 Aug 2019 15:10:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3824524
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6858.png
200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6858.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4b7969f585ea3c7f471f48158ec56725
692e0acb205887191e7c8a9c94c54f26e91d7249
02c430e4a3e42bca06dbbc0fd391d1e06035273e365110f8e13b18380c8f179c
GET /sfiles/logo_teams/6858.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 10272
etag: "4b7969f585ea3c7f471f48158ec56725"
last-modified: Tue, 13 Aug 2019 15:10:21 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3915458
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f620f698f9b2c4e2b7def10be5960ecd.png
200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f620f698f9b2c4e2b7def10be5960ecd.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash dcbde4f5fb75fea4aeda05d589fd6252
d1be995391a94c09c3b15cb424c7bf732641febc
b94a49f1d83ee4046af1740fd11a1b446055f26e18c4d70ad611eb9ef95cc404
GET /sfiles/logo_teams/f620f698f9b2c4e2b7def10be5960ecd.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 10246
etag: "dcbde4f5fb75fea4aeda05d589fd6252"
last-modified: Sat, 08 Aug 2020 02:39:08 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3912125
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/105340d750f530feafb9a5342b870824.png
200 OK 7.2 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/105340d750f530feafb9a5342b870824.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash da1f68710c41f62f4c9f5657fa1aef53
137c67a842adc28f977c1636905059c67ce15006
5385fc0dfcc927d046c7e8bd36de7b26238828f0e2ce886a4cc89c6477f69fcb
GET /sfiles/logo_teams/105340d750f530feafb9a5342b870824.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: image/png
content-length: 7235
etag: "da1f68710c41f62f4c9f5657fa1aef53"
last-modified: Mon, 06 Dec 2021 06:58:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3912344
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/8628ce71.css
200 OK 2.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/8628ce71.css
IP
File type ASCII text, with very long lines (14859), with no line terminators
Hash c0ec6847999d0c7dba8b4a9574a23623
113bb5720091dd19ae8a57a23c6864f27bcdd407
55584de7809d6b58c12937fa0db58b2668dcbfcdffd2d71dc6e7fce04502bed5
GET /_nuxt/desktop/default/css/8628ce71.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 2128
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-850"
expires: Tue, 31 Jan 2023 08:44:10 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41288
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Betting.ChampResults/betting.SportMenuApp-723d07a3.modern.js
200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.ChampResults/betting.SportMenuApp-723d07a3.modern.js
IP
File type ASCII text, with very long lines (10135), with no line terminators
Hash bd54070beb1554056495b5c0ae4bc0d7
5fd8bf618e7797b1d26d5fe19cead224dfdc0603
b07ecf27fc38afdb12d94224092f7580d721bd67a4b26dfbfba48dae45fbd968
GET /_nuxt/desktop/default/Page.Betting.ChampResults/betting.SportMenuApp-723d07a3.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 2713
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-a99"
expires: Tue, 31 Jan 2023 16:15:55 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14178
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/959e7d2f.css
200 OK 4.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/959e7d2f.css
IP
File type ASCII text, with very long lines (28271), with no line terminators
Hash e57c7e5cc4b2a6e263d89ec9f29e3e1b
bff468a13463c690660c0ccc5b627e0dff33bdf4
5135c31b54fe34f5732651c80e8d20fb2cb4063b872bd8a640bec3284ced3671
GET /_nuxt/desktop/default/css/959e7d2f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 4174
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-104e"
expires: Tue, 31 Jan 2023 08:45:19 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41235
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-f7a7e4cb.modern.js
200 OK 34 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-f7a7e4cb.modern.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0f25cee757e4bdb9891ac6b304e55447
0fa3e3ee57c28a351b0d4c0830a0ea7b4e6910ce
b496ec3060382510a02b9287be1387952e63eba520c1feef087aa8b3c617372b
GET /_nuxt/desktop/default/betting.SportMenuApp-f7a7e4cb.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 33731
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-83c3"
expires: Tue, 31 Jan 2023 16:15:55 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14175
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/7c44f9ff-071780c2.modern.js
200 OK 6.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/7c44f9ff-071780c2.modern.js
IP
File type ASCII text, with very long lines (24849), with no line terminators
Hash 5611cfd030ced41aef5cf1a7c96c63c6
36f1f443022e617c107475517a9573ae5d5befbe
9d0cd8971f1349222f88a73737d7e1b06a0dfb9900a9345092fc26f2e70cff50
GET /_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/7c44f9ff-071780c2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 6353
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-18d1"
expires: Tue, 31 Jan 2023 16:16:04 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14178
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.AdminRequest/Page.Office.BetsHi/963f8409-d470476b.modern.js
200 OK 14 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.AdminRequest/Page.Office.BetsHi/963f8409-d470476b.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (57248), with no line terminators
Hash 0eb8f1fbd9681805e6e73e8ad42b356a
b63b54764f52926a399b13e056545c6334fe37aa
c005e43cf8e5fd0682c73e55015e54528889cbc6e40e5a891233c8d5d93cf583
GET /_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.AdminRequest/Page.Office.BetsHi/963f8409-d470476b.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 14507
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-38ab"
expires: Tue, 31 Jan 2023 16:16:04 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14179
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.CentralMenuApp-f968ed6c.modern.js
200 OK 2.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.CentralMenuApp-f968ed6c.modern.js
IP
File type ASCII text, with very long lines (7964), with no line terminators
Hash 20066351e91e4cb747fa57e0a815e610
51df5f0b2f91c52a5715854caf319be93b8dcf41
6889d2300b295d549e02bca4886793ed83188f18eea9bd9d26870edf0e8c6275
GET /_nuxt/desktop/default/vendors/betting.CentralMenuApp-f968ed6c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 2183
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f43-887"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14178
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/d9d0391a.css
200 OK 2.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/d9d0391a.css
IP
File type ASCII text, with very long lines (13563), with no line terminators
Hash 87c63cf25cf82a4fa8ce32a6e5ad769c
73cb80f5476559ee0f72ff60fa119caaa7d00b16
ccaf2259c1ef66ac120298e06bc18094666ba9beac15abc647a2369285777d40
GET /_nuxt/desktop/default/css/d9d0391a.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 2393
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-959"
expires: Tue, 31 Jan 2023 08:44:14 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41277
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-7100bd5c.modern.js
200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-7100bd5c.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (50519), with no line terminators
Hash e97ac06b648431a2c0d23c34023206e3
f765aee563727fe522be2175d15f077abda50aa5
588bb66c2a0190301ff55b6b437e876031c4a95dd1afef0f4a83778ad84699bf
GET /_nuxt/desktop/default/betting.CentralMenuApp-7100bd5c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 12454
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-30a6"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14167
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-030821c4.modern.js
200 OK 7.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-030821c4.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (28907), with no line terminators
Hash 326102054d5a86314050f9753dd5bc60
4170d427573f5d9c3bf9f52ab5161900119d90b9
b35b1eef02c4faf2cda7bed018a91a658f4abddc331bcd93b02aaed8d33deb13
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay-030821c4.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 7842
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-1ea2"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14175
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/cb24e766.css
200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/cb24e766.css
IP
File type ASCII text, with very long lines (15401), with no line terminators
Hash 00751010bbf245bd42a38b564669c9ea
