luckyforbet.com/i/38915
95.211.26.202302 Found 20 B IP 95.211.26.202:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /i/38915 HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 31 Mar 2023 21:21:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; expires=Sat, 01-Apr-2023 21:21:27 GMT; Max-Age=86400; path=/
TRK_TRU7=eJxjYGBgEuEQZC5NNBVUSEkzNEs2sDBMNjI1NjAzMzVJNEhNS7KwTLIwNzNMNLAQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcohwYQECQNb8YpIRFkAvIgMuqMEBkuVNSyzKTU%2BNLKgtS2RgBWyQlpg%3D%3D; expires=Sat, 01-Apr-2023 21:21:27 GMT; Max-Age=86400; path=/
trk_cpa_pixel=ff741360-d009-11ed-8ed9-4522e083433a; expires=Tue, 30-May-2023 21:21:27 GMT; Max-Age=5184000; path=/
Location: http://luckyforbet.com/h/S.EhPQDQrtNIZE4GcupsPL_Xwu7ueL1k5GQSmTYMMnN0xw.UkgzQqsV81ZgInpaZp7PfUpBz8MrM3_gPqCaszh.XzP52pYoD61GD2CGLIqo197DfyOJx3dD2VDevWl11g1IlRgTwuQ53iFfFzIhMd3ozh14D8N3eLdN1XPdG6R5oLx0jZGEQVnCOdV7U9h.lT9Gfy8xlBCgEq_i9x0T7_Aqq.qqqq.qq
Content-Encoding: gzip
Vary: Accept-Encoding
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash b93010cbf31ba3ec785b4088e5d0f529
c0f1ab8a2aae3c445a8f24959a4eea433a345caf
2cc1a5865dee7636b82a68deddd3aff8b697e846e37789a694cc3c7c47340590
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CC1A5865DEE7636B82A68DEDDD3AFF8B697E846E37789A694CC3C7C47340590"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20965
Expires: Sat, 01 Apr 2023 03:10:52 GMT
Date: Fri, 31 Mar 2023 21:21:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12456
Expires: Sat, 01 Apr 2023 00:49:03 GMT
Date: Fri, 31 Mar 2023 21:21:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 31 Mar 2023 21:16:13 GMT
content-type: application/json
age: 315
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 76218c893040d958ae1c4231cdd2133c
6a7b336dee91d4aec26ace0a5883ecdfac52e68f
d35492b04d16ed00e9e195e7c84c99aa6a2b8a93abeb656baae0918986f0a7e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D35492B04D16ED00E9E195E7C84C99AA6A2B8A93ABEB656BAAE0918986F0A7E4"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2472
Expires: Fri, 31 Mar 2023 22:02:40 GMT
Date: Fri, 31 Mar 2023 21:21:28 GMT
Connection: keep-alive
luckyforbet.com/h/S.EhPQDQrtNIZE4GcupsPL_Xwu7ueL1k5GQSmTYMMnN0xw.UkgzQqsV81ZgInpaZp7PfUpBz8MrM3_gPqCaszh.XzP52pYoD61GD2CGLIqo197DfyOJx3dD2VDevWl11g1IlRgTwuQ53iFfFzIhMd3ozh14D8N3eLdN1XPdG6R5oLx0jZGEQVnCOdV7U9h.lT9Gfy8xlBCgEq_i9x0T7_Aqq.qqqq.qq
95.211.26.202200 OK 328 B URL HTTP/1.1 luckyforbet.com/h/S.EhPQDQrtNIZE4GcupsPL_Xwu7ueL1k5GQSmTYMMnN0xw.UkgzQqsV81ZgInpaZp7PfUpBz8MrM3_gPqCaszh.XzP52pYoD61GD2CGLIqo197DfyOJx3dD2VDevWl11g1IlRgTwuQ53iFfFzIhMd3ozh14D8N3eLdN1XPdG6R5oLx0jZGEQVnCOdV7U9h.lT9Gfy8xlBCgEq_i9x0T7_Aqq.qqqq.qq
IP 95.211.26.202:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 05f2d937e370be3d9bbe3898b7abcc03
25274a3754806238dd11a4059a48e5efcc8b0964
5cf6d91d679398d0d97b8931c60b044725369f4e15046f017ae57fab56e0af09
GET /h/S.EhPQDQrtNIZE4GcupsPL_Xwu7ueL1k5GQSmTYMMnN0xw.UkgzQqsV81ZgInpaZp7PfUpBz8MrM3_gPqCaszh.XzP52pYoD61GD2CGLIqo197DfyOJx3dD2VDevWl11g1IlRgTwuQ53iFfFzIhMd3ozh14D8N3eLdN1XPdG6R5oLx0jZGEQVnCOdV7U9h.lT9Gfy8xlBCgEq_i9x0T7_Aqq.qqqq.qq HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; TRK_TRU7=eJxjYGBgEuEQZC5NNBVUSEkzNEs2sDBMNjI1NjAzMzVJNEhNS7KwTLIwNzNMNLAQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcohwYQECQNb8YpIRFkAvIgMuqMEBkuVNSyzKTU%2BNLKgtS2RgBWyQlpg%3D%3D; trk_cpa_pixel=ff741360-d009-11ed-8ed9-4522e083433a
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 21:21:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
Vary: Accept-Encoding
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hk3qcxxUZRKcIKvBci93nTmlfKvIxs5SiGp06v9NhXBEmqJWgsBfjU5EI0VOUh7j9bUCT9Fwj2s=
x-amz-request-id: 3WSQ5E0WPTTFPXZ5
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 31 Mar 2023 21:03:29 GMT
age: 1079
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
luckyforbet.com/favicon.ico
95.211.26.202404 Not Found 33 B URL HTTP/1.1 luckyforbet.com/favicon.ico
IP 95.211.26.202:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 8874bf02e5b576488740e35ffac374d4
34818fe2fbf54312142e04cef4efb38f86cb4fc6
474e80e45aef5f25213fdfe4b976ec514f4a834eea0abfb65dd5b86e4b51e4d3
GET /favicon.ico HTTP/1.1
Host: luckyforbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://luckyforbet.com/h/S.EhPQDQrtNIZE4GcupsPL_Xwu7ueL1k5GQSmTYMMnN0xw.UkgzQqsV81ZgInpaZp7PfUpBz8MrM3_gPqCaszh.XzP52pYoD61GD2CGLIqo197DfyOJx3dD2VDevWl11g1IlRgTwuQ53iFfFzIhMd3ozh14D8N3eLdN1XPdG6R5oLx0jZGEQVnCOdV7U9h.lT9Gfy8xlBCgEq_i9x0T7_Aqq.qqqq.qq
Cookie: TRK_TRG=eJxjYGBgEmEXZMosEOSxNNSzNNAzMdIzNDURZE5PzRdk8vMX5C5KTc%2FMz4tPzk9JFWT189c1MBbkTM4sqYSIsANF%2FItz8gWZM4sLBPmccjIrFILzc0pLgHqKBfnyUkviiwtSU1PAqtkYBTkyi%2BMLivIrKtkYAUzOIh4%3D; TRK_TRU7=eJxjYGBgEuEQZC5NNBVUSEkzNEs2sDBMNjI1NjAzMzVJNEhNS7KwTLIwNzNMNLAQZE0qSsxL4RVkzc1PSc3hFeRKKsovL04tis9MYWMT5IfxylKLijPz83gcohwYQECQNb8YpIRFkAvIgMuqMEBkuVNSyzKTU%2BNLKgtS2RgBWyQlpg%3D%3D; trk_cpa_pixel=ff741360-d009-11ed-8ed9-4522e083433a
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 31 Mar 2023 21:21:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
Vary: Accept-Encoding
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6dfc3fa7c575733ea9d854f7d71606e3
e3cb3692c53c9b3ba87bb7510e4ccb84b607d68b
24a083a252a6a2fc67f255b86b3250150f10af80fffdeeb2d783c44d79bcc150
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "24A083A252A6A2FC67F255B86B3250150F10AF80FFFDEEB2D783C44D79BCC150"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18017
Expires: Sat, 01 Apr 2023 02:21:45 GMT
Date: Fri, 31 Mar 2023 21:21:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Backoff, Last-Modified, Alert, Content-Length, Pragma, Cache-Control, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 31 Mar 2023 21:17:26 GMT
age: 242
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ec30a1ec05ea94fb24c154ee22524ea8
7724df6991812a0c43a2b160234fd918f600415c
98f1880a00bad068d89c80be2fcd4dfd106ee95df8147bb73a701fd240c26075
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98F1880A00BAD068D89C80BE2FCD4DFD106EE95DF8147BB73A701FD240C26075"
Last-Modified: Thu, 30 Mar 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11216
Expires: Sat, 01 Apr 2023 00:28:24 GMT
Date: Fri, 31 Mar 2023 21:21:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash b3df8c73360b4239af64e11f9d2388be
dc5463ff26615b40e4eab388052790d6c30ea5e6
877b23d16abf2e0e9f649f53747e82af0b75e8595abd71728254e612847cfdb6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "877B23D16ABF2E0E9F649F53747E82AF0B75E8595ABD71728254E612847CFDB6"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12460
Expires: Sat, 01 Apr 2023 00:49:08 GMT
Date: Fri, 31 Mar 2023 21:21:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 9c468a0f81560e4110ef413181cf4e26
f9556546414ce66ec1840d69673b155d8b7bbcec
97f5ee62576d523c3c5ea5805ba86910335fff327949b243c22ffa1db7eedd97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "97F5EE62576D523C3C5EA5805BA86910335FFF327949B243C22FFA1DB7EEDD97"
Last-Modified: Thu, 30 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5046
Expires: Fri, 31 Mar 2023 22:45:34 GMT
Date: Fri, 31 Mar 2023 21:21:28 GMT
Connection: keep-alive
refpamjeql.top/L?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder&site=85563&ad=14241
45.135.120.31303 See Other 0 B URL HTTP/2 refpamjeql.top/L?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder&site=85563&ad=14241
IP 45.135.120.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /L?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder&site=85563&ad=14241 HTTP/1.1
Host: refpamjeql.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://luckyforbet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
server: nginx
date: Fri, 31 Mar 2023 21:21:28 GMT
cache-control: private
location: https://1x-xredbet245402.top:443/?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder
x-aspnetmvc-version: 5.0
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4195
Expires: Fri, 31 Mar 2023 22:31:25 GMT
Date: Fri, 31 Mar 2023 21:21:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4195
Expires: Fri, 31 Mar 2023 22:31:25 GMT
Date: Fri, 31 Mar 2023 21:21:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4195
Expires: Fri, 31 Mar 2023 22:31:25 GMT
Date: Fri, 31 Mar 2023 21:21:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4195
Expires: Fri, 31 Mar 2023 22:31:25 GMT
Date: Fri, 31 Mar 2023 21:21:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a2b8f737604b7983cf686c82599dc73
aa63be93c4cd641f09ce0d5144ef60aab21caed1
78835586bfd170fee7e6f70b2b426ed186f5aeae969459c6dcbf527ba9c0deec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6380
x-amzn-requestid: 0a129a69-0720-47a0-8b0e-b3200de24204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUn6E19IAMF9SQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260165-564474a42e79d1dc4eb9558f;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:45 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 3paQf8BhyRcZoZNox8660Zyzz0WaiQxJuHmDbj4wpo-rgbDdkxrYgQ==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:47:23 GMT
age: 84847
etag: "aa63be93c4cd641f09ce0d5144ef60aab21caed1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 424b55535e5fd622b2fc96aac1246324
cf7cf08aa8969a86bf03695af2129686fd62fe86
c4bb26a7b2c431282b53b4df9999b9cc8e61369a79c606688a76499b31a65127
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10271
x-amzn-requestid: db0d1fe4-060a-4e61-90f3-ec9befee1295
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkBoXGh5oAMFfzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424afce-2e9251552b4acdcb19e02dfc;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:38:22 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 1cXec9_e-KpzyTwiHaNAaf0y5i12tw7BkZTXnduS5ek7yAAZ0LXTWw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:44:51 GMT
age: 84999
etag: "cf7cf08aa8969a86bf03695af2129686fd62fe86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8600e41520408df4865627256a0a0736
dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef
9163d80d7b6087b804e6682a50d4f66339d339894cf1c5808f2e5c2e0b3de930
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5806
x-amzn-requestid: cee5b166-592b-405e-b5f1-e36eb249ec59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUllFFooAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-01840fa47177285667bca060;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jktkwc3JLU31AY5B5pC5JTjPGARjflqoJRZiD6IpF5-10IO6UNlH_Q==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:46:33 GMT
age: 84897
etag: "dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39bdd16276747b1445a79e674a2a3347
d0676f63738484298a78b7abf7e4934c3d256065
67aa526299060c2a39c4baa10fd03f121497dccd5e765676639ed73ac529c34b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11061
x-amzn-requestid: 428128ec-c441-4ff7-9c84-880a01672b00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnVFnFf0IAMFTvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260223-185c48300f161931310fa35f;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:41:55 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: gc77o7y-moH1HuMEZFe9-00DVAda9baa-5VEPlMA4SIZDJNzQ8jUlA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:49:08 GMT
etag: "d0676f63738484298a78b7abf7e4934c3d256065"
content-type: image/jpeg
age: 84742
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 00:11:32 GMT
age: 76198
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0530376e431b6563796e4abb0db0bc4e
6921f4bd83a806e1ea8247854ad4c045fa7ee298
d6371c81d5494d5e50fd5cc1cfe1ce28213dfa70ea5a94df82c9f4b3e6430a53
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10490
x-amzn-requestid: 0525e5c4-485e-47eb-ab95-1136e4d5c29a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUnTEztoAMFzMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260161-54b47454475ff6ee4d880534;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:41 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: AdbJgoCBGJGvjP53lBj3_GWyuRF8O_fgNTPPEjUmFmyRxMQl2pgTzw==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:54:29 GMT
age: 84421
etag: "6921f4bd83a806e1ea8247854ad4c045fa7ee298"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a5ac29d7d71ef6c0cc7547974c8c4f7b
29108a8370757ef63f347d1fd2ae696f5842342c