cddb0f6df561d00694f555bf805213c99f285f19
b866030785ea71192ae5043f1c5a5c205f3c8bde1bec983e815a9ce6217dfab0
GET /_nuxt/desktop/default/css/cb24e766.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 2473
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-9a9"
expires: Tue, 31 Jan 2023 08:44:10 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41296
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
200 OK 454 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c2b74bc7.css
IP
File type ASCII text, with very long lines (1429), with no line terminators
Hash cf6173f87ba631bf18786e53c3623ee4
925d466ba80d922b828ecffcb1d252f171880883
eef9acf9a991b7ddb44ba93264038832bc4515327a1d2c06a3c8054bbfe1b0f1
GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-1c6"
expires: Tue, 31 Jan 2023 08:31:09 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 42084
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/d07cef4b.css
200 OK 1.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/d07cef4b.css
IP
File type ASCII text, with very long lines (4904), with no line terminators
Hash 835a24fdc4a7db4f9540092d8efeefba
cd78affa13cf187b5bdfeaeb9505e99180a257c8
872c381abb57ee1570145a9dc27ce49d6fa029e60e8a43ad06d4edbfa0578340
GET /_nuxt/desktop/default/css/d07cef4b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 1240
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-4d8"
expires: Tue, 31 Jan 2023 08:45:20 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41296
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-4edabf27.modern.js
200 OK 18 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-4edabf27.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (43176), with NEL line terminators
Hash d9aa426d0b3fc2884cc5742871ac0931
be324f6e459abdd9bc47494c63e7fb451f4af31b
771872ba9b88aa69a02d4045a87ac3ee31af2b6335b886bb2d96292ee8be4b16
GET /_nuxt/desktop/default/vendors/betting.media-4edabf27.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 17545
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f43-4489"
expires: Tue, 31 Jan 2023 16:15:55 GMT
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14180
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.media-b0a61640.modern.js
200 OK 4.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.media-b0a61640.modern.js
IP
File type ASCII text, with very long lines (18679), with no line terminators
Hash bc44469397272ad3848d6941861a42f2
33c93288d899ec704405133f615a6beaa1b35f99
36f2459f98b1b34f68c9704603139d095cfcba518b064159602cdf030d75d063
GET /_nuxt/desktop/default/betting.media-b0a61640.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 4560
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-11d0"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14174
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/GameProvider/Information.Feedback/Page.Betting.Game/Page.Betting.MultiLive/Page.C/da6c9763-f110c4f4.modern.js
200 OK 6.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/GameProvider/Information.Feedback/Page.Betting.Game/Page.Betting.MultiLive/Page.C/da6c9763-f110c4f4.modern.js
IP
File type ASCII text, with very long lines (20689)
Hash 53998bab36dd2a66e15bf80e13c1e478
185e0d189ab8fc67a9a54016f55b9e9c86e0d327
582b2a8ec2421d970d766b65871a2abad4f17b47abaebf19b2783d1b15212532
GET /_nuxt/desktop/default/vendors/Auth.Forms/GameProvider/Information.Feedback/Page.Betting.Game/Page.Betting.MultiLive/Page.C/da6c9763-f110c4f4.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 6469
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-1945"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14177
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b8c5da74.css
200 OK 211 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b8c5da74.css
IP
File type ASCII text, with very long lines (369), with no line terminators
Hash 8c6c6544f1276b88c8986f1fdae6f808
8c1d76b32d354704c0a500f311166b35d3b52665
8a7e55af53086a457ffedae13850ffff580d32a4804c88d62935064caab89318
GET /_nuxt/desktop/default/css/b8c5da74.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 211
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-d3"
expires: Tue, 31 Jan 2023 15:33:10 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 16743
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/6ddcb708.css
200 OK 464 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/6ddcb708.css
IP
File type ASCII text, with very long lines (1665), with no line terminators
Hash b8b503fd31564207d769e597bc17fdfd
d7dabc0def0e9eb58aeb6a42c34108678019e2bd
62f2fabb3cdaf1b672236f9921f1c33e6dab7dc386ab0ccb4a6ee19c2438af61
GET /_nuxt/desktop/default/css/6ddcb708.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 464
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-1d0"
expires: Tue, 31 Jan 2023 14:14:33 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 21463
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/2dd859ef.css
200 OK 884 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/2dd859ef.css
IP
File type ASCII text, with very long lines (3749), with no line terminators
Hash 17b7e836732400495e1abe5a45bbacb8
0cb2c0486cd7e804c4e1ab21b0055a34b8f4cf6a
1eb3a9a8040f2f3cb6c7cd394726cb6dd7bebe43286d555c9d163d0a78351360
GET /_nuxt/desktop/default/css/2dd859ef.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 884
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-374"
expires: Tue, 31 Jan 2023 08:44:08 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41281
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/9ec65dba-37adabbc.modern.js
200 OK 8.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/9ec65dba-37adabbc.modern.js
IP
File type ASCII text, with very long lines (24831), with no line terminators
Hash 97a96834598ace3a0f9cc8ff51c9f46d
befe01abb480eeed7b03fb087047fd311c95280d
966b792d03bb5258d7f3d2c8e254d6e3ac84ba18ffc4f262c51f087a967cadce
GET /_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/9ec65dba-37adabbc.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 8051
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-1f73"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14164
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/e6b01b63.css
200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/e6b01b63.css
IP
File type ASCII text, with very long lines (16133), with no line terminators
Hash 1bbabce91276adf2eed7c7213f953195
e4135ce2648283f3d14353d7abd88b208fc82046
8f52d03d00e747e9b930a4d6ff564fe8abce9b1714e13579fdadb07473803cdf
GET /_nuxt/desktop/default/css/e6b01b63.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 2735
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-aaf"
expires: Tue, 31 Jan 2023 08:44:10 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41281
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-3b0da8ad.modern.js
200 OK 24 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-3b0da8ad.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65472)
Hash b0616a0767e8ae2cf0a01fa442e12255
3c0205d44ce0e076384801d7c7db9f5a3060435a
01aba861f1afc425f3f50c2227baef1da7359a6ac548b8bba84bee0945b1848a
GET /_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-3b0da8ad.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 23583
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-5c1f"
expires: Tue, 31 Jan 2023 16:15:57 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14172
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-071412.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 18:38:18 GMT
expires: Fri, 26 Jan 2024 18:38:18 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 351231
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/78630012.css
200 OK 2.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/78630012.css
IP
File type ASCII text, with very long lines (18721), with no line terminators
Hash c4346b6af1bbc868e9ede8d5a5b70412
acebc8683aca974278668c2483d9a05bb2648451
62f90316ff813c53c0e30a7fadc9688cfa304c30993d0f2ec4b7bf3d3dd522df
GET /_nuxt/desktop/default/css/78630012.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 2045
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-7fd"
expires: Tue, 31 Jan 2023 09:55:52 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 36978
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/632504e0.css
200 OK 5.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/632504e0.css
IP
File type ASCII text, with very long lines (32082), with no line terminators
Hash 6a74c2207d146c3848212d15638270e9
9c19c9398b5bb92fa98d67e2094e8471eeef4aa4
be9189870e5bfd653b93d12fa4104d7d1e8435ea0d0ce80a0f73179d64894800
GET /_nuxt/desktop/default/css/632504e0.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 5124
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-1404"
expires: Tue, 31 Jan 2023 08:44:10 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41292
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Office.Support/RegistrationWidgetApp/modal.ForgotModal/modal.office.OfficeAddPhoneFormModal/mod/5d105333-bb41b6f2.modern.js
200 OK 3.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Office.Support/RegistrationWidgetApp/modal.ForgotModal/modal.office.OfficeAddPhoneFormModal/mod/5d105333-bb41b6f2.modern.js
IP
File type ASCII text, with very long lines (12773), with no line terminators
Hash 5528e3b87cf8db1e2d3842b2012978ec
9213db6917232c70f1ffa679fb96eefdeaab791b
71bf68940eae877f8c673f89b1797fb2477cc44efb8cc3ed9e6255f16b357871
GET /_nuxt/desktop/default/Page.Office.Support/RegistrationWidgetApp/modal.ForgotModal/modal.office.OfficeAddPhoneFormModal/mod/5d105333-bb41b6f2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 3943
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-f67"
expires: Tue, 31 Jan 2023 16:16:05 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14164
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-68aab885.modern.js
200 OK 359 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-68aab885.modern.js
IP
File type ASCII text, with very long lines (399), with no line terminators
Hash 743f61d0590e8e40d8e0d27bfd27be5a
e8a22fdb1a65fc5bcfa8720a93925443ad9b457c
fcac124bd4d14f5e65574d097349fd5c1458365d05fd20a29c7c0b4d0d1489af
GET /_nuxt/desktop/default/DownloadAppWidgetAnalytics-68aab885.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 359
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-167"
expires: Tue, 31 Jan 2023 16:17:36 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14074
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-ad7ab877.modern.js
200 OK 15 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-ad7ab877.modern.js
IP
File type ASCII text, with very long lines (64807), with no line terminators
Hash ac1870748a71dfd9dee76e51870cd701
381a2040aa2f83f875f9c731d295b87583c5657a
705805c596a72bbd942b3195af383fb42f368f2776d5738e11a0ec64d361bea3
GET /_nuxt/desktop/default/RegistrationWidgetApp-ad7ab877.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 15353
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-3bf9"
expires: Tue, 31 Jan 2023 16:16:06 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14165
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-085e65b0.modern.js
200 OK 25 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-085e65b0.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 22612d202392ca797b36ac11c3f3ad6d
6274cc47c5fa69be59b47ed591f9387ebe5cee6e
a24f3da1a4a984843d8fad350250ef5eec990b2037880bb5667be7d505f37d0c
GET /_nuxt/desktop/default/betting.coupon2-085e65b0.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 24693
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-6075"
expires: Tue, 31 Jan 2023 16:16:06 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14172
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-15185b5c.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-15185b5c.modern.js
IP
File type ASCII text, with very long lines (3582), with no line terminators
Hash dacb1697540bef905f46e3cb73246e52
f41e78202e9ae70d25f42ddac4d5ca4083cc0a8e
fdb86202b548e23a198c10771bb98b967f4ae96343f11ebde3f73a85b48674ed
GET /_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-15185b5c.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 1073
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-431"
expires: Tue, 31 Jan 2023 16:16:14 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14160
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/e39c9880.css
200 OK 1.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/e39c9880.css
IP
File type ASCII text, with very long lines (4487), with no line terminators
Hash 22526fe58a85b41a12cd0e933596747e
e639342da1b0b4c0d5cd6b7242b0290af8f6d818
91ed37ad1f3241bfa3843de2029f02e81cf6225ea9daa8265ccd99a0ac788224
GET /_nuxt/desktop/default/css/e39c9880.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: text/css
content-length: 1005
cache-control: max-age=86400
content-encoding: gzip
etag: "63d518b0-3ed"
expires: Tue, 31 Jan 2023 08:44:10 GMT
last-modified: Sat, 28 Jan 2023 12:44:32 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 41284
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-59ace9aa.modern.js
200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-59ace9aa.modern.js
IP
File type ASCII text, with very long lines (41840), with no line terminators
Hash 060abbc599c30d1453529f16dffb496a
cc4e476b0a1263b9d7dad39cd09473047c84472b
6886acfe44ab073692020154845d52f4649211a967830e3f628e0f911f027712
GET /_nuxt/desktop/default/betting.HomeSliderComponent-59ace9aa.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 11619
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-2d63"
expires: Tue, 31 Jan 2023 16:16:09 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14160
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-ff86f08d.modern.js
200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-ff86f08d.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (2449), with no line terminators
Hash 2abcde1c7f861e3839266637c052601e
f7a3042bf6b6bc0d96cb73005f0e3ea8f4b30668
41115c7aab94100d5ac2cef7c8e41c0068de95822eff57b80a8ee0fdd3d0196d
GET /_nuxt/desktop/default/ioc.dependencies.32-ff86f08d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 1079
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-437"
expires: Tue, 31 Jan 2023 16:15:49 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14180
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
200 OK 2.5 kB URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (8907), with no line terminators
Hash 9ef1eeac4c7b15f88c6a6cd7666a020b
21f6ed8aa27dea8aff9128e12912a57662948d62
d84b0b2a028f22ac8513772b9a98db97126588925245bd560ddc4cb95c0b0c07
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/json; charset=utf-8
content-length: 2486
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/domain-api/api/v1/domains/1xlite-071412.top
200 OK 84 B URL HTTP/2 1xlite-071412.top/domain-api/api/v1/domains/1xlite-071412.top
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2d2ad8f5799a552ca570c99bbb79d16a
822c551d17e24bacbfb48b3c50734d1a081e2cf2
30aa0e0b544a604865d8c938a5b6771853d3333f138329290cc0b2d7dc267b12
Analyzer Verdict Alert quad9 Sinkholed
GET /domain-api/api/v1/domains/1xlite-071412.top HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/vnd.api+json
content-length: 84
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
200 OK 266 B URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
IP
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash b25a54e7837d47419e5cb4a0a971c8a8
573504fef8baf68368f4903c45da7474b2a3d3ce
57d0f784ddc48ac2b47a949529437d11711f40543fa7b3b77e1ba2c7d1df96b1
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/json; charset=utf-8
content-length: 266
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/user/secure
200 OK 58 B URL HTTP/2 1xlite-071412.top/web-api/user/secure
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5c7f64673bd245224862cde2fa533f69
8a8f0c15ede35f9621ceb4578f3df1b517084d88
e349874a52242e24c689ad64730dbcf42be99e3f9f99e3179fce20e524c45421
Analyzer Verdict Alert quad9 Sinkholed
POST /web-api/user/secure HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://1xlite-071412.top
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/json; charset=utf-8
content-length: 58
server-timing: dt_285;dur=72
set-cookie: is_rtl=1; expires=Tue, 30-Jan-2024 20:12:09 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Mon, 06-Feb-2023 20:12:09 GMT; Max-Age=604800; path=/
v3fr=1; expires=Thu, 02-Feb-2023 20:12:09 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
_glhf=1675127305; expires=Mon, 30-Jan-2023 21:12:09 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
200 OK 11 kB URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (56342), with no line terminators
Hash e4484890eda8d3a4f7bb46b3d7e68291
f72232c18af63a3478e7e11b205464f7343116f4
1898c8750ff239beaf124d5e05fab5100296c6bf9fdd18cfb973c23fe5c42dc3
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/json; charset=utf-8
content-length: 11122
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=3&mode=4&country=137&virtualSports=true
200 OK 8.8 kB URL HTTP/2 1xlite-071412.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=3&mode=4&country=137&virtualSports=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (43403), with no line terminators
Hash 844ad28c9a92168cbb416f2c1a508b98
487d644f5ed345a33f518077e7355df08d13f106
1429e6fb8c1e27dd1a31d85328bff017044d50e4f71b281f75eba6f596192704