3371093d6dab54c7c3b612e3774435f0a592bee4e40fbcc2edd55d29d7715c26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 21:21:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.74.106200 OK 1.9 kB URL HTTP/2 fonts.googleapis.com/css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap
IP 142.250.74.106:0
Hash 33787c740112b6a32fc29745dfa470d9
ecd0d542f90e7eb86e02047b4e3819a3a021e0d4
e1a6803e3141bba91b6178dd00c17d7dfc57dd8af8583d93971f5d1c65788e8e
GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,400;0,500;0,700;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 31 Mar 2023 21:21:30 GMT
date: Fri, 31 Mar 2023 21:21:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 43e4b8497cca297d1cf9f38947a57394
a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453
04b4546ee4d4ddaf2b660141b9d72496fd7baf446019e015708a01b045a68878
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 21:21:30 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 30 Mar 2023 03:03:01 GMT
Expires: Thu, 06 Apr 2023 03:03:00 GMT
Etag: "a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453"
Cache-Control: max-age=451889,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0ba4779f9fb4ed-OSL
v3.traincdn.com/_nuxt/desktop/default/css/fbe36a68.css
8.248.224.22200 OK 10 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/fbe36a68.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 100f556741543ab9d3c8ac59f00280fd
27c36e941375aeb314640c76428168796d715bdb
5ea8328ff66997a970399264f669be1972450b35e942c9f926a6e5d1c0d57cfa
GET /_nuxt/desktop/default/css/fbe36a68.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: text/css
content-length: 10168
cache-control: max-age=86400
content-encoding: gzip
etag: "6426cc24-27b8"
expires: Sat, 01 Apr 2023 12:41:36 GMT
last-modified: Fri, 31 Mar 2023 12:03:48 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 31200
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/ef92b463.css
8.248.224.22200 OK 2.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/ef92b463.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (15075), with no line terminators
Hash 512cdadffc6ebcdc58dac66832b5d73e
d8d561f248e4d8bd9de9299eec272e3899e20547
95d384ad3b5ebadeda81b077ac9fd4240e4020f7ffddf501334c4a49112d23c7
GET /_nuxt/desktop/default/css/ef92b463.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: text/css
content-length: 2438
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-986"
expires: Sat, 01 Apr 2023 11:01:17 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37226
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/e297d825-eaeb636b.modern.js
8.248.224.22200 OK 6.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/e297d825-eaeb636b.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (25831), with no line terminators
Hash 79544256484d6d04914bf1a5f84698cf
efb5d753fbdf1878f1a89c994ff1f6336d269757
38d4ad9d30ed878cfb8c7ca7802c4cd8947c96961e0e4292dadcf02f8335d7a0
GET /_nuxt/desktop/default/vendors/Footer/Layout.Information/Layout.Office/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Pag/e297d825-eaeb636b.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 6566
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-19a6"
expires: Sat, 01 Apr 2023 14:33:19 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-140a211d.modern.js
8.248.224.22200 OK 8.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main-140a211d.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (29441), with no line terminators
Hash 87def83901637be2e533858d292692b8
1c2d28ec0bfc4fc5206c62992226acc729c4e2f9
b3e4497d331da5d24e51325d85d57c6bfd9ced39393bb5a847905af1bcf4ff90
GET /_nuxt/desktop/default/vendors/Page.Betting.Main-140a211d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 8165
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-1fe5"
expires: Sat, 01 Apr 2023 14:33:27 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.ChampResults/Page.Betting.Main-1f3eaaa2.modern.js
8.248.224.22200 OK 5.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.ChampResults/Page.Betting.Main-1f3eaaa2.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (19020), with no line terminators
Hash bea4a37fc5364a8d1693797febcbf90f
fd1d15797d25f99336af210b9cc50be2468c4fec
496e7641af662d25ea1ef9647f90bc8745c11f9cd6709118cf34e2074332fc4e
GET /_nuxt/desktop/default/vendors/Page.Betting.ChampResults/Page.Betting.Main-1f3eaaa2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 5913
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-1719"
expires: Sat, 01 Apr 2023 14:33:27 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Games.Game/aa6f24fc-bf94e785.modern.js
8.248.224.22200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Games.Game/aa6f24fc-bf94e785.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (8198), with no line terminators
Hash c367f64433e58b8eb940e14756e4354a
ff8260bccad0899f4b1deb6dc96b585a9be3bbce
eaa41901d9adb909c115bd485d4e5e9871897a6060aefe96cc784a39aa46190b
GET /_nuxt/desktop/default/Layout.Information/Page.Betting.Main/Page.Bonus/Page.Cyber.Calendar/Page.DesktopApps/Page.Games.Game/aa6f24fc-bf94e785.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 2476
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-9ac"
expires: Sat, 01 Apr 2023 14:33:19 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24504
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/699bdf44.css
8.248.224.22200 OK 2.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/699bdf44.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (15871), with no line terminators
Hash c7660404eb11a24384700e4f4342f619
72e485f16f77bb33a09ab51ce8e850093c2a86a0
244c090598df0b290cba7eee78df291c37af18e169f75137730b7af53a04502c
GET /_nuxt/desktop/default/css/699bdf44.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: text/css
content-length: 2023
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-7e7"
expires: Sat, 01 Apr 2023 11:01:21 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37217
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/b5a76b78.css
8.248.224.22200 OK 9.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b5a76b78.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d6b62d5a98d9ba8c4a1811782b2084b5
91e0632f2e0b90aa2ab6e113cac02cdef5597973
45f2ba15eac2c5afd413aec7d8ddb97eae94aa35c87a9bb522ddf75991487550
GET /_nuxt/desktop/default/css/b5a76b78.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: text/css
content-length: 9919
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-26bf"
expires: Sat, 01 Apr 2023 14:33:35 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-e16faf10.modern.js
8.248.224.22200 OK 94 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-e16faf10.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (65402), with no line terminators
Hash 82c98be189b455f42e4c800aa656e70c
ca83eebda0e766825d14a4c8c0344bc26e4d5adc
9fa4af3091de31a396927ced263475d8368e6b1e13d7d7b5f4653ce8b8103265
GET /_nuxt/desktop/default/Page.Betting.Main-e16faf10.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 93848
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-16e98"
expires: Sat, 01 Apr 2023 14:33:27 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x11005705.top/?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder
178.253.15.21302 Found 105 kB URL HTTP/2 lite-1x11005705.top/?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder
IP 178.253.15.21:0
File type gzip compressed data, from Unix\012- data
Size 105 kB (105239 bytes)
Hash bd861b1b4d1c728d5f92f92b8c57abe9
93653b21c7337a249613fc9d847f46b467292140
87e84769ce0a58bc7bc1c0d6534bd3e60405726465f17783f00208e75e1ed926
GET /?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 31 Mar 2023 21:21:29 GMT
location: /en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
reason-v3: empty_lang
server-timing: total;dur=48;desc="Nuxt Server Time", dt_285;dur=280
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: platform_type=desktop; Path=/; Expires=Mon, 03 Apr 2023 21:21:28 GMT
auid=sv0PFWQnTtkXZFGpA0tAAg==; path=/; secure; httponly; samesite=lax
X-Firefox-Spdy: h2
v3.traincdn.com/version.json
8.248.224.22200 OK 44 B URL HTTP/2 v3.traincdn.com/version.json
IP 8.248.224.22:0
Hash 40ea6db2346d1942842ee6087de6a582
551f208313c05e7b869a979bd4fc0a04b2f9864d
5a60a732f8ecc442f5e66649a30102eb8b20497beedb75bd67ac499475e5651c
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/json
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "6426e673-2c"
expires: Fri, 31 Mar 2023 21:22:26 GMT
last-modified: Fri, 31 Mar 2023 13:56:03 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 5
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/runtime-c6b3f975.modern.js
8.248.224.22200 OK 13 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/runtime-c6b3f975.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (40855), with no line terminators
Hash 3e6a170f2fd19c0422c6e269b6fdddfb
6dd86ac1ad55b74a49f5b4ed1811a2f54a5d04a9
5c3befec6832c1277a4cb68b22bc3f17530b9828472117aef28f89d515531b72
GET /_nuxt/desktop/default/runtime-c6b3f975.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 13000
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-32c8"
expires: Sat, 01 Apr 2023 14:33:18 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24507
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 43e4b8497cca297d1cf9f38947a57394
a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453
04b4546ee4d4ddaf2b660141b9d72496fd7baf446019e015708a01b045a68878
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 21:21:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 30 Mar 2023 03:03:01 GMT
Expires: Thu, 06 Apr 2023 03:03:00 GMT
Etag: "a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453"
Cache-Control: max-age=451889,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0ba4779e17b52d-OSL
lite-1x11005705.top/genfiles/cms/pg/285/css/value/e97047a9ffdffb881eeb127f8795e2d5.css
178.253.15.21200 OK 5.5 kB URL HTTP/2 lite-1x11005705.top/genfiles/cms/pg/285/css/value/e97047a9ffdffb881eeb127f8795e2d5.css
IP 178.253.15.21:0
File type ASCII text, with very long lines (27852), with no line terminators
Hash cee6c6a1ee58568207ba74cac80e37f3
8875dee99550a3ef39f0f1e47012dde6256f1894
337433f6bba2bcb3a4f6914cbee8b3a1da316f233c2b180d3f415967f94f32cd
GET /genfiles/cms/pg/285/css/value/e97047a9ffdffb881eeb127f8795e2d5.css HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:30 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 31 Mar 2023 06:27:47 GMT
x-rgw-object-type: Normal
etag: W/"18413267dcff5099432539ee4d69413b"
content-encoding: br
expires: Fri, 31 Mar 2023 22:21:30 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 43e4b8497cca297d1cf9f38947a57394
a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453
04b4546ee4d4ddaf2b660141b9d72496fd7baf446019e015708a01b045a68878
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 21:21:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 30 Mar 2023 03:03:01 GMT
Expires: Thu, 06 Apr 2023 03:03:00 GMT
Etag: "a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453"
Cache-Control: max-age=451889,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0ba4779f54b4f3-OSL
v3.traincdn.com/_nuxt/desktop/default/css/0768bdda.css
8.248.224.22200 OK 46 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/0768bdda.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash feac177ae1da5de88556bfbef6b48ae5
bcf6bed0765796d9746b29d25bf40f51705ad673
ff9a5735999ef36667c142de4e264e23314d4e1edb43b1aeae29831c1b0ea498
GET /_nuxt/desktop/default/css/0768bdda.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: text/css
content-length: 46046
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-b3de"
expires: Sat, 01 Apr 2023 14:33:14 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24505
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/app-421e45f9.modern.js
8.248.224.22200 OK 189 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/app-421e45f9.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 189 kB (188726 bytes)
Hash 25385ec6ca01387cda807604547ffd73
25b5bc573572cc802f395fc3c92331f76c229c71
55f54a3e3296ad8c31378654dfd8f6c9593f3f5ba47e0039a52b98960d3929a0
GET /_nuxt/desktop/default/app-421e45f9.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 188726
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-2e136"
expires: Sat, 01 Apr 2023 14:33:12 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24507