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=3&mode=4&country=137&virtualSports=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/json; charset=utf-8
content-length: 8783
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-a058339a.modern.js
200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-a058339a.modern.js
IP
File type ASCII text, with very long lines (13485), with no line terminators
Hash e4c16860600185911eac1e0abfb7cfa5
b816e49cc33cba2a6709ce5517aa8c163d823164
73fbc80163ac57764a3dc53423ed12772e182ce60edebbad622f8e22be285999
GET /_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-a058339a.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 5399
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-1517"
expires: Tue, 31 Jan 2023 16:16:57 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14118
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-01413228.modern.js
200 OK 26 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-01413228.modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash d8f944f3f57a8d4efca936c5f13327e5
9cd2101d3672ba24d0a22e43aa740cb12ffcb560
01a0572db1a4aff72350a431c288e709b619bd31c9f3a62142b92e08fcc2c238
GET /_nuxt/desktop/default/vendors/conversion-01413228.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 26239
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f43-667f"
expires: Tue, 31 Jan 2023 16:16:56 GMT
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14122
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/checker/redirect/stat/run/
200 OK 49 B URL HTTP/2 1xlite-071412.top/checker/redirect/stat/run/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b7a9075de81cdb1a9fa74fa71b5126dd
9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20
Analyzer Verdict Alert quad9 Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/json; charset=utf-8
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-c067c5b0.modern.js
200 OK 5.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-c067c5b0.modern.js
IP
File type ASCII text, with very long lines (16094)
Hash 48e9097e4698f521cd2805faabcb18ce
f2143b56846a83dad8e9360d86377b57ad26bcd7
fcec700177ee2a96ac8cd6fcd8411d356120a0af075b7391841a03557e063c73
GET /_nuxt/desktop/default/vendors/DownloadAppWidget/modal.apps.AppsModalQr-c067c5b0.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 5563
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-15bb"
expires: Tue, 31 Jan 2023 16:15:51 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14181
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/9a78e990.css
200 OK 1.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/9a78e990.css
IP
File type ASCII text, with very long lines (4090), with no line terminators
Hash bb17fa3f5999e0e2c11b4ec32a204b4c
57dbbf491d31004f61fe0ecf2883c8dd10a4b403
b9a25139b6cd93666778302af843e50fd845b8a4f648ed4f53d4c1fcc0c7379a
GET /_nuxt/desktop/default/css/9a78e990.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: text/css
content-length: 1016
cache-control: max-age=86400
content-encoding: gzip
etag: "63d7953d-3f8"
expires: Tue, 31 Jan 2023 12:46:03 GMT
last-modified: Mon, 30 Jan 2023 10:00:29 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 26773
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-b9c990d1.modern.js
200 OK 3.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-b9c990d1.modern.js
IP
File type ASCII text, with very long lines (8933), with no line terminators
Hash ee430524665dcd2bc8f377aed3e3f597
ab674a40ba945964b64b6effc4596f341d21ab5c
8e3e978af61d6d2a8f7f537d06aa0ebb72b5a1a8093646a964d5dce6683fef2f
GET /_nuxt/desktop/default/DownloadAppWidget-b9c990d1.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 3240
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-ca8"
expires: Tue, 31 Jan 2023 16:15:48 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14182
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.js
200 OK 4.6 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.js
IP
File type Unicode text, UTF-8 text, with very long lines (21746), with no line terminators
Hash 8279b1f64bf54a007c742357ef6cd95c
e58b18c19bf034cd7675d55306514140fb8c0354
9ff2365e6f45ddddbdac4951d229681ac5682327b8ac516767d89f7c56e57c0d
GET /genfiles/cms/betstemplates/bets_model_full_en_0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: text/javascript
content-length: 4554
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"7231e7d64b96fb3be8cfbaf1f3543d90"
expires: Tue, 31 Jan 2023 03:11:27 GMT
last-modified: Fri, 27 Jan 2023 14:03:43 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 61244
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.js
200 OK 3.8 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.js
IP
File type Unicode text, UTF-8 text, with very long lines (14037), with no line terminators
Hash a06e759be32439e5bf821384a10a580e
128e1d0c5e6e170be8cca8e3f70c94c1834678ad
d9c521a2bd4e4dcaab52521d85b0b412814c3bf5056e547ff540e5a4165238f9
GET /genfiles/cms/betstemplates/bets_model_short_en_0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: text/javascript
content-length: 3797
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"7568df2701121909969ebea701c7f8c0"
expires: Tue, 31 Jan 2023 03:11:42 GMT
last-modified: Fri, 27 Jan 2023 14:03:37 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 61236
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 30 Jan 2023 19:46:59 GMT
expires: Mon, 30 Jan 2023 21:46:59 GMT
cache-control: public, max-age=7200
age: 1512
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8e8d3577f29263c4b081ec72664f025d.png
200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8e8d3577f29263c4b081ec72664f025d.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e8d3577f29263c4b081ec72664f025d
a062e14205c3f2146841d775b7da1c7b2d4fd9a7
59859bc14a8eee9cebc0affbb857e5757b7e962b9ffef3c7c8e21912aa825f86
GET /sfiles/logo_teams/8e8d3577f29263c4b081ec72664f025d.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 12048
etag: "8e8d3577f29263c4b081ec72664f025d"
last-modified: Tue, 13 Aug 2019 15:12:29 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3823513
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/74dd1b9081b7d61587a2e2c50bdfb769.png
200 OK 7.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/74dd1b9081b7d61587a2e2c50bdfb769.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c7456ed62fda6168e0fbcda0c7d5f8d3
f76688879b2d9d6f07027681b22d54109893fd27
33a5d0e64979534465f451fdaf5c65b67577826de856d5747b1aa6871b85f7ae
GET /sfiles/logo_teams/74dd1b9081b7d61587a2e2c50bdfb769.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 7681
etag: "c7456ed62fda6168e0fbcda0c7d5f8d3"
last-modified: Mon, 18 Jul 2022 08:10:17 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3839083
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1968495.png
200 OK 15 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/1968495.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 342fe9051e3db41861c50d180b908965
e8fcfbbeba430dd7039244b671955b7773f76567
c55ae6a154271ebc5b753649bc9bf32e840471c86d664a277005cfdb58e3546a
GET /sfiles/logo_teams/1968495.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 15278
etag: "342fe9051e3db41861c50d180b908965"
last-modified: Tue, 13 Aug 2019 14:57:28 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3822649
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ca62b83174e61793b70adf724c328d3a.png
200 OK 17 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/ca62b83174e61793b70adf724c328d3a.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9da6fe87173ff9a7b48bbff681e7774b
d9b052df60b2b4ab5a31de50e972264dec49fbc3
9eb46ca656a18463044526eebac89e41e7203332662d38f8a443fa9c62e5f50e
GET /sfiles/logo_teams/ca62b83174e61793b70adf724c328d3a.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 16897
etag: "9da6fe87173ff9a7b48bbff681e7774b"
last-modified: Wed, 11 Nov 2020 17:30:23 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3822649
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/81a284a2d9ea36aa5a94d0769a146cd7.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/81a284a2d9ea36aa5a94d0769a146cd7.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5145f9507cc5617f9379baf9cf72996d
c03e3ac6283f72788f0a0477008c15e5846bdfcf
29c0d1616e3da4befe8fe78a816ccf7315326106cdaab95b325aad8b1fc533eb
GET /sfiles/logo_teams/81a284a2d9ea36aa5a94d0769a146cd7.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 13294
etag: "5145f9507cc5617f9379baf9cf72996d"
last-modified: Mon, 21 Dec 2020 01:07:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3805873
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/3006.png
200 OK 8.2 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/3006.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 82388bd6248e0488dfb7685126ed3049
d2cd1d0eff95aca401940ed1483acc929fc6fce4
ad6e4f7671b711fc9d29f75fda2deac23d4451ba345d8fc6b6a2644475536f21
GET /sfiles/logo_teams/3006.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 8199
etag: "82388bd6248e0488dfb7685126ed3049"
last-modified: Tue, 13 Aug 2019 15:04:01 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 4001341
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/914979.png
200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/914979.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 46a3cf6f825a803528d0d10c6f7509ae
17719a1bfd90c56234c9beccc5ac32374db63e06
d74bb44037b56616119d49db45dceb4afc18f51e04c4d0086ad949f3ec89d1a9
GET /sfiles/logo_teams/914979.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 18914
etag: "46a3cf6f825a803528d0d10c6f7509ae"
last-modified: Tue, 13 Aug 2019 15:12:36 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3815997
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/external-api/getFirstDepositBonus
200 OK 13 kB URL HTTP/2 1xlite-071412.top/web-api/external-api/getFirstDepositBonus
IP
Hash aa761d255bad6131368f7189ec096983
33b10a02861dd613979cfbba3953e580d7f5f623
6fc721b72f184c502726e89132508aa7e4ac83e2ca8f61981fbdea7823c4ee3d
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/getFirstDepositBonus HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=31, dt_285;dur=763
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo-champ/349540b14e2bdb551e9fd02ee0773955.png
200 OK 19 kB URL HTTP/2 v3.traincdn.com/sfiles/logo-champ/349540b14e2bdb551e9fd02ee0773955.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash be6e9ad054c863a42b061639d4754190
67e8d48fa057b91f61c624ee74b86298aa8c9213
0b0c8794378491a56f9dd341e89f024cad89bc8b7f42c6bded80b960169b5cde
GET /sfiles/logo-champ/349540b14e2bdb551e9fd02ee0773955.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 18835
etag: "be6e9ad054c863a42b061639d4754190"
last-modified: Thu, 15 Dec 2022 07:50:18 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3823045
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/62d4fe056b3062e6bd3f820e84e99e8a.png
200 OK 9.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/62d4fe056b3062e6bd3f820e84e99e8a.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 177ce4b922c4d6771523f7255f20c7f7
66c2ec6beb937bbc20849a259fa7ce6bb086b994
0e17c46798f9265c12208014dd6004f62163f4514c5679fcb423b81f09c0e595
GET /sfiles/logo_teams/62d4fe056b3062e6bd3f820e84e99e8a.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 9578
etag: "177ce4b922c4d6771523f7255f20c7f7"
last-modified: Wed, 16 Nov 2022 01:16:30 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3823049
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d203df3a7a0701757519b07c1f6aa1a6.png
200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d203df3a7a0701757519b07c1f6aa1a6.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c9e7a8047e7dc757ef2f04caa480bc87
0ef7e3c7256320cf3a183ac1c36334a1f3d0ead3
ad152d5702ce0da3069acfb4643b1b1750746f17934279eec67219cbc26bd3c9
GET /sfiles/logo_teams/d203df3a7a0701757519b07c1f6aa1a6.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 11482
etag: "c9e7a8047e7dc757ef2f04caa480bc87"
last-modified: Wed, 16 Nov 2022 01:24:26 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3654027
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/157529d563093cae267ec0f9d844114a.png
200 OK 7.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/157529d563093cae267ec0f9d844114a.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f172ad06c6320b44ff46d63cddf4f6d8
7557e1005f1b23d23e33987e6703065af4be644b
e60c268e9c599f87e48e2f48fba1a2ff1553a2416341bae141642a6166a0bc64
GET /sfiles/logo_teams/157529d563093cae267ec0f9d844114a.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 7343
cache-control: public, max-age=86400
etag: "f172ad06c6320b44ff46d63cddf4f6d8"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Sat, 21 Jan 2023 13:33:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34314
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/245831.png
200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/245831.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 988fcbae8dfcfa478f69a1b03fc4358d
8499860a2b0f885095ab11adea09fd8d219e91c5
047343baf83378450ea492d4e69255535a419447edc95385c056ae9f605578e4
GET /sfiles/logo_teams/245831.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 16195
cache-control: public, max-age=86400
etag: "988fcbae8dfcfa478f69a1b03fc4358d"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Tue, 13 Aug 2019 15:00:45 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34316
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/323587.png
200 OK 7.8 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/323587.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f5659e143c41b724a66c87fc6ecf55a
15d3935372812bd11a18a2c778a02898777674ed
322f0009cc5be19883da37a3c09fcc073b2c5cbcdbcc68350e8a60bcc01565b8
GET /sfiles/logo_teams/323587.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 7824
cache-control: public, max-age=86400
etag: "6f5659e143c41b724a66c87fc6ecf55a"
expires: Mon, 30 Jan 2023 20:43:39 GMT
last-modified: Tue, 13 Aug 2019 15:04:20 GMT
server: Footprint Distributor V6.1.1162
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 84513
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/224229.png
200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/224229.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e802dbb5c66f81d3453191a5e2e90f0
e607e020780b9b51796df931b38e53cebfb69204
518b0ca5b70ae32db77ca556f6994faa53e47172e5b0df192c2eb79c683082f7
GET /sfiles/logo_teams/224229.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 2517
cache-control: public, max-age=86400
etag: "0e802dbb5c66f81d3453191a5e2e90f0"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Tue, 13 Aug 2019 14:59:30 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34314
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d67cfa2581a7c9e5c46b941a0db346bd.png
200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d67cfa2581a7c9e5c46b941a0db346bd.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 014a8ba5443dc6f2a2e0d9bfd0c3392b
1a49ba1068ce54e7b9a22ba4b19b520f00ff1ba7
2d273583518e0b76753dbdca2cb6dd1f338b7f085b5b070421ea44f449e52f8b
GET /sfiles/logo_teams/d67cfa2581a7c9e5c46b941a0db346bd.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 16050
cache-control: public, max-age=86400
etag: "014a8ba5443dc6f2a2e0d9bfd0c3392b"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Sat, 21 Jan 2023 11:25:55 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34314
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/235253.png
200 OK 4.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/235253.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f8aaf2ca7add9ae2ace13f9571b933be
1441a7ca7c2a6675c7e231df97a70c268e38e15b
3f51c81b7ef3312ce12760790398f44058d4865a32c3f72c02cee0c63a9a9e10
GET /sfiles/logo_teams/235253.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 3972
cache-control: public, max-age=86400
etag: "f8aaf2ca7add9ae2ace13f9571b933be"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Tue, 13 Aug 2019 15:00:07 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34314
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/321067.png
200 OK 3.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/321067.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 7a06ec2278f88a849ad5f868c016737c
620bd91f5b7f983a3dfa67c16d2c275eb7dd1675
6fc8dcf8d329e7660b5d93f937252072215722dff6ca297a88bcff581b5cfb43
GET /sfiles/logo_teams/321067.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 3573
cache-control: public, max-age=86400
etag: "7a06ec2278f88a849ad5f868c016737c"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Tue, 13 Aug 2019 15:04:18 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34314
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/577fdc62b06807497ae0db8d65dce2d0.png
200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/577fdc62b06807497ae0db8d65dce2d0.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 107480bc7e9aad3357688838139351e4
1141903b828c8c8b7435d1015a200f2c7be2dc3d
f40adac2d208c18310e8d8a055ae1e0525ed768d5ef5bb8a328ad745e24472d8
GET /sfiles/logo_teams/577fdc62b06807497ae0db8d65dce2d0.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 13772
cache-control: public, max-age=86400
etag: "107480bc7e9aad3357688838139351e4"
expires: Tue, 31 Jan 2023 12:29:37 GMT
last-modified: Tue, 25 Feb 2020 17:39:47 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 34314