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 43e4b8497cca297d1cf9f38947a57394
a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453
04b4546ee4d4ddaf2b660141b9d72496fd7baf446019e015708a01b045a68878
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 21:21:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 30 Mar 2023 03:03:01 GMT
Expires: Thu, 06 Apr 2023 03:03:00 GMT
Etag: "a7f2a2c08e3e8d50ac8c2e44a8378b80628a5453"
Cache-Control: max-age=451889,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0ba4779bf8b50b-OSL
v3.traincdn.com/_nuxt/desktop/default/commons/app-b2290dca.modern.js
8.248.224.22200 OK 86 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/app-b2290dca.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (65476)
Hash a156ffe2d569c26dd45c01f4fc26ab16
e8b58e40e2ea2c8d8ef2eb4e7014e8d7a6f8d495
a4f39ac987d9a4809e91d7a9fa13705b4f29f45991a918a587deb5c659fbd11f
GET /_nuxt/desktop/default/commons/app-b2290dca.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 86124
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-1506c"
expires: Sat, 01 Apr 2023 14:33:12 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24507
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/app-8add4389.modern.js
8.248.224.22200 OK 191 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/app-8add4389.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (65430)
Size 191 kB (191077 bytes)
Hash b4a68b2c17a78331b52e035b5f58fec1
ecf14a75a8680eb9b77ab58e1718630577df421f
b657690d3f4b9e1a870912eb320e267afdb7c4d7fa72ff7f0f4e539537ad225e
GET /_nuxt/desktop/default/vendors/app-8add4389.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 191077
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-2ea65"
expires: Sat, 01 Apr 2023 14:33:19 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24507
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ff36ec2657d8ee3b0f78d0a8b2bc9c96
7ce770b27771a2417292364a24af2d65bb9085a5
7c6a6029f3d8b5c88c0d52cfa1d8a6d79fe57080cbd88951ce40456d1ae214e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 21:21:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ff36ec2657d8ee3b0f78d0a8b2bc9c96
7ce770b27771a2417292364a24af2d65bb9085a5
7c6a6029f3d8b5c88c0d52cfa1d8a6d79fe57080cbd88951ce40456d1ae214e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 21:21:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ff36ec2657d8ee3b0f78d0a8b2bc9c96
7ce770b27771a2417292364a24af2d65bb9085a5
7c6a6029f3d8b5c88c0d52cfa1d8a6d79fe57080cbd88951ce40456d1ae214e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 21:21:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Mar 2023 10:31:23 GMT
expires: Wed, 27 Mar 2024 10:31:23 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 298208
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Mar 2023 10:31:10 GMT
expires: Wed, 27 Mar 2024 10:31:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 298221
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Mar 2023 10:31:17 GMT
expires: Wed, 27 Mar 2024 10:31:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 298214
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ff36ec2657d8ee3b0f78d0a8b2bc9c96
7ce770b27771a2417292364a24af2d65bb9085a5
7c6a6029f3d8b5c88c0d52cfa1d8a6d79fe57080cbd88951ce40456d1ae214e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 21:21:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lite-1x11005705.top/genfiles/cms/pg/285/images/7ff608075eeeae857d6d0d4fc1d19854.png
178.253.15.21200 OK 653 B URL HTTP/2 lite-1x11005705.top/genfiles/cms/pg/285/images/7ff608075eeeae857d6d0d4fc1d19854.png
IP 178.253.15.21:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/pg/285/images/7ff608075eeeae857d6d0d4fc1d19854.png HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: image/png
content-length: 653
last-modified: Thu, 09 Mar 2023 12:41:36 GMT
x-rgw-object-type: Normal
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Sat, 01 Apr 2023 21:20:55 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-4b27e9a4.modern.js
178.253.15.21200 OK 22 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/vendors/plugins.v-tooltip-4b27e9a4.modern.js
IP 178.253.15.21:0
File type ASCII text, with very long lines (65476)
Hash 1ffede58c96d1ffec1b73b653cf39d95
3b6308009fc6b6ea432ffed3598cb6abc846a9f7
32647ba714d8c608ba76d1997cfc2acf16a704804f9f72e35985a8d019c77567
GET /_nuxt/desktop/default/vendors/plugins.v-tooltip-4b27e9a4.modern.js HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 21861
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-5565"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/css/ef92b463.css
178.253.15.21200 OK 2.4 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/css/ef92b463.css
IP 178.253.15.21:0
File type ASCII text, with very long lines (15075), with no line terminators
Hash 63430d884542b0e1bdf21b951ed6bbc6
7234cc2c73040b16e0b8432a532426c09a505273
ee8708fcd0e05b92647d07af4696046da2f4616de5d93bea7007d525d7233631
GET /_nuxt/desktop/default/css/ef92b463.css HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: text/css
content-length: 2438
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-986"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/css/699bdf44.css
178.253.15.21200 OK 2.0 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/css/699bdf44.css
IP 178.253.15.21:0
File type ASCII text, with very long lines (15871), with no line terminators
Hash 47e4282a6444b1097c901c2e4f4d67c0
c8e4ebfa828fa221ec3a91ccd92a17dba03ad055
d341ea04b69b87f69f5e76adef1a813badb414fd226eabb5f4640d8d4f5760b3
GET /_nuxt/desktop/default/css/699bdf44.css HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: text/css
content-length: 2023
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-7e7"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/css/b5a76b78.css
178.253.15.21200 OK 9.9 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/css/b5a76b78.css
IP 178.253.15.21:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d6b62d5a98d9ba8c4a1811782b2084b5
91e0632f2e0b90aa2ab6e113cac02cdef5597973
45f2ba15eac2c5afd413aec7d8ddb97eae94aa35c87a9bb522ddf75991487550
GET /_nuxt/desktop/default/css/b5a76b78.css HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: text/css
content-length: 9919
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-26bf"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/vendors/plugins.vue-notification-6ff53827.modern.js
178.253.15.21200 OK 4.6 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/vendors/plugins.vue-notification-6ff53827.modern.js
IP 178.253.15.21:0
File type ASCII text, with very long lines (12527), with no line terminators
Hash f31dd656e4d320c1880d614ebd2e67a2
5d4bae1afd1bc3727ac16f957e96a3e63506f878
fd43698af37cf140b380932eef77fe19274d42410fb3d0cae63e59c498134bd7
GET /_nuxt/desktop/default/vendors/plugins.vue-notification-6ff53827.modern.js HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 4563
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-11d3"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/external-api/config/deprecated
178.253.15.21200 OK 4.6 kB URL HTTP/2 lite-1x11005705.top/web-api/external-api/config/deprecated
IP 178.253.15.21:0
File type JSON data\012- , ASCII text, with very long lines (22989), with no line terminators
Hash 7a068e61148d1b8a570d9b35d8e441d7
24f77a2e9ef897fc8566fa14fc8de5870cc35c4f
219754ec3e16632a0b31299386cffba685906683ba31e60e42cefcaeaedcfc74
GET /web-api/external-api/config/deprecated HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=89, dt_285;dur=91
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/plugins.vue-js-modal-a6777623.modern.js
178.253.15.21200 OK 7.5 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/plugins.vue-js-modal-a6777623.modern.js
IP 178.253.15.21:0
File type HTML document, ASCII text, with very long lines (25593), with no line terminators
Hash 1f9d1c8f83a87fbe9aa53639d3b11025
bd5c325570949e6e502ba690991dc7f24a3f60bc
b0eb65399f7ec0122f4059378faed4d8bafb76e4f14c10deebfa58e848de5cdb
GET /_nuxt/desktop/default/plugins.vue-js-modal-a6777623.modern.js HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 7505
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-1d51"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:31 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/desktop/default/date-fns-locale-21-88ea8540.modern.js
178.253.15.21200 OK 2.1 kB URL HTTP/2 lite-1x11005705.top/_nuxt/desktop/default/date-fns-locale-21-88ea8540.modern.js
IP 178.253.15.21:0
File type ASCII text, with very long lines (6960), with no line terminators
Hash 2f98ac9782a52d15f56fa114dcfe24e2
296397c1b1f553d2421f573eb212a4367248bccb
94cc9d83e7b2ce8aafcebfcc1e33392165159e3fe397640bbcc26041d7f75a4b
GET /_nuxt/desktop/default/date-fns-locale-21-88ea8540.modern.js HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 2124
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
vary: Accept-Encoding
etag: "6426e5bb-84c"
content-encoding: gzip
expires: Fri, 31 Mar 2023 22:21:32 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/api/web/v1/config/actualDomain
178.253.15.21200 OK 48 kB URL HTTP/2 lite-1x11005705.top/web-api/api/web/v1/config/actualDomain
IP 178.253.15.21:0
Hash d821da7eef3c0c59bc7d78e8cca3bde2
d602d35917d8c4f55a1c934c021901ad763e8873
3759387978e8e58ff15d7236f6faec0c56d41940edaa2bad745380f395cc34cb
GET /web-api/api/web/v1/config/actualDomain HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: application/vnd.api+json
cache-control: no-cache, private
server-timing: p;dur=35, dt_285;dur=39
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/version.json?timestamp=1680297691203
178.253.15.21200 OK 44 B URL HTTP/2 lite-1x11005705.top/version.json?timestamp=1680297691203
IP 178.253.15.21:0
Hash 40ea6db2346d1942842ee6087de6a582
551f208313c05e7b869a979bd4fc0a04b2f9864d
5a60a732f8ecc442f5e66649a30102eb8b20497beedb75bd67ac499475e5651c
GET /version.json?timestamp=1680297691203 HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: application/json
content-length: 44
last-modified: Fri, 31 Mar 2023 13:56:03 GMT
vary: Accept-Encoding
etag: "6426e673-2c"
content-encoding: gzip
expires: Fri, 31 Mar 2023 21:22:32 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-178408567-1
142.250.74.40200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178408567-1
IP 142.250.74.40:0
File type ASCII text, with very long lines (2206)
Hash a9d033e3c647d3b2aa5ff87fa43696ff
757187b3dde2b8644288a605bc68571fde742337
c523646c3ef91fa20a319a39346396873f9c46db4c08a295fd36c53e9056e501
GET /gtag/js?id=UA-178408567-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 31 Mar 2023 21:21:32 GMT
expires: Fri, 31 Mar 2023 21:21:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46118
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/Desktop/Default/svg-sprites/sports-20101.svg
178.253.15.21200 OK 142 kB URL HTTP/2 lite-1x11005705.top/_nuxt/Desktop/Default/svg-sprites/sports-20101.svg
IP 178.253.15.21:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size 142 kB (142449 bytes)
Hash c50c300e98e902d12e8bbe4aa0f76fcc
ce19127d10890dd7fe134c2876513bc3ed0e4416
77c7f721c335fc75435ddb2efb88c3221619886dcdbbb983c1eae72353858408
GET /_nuxt/Desktop/Default/svg-sprites/sports-20101.svg HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
etag: W/"6426e5bb-58a14"
expires: Sat, 01 Apr 2023 21:20:55 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
radar.cedexis.com/1593429750/radar.js
45.54.49.5200 OK 19 kB URL HTTP/1.1 radar.cedexis.com/1593429750/radar.js
IP 45.54.49.5:0
ASN #63911 NetActuate, Inc
File type ASCII text, with very long lines (1782)
Hash 2acb3c3179b2646943d1a8f5166743cc
56aa31a4027fec3dd8cc78114c6b0f3604716c14
0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
GET /1593429750/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 21:21:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:33 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0d9-af5c"
Expires: Fri, 14 Apr 2023 21:21:32 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
v3.traincdn.com/_nuxt/desktop/default/DC-5fcc025d.modern.js
8.248.224.22200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DC-5fcc025d.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (2509), with no line terminators
Hash 92a7be269db1d8f4b0f8652f9a096104
b26b309ec40200c49f4b2bbd082f9d469c5caab4
05ad7abbae63b44960b25d472fd1941d047cefba70745f0323b5d90c24932391