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d53cd31cb12218e82e1444e69ce6a152.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d53cd31cb12218e82e1444e69ce6a152.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f402335b106004767a091903a9910eba
9de2db71a701411b2d5fd9e9e38a0f361896a504
b054075b79571085bcbe79d5f7f563eb2adbf09f67a63d03bbb1b1fd8aa27253
GET /sfiles/logo_teams/d53cd31cb12218e82e1444e69ce6a152.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 10801
etag: "f402335b106004767a091903a9910eba"
last-modified: Thu, 24 Nov 2022 14:44:11 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3808127
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/9f82bb964f2be5ce69a1c711caee6760.png
200 OK 7.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/9f82bb964f2be5ce69a1c711caee6760.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2ed2c57f49d1d78c181016f10f32e8ba
9176dc2bbaf7f10510949b4710a0a7de1f58bb46
c4a6e819d8aeffecadc308f0516fcc0103341eb570dfb1ebbe08ac625c066cad
GET /sfiles/logo_teams/9f82bb964f2be5ce69a1c711caee6760.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 7716
etag: "2ed2c57f49d1d78c181016f10f32e8ba"
last-modified: Mon, 18 Jul 2022 07:34:32 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3671749
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137
200 OK 17 kB URL HTTP/2 1xlite-071412.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137
IP
Hash 62ea09c09dd4b18da20bc6a06be3d242
7d197b2bb6e228c1d861027d44174f497aa6b5c3
ef88827f3489fdbf78da4d44d2ea8169ed87c326aa9fd2411987ad376c65e807
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:09 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=85, dt_285;dur=87
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/18870e78e1539d9ca30f888f958d4046.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/18870e78e1539d9ca30f888f958d4046.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ccbc74445c9cd104a25520927e544c7b
9a5ba4a66d12f0f7ca4dffa169ec918419931edf
528b70f224608630b34b88d159f8afe248f48aae6262b1f75a85d4f01f652913
GET /sfiles/logo_teams/18870e78e1539d9ca30f888f958d4046.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 12983
cache-control: public, max-age=86400
etag: "ccbc74445c9cd104a25520927e544c7b"
expires: Tue, 31 Jan 2023 15:20:31 GMT
last-modified: Tue, 17 Jan 2023 12:58:55 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 17502
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/377a18243ed70c32519f2a433f4ce196.png
200 OK 25 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/377a18243ed70c32519f2a433f4ce196.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash b8c1eb8d5508fa45a95fa1cc05ace171
0abf02c4e1c157fd209685cec63b6879c5690c5b
484d9aa56357ddf99a4514d90b04c80a93deebed18922a7756498f5b7c4ece45
GET /sfiles/logo_teams/377a18243ed70c32519f2a433f4ce196.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 25276
cache-control: public, max-age=86400
etag: "b8c1eb8d5508fa45a95fa1cc05ace171"
expires: Mon, 30 Jan 2023 23:30:35 GMT
last-modified: Tue, 17 Jan 2023 08:29:16 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 74497
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/28725.png
200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/28725.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash b3a6ec5e09b272f1de225ecb54369b0a
da28312f99d74c804d7294128fbdd74c775a4154
4a4e93e32bdf28150380491cf738c833265a421efd2c5ed53c97bc8dc0b4ba43
GET /sfiles/logo_teams/28725.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 14184
etag: "b3a6ec5e09b272f1de225ecb54369b0a"
last-modified: Tue, 13 Aug 2019 15:03:41 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3519323
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/59bdeb65b4c33eb3f2feb6251fdfc931.png
200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/59bdeb65b4c33eb3f2feb6251fdfc931.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 4668b1b459b010bb1c5d4b98fe8f3642
41b4fbac594a761d9db27a1e6b9668118c6977cd
3ea96a6fe358a8952d57d997a712f544afc9d95777b1f7311a8f71924bf7537e
GET /sfiles/logo_teams/59bdeb65b4c33eb3f2feb6251fdfc931.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 15739
cache-control: public, max-age=86400
etag: "4668b1b459b010bb1c5d4b98fe8f3642"
expires: Tue, 31 Jan 2023 20:06:14 GMT
last-modified: Tue, 17 Jan 2023 12:59:19 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 594
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/841690bed038b6deb9babfebd069ceed.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/841690bed038b6deb9babfebd069ceed.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f541a7e9838b0a9331a17ecea016c64
4640777da504aa2a501d222b3ea79405d1b94c5c
8c9fafd21a231068b9841a98f604746452a7c7064f9137c52aee03dd38022df6
GET /sfiles/logo_teams/841690bed038b6deb9babfebd069ceed.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 13295
cache-control: public, max-age=86400
etag: "2f541a7e9838b0a9331a17ecea016c64"
expires: Tue, 31 Jan 2023 20:03:00 GMT
last-modified: Tue, 17 Jan 2023 13:24:24 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 594
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/73917603bfdecb3597b7ed92431556ad.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/73917603bfdecb3597b7ed92431556ad.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 482731aed3b98e20fdaba4627337597d
29fd02007fb743c568f76115933a410f55f6cf54
1c40b05e13fcb3f9baff351b95788a5e2a47649dea7018cc3868fa9ac6c313e9
GET /sfiles/logo_teams/73917603bfdecb3597b7ed92431556ad.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 12946
cache-control: public, max-age=86400
etag: "482731aed3b98e20fdaba4627337597d"
expires: Tue, 31 Jan 2023 14:56:17 GMT
last-modified: Tue, 17 Jan 2023 13:48:16 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 29107
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d57f30eced9075f5e02fafa649825127.png
200 OK 14 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d57f30eced9075f5e02fafa649825127.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 5edab7b5940d1fa1bdbcd9f183a47538
888b99515bc19daf1afbe5b55de0d0587369a282
f92e171c11023d1eeda0a1e705188d2b285cde48b48dbe9c06a2fce97a89f906
GET /sfiles/logo_teams/d57f30eced9075f5e02fafa649825127.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 13453
cache-control: public, max-age=86400
etag: "5edab7b5940d1fa1bdbcd9f183a47538"
expires: Tue, 31 Jan 2023 12:07:05 GMT
last-modified: Tue, 17 Jan 2023 08:58:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 29108
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2000.png
200 OK 17 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2000.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c8da02ee4ee2e917554656b798367130
a618c442aebc48b785710c0658de3ab534ac0a1f
f14f602517c988fd2b8f9f753c4ff1a0b8896e5c3f5620b07597832901425199
GET /sfiles/logo_teams/2000.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 17117
etag: "c8da02ee4ee2e917554656b798367130"
last-modified: Tue, 13 Aug 2019 14:57:50 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5714108
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2006.png
200 OK 13 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2006.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 562184f04d720fc5b1122f8ff7315bbd
1a9bc4e9ff81b46a809925d511ad983d2b8ec019
8531853b8cb90e715950c98304f6ec768eb1e01aa1e19ed94ac05122a01c549b
GET /sfiles/logo_teams/2006.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 13265
etag: "562184f04d720fc5b1122f8ff7315bbd"
last-modified: Tue, 13 Aug 2019 14:57:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5714106
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/284e78c3cca0ded862fbbe1dc58cc5b4.png
200 OK 6.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/284e78c3cca0ded862fbbe1dc58cc5b4.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 57a45ddc326405c94cec025659074404
233ed1f7d6b11cb190d49a802a68902a3a8ad43e
a059797f62adce83391463584cd100028319bb528746ce02e8ecb58ff1757ddc
GET /sfiles/logo_teams/284e78c3cca0ded862fbbe1dc58cc5b4.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 6027
etag: "57a45ddc326405c94cec025659074404"
last-modified: Wed, 31 Mar 2021 17:37:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5740220
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/cf14b4d6f638679849981c0a0ff21d70.png
200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/cf14b4d6f638679849981c0a0ff21d70.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash f846c5416450eb800449bb5f5acd4da2
c965eeab49674998bfa423ff9a98ffb930639b79
a0ab541c9f042ca8e1388372725048f1bd120f8e2c728ff27d2b01db2bcf898a
GET /sfiles/logo_teams/cf14b4d6f638679849981c0a0ff21d70.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 10693
etag: "f846c5416450eb800449bb5f5acd4da2"
last-modified: Thu, 12 Nov 2020 06:46:59 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5707239
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/92849bc4fb55b0ac7e769482af213f21.png
200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/92849bc4fb55b0ac7e769482af213f21.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash bf02d2e364abf0dbc53bbedbb064fac4
ea3ae7a07d6722577ed65418e2476951b33ec391
0e9a8d764458bb7fe8c6db78082e2bb82f6b7267ce1da97850c959c51797c90f
GET /sfiles/logo_teams/92849bc4fb55b0ac7e769482af213f21.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 10529
etag: "bf02d2e364abf0dbc53bbedbb064fac4"
last-modified: Sat, 13 Jun 2020 22:35:29 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5538773
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/708a3a7d11fd62622c079c4ab133de2b.PNG
200 OK 20 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/708a3a7d11fd62622c079c4ab133de2b.PNG
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 708a3a7d11fd62622c079c4ab133de2b
6c4d856a983dc4b94c07d737cabbee8eed7b0e5c
aefbd2c0b7e33e930823fe7c2c4895573e8162adc6776cd191b228f0e1fcda86
GET /sfiles/logo_teams/708a3a7d11fd62622c079c4ab133de2b.PNG HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 19556
etag: "708a3a7d11fd62622c079c4ab133de2b"
last-modified: Thu, 12 Sep 2019 05:27:42 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 3932483
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/defaultlogo.png
200 OK 2.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/defaultlogo.png
IP
File type PNG image data, 55 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 72c91e676105dc1628e8a636554bfcfd
c0162ae779e4000be14b99e96981ff309a41b0ee
d10053f91feb4cd1a54f46fdcb8eb5193e4396a09e6341458edcf2f38ada718b
GET /sfiles/logo_teams/defaultlogo.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:12 GMT
content-type: image/png
content-length: 2713
etag: "72c91e676105dc1628e8a636554bfcfd"
last-modified: Tue, 13 Aug 2019 15:13:43 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5453213
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5190c0bdc6abe0ee258e9f8c20ddaf51
d60f280f8a742480527dbc32d08f321f972d4fcf
874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12507
x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFaJoAMFqKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XABaoZCqUulmnfZOXx6XTLSUMS5Mie6u0OfkqozmBzCf3Qjzf-fbRA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:54:32 GMT
age: 80260
etag: "d60f280f8a742480527dbc32d08f321f972d4fcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/face1328.css
200 OK 418 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/face1328.css
IP
File type ASCII text, with very long lines (907), with no line terminators
Hash 4bee9d0d47c92aee9a38f4b18363ac56
773deb038845c0a61701e7a363a0bcd005a05f08
93619377cc01e7fe943432b842a863700ffa1d1e022d405540ef96c6516deeda
GET /_nuxt/desktop/default/css/face1328.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:13 GMT
content-type: text/css
content-length: 418
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-1a2"
expires: Tue, 31 Jan 2023 15:33:59 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 16697
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-9620dc91.modern.js
200 OK 667 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-9620dc91.modern.js
IP
File type ASCII text, with very long lines (1341), with no line terminators
Hash 0d00f5b60d9fd28da0937f959b3f8bf1
f69f70fae438d54baa661a376fab7c13c8cc6efc
e0bc705cc22a45544cae1825ffc90f56493e35710e53aa766ffc43ff7c5f99da
GET /_nuxt/desktop/default/betting.SportsMenuCompact-9620dc91.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 667
cache-control: max-age=86400
content-encoding: gzip
etag: "63d79f42-29b"
expires: Tue, 31 Jan 2023 16:17:00 GMT
last-modified: Mon, 30 Jan 2023 10:43:14 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 14146
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
200 OK 2.6 kB URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10160), with no line terminators
Hash 52a67fe77d2eb3b74d47be3e42b8ef97
f3de3fdb3ae1905b5c43d8f87afc1627cfd8118c
fa1dca3d8337b2dc38bc59d2d03aaa8b70cac65ad391ae7bd60e27c8d56dc78c
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:13 GMT
content-type: application/json; charset=utf-8
content-length: 2589
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LineFeed/GetSportsShortZip?lng=en&tz=3&country=137&virtualSports=true&groupChamps=true
200 OK 1.7 kB URL HTTP/2 1xlite-071412.top/service-api/LineFeed/GetSportsShortZip?lng=en&tz=3&country=137&virtualSports=true&groupChamps=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5616), with no line terminators
Hash 1493fdcc7d72f39bfa421e039eb58c12
599a17664c5e5893485da88c824521e20c4e42c3
053c7e4f1f37a4b7e694fa5ee351395c6758543a6fdb3438ebe73342e62922ca
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetSportsShortZip?lng=en&tz=3&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:13 GMT
content-type: application/json; charset=utf-8
content-length: 1744
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8d680cbaee5ef3e7b8e09b174ed6ecf
6651a0d3041920798240ea67e827c3d458769fa9
4c74e8ebff95e67da678248d3dc1d3f42d98c8a0d33d54d9d2bde36314c9f952
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3678
x-amzn-requestid: 21cd1ae3-b769-418a-b7f8-5efa486db859
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEvE-RIAMFpmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-6998009c289996563d78616a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XbMeLjDaYoPiw42pUbszzOEqWeUdx01NI6zVLJFgp0r3B_2dHHxX-w==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:45 GMT
age: 79228
etag: "6651a0d3041920798240ea67e827c3d458769fa9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
200 OK 617 B URL HTTP/2 1xlite-071412.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
IP
File type JSON data\012- , ASCII text, with very long lines (1174), with no line terminators
Hash c3b4d039dab59df8f0970d3448267e71
6ccd7ed6ba33d2732de8cff647981594019f4112
576d006befef59a5f9f9d96139d529e820d0011fa52a0b20ee44b779580c3bc3
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=en HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:14 GMT
content-type: application/json; charset=utf-8
content-length: 617
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
200 OK 655 B URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
IP
File type JSON data\012- , ASCII text, with very long lines (1246), with no line terminators
Hash 9a1912e1a232bf9e2892b2f2c92b2b7a
02ca0c7b02c17a9d4766f837aa25b231f0d6a61f
d23d633c8af119db06ef3335a382cc9c5c4346a7c40510c8b1617deee194e7a5
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:14 GMT
content-type: application/json; charset=utf-8
content-length: 655
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb1a5e0a2bb1cacf87189373c118adf4
079974268f755aa38fb2cb32b8bcb748353c793f
1b0519e6bfca30a31b83d427302f7e22140f5b2da6f13cac37ea9c07abc42676
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11095
x-amzn-requestid: dc7c00e2-cd2d-4265-8763-3dd7dbe223ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkFyEhJIAMFjpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6f1-541a17c362e95dfa5e90f58f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UuPN6Nq84hFgUDMbvpLTysWfU1JcRiecGH3tkdqDOOXBo9hVhmpMBA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:52 GMT
age: 79942
etag: "079974268f755aa38fb2cb32b8bcb748353c793f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1xlite-071412.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675109549021
200 OK 145 B URL HTTP/2 1xlite-071412.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1675109549021
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55385fdddab661013ad8f678cd75ac88
bd36ac4197e34b4d5022498bc319e6f51dff2329
d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1675109549021 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
expires: Tue, 31 Jan 2023 20:12:15 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
200 OK 2.5 kB URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (8910), with no line terminators
Hash c928dddf59d9506ebe46789e45e0b15a
29fd52707e782f643a76eb6e06e3c06a6e9d3f22
23d52e218808804fd993e4a5b9d9d766e1035617f50b696f082073b69dff0bc2
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 2490
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
200 OK 2.6 kB URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10160), with no line terminators
Hash 52a67fe77d2eb3b74d47be3e42b8ef97
f3de3fdb3ae1905b5c43d8f87afc1627cfd8118c
fa1dca3d8337b2dc38bc59d2d03aaa8b70cac65ad391ae7bd60e27c8d56dc78c
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 2589
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/external-api/v3/banners?project_id=285&country_code=MZ&language=en&platform=2§ion=6&is_auth=false&limit=100