GET /_nuxt/desktop/default/DC-5fcc025d.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 1086
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-43e"
expires: Sat, 01 Apr 2023 14:33:37 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24504
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.22-0d445915.modern.js
8.248.224.22200 OK 1.3 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.22-0d445915.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (3429), with no line terminators
Hash 913033e67956139e6bf6cb3fff8e9e2c
8c05f11054e0ca9a0b7f2719cabb4990fa00fe6c
40ff6dddd48a5de19a736f11850ef48ff1378b80e3ac5b4135d99dc5a7cc9f66
GET /_nuxt/desktop/default/ioc.dependencies.22-0d445915.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 1257
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-4e9"
expires: Sat, 01 Apr 2023 14:33:31 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24501
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/9e32e0425497b71c0a4b683826276933.webp
8.248.224.22200 OK 8.2 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/9e32e0425497b71c0a4b683826276933.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ddb7286989e1ec0098ab2a4e03f4650
db1a4ada6d48f8816302a3eac35c787072c3f176
673de24e43d7a08c028c3f6897a4c1f75d48cccad8844a593e984d16a49b0ebb
GET /sfiles/logo_teams/9e32e0425497b71c0a4b683826276933.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 8182
cache-control: public, max-age=86400
etag: "0ddb7286989e1ec0098ab2a4e03f4650"
expires: Sat, 01 Apr 2023 11:12:07 GMT
last-modified: Tue, 17 Jan 2023 13:11:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37208
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x11005705.top/_nuxt/Desktop/Default/svg-sprites/country-20101.svg
178.253.15.21200 OK 57 kB URL HTTP/2 lite-1x11005705.top/_nuxt/Desktop/Default/svg-sprites/country-20101.svg
IP 178.253.15.21:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 6c9133ddf331e4f10b2423390bb66023
477df7460c095a131ed7497a45261a4c218b5c12
d9642d1993465023bb41e2a83b5fb828c983b1c923e71affde8350b9a76cda7e
GET /_nuxt/Desktop/Default/svg-sprites/country-20101.svg HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
etag: W/"6426e5bb-26288"
expires: Sat, 01 Apr 2023 21:20:55 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/27e1f4a21088d8e46e6e88a6d0258dcd.webp
8.248.224.22200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/27e1f4a21088d8e46e6e88a6d0258dcd.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8d7ce3174b7e2f04efce38b4ce201991
6ad10a279d8c3dc4ece610b6f4ab677473f97bbf
cd1b09792e63958a28499cb5407488072efa3f61d06d308baf0d3cb0853ff3b4
GET /sfiles/logo_teams/27e1f4a21088d8e46e6e88a6d0258dcd.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 10774
cache-control: public, max-age=86400
etag: "8d7ce3174b7e2f04efce38b4ce201991"
expires: Sat, 01 Apr 2023 11:12:09 GMT
last-modified: Tue, 17 Jan 2023 13:23:11 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 36564
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/ed374051d412c0e7dac7efab6ff5de91.webp
8.248.224.22200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/ed374051d412c0e7dac7efab6ff5de91.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash ffc6f090dbab94402e0a7f833ba0195b
033a3e09d578c3e8f0cedd5b444194b9960f9cd4
295426bb60ace06ff5116572c5d45bd625d5d74d9aa82a885b55732056ac0def
GET /sfiles/logo_teams/ed374051d412c0e7dac7efab6ff5de91.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 10506
cache-control: public, max-age=86400
etag: "ffc6f090dbab94402e0a7f833ba0195b"
expires: Sat, 01 Apr 2023 11:12:09 GMT
last-modified: Tue, 17 Jan 2023 11:50:18 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 36564
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/6e9b6ebaadd9198db6b032ee27342519.webp
8.248.224.22200 OK 4.8 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/6e9b6ebaadd9198db6b032ee27342519.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c45655efe381e296fba83d05a752765d
ed58995236a3eba8523cacdb564448c9e32a3d24
18ccbc150b0430e29ede7eb28ac731e76ca3edcc99d0d9a02180bec6b640d0c7
GET /sfiles/logo_teams/6e9b6ebaadd9198db6b032ee27342519.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 4762
cache-control: public, max-age=86400
etag: "c45655efe381e296fba83d05a752765d"
expires: Sat, 01 Apr 2023 19:13:20 GMT
last-modified: Tue, 17 Jan 2023 11:07:48 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 25232
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4acbafcca8e70bd3f9195b16590d821d.webp
8.248.224.22200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/4acbafcca8e70bd3f9195b16590d821d.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d181bc85ab3689d46c25c8d05a831a84
28c687f65759000575f60618bfe0081148a0ba97
5380aa30d2150c3ff115c3fea6f450e6bda1a835a876a05bc0d2487fcafeb6b1
GET /sfiles/logo_teams/4acbafcca8e70bd3f9195b16590d821d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 10866
cache-control: public, max-age=86400
etag: "d181bc85ab3689d46c25c8d05a831a84"
expires: Sat, 01 Apr 2023 19:13:20 GMT
last-modified: Tue, 17 Jan 2023 12:55:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 25232
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/06f0287673fce189fa84d958fd19679c.webp
8.248.224.22200 OK 10 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/06f0287673fce189fa84d958fd19679c.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 102ba576c489d85969dfbc1dace8f59e
708094d8c5b6de7aa21936dde98d316689da9c53
45e806657752e7f42f27127775afc01e86e0eaab5d68d84b759a2a61374dc2e6
GET /sfiles/logo_teams/06f0287673fce189fa84d958fd19679c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 10212
cache-control: public, max-age=86400
etag: "102ba576c489d85969dfbc1dace8f59e"
expires: Sat, 01 Apr 2023 17:02:52 GMT
last-modified: Wed, 18 Jan 2023 07:58:31 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 25232
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/c7f6c26412a0b687e6b33b67ed60f81f.webp
8.248.224.22200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/c7f6c26412a0b687e6b33b67ed60f81f.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash dde131f489fa49e29ede0cb1b97c8ac8
430c5271e7e1cd1ebb79c7ac6e0261fd51d87106
1441a9624cecc8388ac815f1507e818cd75b57191283b52d80675d7932f3c17e
GET /sfiles/logo_teams/c7f6c26412a0b687e6b33b67ed60f81f.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 11152
cache-control: public, max-age=86400
etag: "dde131f489fa49e29ede0cb1b97c8ac8"
expires: Sat, 01 Apr 2023 17:02:52 GMT
last-modified: Tue, 17 Jan 2023 13:40:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 25232
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1b5ab3310e31a2f1396e11360f9bed55.webp
8.248.224.22200 OK 4.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/1b5ab3310e31a2f1396e11360f9bed55.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1e31cd032565282b2fc853bbec7995a3
5903f24625a17686e0adda780154f609731a69a1
85c57071937fc9b6718f47c0b6d154c56bbb9cb0f760e2056d5fdcf735163a0f
GET /sfiles/logo_teams/1b5ab3310e31a2f1396e11360f9bed55.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 4884
cache-control: public, max-age=86400
etag: "1e31cd032565282b2fc853bbec7995a3"
expires: Sat, 01 Apr 2023 18:53:26 GMT
last-modified: Thu, 19 Jan 2023 15:17:29 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 13689
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8b9c754708eded2991caaf99ec9fecb6.webp
8.248.224.22200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8b9c754708eded2991caaf99ec9fecb6.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 908db7262dbd2291e11bf09c01cfc9e2
a901d255d63a95d3d52de05ecac98ec20cd902ec
ab9ae5b9f443b62bd47f226e4fd84cfa567ec81c15ee234b526005b0fb197adc
GET /sfiles/logo_teams/8b9c754708eded2991caaf99ec9fecb6.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 5374
cache-control: public, max-age=86400
etag: "908db7262dbd2291e11bf09c01cfc9e2"
expires: Sat, 01 Apr 2023 18:57:02 GMT
last-modified: Thu, 19 Jan 2023 17:13:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 10242
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/dfe492721667bd5ed8ea53aeded25eb4.webp
8.248.224.22200 OK 16 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/dfe492721667bd5ed8ea53aeded25eb4.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56f835e86bda40d6bb2816373126d1a5
28bf5b86ced7a780a22d9a925d9abe09125313e6
61c8aad651065008cf0bc24f0b58d6936ee19e73c8534013d465ef264733b03d
GET /sfiles/logo_teams/dfe492721667bd5ed8ea53aeded25eb4.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 16254
cache-control: public, max-age=86400
etag: "56f835e86bda40d6bb2816373126d1a5"
expires: Sat, 01 Apr 2023 16:15:46 GMT
last-modified: Sat, 14 Jan 2023 13:18:54 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 32002
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/07a85e9e2b930ce4926dd92bf1ebcb6b.webp
8.248.224.22200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/07a85e9e2b930ce4926dd92bf1ebcb6b.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5c2c1229859cf047c8f87192083c7427
0ab89c55f5c490075b62cb5a9c1982241d089010
0dc0603e00b75757e4423c0f192fb33c9f5bddc36f8f35c0978aa349c9c9d2cb
GET /sfiles/logo_teams/07a85e9e2b930ce4926dd92bf1ebcb6b.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 12142
cache-control: public, max-age=86400
etag: "5c2c1229859cf047c8f87192083c7427"
expires: Sat, 01 Apr 2023 14:36:19 GMT
last-modified: Sat, 14 Jan 2023 12:54:07 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 32003
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1f2dd499ea28e1168dbd4a73899ecec3.webp
8.248.224.22200 OK 6.2 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/1f2dd499ea28e1168dbd4a73899ecec3.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 90aa340b0c8afd94aa3fd5f44d59c628
899dc0d51541efc7ef6e4d3c2306e92beb4403d2
acf3dc7a202aeae475c034a9b15c8a0193a51bf892cfb45d3b2c85a9e343eda8
GET /sfiles/logo_teams/1f2dd499ea28e1168dbd4a73899ecec3.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 6164
cache-control: public, max-age=86400
etag: "90aa340b0c8afd94aa3fd5f44d59c628"
expires: Sat, 01 Apr 2023 15:50:43 GMT
last-modified: Fri, 03 Mar 2023 20:23:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 29863
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/107445.webp
8.248.224.22200 OK 4.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/107445.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b106c6fd171a4320e13b1872f7af04c2
fd48fb581a3f3e598662c4a422b7aa30b7ad2a10
1b805a417f682d1eb9722e7681de0a6b369aa36b591c4a7c33ff550277f1118f
GET /sfiles/logo_teams/107445.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 4426
cache-control: public, max-age=86400
etag: "b106c6fd171a4320e13b1872f7af04c2"
expires: Sat, 01 Apr 2023 12:59:31 GMT
last-modified: Wed, 01 Feb 2023 08:08:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34993
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/296119f29868f3c41fe0a7a4adeb340e.webp
8.248.224.22200 OK 1.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/296119f29868f3c41fe0a7a4adeb340e.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9451e2a1992227201ae50f32685b7f34
312c11ad22a9236551a2ace8da49651a7980b0c0
dd0e8d19ddc7b06d38ea5165082dd7ba59d9bde2adffe9cc3188dbbd8bd61d13
GET /sfiles/logo_teams/296119f29868f3c41fe0a7a4adeb340e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 1516
cache-control: public, max-age=86400
etag: "9451e2a1992227201ae50f32685b7f34"
expires: Sat, 01 Apr 2023 19:31:05 GMT
last-modified: Tue, 24 Jan 2023 08:23:23 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 19826
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/31257.webp
8.248.224.22200 OK 12 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/31257.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 75e6a58e815852d7fa11ba91553f98e0
d3679687565da9f9e4615b18c7ae2078a454913a
a25645bff6d50fa6cf7c7c5e1267ddc6f46717934d56e9d666a2d0a4e103c3b3
GET /sfiles/logo_teams/31257.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 11610
cache-control: public, max-age=86400
etag: "75e6a58e815852d7fa11ba91553f98e0"
expires: Sat, 01 Apr 2023 19:15:50 GMT
last-modified: Thu, 19 Jan 2023 13:35:33 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34991
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/36183.webp
8.248.224.22200 OK 8.8 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/36183.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5e0bf24b1b81ba5366d4ec3ea2f43d03
3f0fa171d45fe64f024c0e223f597a206443c26e
8ddb4d0660d27da56aa1b306c7f37488a9798aaaf4a7ee640c68b19735aa05a9
GET /sfiles/logo_teams/36183.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 8822
cache-control: public, max-age=86400
etag: "5e0bf24b1b81ba5366d4ec3ea2f43d03"
expires: Sat, 01 Apr 2023 19:15:50 GMT
last-modified: Thu, 19 Jan 2023 12:16:11 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34991
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d779bda3071f7d211b9c5ac53cb0538c.webp
8.248.224.22200 OK 9.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d779bda3071f7d211b9c5ac53cb0538c.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash ad8c5cd539f9e5959379ef9ac225e60e
9ae7650a81d6ee0cc6a8cc17c00bb240fa9d4037
d237590c3201ca18168597a2d704508576e4cae297f88149e9955e5aee2c7edc
GET /sfiles/logo_teams/d779bda3071f7d211b9c5ac53cb0538c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 9540
cache-control: public, max-age=86400
etag: "ad8c5cd539f9e5959379ef9ac225e60e"
expires: Sat, 01 Apr 2023 15:51:08 GMT
last-modified: Sat, 28 Jan 2023 11:44:07 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 19825
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/155803.webp
8.248.224.22200 OK 5.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/155803.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4a32db2bb5816e385d0cf5089c0e9a67
0b6d2ea19e463398574acb9823e8cb099513dcd8
bb01318ae972ed790b3a73edd1ae4242565f4d2f2d782e3a5a3178ed687a4356
GET /sfiles/logo_teams/155803.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 4980
cache-control: public, max-age=86400
etag: "4a32db2bb5816e385d0cf5089c0e9a67"
expires: Sat, 01 Apr 2023 13:52:41 GMT
last-modified: Wed, 01 Feb 2023 11:00:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34905
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4398.webp
8.248.224.22200 OK 3.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/4398.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash efc91c9345cbbea8c59bb5c8c4959cbb
3183a700ff241e01cfbbc419e41fcb86b467fdc8
da30de236b8abf53d453ce9eeed842d79a68d40a32c82f7ad4b1c7bcd80aab70
GET /sfiles/logo_teams/4398.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 3588
cache-control: public, max-age=86400
etag: "efc91c9345cbbea8c59bb5c8c4959cbb"
expires: Sat, 01 Apr 2023 12:59:31 GMT
last-modified: Wed, 01 Feb 2023 11:06:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34993
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/eacd1c3644bb7bb871b1972627de2908.webp
8.248.224.22200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/eacd1c3644bb7bb871b1972627de2908.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 55c9998965e0aaf3e055cde36ae111be
c08e71f47b56b781d4cd11abb717a04d86d7ad33
9d497ac9e8d1e40c9ff4d6bd6a8d28a219aabe56fd10e6d2fcffbd7f593201fe
GET /sfiles/logo_teams/eacd1c3644bb7bb871b1972627de2908.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 2544
cache-control: public, max-age=86400
etag: "55c9998965e0aaf3e055cde36ae111be"
expires: Sat, 01 Apr 2023 13:52:41 GMT
last-modified: Thu, 26 Jan 2023 07:03:26 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34905
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/4c93f9303c3f7a98b9fb1bdb96ae4367.webp
8.248.224.22200 OK 7.7 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/4c93f9303c3f7a98b9fb1bdb96ae4367.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6428db7e305454bc59fb75f66d1f4fb9
66fe7f8776c0fbe96e271df6582952b792574d52
5f37a02187964b7798e41034cbfbaa8491a1aeef6c67f7bec78ee32b48b6c924
GET /sfiles/logo_teams/4c93f9303c3f7a98b9fb1bdb96ae4367.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 7708
cache-control: public, max-age=86400
etag: "6428db7e305454bc59fb75f66d1f4fb9"
expires: Sat, 01 Apr 2023 13:52:41 GMT
last-modified: Wed, 01 Feb 2023 09:04:16 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 34905
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/8145ead5ff5129c4a470a0de050460fb.webp
8.248.224.22200 OK 5.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/8145ead5ff5129c4a470a0de050460fb.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash ea1fc7cdbd5dcd8a8917a926a6429ad1
938f2ee5a636eeb92cc3df7604a8d0934ed2ca5e
71d5a9989b0b9fd813faecb7a6ff61b965791ce00103d27fae7e88291eb241e9
GET /sfiles/logo_teams/8145ead5ff5129c4a470a0de050460fb.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 5144
cache-control: public, max-age=86400
etag: "ea1fc7cdbd5dcd8a8917a926a6429ad1"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 08:47:28 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/76ef5b0629aa1ad9336b0afca148d0cd.webp
8.248.224.22200 OK 7.6 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/76ef5b0629aa1ad9336b0afca148d0cd.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7763c98eb275d7b6fbb8e8c2f9ee2c24
21c02ec5875f3e6e411edbfa81f7d52abfb7a218
fd93f5485d66a1dbdeecbb41c8aa36cfbb10241d951d0c5cb59265b314581f90
GET /sfiles/logo_teams/76ef5b0629aa1ad9336b0afca148d0cd.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 7554
cache-control: public, max-age=86400
etag: "7763c98eb275d7b6fbb8e8c2f9ee2c24"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 12:03:13 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37208
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/17baaf76137b0b97b6ed89734c3a99a7.webp
8.248.224.22200 OK 6.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/17baaf76137b0b97b6ed89734c3a99a7.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3f4013e780a648173670081f3a23df8c
c7a048cddaf32bc5de07e57c33ba620fe0621bd3
4a752ccaa8088c3279f670d74453abc20483067e06fc94bec7fcfdea329de986
GET /sfiles/logo_teams/17baaf76137b0b97b6ed89734c3a99a7.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 6402
cache-control: public, max-age=86400
etag: "3f4013e780a648173670081f3a23df8c"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 25 Jan 2023 13:14:14 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/003c269202db4b09b9a32f474416bf5d.webp
8.248.224.22200 OK 6.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/003c269202db4b09b9a32f474416bf5d.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8210cc9865a270b49c3828bccccd5b33
95e636986bf9bf37937f6503d5cbbd80a6ba798c
15b782e0e091842e3c70fdb710c8202d266b0a74c47b6100b672bf7c6f85576d
GET /sfiles/logo_teams/003c269202db4b09b9a32f474416bf5d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 6378
cache-control: public, max-age=86400
etag: "8210cc9865a270b49c3828bccccd5b33"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 12:02:55 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/7d185689417db855d668106a6f407247.webp
8.248.224.22200 OK 7.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/7d185689417db855d668106a6f407247.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ecbe88822310b8344378b4f4622863e
a5e082c435fbe27b687c4110493702e690f2c757
909a38e2d64aa940e56a07cfb2520b36b2715a9d2544459c91c988504796f24c
GET /sfiles/logo_teams/7d185689417db855d668106a6f407247.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 7284
cache-control: public, max-age=86400
etag: "0ecbe88822310b8344378b4f4622863e"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 12:03:00 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/1705962ffbc1e568500d02753d414082.webp
8.248.224.22200 OK 8.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/1705962ffbc1e568500d02753d414082.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash dcf155b094ada40b98f0335868668529
eaff588ac933a8a8f72f4c1b4af365fc7eb567c1
234b3a995f85faf008ab2ceb69e65ee468637517b80a6bda02fc5b437db7ce70
GET /sfiles/logo_teams/1705962ffbc1e568500d02753d414082.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 8020
cache-control: public, max-age=86400
etag: "dcf155b094ada40b98f0335868668529"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Tue, 31 Jan 2023 13:28:56 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/606ae6403c591cf5fbb65a9fc9f3ef4c.webp
8.248.224.22200 OK 6.1 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/606ae6403c591cf5fbb65a9fc9f3ef4c.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 559af55c0326f7626c7c1ecac54ebd8c
24f6173e241bd4520fa268e85e07b35fe6af6681
fa488ea4ac7995bbc59a679d11888b6c70672c468e67b926411149358d871da5
GET /sfiles/logo_teams/606ae6403c591cf5fbb65a9fc9f3ef4c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 6066
cache-control: public, max-age=86400
etag: "559af55c0326f7626c7c1ecac54ebd8c"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Thu, 26 Jan 2023 15:46:56 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/92849bc4fb55b0ac7e769482af213f21.webp
8.248.224.22200 OK 7.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/92849bc4fb55b0ac7e769482af213f21.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5ce41547b06c96bd199197299be15e61
fed55d79c2795029a2185fa0e6bad8dfe860649c
70b45417c8350aaec2c87d2107c09230abd2480988f61cbc58b17e09da277321
GET /sfiles/logo_teams/92849bc4fb55b0ac7e769482af213f21.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:33 GMT
content-type: image/webp
content-length: 7928
cache-control: public, max-age=86400
etag: "5ce41547b06c96bd199197299be15e61"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 12:03:06 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37209
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/587d96e7698fb59c18788cafe269d095.webp
8.248.224.22200 OK 8.4 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/587d96e7698fb59c18788cafe269d095.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 88cb26da5af01944da41f8013dc831de
c2b12f88dd8a34563649e30784686fc3d0ede74a
0835019bda7bb795c7c33119cfbd6b8ca57eef2e619d63624f93828fba56d9e1
GET /sfiles/logo_teams/587d96e7698fb59c18788cafe269d095.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 8390
cache-control: public, max-age=86400
etag: "88cb26da5af01944da41f8013dc831de"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 08:22:49 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37210
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/11e4cfbf9b1edee93322d20efb067157.webp
8.248.224.22200 OK 6.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/11e4cfbf9b1edee93322d20efb067157.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 21425c1efec4ac388619755a421096f6
bffdfc2d371484f92662586ab29e46d229236953
a41cc7cbfc9bd7fc386cb9f851c45bbf7f7f8da04d6e0f917ef87b9d256a816e
GET /sfiles/logo_teams/11e4cfbf9b1edee93322d20efb067157.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 6286
cache-control: public, max-age=86400
etag: "21425c1efec4ac388619755a421096f6"
expires: Sat, 01 Apr 2023 11:02:03 GMT
last-modified: Wed, 01 Feb 2023 07:51:21 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37210
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/d6760659f9d1041cfd6f177b9bedec94.webp
8.248.224.22200 OK 5.3 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/d6760659f9d1041cfd6f177b9bedec94.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash fca85ce3dd936b0bf7786107f0c12ebe
3b5cc24b23692cc65ddb5555e319d67e085b83f8
8407d9bf7c4d808855d1f19ab9b1b41aa68a6230b462bafd3d759a9251fac5bb
GET /sfiles/logo_teams/d6760659f9d1041cfd6f177b9bedec94.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 5346
cache-control: public, max-age=86400
etag: "fca85ce3dd936b0bf7786107f0c12ebe"
expires: Sat, 01 Apr 2023 11:02:01 GMT
last-modified: Wed, 01 Feb 2023 13:01:15 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37174
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/2c00163238eb3b254debbc851815b59a.webp
8.248.224.22200 OK 5.0 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/2c00163238eb3b254debbc851815b59a.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4e6fd2141c07d726783a635a9044fcea
41327b91940e0b5bd4c463016cc71abbc6341a90
fce93a4367554787bce7459683493b6e97fbfd31d2a7083d39a649b0cb561728
GET /sfiles/logo_teams/2c00163238eb3b254debbc851815b59a.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 5030
cache-control: public, max-age=86400
etag: "4e6fd2141c07d726783a635a9044fcea"
expires: Sat, 01 Apr 2023 11:02:01 GMT
last-modified: Wed, 01 Feb 2023 12:14:02 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37173
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/defaultlogo.webp