200 OK 14 kB URL HTTP/2 1xlite-071412.top/web-api/external-api/v3/banners?project_id=285&country_code=MZ&language=en&platform=2§ion=6&is_auth=false&limit=100
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (13517), with no line terminators
Hash 924f8ea98b12dff0c65b5c64a21b5891
0dfba34c97acbf4eaf47bbdd1547bdc73ce1d48a
7d66cacbf04d19875437dbbc05275dcf4e040906af1850bbd8ee489dc00b4e53
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/v3/banners?project_id=285&country_code=MZ&language=en&platform=2§ion=6&is_auth=false&limit=100 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=39, dt_285;dur=40
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
200 OK 11 kB URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (56275), with no line terminators
Hash 5e90f694d61d67a947f155415526eede
3e4b7829a655eac45647d1b1f1eb56caa2181c3b
7b6e978e12bfb20ab3defeae321087839b99ee1a500b8c2e8906fac35f0372a1
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 11121
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/weblightapi/getpopulareventparams
200 OK 126 B URL HTTP/2 1xlite-071412.top/web-api/weblightapi/getpopulareventparams
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 59e4d0b11ac5eb61a4649fb18b935908
de2738661849f9b258f6bf436877f7d2774e6cff
259963f5ae10d3d50617412880dc5c1ddc38f5d0d19459881145bf5aac1afe26
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/weblightapi/getpopulareventparams HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 126
server-timing: dt_285;dur=86
set-cookie: is_rtl=1; expires=Tue, 30-Jan-2024 20:12:15 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&groupChamps=true
200 OK 1.7 kB URL HTTP/2 1xlite-071412.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&groupChamps=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5616), with no line terminators
Hash 1493fdcc7d72f39bfa421e039eb58c12
599a17664c5e5893485da88c824521e20c4e42c3
053c7e4f1f37a4b7e694fa5ee351395c6758543a6fdb3438ebe73342e62922ca
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 1744
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&mode=4&country=137&virtualSports=true
200 OK 8.8 kB URL HTTP/2 1xlite-071412.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&mode=4&country=137&virtualSports=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (43403), with no line terminators
Hash 8e326979b773c3e47da811ec6028fce0
17eb4920b0d8c1f379e219ac64189d6cb5bcb782
af43bf33a666f78c81a7e1d4ea17f8f28158c199e9124fc633a46cd60407a0c2
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=en&mode=4&country=137&virtualSports=true HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 8787
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
200 OK 617 B URL HTTP/2 1xlite-071412.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
IP
File type JSON data\012- , ASCII text, with very long lines (1174), with no line terminators
Hash c3b4d039dab59df8f0970d3448267e71
6ccd7ed6ba33d2732de8cff647981594019f4112
576d006befef59a5f9f9d96139d529e820d0011fa52a0b20ee44b779580c3bc3
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=en HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 617
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
200 OK 655 B URL HTTP/2 1xlite-071412.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
IP
File type JSON data\012- , ASCII text, with very long lines (1246), with no line terminators
Hash 9a1912e1a232bf9e2892b2f2c92b2b7a
02ca0c7b02c17a9d4766f837aa25b231f0d6a61f
d23d633c8af119db06ef3335a382cc9c5c4346a7c40510c8b1617deee194e7a5
Analyzer Verdict Alert quad9 Sinkholed
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167; tzo=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:15 GMT
content-type: application/json; charset=utf-8
content-length: 655
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/app-0a7f18f1.modern.js
200 OK 0 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/app-0a7f18f1.modern.js
IP
GET /_nuxt/desktop/default/vendors/app-0a7f18f1.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:12:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 218088
cache-control: max-age=86400
content-encoding: gzip
etag: "63d7953e-353e8"
expires: Tue, 31 Jan 2023 13:07:39 GMT
last-modified: Mon, 30 Jan 2023 10:00:30 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 25471
accept-ranges: bytes
X-Firefox-Spdy: h2
1xlite-071412.top/_nuxt/Desktop/Default/svg-sprites/sports-2000120.svg
200 OK 0 B URL HTTP/2 1xlite-071412.top/_nuxt/Desktop/Default/svg-sprites/sports-2000120.svg
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /_nuxt/Desktop/Default/svg-sprites/sports-2000120.svg HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 30 Jan 2023 10:43:15 GMT
etag: W/"63d79f43-573c1"
expires: Tue, 31 Jan 2023 20:11:12 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/external-api/config/getVideoAccessConfig
200 OK 0 B URL HTTP/2 1xlite-071412.top/web-api/external-api/config/getVideoAccessConfig
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/external-api/config/getVideoAccessConfig HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:10 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=55, dt_285;dur=58
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/default/img/icons/pixels2.svg?v=1675109548
200 OK 0 B URL HTTP/2 1xlite-071412.top/web-api/default/img/icons/pixels2.svg?v=1675109548
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/default/img/icons/pixels2.svg?v=1675109548 HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:14 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=47, dt_285;dur=49
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
refpaydc.top/L?tag=d_52424m_38951c_[]MS[]null[]null[]general[]_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
303 See Other 0 B URL HTTP/2 refpaydc.top/L?tag=d_52424m_38951c_[]MS[]null[]null[]general[]_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
IP
GET /L?tag=d_52424m_38951c_[]MS[]null[]null[]general[]_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d HTTP/1.1
Host: refpaydc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://luckyforbet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
server: nginx
date: Mon, 30 Jan 2023 20:12:04 GMT
cache-control: private
location: https://1x-xredbet708793.top:443/?tag=d_52424m_38951c_%5b%5dMS%5b%5dnull%5b%5dnull%5b%5dgeneral%5b%5d_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
x-aspnetmvc-version: 5.0
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/api/v3/bonuses/welcome-bonuses
200 OK 0 B URL HTTP/2 1xlite-071412.top/web-api/api/v3/bonuses/welcome-bonuses
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/v3/bonuses/welcome-bonuses HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1675127305; che_g=2e76a6e8-038e-7826-8fff-74116c6c725d; ggru=167
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:14 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=19, dt_285;dur=21
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/genfiles/cms/pg/285/css/value/25c9fae1a3ccc774c9190693aba677fb.css
200 OK 0 B URL HTTP/2 1xlite-071412.top/genfiles/cms/pg/285/css/value/25c9fae1a3ccc774c9190693aba677fb.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /genfiles/cms/pg/285/css/value/25c9fae1a3ccc774c9190693aba677fb.css HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:05 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 28 Jan 2023 12:46:35 GMT
x-rgw-object-type: Normal
etag: W/"a096fa1f997b41d35a16344cf6f30e8e"
content-encoding: br
expires: Mon, 30 Jan 2023 21:12:05 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1xlite-071412.top/web-api/api/converslon/load
200 OK 0 B URL HTTP/2 1xlite-071412.top/web-api/api/converslon/load
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /web-api/api/converslon/load HTTP/1.1
Host: 1xlite-071412.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://1xlite-071412.top/en?tag=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder&pb=5c10be95d12e4b80a8d11d7b17f8e8c3&click_id=5c84ca50-a0da-11ed-ab80-cbbe4fd2149d
Cookie: platform_type=desktop; auid=sv0PC2PYJJQd4HNsAy5cAg==; SESSION=c6e7e8531e216b7a8261e109f35cc9de; lng=en; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder; postback_watcher=%7B%22tag%22%3A%22d_52424m_38951c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D_d27775_l46786_clickunder%22%2C%22pb%22%3A%225c10be95d12e4b80a8d11d7b17f8e8c3%22%2C%22click_id%22%3A%225c84ca50-a0da-11ed-ab80-cbbe4fd2149d%22%7D; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:12:07 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=22, dt_285;dur=25
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
85.17.31.152
104.18.32.68
178.253.15.11
34.117.237.239
95.101.11.115