8.248.224.22200 OK 912 B URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/defaultlogo.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1f9fd5849d8f450f793022d336ddc71e
e1db1567aa449ac2caa9935665488947e28c27b9
7e4a6e1ba7c9e5a69c5266c92d6f07d004716a04b08c4c7eb661d817193c0d53
GET /sfiles/logo_teams/defaultlogo.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 912
cache-control: public, max-age=86400
etag: "1f9fd5849d8f450f793022d336ddc71e"
expires: Sat, 01 Apr 2023 11:01:08 GMT
last-modified: Tue, 21 Mar 2023 09:22:37 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37236
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/f5aa0573b873dbf403c1cdfdba4fa0b2.webp
8.248.224.22200 OK 11 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/f5aa0573b873dbf403c1cdfdba4fa0b2.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1e8c0ae8ea55bc24d5d8cdc1c7e199a4
c221f5a6a0269f62a2e0c347fbbad0314a7cf384
598e0e436cd479eb1b2f77a90af95d3c454baf51f1eb021a0655d6b701ed7b0c
GET /sfiles/logo_teams/f5aa0573b873dbf403c1cdfdba4fa0b2.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 10772
cache-control: public, max-age=86400
etag: "1e8c0ae8ea55bc24d5d8cdc1c7e199a4"
expires: Sat, 01 Apr 2023 11:43:50 GMT
last-modified: Tue, 31 Jan 2023 13:14:29 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37214
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/24a303cdc0a24b99485aebc26ff13f55.webp
8.248.224.22200 OK 5.5 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/24a303cdc0a24b99485aebc26ff13f55.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 706f68633c47c63be9d8e9d58bf0b4c7
07fa91f68596c70cab70863371fe8a1081cc3915
f03e6a48800c2a138afefab2133386ccb3a8e2be5dfa9c8032458cdd083f7f72
GET /sfiles/logo_teams/24a303cdc0a24b99485aebc26ff13f55.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 5520
cache-control: public, max-age=86400
etag: "706f68633c47c63be9d8e9d58bf0b4c7"
expires: Sat, 01 Apr 2023 11:18:16 GMT
last-modified: Tue, 31 Jan 2023 14:38:10 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37210
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/sfiles/logo_teams/04abe3fa4260dc224a6ab0949c5b8b35.webp
8.248.224.22200 OK 5.9 kB URL HTTP/2 v3.traincdn.com/sfiles/logo_teams/04abe3fa4260dc224a6ab0949c5b8b35.webp
IP 8.248.224.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cb8cb4ffce4a5a7e66566bb5ad4264ac
edc315510cdd4fb0a911ab96ed828f137835be7e
87cfceb4ac3ae385035ab4d6ff7c941965fe67dc00a0089718609fbe07fbe7c6
GET /sfiles/logo_teams/04abe3fa4260dc224a6ab0949c5b8b35.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: image/webp
content-length: 5868
cache-control: public, max-age=86400
etag: "cb8cb4ffce4a5a7e66566bb5ad4264ac"
expires: Sat, 01 Apr 2023 11:43:50 GMT
last-modified: Wed, 01 Feb 2023 08:50:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-server-side-encryption: AES256
age: 37213
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/api/converslon/load
178.253.15.21200 OK 18 kB URL HTTP/2 lite-1x11005705.top/web-api/api/converslon/load
IP 178.253.15.21:0
Hash 7a2b1bb7a1bf10e330a8debf936447ec
a4eb2c7a1ccd2d731a43b264f6039178add4f242
5b1c403ebd9edfd4323e9f8f087ae4a46d2534cddf26197e009649af1658994a
GET /web-api/api/converslon/load HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; postback_watcher=; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:32 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=17, dt_285;dur=19
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-52a13aef.modern.js
8.248.224.22200 OK 35 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-52a13aef.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 920650da0096995612dfe5f77a78f750
2fcdc81724ed089de581964bae45e042ece9d9a0
b367241752f65ee102f02d8aa47b4ed97522c71945d911c99d883fbe89370fd0
GET /_nuxt/desktop/default/betting.SportMenuApp-52a13aef.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 34946
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-8882"
expires: Sat, 01 Apr 2023 14:33:41 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24486
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/7ca4c956-542fa4b9.modern.js
8.248.224.22200 OK 6.9 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/7ca4c956-542fa4b9.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (26046), with no line terminators
Hash cd7b26165766157b67fd54d789f64c40
32864c632cb2f332593cd88e01de73fc61a9be98
65de1dd39ab5e030886bdddeaf54186a6b1d51f347175c3a048818e41c826f9f
GET /_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Game/Page.Betting.MultiLive/Page.BlockAppeal.BetsHistory/Page.Cybe/7ca4c956-542fa4b9.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 6888
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-1ae8"
expires: Sat, 01 Apr 2023 14:33:39 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24500
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.BetsHistory/Page.Office.Partner/d6d9fee2-711ac8d0.modern.js
8.248.224.22200 OK 14 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.BetsHistory/Page.Office.Partner/d6d9fee2-711ac8d0.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (57257), with no line terminators
Hash 376f2e502c38325dbafaef57925beea9
e27e99ffcf899985070498169d92c09ccd39833f
b6ff2e3bdc0faf99ec8d4c66375f69187f9590a80c00cefd21f673752b2f95dc
GET /_nuxt/desktop/default/vendors/Page.BlockAppeal.BetsHistory/Page.Office.Account/Page.Office.BetsHistory/Page.Office.Partner/d6d9fee2-711ac8d0.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 14523
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-38bb"
expires: Sat, 01 Apr 2023 14:33:28 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24500
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/0859a424.css
8.248.224.22200 OK 2.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/0859a424.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (15053), with no line terminators
Hash 12687b005dd232af9602df50bc70ccb3
dad0794a5ec26a6057bb2ce443729496def5c25c
e964a38f9127af6875af170a1bf62182f479311a1098d092b1bb0368148e2271
GET /_nuxt/desktop/default/css/0859a424.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: text/css
content-length: 2439
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-987"
expires: Sat, 01 Apr 2023 14:33:30 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24500
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-c8552111.modern.js
8.248.224.22200 OK 15 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-c8552111.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (59743), with no line terminators
Hash b9468d2fbd1a352e216e2462715dbee6
63515ff288a404208870df9c11fec629e5eb2ca2
32e10da488556b6d1c94e6e5c72e094fcf2bb5b75ca919b454591940ec3b082e
GET /_nuxt/desktop/default/betting.CentralMenuApp-c8552111.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 14759
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-39a7"
expires: Sat, 01 Apr 2023 14:33:39 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24499
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Layout.Betting.ExpressDay-df317090.modern.js
8.248.224.22200 OK 5.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Layout.Betting.ExpressDay-df317090.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (14905), with no line terminators
Hash 4f3fe95b173ca16c153d9cd647e4abed
f352470333a26b0449c7ace5007611611fe5071b
d8dcffd512ba1c2b915a2e1b20f715d47c617d7708730aa6837ae947d91862e1
GET /_nuxt/desktop/default/vendors/Layout.Betting.ExpressDay-df317090.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 5055
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-13bf"
expires: Sat, 01 Apr 2023 14:33:36 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24495
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/a0626b74.css
8.248.224.22200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/a0626b74.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (18974), with no line terminators
Hash 7d7daf66885d8f7ad2e42ae6100011b7
7efc238d6a18be39de4ceeda6f89c8b3a2d3e7cb
e913924b6b4669537e8b8bd34235547d0dec7e7c3f1de7f67ab84f9691fc0c34
GET /_nuxt/desktop/default/css/a0626b74.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: text/css
content-length: 2535
cache-control: max-age=86400
content-encoding: gzip
etag: "6426cc24-9e7"
expires: Sat, 01 Apr 2023 12:42:03 GMT
last-modified: Fri, 31 Mar 2023 12:03:48 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 31191
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-bc2beec5.modern.js
8.248.224.22200 OK 6.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-bc2beec5.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (24236), with no line terminators
Hash 5eb3aad57998794ab8a0a2755465e7e5
fe3dc80ca13d87235ee09b5fbf53f1b747a823e8
ad5972dcf298e59384f4f5fae4ad6e967e1b78242921a2ea5ab69ec7b040e44b
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay-bc2beec5.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 6617
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-19d9"
expires: Sat, 01 Apr 2023 14:33:39 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24498
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/239b3a82.css
8.248.224.22200 OK 454 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/239b3a82.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (1429), with no line terminators
Hash 34080d9d6543b5364465e9c11e7345d6
95e5beb69cbbcef12cb4ee7b2fe28d79100a4738
c6152ba40915b71dec47c5ee06146851269a4bd40432609e6c420ceebf72e84e
GET /_nuxt/desktop/default/css/239b3a82.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: text/css
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-1c6"
expires: Sat, 01 Apr 2023 11:01:11 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37274
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-54084f92.modern.js
8.248.224.22200 OK 18 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-54084f92.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (43586), with NEL line terminators
Hash 46a34ff2c3d493ade7b64976b01285b6
e5a11ed74022b7ac5f2a821d281ef59360f8f2f9
b8b7107a43b37e5ea13e27e075de7ea2d232ca5431abc09dfa6fe24fcbff0134
GET /_nuxt/desktop/default/vendors/betting.media-54084f92.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 17692
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-451c"
expires: Sat, 01 Apr 2023 14:33:40 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/3fe6f0e5.css
8.248.224.22200 OK 1.2 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/3fe6f0e5.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (5463), with no line terminators
Hash 8a74dc0b70ccbc54271826fd8cb1f341
4c606dfc3398b5dc72ab1bd7dc284d6005752059
7ace2ad0eb3c0d4e904c23419fb226eaeca6a612834dad31d7c7d6112e6a1821
GET /_nuxt/desktop/default/css/3fe6f0e5.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: text/css
content-length: 1237
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-4d5"
expires: Sat, 01 Apr 2023 11:01:11 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37223
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.media-752792c3.modern.js
8.248.224.22200 OK 4.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.media-752792c3.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (19643), with no line terminators
Hash 163baf65bcf05ebd6bfd079d228d23d3
64ee33c349c7c6a553239957807db92c3cc4ee07
620f8383a6ad2cb68e203e41ec87d69644a241c4bbe1d9eaf29413918ca7e5b1
GET /_nuxt/desktop/default/betting.media-752792c3.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 4847
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-12ef"
expires: Sat, 01 Apr 2023 14:33:40 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24506
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/bfa1338b.css
8.248.224.22200 OK 464 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/bfa1338b.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (1665), with no line terminators
Hash c188ff7c37c8552c92ae4d3ab6ea77ae
5af39f74ae5f7d807aa831bc661d3c6b11ad873e
39c62f614cfadef8c1d655f639d3edaa26b3626efc6037b8f8a3e1886dba4348
GET /_nuxt/desktop/default/css/bfa1338b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: text/css
content-length: 464
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-1d0"
expires: Sat, 01 Apr 2023 11:01:20 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37228
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/dc565949-6c70b789.modern.js
8.248.224.22200 OK 8.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/dc565949-6c70b789.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (24831), with no line terminators
Hash 371430a8cdd6f3a5a8ce59cf70f45e48
b5b15c4950bc5d93d84aa01a783d7d3a97556eb9
52bcebad4b7ae4cda65c8eda15f5e323ce86b851cb53cf347bfa1928c9aa1384
GET /_nuxt/desktop/default/vendors/Auth.Forms/Page.BlockAppeal.BetsHistory/Page.Information.Rules/Page.MobileApps/Page.Office.B/dc565949-6c70b789.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 8048
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-1f70"
expires: Sat, 01 Apr 2023 14:33:45 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24508
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/RegistrationWidgetApp/components/userControl.auth_form_extended/registration.Main/da7322db-40859a2f.modern.js
8.248.224.22200 OK 6.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Auth.Forms/RegistrationWidgetApp/components/userControl.auth_form_extended/registration.Main/da7322db-40859a2f.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (19546)
Hash 684064a10f149f1108776d86755d6657
37beffea99a801fc893222117b8e7a54b440a6e7
9b00ae03157950e7ab76a75e5fd634c17e0d90e5ba296593b1b2fc54d3979102
GET /_nuxt/desktop/default/vendors/Auth.Forms/RegistrationWidgetApp/components/userControl.auth_form_extended/registration.Main/da7322db-40859a2f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 6509
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-196d"
expires: Sat, 01 Apr 2023 14:33:46 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24483
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/a7fb392f.css
8.248.224.22200 OK 1.7 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/a7fb392f.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (11416), with no line terminators
Hash 139db6290507e9db1cf0161c703a3fe2
d573c3028b293fc648a3140d3639bfc47c65da8a
b52572cf3f923f53e74fa594dda24dc0ce69b72fb5f39f2eda9b4e188ba9c739
GET /_nuxt/desktop/default/css/a7fb392f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: text/css
content-length: 1655
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-677"
expires: Sat, 01 Apr 2023 14:33:30 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24500
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/Auth.Forms/Information.Feedback/Page.Office.Account/Page.Office.Security/Page.Office.Support/Registr/dba7b5c3-41e79f30.modern.js
8.248.224.22200 OK 2.5 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Auth.Forms/Information.Feedback/Page.Office.Account/Page.Office.Security/Page.Office.Support/Registr/dba7b5c3-41e79f30.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (7595), with no line terminators
Hash 13cc8688184a4ba77d8d8df125ca36cf
c053b57edd6cc319a21d0be8b8e4d5f163b83c40
7eba46aa9beef78abc213b96b9c9fe9558964b6859fb0f8134d2adec9ad49977
GET /_nuxt/desktop/default/Auth.Forms/Information.Feedback/Page.Office.Account/Page.Office.Security/Page.Office.Support/Registr/dba7b5c3-41e79f30.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 2483
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-9b3"
expires: Sat, 01 Apr 2023 14:33:47 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24498
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Mar 2023 10:33:07 GMT
expires: Wed, 27 Mar 2024 10:33:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 298107
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lite-1x11005705.top/session-api/sessions/user
178.253.15.21200 OK 16 B URL HTTP/2 lite-1x11005705.top/session-api/sessions/user
IP 178.253.15.21:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 646b2e82b65602d35f7aa6283c387e3a
b163a70c5df8e4b0861a23a04f8a6f78393747f4
b68bf12405ee2cb5b76764df21dbc2df0953ddff4072ddc5281d1aab05e8c4ab
GET /session-api/sessions/user HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json
content-length: 16
cache-control: no-cache, private
server-timing: p;dur=0.73385238647461
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
178.253.15.21200 OK 2.5 kB URL HTTP/2 lite-1x11005705.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en
IP 178.253.15.21:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (8077), with no line terminators
Hash 653e44a1f8eceef1e86588347cf98704
358ec02f75262c7f0405e91e14dca15b2df0005f
841b32dbc78b8b902bb5b1dea807c002c919fefab68e18c4cf88c854a9da0042
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json; charset=utf-8
content-length: 2508
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
178.253.15.21200 OK 11 kB URL HTTP/2 lite-1x11005705.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP 178.253.15.21:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (50036), with no line terminators
Hash 7582d05ada5870ad533bccc888c996a6
ffa5059e6efd66ebe4bc8294a5ec56f0f4ea9ff7
11b9ba551dcccc93ed287fabf6de53033dd4fdd2c570e7e6b5aa9e29e2bb132c
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json; charset=utf-8
content-length: 11123
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
178.253.15.21200 OK 88 B URL HTTP/2 lite-1x11005705.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
IP 178.253.15.21:0
File type JSON data\012- , ASCII text, with no line terminators
Hash cb41a88ff43bbf14302fe7266a35d76d
4c0c7d1c22c7a6c4c661df8966d9154536fa4313
2de5c51dc3d129eb5567c2f67ea3afb49535ea570887202c1ab058570fec4270
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json; charset=utf-8
content-length: 88
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/user/secure
178.253.15.21200 OK 57 B URL HTTP/2 lite-1x11005705.top/web-api/user/secure
IP 178.253.15.21:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 657d469c29f041d062b9ba63d4948d58
542f61429617f15863d604e201ddca4d9c8b7baa
0d7e651bcae00263ec9004620e525b918704c5337477fbccc504c086edb25450
POST /web-api/user/secure HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json; charset=utf-8
content-length: 57
server-timing: dt_285;dur=110
set-cookie: is_rtl=1; expires=Sat, 30-Mar-2024 21:21:34 GMT; Max-Age=31536000; path=/; HttpOnly
disallow_sport=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
fast_coupon=true; expires=Fri, 07-Apr-2023 21:21:34 GMT; Max-Age=604800; path=/
v3fr=1; expires=Mon, 03-Apr-2023 21:21:34 GMT; Max-Age=259200; path=/; HttpOnly; SameSite=lax
_glhf=1680315470; expires=Fri, 31-Mar-2023 22:21:34 GMT; Max-Age=3600; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137
178.253.15.21200 OK 83 kB URL HTTP/2 lite-1x11005705.top/web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137
IP 178.253.15.21:0
Hash 5a9528d631de83ea41ea728cc43d0848
0d6f213a7db3165ed85152ce4843d8b816624d3c
d601b8a81cb073d7ea6dbbcdf763a71ce590d1a1bef1221157594b54639bda37
GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=en&fCountry=137 HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=78, dt_285;dur=81
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=2&mode=4&country=137&virtualSports=true&gr=285
178.253.15.21200 OK 7.0 kB URL HTTP/2 lite-1x11005705.top/service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=2&mode=4&country=137&virtualSports=true&gr=285
IP 178.253.15.21:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (39136), with no line terminators
Hash d2f7c58e21693cc765f6b8239d66e84b
fae10212c2185fc673809cacdcf8c621b8a933a3
a8571ef3c36d5b557a5aee38169208349853f46963a4a59979cf1306f47a716e
GET /service-api/LineFeed/Get1x2_VZip?count=20&lng=en&tz=2&mode=4&country=137&virtualSports=true&gr=285 HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/json; charset=utf-8
content-length: 6992
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
178.253.15.21200 OK 675 B URL HTTP/2 lite-1x11005705.top/service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en
IP 178.253.15.21:0
File type JSON data\012- , ASCII text, with very long lines (1254), with no line terminators
Hash 6b4b05a87430e7c24105d0f442fee03d
5ab58c91b498a03f039a642acec535c056dbca5f
2d4aa661b638413683e9119ca62452bc9f8aedba078f0e0def9b9746e5db6c47
GET /service-api/LiveFeed/GetLiveExpressExtendedZip?lng=en HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680315470; che_g=61f5a126-33f8-4167-9ddf-8bb8386e3f2e; ggru=146
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/json; charset=utf-8
content-length: 675
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
lite-1x11005705.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
178.253.15.21200 OK 852 B URL HTTP/2 lite-1x11005705.top/service-api/LineFeed/GetExpressDayExtendedZip?lng=en
IP 178.253.15.21:0
File type JSON data\012- , ASCII text, with very long lines (1899), with no line terminators
Hash 7943b9cfff75a6e433699e2b54c1d5ff
b2cffedffbb05d9bdeda413397d9c3d4f46b2c87
161764d9a3096e99c2a00d643bc8b8fe4c51743eda46153fc794c801170ec1ec
GET /service-api/LineFeed/GetExpressDayExtendedZip?lng=en HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680315470; che_g=61f5a126-33f8-4167-9ddf-8bb8386e3f2e; ggru=146
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/json; charset=utf-8
content-length: 852
cache-control: public,max-age=5
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-41e0c571.modern.js
8.248.224.22200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-41e0c571.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (3603), with no line terminators
Hash a51dfb3c655f31acbc80457a24f5fd43
e6b46eb81c9f54aff85c2c86224f6bc6fd03e316
b10cc5e7b9d1a49f05e894e452789d1ae307e76cc0b649f34b53482daeb59519
GET /_nuxt/desktop/default/betting.coupon2/modal.CouponInsuranceModal/modal.CouponSellModal-41e0c571.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 1079
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-437"
expires: Sat, 01 Apr 2023 14:33:41 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24488
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/153900b2.css
8.248.224.22200 OK 2.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/153900b2.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (20215), with no line terminators
Hash 855074f2b227b268f5246cde82aa1f66
1e13066f01aec17c2ad1cf0c5233d9cd0ae0e12f
89d07f4fb828a2c178a8d3f4ca432056d75c25116f591fc4a8674bc8e2c894ca
GET /_nuxt/desktop/default/css/153900b2.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: text/css
content-length: 2023
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-7e7"
expires: Sat, 01 Apr 2023 12:24:23 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 35389
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/8e54500c.css
8.248.224.22200 OK 2.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/8e54500c.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (10549), with no line terminators
Hash 543b1003c06c62e6a8f590f96daae758
992ca7dc0802f4c689e7f2cd082d35f2d2a8a23b
b3bdee5f7c6683b8c8e5f9d45904f7ddb12d382c99e19e71d0b874ef70cc72f9
GET /_nuxt/desktop/default/css/8e54500c.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: text/css
content-length: 2120
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-848"
expires: Sat, 01 Apr 2023 14:33:30 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24501
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-4a24c4a2.modern.js
8.248.224.22200 OK 1.1 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.32-4a24c4a2.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (2450), with no line terminators
Hash 8fe5d8d88bab990b9d5cf0cfa9791693
8a356a28909d9181db2e1d04bff123961bffecab
091be644883dd1dfdcd012e04669fc117eb26055fd5e1ea01b0e10c389587d57
GET /_nuxt/desktop/default/ioc.dependencies.32-4a24c4a2.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 1082
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-43a"
expires: Sat, 01 Apr 2023 14:33:42 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24508
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-ae847abe.modern.js
8.248.224.22200 OK 360 B URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-ae847abe.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (400), with no line terminators
Hash 8a050a00a02cc4b569dd3a6e828dd3aa
5d48782d48d78915ed2d483f6ff65a7a3d388d43
5d850155796cffad56d667e82755a47a2c40cd471565f03fe8f47fd2fe4d6bf4
GET /_nuxt/desktop/default/DownloadAppWidgetAnalytics-ae847abe.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 360
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-168"
expires: Sat, 01 Apr 2023 14:33:45 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24498
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-046f23fc.modern.js
8.248.224.22200 OK 24 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-046f23fc.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (65472)
Hash 1788aef203b7977c8790c34502a38d5f
3b6fbff25f569462058718835c2ddf2ebca9b799
d4d9ef2b7f5f004a037d61cdebe05a4da94d254c88951756db0474d3cc3d2ef3
GET /_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-046f23fc.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 23579
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-5c1b"
expires: Sat, 01 Apr 2023 14:33:41 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24499
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-4197551b.modern.js
8.248.224.22200 OK 18 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-4197551b.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a59a892ebae90c65e03398f72971c363
9d121efd933f77af0ff588971f05f19908dc98d8
c8dbff0ffa140aac3f7ac915986f65b8ba9a8988b70da678ea733f7bd180ede1
GET /_nuxt/desktop/default/RegistrationWidgetApp-4197551b.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 17779
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-4573"
expires: Sat, 01 Apr 2023 14:33:41 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24497
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/1f811a30.css
8.248.224.22200 OK 1.0 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/1f811a30.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (5212), with no line terminators
Hash ba01cad68e7085178078a77f4f4443cf
4c75f905d911870090d357be8714c5467e5a19bc
e3da2ba85ff1ada507688f1d35e77f8d0351d5ca9e87a2d7e01f60b7133f9271
GET /_nuxt/desktop/default/css/1f811a30.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: text/css
content-length: 1019
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-3fb"
expires: Sat, 01 Apr 2023 11:01:26 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37274
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-a8cde418.modern.js
8.248.224.22200 OK 32 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-a8cde418.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a53022573e29d90e500e8339d86090c5
e72629583fd5c876f8d9ecfb9cce184f74e69f06
ffdd1e60574344d1f066d77e66597c3fe7316c97fdf135053489f5da9b3b6e4c
GET /_nuxt/desktop/default/betting.coupon2-a8cde418.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 32279
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-7e17"
expires: Sat, 01 Apr 2023 14:33:45 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24499
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-878fa209.modern.js
8.248.224.22200 OK 12 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-878fa209.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (42036), with no line terminators
Hash bac494dc8dfe0fed34be52a2053c4cea
4aeee3097b73964eb199c17abc8cf6c69e952fa7
ac0d9d087d8b54a52b0b23f1ce359ea2351a1d8d7e0b077857423b4258a6d3f0
GET /_nuxt/desktop/default/betting.HomeSliderComponent-878fa209.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 11650
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-2d82"
expires: Sat, 01 Apr 2023 14:33:28 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24496
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/dc62560d.css
8.248.224.22200 OK 5.6 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/dc62560d.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (37951), with no line terminators
Hash 66672cae2463ce698cb53b32dddaf229
e6251eca5b3d46fa7fd9f062dbb9658902f15640
48b92bc9656ec25c8f64060d5575a453352c3179a44f3da54584f3f636c5b73b
GET /_nuxt/desktop/default/css/dc62560d.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: text/css
content-length: 5553
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-15b1"
expires: Sat, 01 Apr 2023 14:33:39 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24502
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-819ad415.modern.js
8.248.224.22200 OK 26 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-819ad415.modern.js
IP 8.248.224.22:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 72229257b0bbbd62ec8df765da56290c
e89487272e351b6316eacb5e55ac979069f26075
ff19e68a5cc78c956021576c34dab5edeeda967e5eda1028a9d0c6645a99f158
GET /_nuxt/desktop/default/vendors/conversion-819ad415.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 26241
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-6681"
expires: Sat, 01 Apr 2023 14:33:42 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24496
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-9741100f.modern.js
8.248.224.22200 OK 5.4 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-9741100f.modern.js
IP 8.248.224.22:0
File type ASCII text, with very long lines (13482), with no line terminators
Hash b3ee903e9af27b89271f02f3293fc75b
6d5c99c39f4ebfd7e31376c60ae90017b509621d
cfa06ac73ed33db1319776d4ca6e5cba6182f3ee6c1edd86dcec2120538f789d
GET /_nuxt/desktop/default/commons/conversion/modal.RegistrationSuccessModalApp/registration.Main/user.userRegistration-9741100f.modern.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 5388
cache-control: max-age=86400
content-encoding: gzip
etag: "6426e5bb-150c"
expires: Sat, 01 Apr 2023 14:33:42 GMT
last-modified: Fri, 31 Mar 2023 13:52:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 24495
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/_nuxt/desktop/default/css/3b7f9dea.css
8.248.224.22200 OK 4.8 kB URL HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/3b7f9dea.css
IP 8.248.224.22:0
File type ASCII text, with very long lines (37713), with no line terminators
Hash ce8bc9a3c8242442250439bc96a043e6
76c1fee508649026136c962ac1e629447a9e620f
63382a3c3acff6bbadbeb3fa4cf6bcc83cde0325b43a9820fdfc85e86356b64a
GET /_nuxt/desktop/default/css/3b7f9dea.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: text/css
content-length: 4828
cache-control: max-age=86400
content-encoding: gzip
etag: "64259341-12dc"
expires: Sat, 01 Apr 2023 11:01:20 GMT
last-modified: Thu, 30 Mar 2023 13:48:49 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 37242
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json
8.248.224.22200 OK 4.5 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json
IP 8.248.224.22:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (21692), with no line terminators
Hash 9a18445cb9f493ffddb193d60daa301e
48eca76dccb95758afc2e66ce8b9c1e0e32c8a5c
03a6d84dcb9a3cfc93f70770675e9da440560f62290cdb3f56703870b22b5429
GET /genfiles/cms/betstemplates/bets_model_full_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/json
content-length: 4501
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"9c1e449d0b116b398773068b48d4e44f"
expires: Sat, 01 Apr 2023 11:01:14 GMT
last-modified: Wed, 29 Mar 2023 13:54:03 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 37242
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json
8.248.224.22200 OK 3.7 kB URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json
IP 8.248.224.22:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (13983), with no line terminators
Hash 5ea3cec9f0b5d44ca45c98411492fbe5
a16cd82443bb6d454fba748e2338756b30597c38
5cffcb8b4ef1e4e4ca15fad6aca7b79e47612ec5a78f1e225f9f1433a8b153e4
GET /genfiles/cms/betstemplates/bets_model_short_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/json
content-length: 3746
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"4f8f8657a322af0cc811a2b41b320398"
expires: Sat, 01 Apr 2023 11:01:02 GMT
last-modified: Wed, 29 Mar 2023 13:53:59 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 37240
accept-ranges: bytes
X-Firefox-Spdy: h2
v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_en.json
8.248.224.22200 OK 519 B URL HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_map_short_en.json
IP 8.248.224.22:0
File type JSON data\012- , ASCII text, with very long lines (1167), with no line terminators
Hash 66f29006e23651318424a1e30505269b
1762a2b7bd64bfc9c26d32a0f204c7d4bca7e98a
2183d74d9388f09681b6c5262742362697047591b4fbe5dbe08838f22daf1f04
GET /genfiles/cms/betstemplates/bets_model_map_short_en.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x11005705.top
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:36 GMT
content-type: application/json
content-length: 519
cache-control: public, max-age=86400
content-encoding: gzip
etag: W/"92ca6c7f4a670f61f1c30e6a82cbcb08"
expires: Sat, 01 Apr 2023 11:01:23 GMT
last-modified: Wed, 29 Mar 2023 13:54:02 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 37225
accept-ranges: bytes
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/api/v3/bonuses/first-deposit
178.253.15.21200 OK 0 B URL HTTP/2 lite-1x11005705.top/web-api/api/v3/bonuses/first-deposit
IP 178.253.15.21:0
GET /web-api/api/v3/bonuses/first-deposit HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:34 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=17, dt_285;dur=18
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
1x-xredbet245402.top/?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder
178.253.47.28307 Temporary Redirect 0 B URL HTTP/2 1x-xredbet245402.top/?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder
IP 178.253.47.28:0
GET /?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder HTTP/1.1
Host: 1x-xredbet245402.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://luckyforbet.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
server: nginx
date: Fri, 31 Mar 2023 21:21:28 GMT
content-type: text/html; charset=utf-8
location: https://lite-1x11005705.top/?tag=d_85563m_14241c_[]MS[]null[]null[]general[]{site_id}_d22490_l15733_clickunder
x-frame-options: SAMEORIGIN
set-cookie: SESSION=0f439b125c06229014de6ebbb2c8c6fe; path=/; secure; HttpOnly; SameSite=Lax
_glhf=1680315464; expires=Fri, 31-Mar-2023 22:21:28 GMT; Max-Age=3600; path=/
v3fr=1; expires=Mon, 03-Apr-2023 21:21:28 GMT; Max-Age=259200; path=/; httponly; samesite=lax
auid=sv0vHGQnTtiF1IShA0UZAg==; path=/; secure; httponly; samesite=lax
x-reason: 1080,1078,1074,1026
cache-control: no-cache, private
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
suphelper.com/widget/injector.js
104.16.43.72200 OK 0 B URL HTTP/2 suphelper.com/widget/injector.js
IP 104.16.43.72:0
GET /widget/injector.js HTTP/1.1
Host: suphelper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x11005705.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 21:21:35 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-66678052-15ae-4577-a5b6-7efec143b7a3' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws://localhost:8085 https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://mc.yandex.ru https://api.github.com http://192.168.208.23:11999 https://suphelper.com wss://suphelper.com *.suphelper.com https://suphelper.ru wss://suphelper.ru *.suphelper.ru https://cons.insystem.su wss://cons.insystem.su *.cons.insystem.su wss://chat.insystem.su https://chat.insystem.su *.chat.insystem.su; frame-src 'self' https://www.google.com https://www.google.com/recaptcha/; report-uri /widget/api/report-csp/
cache-control: public, max-age=300
last-modified: Fri, 10 Mar 2023 11:52:09 GMT
etag: W/"28e6c-186cb5d3628"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 7b0ba495fd540a2d-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lite-1x11005705.top/web-api/external-api/config/getVideoAccessConfig
178.253.15.21200 OK 0 B URL HTTP/2 lite-1x11005705.top/web-api/external-api/config/getVideoAccessConfig
IP 178.253.15.21:0
GET /web-api/external-api/config/getVideoAccessConfig HTTP/1.1
Host: lite-1x11005705.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x11005705.top/en?tag=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder
Cookie: platform_type=desktop; auid=sv0PFWQnTtkXZFGpA0tAAg==; SESSION=11772f4a04719ca2c3418ac7c6aac465; lng=en; tzo=2; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_14241c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l15733_clickunder; window_width=1280; is_rtl=1; fast_coupon=true; v3fr=1; _glhf=1680315470; che_g=61f5a126-33f8-4167-9ddf-8bb8386e3f2e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 21:21:35 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=33, dt_285;dur=36
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2